Obfuscate application data
Summary​
The system must obfuscate the data if the application is not in focus.
Description​
Obfuscate application data is needed to enhance security by making it more difficult for unauthorized users to understand or manipulate sensitive information within an application. Obfuscation involves intentionally obscuring the meaning or intent of data, code, or other elements in a software applications.
Supported In​
This requirement is verified in following services
| Plan | Supported |
|---|---|
| Essential | 🔴 |
| Advanced | 🟢 |
References​
- CWEâ„¢-359. Exposure of private personal information to an unauthorized actor
- GDPR-5_1f. Principles relating to processing of personal data
- OWASP TOP 10-A2. Cryptographic failures
- OWASP-M TOP 10-M9. Reverse engineering
- ISO/IEC 27002-8_26. Application security requirements
- OSSTMM3-11_7_2. Data networks security (controls verification) - Confidentiality
- NIST SSDF-PW_6_2. Configure the compilation, interpreter, and build processes to improve executable security
- PTES-6_2_1_1. Exploitation - Countermeasures (anti-virus encoding)
- OWASP Top 10 Privacy Risks-P1. Web application vulnerabilities
- SWIFT CSCF-5_4. Password repository protection
- ISO/IEC 27001-8_26. Application security requirements
free trial
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.