OWASP's ASVS - Is it only for web apps?

[wallywizard]

Is ASVS only for web apps? Can it be applied to desktop applications as well? I understand not all controls will apply to desktop but can it still be used?

[rlirpa]

OWASP Application Security Verification Standard

What is the ASVS?

The OWASP Application Security Verification Standard (ASVS) Project provides a basis for testing web application technical security controls and also provides developers with a list of requirements for secure development.

The primary aim of the OWASP Application Security Verification Standard (ASVS) Project is to normalize the range in the coverage and level of rigor available in the market when it comes to performing Web application security verification using a commercially-workable open standard. The standard provides a basis for testing application technical security controls, as well as any technical security controls in the environment, that are relied on to protect against vulnerabilities such as Cross-Site Scripting (XSS) and SQL injection. This standard can be used to establish a level of confidence in the security of Web applications. The requirements were developed with the following objectives in mind:

[...continues...]

More here: https://www.google.com/search?q=OWASP%27s+ASVS

[Taurinoss]

The OWASP ASVS is mostly for web apps, but you can still use some of its principles for desktop applications. Not all controls will fit, but many security practices are still helpful.