4.2 KiB
4.2 KiB
Combined AV-Comparatives Derived Test Cases
| Test-ID | ISTG Reference | Name | Tools | Status | Finding |
|---|---|---|---|---|---|
| AUTH-01 | ISTG-APP-AUTHZ-001 | Password Strength Check (App Account) | curl, manual | Open | Test not yet performed. |
| AUTH-02 | ISTG-APP-AUTHZ-001 | Password Requirements Enforcement | manual | Open | Test not yet performed. |
| AUTH-03 | ISTG-APP-AUTHZ-002 | Two-Factor Authentication (2FA) available | manual | Open | Test not yet performed. |
| AUTH-04 | ISTG-APP-AUTHZ-003 | Account Lockout after Failed Login Attempts | curl, python3 | Open | Test not yet performed. |
| WRLS-05 | ISTG-WRLS-CONF-002 | Warning when Connecting to Unsecured Network | manual | Open | Test not yet performed. |
| STG-01 | ISTG-DES-CONF-003 | Cloud Storage available | manual | Open | Test not yet performed. |
| STG-02 | ISTG-DES-CONF-003 | Cloud Storage Duration configurable | manual | Open | Test not yet performed. |
| STG-03 | ISTG-DES-CONF-003 | Local Storage available (SD Card / USB) | manual | Open | Test not yet performed. |
| STG-04 | ISTG-DES-CONF-003 | NAS Storage available | manual | Open | Test not yet performed. |
| APP-01 | ISTG-APP-CONF-001 | Manufacturer Account required for Setup | manual | Open | Test not yet performed. |
| APP-02 | ISTG-APP-CONF-002 | App Permissions appropriate (no over-permission) | Android permission checker, manual | Open | Test not yet performed. |
| APP-03 | ISTG-APP-CONF-003 | Logout from App possible | manual | Open | Test not yet performed. |
| SHA-01 | ISTG-APP-AUTHZ-004 | Shared Access: Administration for other Users | manual | Open | Test not yet performed. |
| SHA-02 | ISTG-APP-AUTHZ-004 | Shared Access: Livestream for other Users | manual | Open | Test not yet performed. |
| SHA-03 | ISTG-APP-AUTHZ-004 | Shared Access: Recordings for other Users | manual | Open | Test not yet performed. |
| SHA-04 | ISTG-APP-AUTHZ-004 | Admin/Non-Admin Access configurable | manual | Open | Test not yet performed. |
| SHA-05 | ISTG-APP-AUTHZ-005 | Public Browser Access: Livestream configurable | curl, browser | Open | Test not yet performed. |
| SHA-06 | ISTG-APP-AUTHZ-005 | Public Browser Access: Password Protection configurable | curl, browser | Open | Test not yet performed. |
Mapping: AV-Comparatives Test → Internal Test Cases
| AV-Comparatives Category | AV Test Question | Internal Test-ID | Name |
|---|---|---|---|
| Login / Password | Check of password strength | AUTH-01 | Password Strength Check (App Account) |
| Login / Password | Password requirements | AUTH-02 | Password Requirements Enforcement |
| Login / Password | Two-factor authentication (2FA) | AUTH-03 | Two-Factor Authentication (2FA) available |
| Login / Password | Lockout after failed login attempts | AUTH-04 | Account Lockout after Failed Login Attempts |
| Wi-Fi Connection | Warning if network is unsecured | WRLS-05 | Warning when Connecting to Unsecured Network |
| Storage | Cloud storage available | STG-01 | Cloud Storage available |
| Storage | Configurable cloud storage duration | STG-02 | Cloud Storage Duration configurable |
| Storage | Local storage available | STG-03 | Local Storage available (SD Card / USB) |
| Storage | Network attached storage (NAS) | STG-04 | NAS Storage available |
| App | Manufacturer account required | APP-01 | Manufacturer Account required for Setup |
| App | Required permissions appropriate | APP-02 | App Permissions appropriate |
| App | Logout from app possible | APP-03 | Logout from App possible |
| Shared Access | Other users: Administration | SHA-01 | Shared Access: Administration for other Users |
| Shared Access | Other users: Live stream | SHA-02 | Shared Access: Livestream for other Users |
| Shared Access | Other users: Recordings | SHA-03 | Shared Access: Recordings for other Users |
| Shared Access | Configurable Admin / Non-Admin access | SHA-04 | Admin/Non-Admin Access configurable |
| Public Browser Access | Configurable live stream access | SHA-05 | Public Browser Access: Livestream configurable |
| Public Browser Access | Configurable password protection | SHA-06 | Public Browser Access: Password Protection configurable |
Example Commands