Section for remote desktops

[thomas-chauchefoin-bentley-systems]

I suggest adding section for remote desktop environments and other kiosk mode breakouts, with items about network isolation, PowerShell constrained language mode, lockdown GPOs, multi-tenancy.

[vishantgawali1811]

Hello
, I would like to contribute to this issue.
I can help by drafting a new section about securing Remote Desktop and Kiosk environments — covering risks like breakout attacks, lack of network isolation, PowerShell restrictions, and GPO lockdowns.
If this is okay, please assign it to me.
Thank you

[JeffreyShran]

@vishantgawali1811 - thanks for the support! Yes we'd love to have your contribution.

I think we probably need a new complete section, so a new #10 in here: https://github.com/OWASP/www-project-thick-client-application-security-verification-standard/tree/main/document/1.0

And if you could update the contents pages here that would be great too: https://github.com/OWASP/www-project-thick-client-application-security-verification-standard/blob/main/document/1.0/03-Using_the_TASVS.md

plus, please add your name (GH or real-name as you prefer) into this section as a contributor to the project: https://github.com/OWASP/www-project-thick-client-application-security-verification-standard/blob/main/document/1.0/02-Frontispiece.md#contributors

As a side note, please be aware that we (myself and @matreurai) plan to rework the whole document to match what the web ASVS team are doing wit their version 5 to make it easier to adopt. You don't need to worry about that, but I wanted you to know that it is planned.

Finally, my recommendations above are just that, happy to discuss and please cross check what I'm thinking as I might have missed something. :)

Thanks again!

[vishantgawali1811]

Hello @JeffreyShran ,

I’ve added the new Section 10 file (Remote Desktop, VDI & Kiosk Security) in the document/1.0 folder as suggested.

Before I update the 03-Using_the_TASVS.md file, I just want to confirm:

Should I:
simply add a reference/link to Section 10 at the end of the file,
or
include it under the existing “Top Group / Sub Group” structure?

I want to follow the exact format you expect, so just confirming before I commit the changes.

Thankyou!

[JeffreyShran]

@vishantgawali1811 top group / sub group please. thanks!

[vishantgawali1811]

Hello @JeffreyShran,

I’ve completed all the requested updates:

Added Section 10 (Remote Desktop, VDI & Kiosk Security)
Updated the Top Group / Sub Group in 03-Using_the_TASVS.md
Added my name to the contributors list (02-Frontispiece.md)

Let me know if you'd like me to make any changes or improvements.

Thank you!