|
Finally, I would like to explain the conclusion and future work.
In this presentation, we proposed a vulnerability assessment method repeatedly analyzes WebAPI requests and their responses.
Using the proposed method, we conducted an evaluation experiment to detect a Wordpress article tampering vulnerability, which is difficult to detect with existing vulnerability assessment tools, and successfully detected it.
As future work, we will study the detection method for other vulnerability items of the API vulnerability by OWASP, which was not targeted this time.
We are also planning to conduct evaluation experiments using the actual Wordpress environment.
That's it for the presentation.
Thank you very much for your attention. |