Business Logic Architecture
V1.11.1
Verify the definition and documentation of all application components in terms of the business or security functions they provide.
Level 1 required: False
Level 2 required: True
Level 3 required: True
CWE: 1059
V1.11.2
Verify that all high-value business logic flows, including authentication, session management and access control, do not share unsynchronized state.
Level 1 required: False
Level 2 required: True
Level 3 required: True
CWE: 362
V1.11.3
Verify that all high-value business logic flows, including authentication, session management and access control are thread safe and resistant to time-of-check and time-of-use race conditions.
Level 1 required: False
Level 2 required: False
Level 3 required: True
CWE: 367
Disclaimer:
Credit via OWASP ASVS. For more information visit The OWASP ASVS Project or Github respository.. OWASP ASVS is under the Creative Commons Attribution-Share Alike v3.0 license.
