1. National Information Assurance Partnership (NIAP)
1.1. Requirements for Vetting Mobile Apps from the Protection Profile for Application Software
1.1.1. Storage of Credentials FCS_STO_EXT.1.1
1.1.2. Access to Platform Resources FDP_DEC_EXT.1.2
1.1.3. Encryption Of Sensitive Application Data FDP_DAR_EXT.1.1
2. US National Institute of Standards and Technology (NIST)
2.1. NIST Special Publication 800-190
2.1.1. 6.5 Disposition Phase
2.2. NIST Special Publication 800-163 Revision 1
2.2.1. 2.2 Organization-Specific Requirements Data Sensitivity
3. Open Web Application Security Project (OWASP)
3.1. Mobile Application Security Verification Standard (MASVS)
3.1.1. 2.1 MSTG-STORAGE-1
3.1.2. 2.2 MSTG-STORAGE-2
3.1.3. 2.3 MSTG-STORAGE-3
3.1.4. 2.4 MSTG-STORAGE-4
3.1.5. 2.5 MSTG-STORAGE-5
3.1.6. 2.6 MSTG-STORAGE-6
3.1.7. 2.12 MSTG-STORAGE-12
3.1.8. 2.13 MSTG-STORAGE-13
3.1.9. 2.14 MSTG-STORAGE-14
3.1.10. 2.15 MSTG-STORAGE-15
3.2. Application Security Verification Standard 4.0.3 (ASVS)
3.2.1. V2.4 Credential Storage
3.2.2. V2.9 Cryptographic Verifier
3.2.3. V2.10 Service Authentication
3.2.4. V4.1 General Access Control Design
3.2.5. V6.1 Data Classification
3.2.6. V6.4 Secret Management
3.2.7. V8.1 General Data Protection
4. APPLE
4.1. Developer Security
4.1.1. Secure Data Keychain Services Overview
5. MITRE
5.1. Application Developer Guidance
5.1.1. T1078 Valid Accounts
6. GOOGLE
6.1. Core app quality
6.1.1. SC-DF1
6.1.2. SC-DF2
6.2. App Security Best Practices
6.2.1. Store Data Safely
6.2.2. Store Data Safely Store private data within internal storage
6.2.3. Store Data Safely Store only non-sensitive data in cache files
6.2.4. Store Data Safely Use SharedPreferences in private mode
7. UK National Cyber Security Centre (NCSC)
7.1. Application development Recommendations
7.1.1. Secure data handling Data storage APIs
7.1.2. Secure data handling Data access authorisation
7.1.3. Android application Development 1.1 Datastore hardening
7.1.4. Android application development 1.3 Secure application development Secure data storage
7.1.5. Secure iOS application development 1.1 Datastore hardening
7.1.6. Secure iOS application development 1.3 Secure application development recommendations Secure data storage
7.1.7. Secure iOS application development 1.3 Secure application development recommendations Security requirements
7.1.8. Secure Windows application development 1.1 Datastore hardening
7.1.9. Secure Windows application development 1.4 Secure data storage
8. ioXt Alliance
8.1. Mobile Application Profile
8.1.1. 4.6. Security by Default SD109
8.1.2. 4.6. Security by Default SD112