ICACT20230161 Question.1
Questioner: lp_saikia@yahoo.co.in 2023-02-19 오후 3:15:36 |
ICACT20230161 Answer.1
Answer by Auhor m11007503@gapps.ntust.edu.tw 2023-02-19 오후 3:15:36
Chrome  Click!! |
| Why your research selects an unregulated ST file for evaluation and testing? |
Because we are going to compare files, we choose the regulated file as the standard template, and we want to know what difference will there be if the file is not strictly produced by CC or PP as a reference? Therefore, we choose the unregulated ST file evaluation and testing. |
ICACT20230161 Question.2
Questioner: lp_saikia@yahoo.co.in 2023-02-19 오후 3:47:04 |
ICACT20230161 Answer.2
Answer by Auhor m11007503@gapps.ntust.edu.tw 2023-02-19 오후 3:47:04
Chrome Click!! |
| How you are achiveing the match rate of unregulated routers as 53.1% ? |
We refer to the CC and PP documents, list all safety function requirements, and establish a ST document that meets the specification, and compares it with the document that does not meet the specification. |
ICACT20230161 Question.3
Questioner: lp_saikia@yahoo.co.in 2023-02-19 오후 3:47:52 |
ICACT20230161 Answer.3
Answer by Auhor m11007503@gapps.ntust.edu.tw 2023-02-19 오후 3:47:52
Chrome Click!! |
| What are the limitations of your work? |
The limitations of our work are as follows. Since we are comparing the ST files of security products, we use the existing regulated files as standard templates. However, the information security field changes rapidly, and some specifications will be updated periodically. , even the most basic Common Criteria documents are constantly updated, so our work is time-sensitive. |
ICACT20230161 Question.4
Questioner: nvlinh@cs.ccu.edu.tw 2023-02-19 오후 3:48:16 |
ICACT20230161 Answer.4
Answer by Auhor m11007503@gapps.ntust.edu.tw 2023-02-19 오후 3:48:16
Chrome Click!! |
| Is this a manual comparison to figure out the vulnerabilities? |
Yes, currently we are using manual comparison of ST files, and we expect to use automated test scripts for comparison in the future. |
ICACT20230161 Question.5
Questioner: nvlinh@cs.ccu.edu.tw 2023-02-19 오후 3:48:39 |
ICACT20230161 Answer.5
Answer by Auhor m11007503@gapps.ntust.edu.tw 2023-02-19 오후 3:48:39
Chrome Click!! |
| How did you evaluate your proposed method, e.g., used platform, metric, state-of-the-art performance comparison? |
We are listing security features for comparison, the advantage is a simple and clear method to implement; the disadvantage is that it takes some human resources. |
ICACT20230161 Question.6
Questioner: M11007513@gapps.ntust.edu.tw 2023-02-19 오후 5:25:55 |
ICACT20230161 Answer.6
Answer by Auhor m11007503@gapps.ntust.edu.tw 2023-02-19 오후 5:25:55
Chrome Click!! |
| Is there more progress that can be made in this study? |
Our research provides a process for making ST files related to routers. If you need to create ST files related to other information and communication network equipment in the future, you can refer to our method, but the target needs to be changed to other equipment, and related functions must also be paid attention to. |
ICACT20230161 Question.7
Questioner: M11007513@gapps.ntust.edu.tw 2023-02-19 오후 5:26:59 |
ICACT20230161 Answer.7
Answer by Auhor m11007503@gapps.ntust.edu.tw 2023-02-19 오후 5:26:59
Chrome Click!! |
| Could this research lead to an automated evaluation system? |
At present, we are using manual comparison of ST files, and we expect to use automated test scripts for comparison in the future to speed up efficiency. |
ICACT20230161 Question.8
Questioner: mahdi.firoozjaei@uwindsor.ca 2023-02-21 오후 9:37:40 |
ICACT20230161 Answer.8
Answer by Auhor m11007503@gapps.ntust.edu.tw 2023-02-21 오후 9:37:40
Chrome Click!! |
| Please expalin your attack model.
What information is available for the attacker? And what is his/her ability to compromise the routers? |
Thank you for your question. Our research is mainly to provide the method and process of making security target files related to network equipment proposed by EUCC, and compare them with non-compliant router product files. Instead of establishing an attack process to attack the router. |
