## Authentication & Password Management | Test-ID | ISTG Reference | Name | Tools | Status | Finding | |--------|---------------|------|------|--------|--------| | AUTH-05 | ISTG-APP-AUTHZ-001 | Default Password Present | manual | Open | Test not yet performed. | | AUTH-06 | ISTG-APP-AUTHZ-001 | Device-Specific Default Password Generation | manual | Open | Test not yet performed. | | AUTH-07 | ISTG-APP-AUTHZ-001 | Empty Password Input Validation | curl, manual | Open | Test not yet performed. | | AUTH-08 | ISTG-APP-AUTHZ-001 | Password Confirmation Field Verification | manual | Open | Test not yet performed. | | AUTH-09 | ISTG-APP-AUTHZ-002 | Password Strength Feedback to User | manual | Open | Test not yet performed. | | AUTH-10 | ISTG-APP-AUTHZ-003 | Authentication Before Accessing Sensitive Device Data | curl, browser | Open | Test not yet performed. | | AUTH-11 | ISTG-APP-AUTHZ-003 | Sensitive Data Exposure Before Authentication | Wireshark, tcpdump | Open | Test not yet performed. | | AUTH-12 | ISTG-APP-AUTHZ-003 | Authentication Data Encryption During Transmission | Wireshark, tcpdump | Open | Test not yet performed. | | AUTH-13 | ISTG-APP-AUTHZ-003 | Authentication Data Integrity Protection | Wireshark, mitmproxy | Open | Test not yet performed. | | AUTH-14 | ISTG-APP-AUTHZ-003 | Authentication Status Timeout (Auto Logout) | manual | Open | Test not yet performed. | | AUTH-15 | ISTG-APP-AUTHZ-003 | Display of Last Successful Login | manual | Open | Test not yet performed. | | AUTH-16 | ISTG-APP-AUTHZ-003 | Ability to Block Specific Entities | manual | Open | Test not yet performed. | --- ## Firmware Update Security | Test-ID | ISTG Reference | Name | Tools | Status | Finding | |--------|---------------|------|------|--------|--------| | FWUPDT-05 | ISTG-FW[UPDT]-CONF-001 | Manual Firmware Update Availability | manual | Open | Test not yet performed. | | FWUPDT-06 | ISTG-FW[UPDT]-AUTHZ-001 | Authentication Required for Firmware Update | manual | Open | Test not yet performed. | | FWUPDT-07 | ISTG-FW[UPDT]-CONF-002 | Automatic Firmware Update Configuration | manual | Open | Test not yet performed. | | FWUPDT-08 | ISTG-FW[UPDT]-CONF-003 | Firmware Update File Validation (Format Check) | binwalk, file | Open | Test not yet performed. | | FWUPDT-09 | ISTG-FW[UPDT]-CONF-004 | Firmware Update Integrity Verification (Checksum) | sha256sum | Open | Test not yet performed. | | FWUPDT-10 | ISTG-FW[UPDT]-CONF-005 | Device Recovery After Failed Update | manual | Open | Test not yet performed. | --- ## Physical Security | Test-ID | ISTG Reference | Name | Tools | Status | Finding | |--------|---------------|------|------|--------|--------| | PHY-01 | ISTG-PHY-CONF-001 | Unique Device Physical Identifier | manual | Open | Test not yet performed. | | PHY-02 | ISTG-PHY-CONF-002 | Serial Number Visibility | manual | Open | Test not yet performed. | | PHY-03 | ISTG-PHY-AUTHZ-001 | Physical Factory Reset Protection | manual | Open | Test not yet performed. | --- ## Interfaces & Network Exposure | Test-ID | ISTG Reference | Name | Tools | Status | Finding | |--------|---------------|------|------|--------|--------| | INT-01 | ISTG-DES-CONF-004 | Unused Logical Interfaces Disabled | nmap | Open | Test not yet performed. | | INT-02 | ISTG-DES-CONF-005 | Unnecessary Physical Interfaces Exposure | manual | Open | Test not yet performed. | --- ## Communication Security | Test-ID | ISTG Reference | Name | Tools | Status | Finding | |--------|---------------|------|------|--------|--------| | COMM-01 | ISTG-DES-CRYPT-002 | Encryption