Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-163 Rev. 1

Vetting the Security of Mobile Applications

Date Published: April 2019

Supersedes: SP 800-163 (01/26/2015)


Michael Ogata (NIST), Joshua Franklin (NIST), Jeffrey Voas (NIST), Vincent Sritapan (DHS), Stephen Quirolgico (DHS)



app vetting; app vetting system; malware; mobile applications; mobile security; niap; security requirements; software assurance; software vulnerabilities; software testing
Control Families

Planning; Risk Assessment; System and Communications Protection


Download URL

Supplemental Material:
None available

Document History:
07/23/18: SP 800-163 Rev. 1 (Draft)
04/19/19: SP 800-163 Rev. 1 (Final)