OWASPASVS 5.0 requirement
ASVS-V15.2.5 The application implements additional protections around parts of the application which are documented as containing "dangerous…
- Standard
- OWASP ASVS 5.0
- Chapter
- V15 Secure Coding and Architecture
- Section
- V15.2 Security Architecture and Dependencies
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that the application implements additional protections around parts of the application which are documented as containing "dangerous functionality" or using third-party libraries considered to be "risky components". This could include techniques such as sandboxing, encapsulation, containerization or network level isolation to delay and deter attackers who compromise one part of an application from pivoting elsewhere in the application.