## Combined AV-Comparatives Derived Test Cases | Test-ID | ISTG Reference | Name | Tools | Status | Finding | | ------- | -------------- | ---- | ----- | ------ | ------- | | AUTH-01 | ISTG-APP-AUTHZ-001 | Password Strength Check (App Account) | curl, manual | Open | Test not yet performed. | | AUTH-02 | ISTG-APP-AUTHZ-001 | Password Requirements Enforcement | manual |Open | Test not yet performed. | | AUTH-03 | ISTG-APP-AUTHZ-002 | Two-Factor Authentication (2FA) available | manual | Open | Test not yet performed. | | AUTH-04 | ISTG-APP-AUTHZ-003 | Account Lockout after Failed Login Attempts | curl, python3 |Open | Test not yet performed. | | WRLS-05 | ISTG-WRLS-CONF-002 | Warning when Connecting to Unsecured Network | manual | Open | Test not yet performed. | | STG-01 | ISTG-DES-CONF-003 | Cloud Storage available | manual | Open | Test not yet performed. | | STG-02 | ISTG-DES-CONF-003 | Cloud Storage Duration configurable | manual | Open | Test not yet performed. | | STG-03 | ISTG-DES-CONF-003 | Local Storage available (SD Card / USB) | manual |Open | Test not yet performed. | | STG-04 | ISTG-DES-CONF-003 | NAS Storage available | manual | Open | Test not yet performed. | | APP-01 | ISTG-APP-CONF-001 | Manufacturer Account required for Setup | manual | Open | Test not yet performed. | | APP-02 | ISTG-APP-CONF-002 | App Permissions appropriate (no over-permission) | Android permission checker, manual | Open | Test not yet performed. | | APP-03 | ISTG-APP-CONF-003 | Logout from App possible | manual | Open | Test not yet performed. | | SHA-01 | ISTG-APP-AUTHZ-004 | Shared Access: Administration for other Users | manual |Open | Test not yet performed. | | SHA-02 | ISTG-APP-AUTHZ-004 | Shared Access: Livestream for other Users | manual | Open | Test not yet performed. | | SHA-03 | ISTG-APP-AUTHZ-004 | Shared Access: Recordings for other Users | manual | Open | Test not yet performed. | | SHA-04 | ISTG-APP-AUTHZ-004 | Admin/Non-Admin Access configurable | manual | Open | Test not yet performed. | | SHA-05 | ISTG-APP-AUTHZ-005 | Public Browser Access: Livestream configurable | curl, browser | Open | Test not yet performed. | | SHA-06 | ISTG-APP-AUTHZ-005 | Public Browser Access: Password Protection configurable | curl, browser | Open | Test not yet performed. | --- ## Mapping: AV-Comparatives Test → Internal Test Cases | AV-Comparatives Category | AV Test Question | Internal Test-ID | Name | | ------------------------ | ---------------- | ---------------- | ---- | | Login / Password | Check of password strength | AUTH-01 | Password Strength Check (App Account) | | Login / Password | Password requirements | AUTH-02 | Password Requirements Enforcement | | Login / Password | Two-factor authentication (2FA) | AUTH-03 | Two-Factor Authentication (2FA) available | | Login / Password | Lockout after failed login attempts | AUTH-04 | Account Lockout after Failed Login Attempts | | Wi-Fi Connection | Warning if network is unsecured | WRLS-05 | Warning when Connecting to Unsecured Network | | Storage | Cloud storage available | STG-01 | Cloud Storage available | | Storage | Configurable cloud storage duration | STG-02 | Cloud Storage Duration configurable | | Storage | Local storage available | STG-03 | Local Storage available (SD Card / USB) | | Storage | Network attached storage (NAS) | STG-04 | NAS Storage available | | App | Manufacturer account required | APP-01 | Manufacturer Account required for Setup | | App | Required permissions appropriate | APP-02 | App Permissions appropriate | | App | Logout from app possible | APP-03 | Logout from App possible | | Shared Access | Other users: Administration | SHA-01 | Shared Access: Administration for other Users | | Shared Access | Other users: Live stream | SHA-02 | Shared Access: Livestream for other Users | | Shared Access | Other users: Recordings | SHA-03 | Shared Access: Recordings for other Users | | Shared Access | Configurable Admin / Non-Admin access | SHA-04 | Admin/Non-Admin Access configurable | | Public Browser Access | Configurable live stream access | SHA-05 | Public Browser Access: Livestream configurable | | Public Browser Access | Configurable password protection | SHA-06 | Public Browser Access: Password Protection configurable | --- ### Example Commands ```bash ```