 |
This section describes the basic flow of each step of the vulnerability assessment.
First, in order to conduct a vulnerability assessment customized to the WebAPI environment,
we will obtain references describing WebAPI operations.
There are four information to be extracted from the WebAPI reference:
WebAPI endpoint,
HTTP request method
Parameter name and type,
And Whether authentication is required.
An example is shown in the figure.
The information of the reference is stored in the database.
If the WebAPI reference is outdated or does not contain accurate information, the vulnerability assessment in each vulnerability assessment conducted by the proposed method will cause problems that cannot be accurately assessed. |
IEEE/ICACT20220047 Slide.07
[Big Slide]