7.0 KiB
7.0 KiB
Authentication & Password Management
| Test-ID | ISTG Reference | Name | Tools | Status | Finding |
|---|---|---|---|---|---|
| AUTH-05 | ISTG-APP-AUTHZ-001 | Default Password Present | manual | Open | Test not yet performed. |
| AUTH-06 | ISTG-APP-AUTHZ-001 | Device-Specific Default Password Generation | manual | Open | Test not yet performed. |
| AUTH-07 | ISTG-APP-AUTHZ-001 | Empty Password Input Validation | curl, manual | Open | Test not yet performed. |
| AUTH-08 | ISTG-APP-AUTHZ-001 | Password Confirmation Field Verification | manual | Open | Test not yet performed. |
| AUTH-09 | ISTG-APP-AUTHZ-002 | Password Strength Feedback to User | manual | Open | Test not yet performed. |
| AUTH-10 | ISTG-APP-AUTHZ-003 | Authentication Before Accessing Sensitive Device Data | curl, browser | Open | Test not yet performed. |
| AUTH-11 | ISTG-APP-AUTHZ-003 | Sensitive Data Exposure Before Authentication | Wireshark, tcpdump | Open | Test not yet performed. |
| AUTH-12 | ISTG-APP-AUTHZ-003 | Authentication Data Encryption During Transmission | Wireshark, tcpdump | Open | Test not yet performed. |
| AUTH-13 | ISTG-APP-AUTHZ-003 | Authentication Data Integrity Protection | Wireshark, mitmproxy | Open | Test not yet performed. |
| AUTH-14 | ISTG-APP-AUTHZ-003 | Authentication Status Timeout (Auto Logout) | manual | Open | Test not yet performed. |
| AUTH-15 | ISTG-APP-AUTHZ-003 | Display of Last Successful Login | manual | Open | Test not yet performed. |
| AUTH-16 | ISTG-APP-AUTHZ-003 | Ability to Block Specific Entities | manual | Open | Test not yet performed. |
Firmware Update Security
| Test-ID | ISTG Reference | Name | Tools | Status | Finding |
|---|---|---|---|---|---|
| FWUPDT-05 | ISTG-FW[UPDT]-CONF-001 | Manual Firmware Update Availability | manual | Open | Test not yet performed. |
| FWUPDT-06 | ISTG-FW[UPDT]-AUTHZ-001 | Authentication Required for Firmware Update | manual | Open | Test not yet performed. |
| FWUPDT-07 | ISTG-FW[UPDT]-CONF-002 | Automatic Firmware Update Configuration | manual | Open | Test not yet performed. |
| FWUPDT-08 | ISTG-FW[UPDT]-CONF-003 | Firmware Update File Validation (Format Check) | binwalk, file | Open | Test not yet performed. |
| FWUPDT-09 | ISTG-FW[UPDT]-CONF-004 | Firmware Update Integrity Verification (Checksum) | sha256sum | Open | Test not yet performed. |
| FWUPDT-10 | ISTG-FW[UPDT]-CONF-005 | Device Recovery After Failed Update | manual | Open | Test not yet performed. |
Physical Security
| Test-ID | ISTG Reference | Name | Tools | Status | Finding |
|---|---|---|---|---|---|
| PHY-01 | ISTG-PHY-CONF-001 | Unique Device Physical Identifier | manual | Open | Test not yet performed. |
| PHY-02 | ISTG-PHY-CONF-002 | Serial Number Visibility | manual | Open | Test not yet performed. |
| PHY-03 | ISTG-PHY-AUTHZ-001 | Physical Factory Reset Protection | manual | Open | Test not yet performed. |
Interfaces & Network Exposure
| Test-ID | ISTG Reference | Name | Tools | Status | Finding |
|---|---|---|---|---|---|
| INT-01 | ISTG-DES-CONF-004 | Unused Logical Interfaces Disabled | nmap | Open | Test not yet performed. |
| INT-02 | ISTG-DES-CONF-005 | Unnecessary Physical Interfaces Exposure | manual | Open | Test not yet performed. |
Communication Security
| Test-ID | ISTG Reference | Name | Tools | Status | Finding |
|---|---|---|---|---|---|