Between Device and Server | Wireshark, tcpdump | Open | Test not yet performed. | | COMM-02 | ISTG-DES-CRYPT-003 | Encryption Between Device and User | Wireshark, jadx, Python | Open | Test not yet performed. | | COMM-03 | ISTG-DES-INPV-003 | Integrity Check of Received Data | jadx, Python | Open | Test not yet performed. | | COMM-04 | ISTG-DES-SESS-001 | Session Management and Identifier Tracking | Wireshark | Open | Test not yet performed. | --- ## Boot & Software Integrity | Test-ID | ISTG Reference | Name | Tools | Status | Finding | |--------|---------------|------|------|--------|--------| | BOOT-01 | ISTG-FW-SCRT-004 | Secure Boot Mechanism Protection | binwalk, strings | Open | Test not yet performed. | | BOOT-02 | ISTG-FW-SCRT-005 | Detection of Unauthorized Software Modification | manual | Open | Test not yet performed. | --- ## Logging & Audit | Test-ID | ISTG Reference | Name | Tools | Status | Finding | |--------|---------------|------|------|--------|--------| | LOG-01 | ISTG-LOG-CONF-001 | Event Logging Availability | manual | Open | Test not yet performed. | | LOG-02 | ISTG-LOG-SCRT-001 | Secure Storage of Logs | manual | Open | Test not yet performed. | | LOG-03 | ISTG-LOG-SCRT-002 | Log Integrity Protection | manual | Open | Test not yet performed. | | LOG-04 | ISTG-LOG-AUTHZ-001 | Authentication Required to Access Logs | manual | Open | Test not yet performed. | --- ## User Roles & Account Management | Test-ID | ISTG Reference | Name | Tools | Status | Finding | |--------|---------------|------|------|--------|--------| | ROLE-01 | ISTG-APP-AUTHZ-006 | Creation of Multiple User Accounts | manual | Open | Test not yet performed. | | ROLE-02 | ISTG-APP-AUTHZ-006 | Role Assignment to User Accounts | manual | Open | Test not yet performed. | | ROLE-03 | ISTG-APP-AUTHZ-006 | Hierarchical Role Model Support | manual | Open | Test not yet performed. | | ROLE-04 | ISTG-APP-AUTHZ-006 | User Account Deletion | manual | Open | Test not yet performed. | | ROLE-05 | ISTG-APP-AUTHZ-006 | User Account Modification | manual | Open | Test not yet performed. | --- ## Privacy & Personal Data | Test-ID | ISTG Reference | Name | Tools | Status | Finding | |--------|---------------|------|------|--------|--------| | PRIV-01 | ISTG-APP-PRIV-001 | User Notification of Personal Data Collection | manual | Open | Test not yet performed. | | PRIV-02 | ISTG-APP-PRIV-002 | User Consent for Personal Data Usage | manual | Open | Test not yet performed. | | PRIV-03 | ISTG-APP-PRIV-003 | Ability to Delete Personal Data | manual | Open | Test not yet performed. | | PRIV-04 | ISTG-APP-PRIV-004 | Encryption of Personal Data in Storage/Transmission | Wireshark | Open | Test not yet performed. | --- ## Telemetry | Test-ID | ISTG Reference | Name | Tools | Status | Finding | |--------|---------------|------|------|--------|--------| | TELE-01 | ISTG-APP-PRIV-005 | Telemetry Data Collection | Wireshark | Open | Test not yet performed. | | TELE-02 | ISTG-APP-PRIV-006 | Telemetry Transparency to User | manual | Open | Test not yet performed. | --- ## Stability & Resilience | Test-ID | ISTG Reference | Name | Tools | Status | Finding | |--------|---------------|------|------|--------|--------| | STAB-01 | ISTG-SYS-REL-001 | Device Behavior After Power Failure | manual | Open | Test not yet performed. | | STAB-02 | ISTG-SYS-REL-002 | Device Behavior After Network Failure | manual | Open | Test not yet performed. | | STAB-03 | ISTG-SYS-REL-003 | Device Reconnection After Network Failure | manual | Open | Test not yet performed. |