모바일 아키텍트 키트
모바일 앱과 백엔드 설계: 앱 아키텍처, BFF, API 계약, 위협 모델, 앱 보안 테스트, 릴리스.
사용 순서에 따라 3단계로 정리한 템플릿 8개입니다. 편집기에서 템플릿을 열어 작성한 뒤 PDF, DOCX 또는 HTML로 내보낼 수 있습니다.
설계
Mobile App Architecture Template
전체Mobile app architecture: native vs cross-platform, MVVM/Clean layers, offline sync, secure storage, auth, privacy, releases, testing
OWASP MASVS v2.1.0; RFC 8252 (BCP 212)Mobile Backend Design Template (BFF, Sync, Push)
전체BFF, screen-shaped APIs, native-app OAuth (PKCE, DPoP), offline sync and conflicts, APNs and FCM v1 push, old versions, rate limits, MASVS
RFC 8252 (BCP 212); RFC 9700; OWASP MASVS v2.1.0REST API Specification Template (OpenAPI 3.2, RFC 9457)
전체HTTP/JSON API contract: auth, conventions, QUERY, streaming, pagination, RFC 9457 errors, endpoints, webhooks, OpenAPI 3.2 skeleton
OpenAPI 3.2.1, RFC 9110, RFC 9457Notification Service System Design Template (Reference Design)
전체Push, email, SMS and in-app: templates, preferences and opt-out, priority queues, caps, provider failover, retries, dedup
RFC 8058; RFC 9989 (DMARC, May 2026); Netflix RENO case studyFile Sync System Design Template (Reference Design)
전체45-minute path, content-defined chunking, per-account dedupe, commit protocol, journal cursors and push, three-tree conflict handling, failure modes
LBFS content-defined chunking (SOSP 2001); public Dropbox engineering write-ups (cited)
보안
Threat Model Template (STRIDE)
전체STRIDE threat model: scope, DFD with trust boundaries, assets, threats per element, L x I rating, mitigations, risk acceptance
STRIDEMobile App Security Assessment Template (OWASP MASVS 2.1, MASTG, MASWE)
전체App scope, MAS profile choice (L1, L2, R, P), method, attack surface, 8 MASVS categories with MASWE and MASTG IDs, 24-control matrix, findings, retest
OWASP MASVS v2.1.0; MASWE v1.0.0; MASTG v2.0.0