| COMM-01 | ISTG-DES-CRYPT-002 | Encryption Between Device and Server | Wireshark, tcpdump | Open | Test not yet performed. |
| COMM-02 | ISTG-DES-CRYPT-003 | Encryption Between Device and User | Wireshark, jadx, Python | Open | Test not yet performed. |
| COMM-03 | ISTG-DES-INPV-003 | Integrity Check of Received Data | jadx, Python | Open | Test not yet performed. |
| COMM-04 | ISTG-DES-SESS-001 | Session Management and Identifier Tracking | Wireshark | Open | Test not yet performed. |
Boot & Software Integrity
| Test-ID | ISTG Reference | Name | Tools | Status | Finding |
|---|---|---|---|---|---|
| BOOT-01 | ISTG-FW-SCRT-004 | Secure Boot Mechanism Protection | binwalk, strings | Open | Test not yet performed. |
| BOOT-02 | ISTG-FW-SCRT-005 | Detection of Unauthorized Software Modification | manual | Open | Test not yet performed. |
Logging & Audit
| Test-ID | ISTG Reference | Name | Tools | Status | Finding |
|---|---|---|---|---|---|
| LOG-01 | ISTG-LOG-CONF-001 | Event Logging Availability | manual | Open | Test not yet performed. |
| LOG-02 | ISTG-LOG-SCRT-001 | Secure Storage of Logs | manual | Open | Test not yet performed. |
| LOG-03 | ISTG-LOG-SCRT-002 | Log Integrity Protection | manual | Open | Test not yet performed. |
| LOG-04 | ISTG-LOG-AUTHZ-001 | Authentication Required to Access Logs | manual | Open | Test not yet performed. |
User Roles & Account Management
| Test-ID | ISTG Reference | Name | Tools | Status | Finding |
|---|---|---|---|---|---|
| ROLE-01 | ISTG-APP-AUTHZ-006 | Creation of Multiple User Accounts | manual | Open | Test not yet performed. |
| ROLE-02 | ISTG-APP-AUTHZ-006 | Role Assignment to User Accounts | manual | Open | Test not yet performed. |
| ROLE-03 | ISTG-APP-AUTHZ-006 | Hierarchical Role Model Support | manual | Open | Test not yet performed. |
| ROLE-04 | ISTG-APP-AUTHZ-006 | User Account Deletion | manual | Open | Test not yet performed. |
| ROLE-05 | ISTG-APP-AUTHZ-006 | User Account Modification | manual | Open | Test not yet performed. |
Privacy & Personal Data
| Test-ID | ISTG Reference | Name | Tools | Status | Finding |
|---|---|---|---|---|---|
| PRIV-01 | ISTG-APP-PRIV-001 | User Notification of Personal Data Collection | manual | Open | Test not yet performed. |
| PRIV-02 | ISTG-APP-PRIV-002 | User Consent for Personal Data Usage | manual | Open | Test not yet performed. |
| PRIV-03 | ISTG-APP-PRIV-003 | Ability to Delete Personal Data | manual | Open | Test not yet performed. |
| PRIV-04 | ISTG-APP-PRIV-004 | Encryption of Personal Data in Storage/Transmission | Wireshark | Open | Test not yet performed. |
Telemetry
| Test-ID | ISTG Reference | Name | Tools | Status | Finding |
|---|---|---|---|---|---|
| TELE-01 | ISTG-APP-PRIV-005 | Telemetry Data Collection | Wireshark | Open | Test not yet performed. |
| TELE-02 | ISTG-APP-PRIV-006 | Telemetry Transparency to User | manual | Open | Test not yet performed. |
Stability & Resilience
| Test-ID | ISTG Reference | Name | Tools | Status | Finding |
|---|---|---|---|---|---|
| STAB-01 | ISTG-SYS-REL-001 | Device Behavior After Power Failure | manual | Open | Test not yet performed. |
| STAB-02 | ISTG-SYS-REL-002 | Device Behavior After Network Failure | manual | Open | Test not yet performed. |
| STAB-03 | ISTG-SYS-REL-003 | Device Reconnection After Network Failure | manual | Open | Test not yet performed. |