(...) TODO. In the ASVS, we have a mapping to PCI-DSS 3.0. Update this to match the MASVS.. (...)
PCI-DSS 3.0 | MASVS 1.0 | Description |
---|---|---|
6.5.2 Buffer overflows | TODO | Exact mapping |
6.5.3 Insecure cryptographic storage | TODO | TODO |
6.5.4 Insecure communications | TODO | TODO |
6.5.5 Improper error handling | TODO | Exact mapping |
6.5.8 Improper Access Control (such as insecure direct object references, failure to restrict URL access, directory traversal and failure to restrict user access to functions). | TODO | TODO |
6.5.10 Broken authentication and session management. | TODO | TODO |