OWASP Mobile TOP 10:
https://owasp.org/www-project-mobile-top-10/
iOS 安全参考:
https://www.emergingdefense.com/blog/2019/2/4/ios-secure-development-guide 或者 https://github.com/felixgr/secure-ios-app-dev
白皮书:https://support.apple.com/guide/security/welcome/web
Android 安全参考:
Android-Security-Reference https://github.com/doridori/Android-Security-Reference
Secure Coding Standard: https://wiki.sei.cmu.edu/confluence/display/android/Android+Secure+Coding+Standard
Best Practice: https://developer.android.com/topic/security/best-practices#java