Quality Matrix for Security Testing

[Abhijit Potdar]

Hi All, 

Can anybody know about any quality matrix for mobile application security testing. 

My client is asking about that. Right now our methodology is aligned with OWASP. 

But my client want quality matrix using that they can verify the quality of reported 

vulnerabilities. Or in other way is there any matrix using that we we can decide the 

quality of the application. 

Thanks in advance. 

Thanks and Regards,

Abhijit.

[Akash]

Have a look at the following document.

Attachment A (Page 12)

http://www.eac.gov/assets/1/Documents/Security%20Test%20Case%20Procedure%20Specifications.pdf

The usual term is Test Matrix which can be used for security testing.

If you google for Text Matrix templates for security testing, you will get some good hits.

You could create one based on OWASP Mobile Top 10 and the format given above.

HTH.

--
_______________________________________________________________________________
null - Spreading the right Information
null Mailing list charter: http://null.co.in/section/about/null_list_charter/
---
You received this message because you are subscribed to the Google Groups "null" group.
To unsubscribe from this group and stop receiving emails from it, send an email to null-co-in+...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
Warm regards,
Akash Mahajan

That Web Application Security Guy | +91 99 805 271 82
akashm.com | @makash on twitter | linkd.in/webappsecguy
OWASP Bangalore Chapter Lead | null Community Manager