ICACT20220036 Question.1
Questioner: zhouzijiao995@163.com 2022-02-15 오후 2:05:19 |
ICACT20220036 Answer.1
Answer by Auhor yiweimaa@gmail.com 2022-02-15 오후 2:05:19
Chrome  Click!! |
| Can the trustworthiness framework you proposed evaluate and make modification suggestions on software with security vulnerabilities? |
Some. Not all. |
ICACT20220036 Question.2
Questioner: tomayoon@ieee.org 2022-02-15 오후 2:07:05 |
ICACT20220036 Answer.2
Answer by Auhor yiweimaa@gmail.com 2022-02-15 오후 2:07:05
Chrome Click!! |
| First of all, thank you for the good research paper and presentation contents. I would like to know more about the research environment used in this study, and also in detail about the equipment & operating systems, development languages and software libraries you used. |
The Operation System: Linux, language: python. We deployed open source to develop our platform. |
ICACT20220036 Question.3
Questioner: tomayoon@ieee.org 2022-02-15 오후 2:10:31 |
ICACT20220036 Answer.3
Answer by Auhor yiweimaa@gmail.com 2022-02-15 오후 2:10:31
Chrome Click!! |
| Will you tell us what is the major achievement of this paper, and also what is further study issue from this? Thanks in advance!! |
After we contact a lot of company, we found that they did the security check before they deliver. So we co-operate with them and show them that each phase on the SSDLC are very important from our experiment. We further study will try to find more suggestion on the found issues for different domain. |
ICACT20220036 Question.4
Questioner: vasaka.vis@mahidol.ac.th 2022-02-15 오후 2:20:34 |
ICACT20220036 Answer.4
Answer by Auhor yiweimaa@gmail.com 2022-02-15 오후 2:20:34
Chrome Click!! |
| Thank you for your slide. It is a bit upset to see your Youtube video that was generated by a Text-to-speech engine. You should present by yourself.
The research topic is interesting, but your contribution is not clear.
In Slide 8, you mentioned that "This platform will provide the guidance for industries...", however I could not find any platforms.
When you say "platform, did you develop any software?
|
We build a sub-set of SSDLC which is MVP. We followed NIST 800-160 to build SDLC and integrate SCA, SAST, IAST, and DAST to this platform to make it as SSDLC. Should say part of SSDLC becase we miss an important part is SANDBOX. Sandbox is our next stage. After that, we should have a complete SSDLC platform. The platform can not guideline the industry. We co-operate with indusrty using this platform and try to find the security issue on different phases and how their relationship. And find the solution. We try to do it 4 years. And each year with different domain. Hopeful after this, we can have a complete guideline. |
ICACT20220036 Question.5
Questioner: namacabale@gmail.com 2022-02-16 오후 3:18:54 |
ICACT20220036 Answer.5
Answer by Auhor yiweimaa@gmail.com 2022-02-16 오후 3:18:54
Chrome Click!! |
| Dear Author, you have a very good research. Is there an existing technology almost similar to your proposal that has been deployed in real world environment? What does it lack that your work specifically addressed? Thank you and stay safe.
|
There is a project-Black Pearl which is part of US Navy project. They provide a platform for DevSecOps. There are some project for SSDLC from CiSCO, Microsoft, and so on. I believe that are for their own business need. On this paper, I did some experiments for IoT gateway, and I plan to use it for different domain, such as Oran, Drone, and so on. Our platform also integrated with different tools, so we can use them to do more analysis. |
