www.icact.org

Member Login

TACT Journal Homepage

Call for Paper

Committee

Find My Paper

Author Homepage

Statistics & History

Welcome Message

Paper Procedure

FAQ

Paper Archives

Outstanding Papers

Program & Proceedings

Presentation Platform

Hotel & Travel Info

Photo Gallery

Scheduler Login

Seminar

Archives Login

Sponsors

Virual Oral Question and Answer


IEEE/ICACT20240324 Question.2 Questioner: vharish@cdac.in 2024-02-05 오전 7:21:15	IEEE/ICACT20240324 Answer.2 Answer by Auhor vatcharavaree.wog@student.mahidol.ac.th 2024-02-05 오전 7:21:15
Regarding the static analysis approach of assessing application security, can you elaborate on how the source code, manifest.xml, and security features are evaluated for potential vulnerabilities?	Thank you for the question. The source code analysis steps, the tool will scan for code pattern for common security flaws such as data input validation, insecure data handeling, SQLinjection, using raw SQLcommand execution. The tool will shows the locations of potential vulnerabilities and suggesting remediation actions. The manifest.xml analysis will checking for sensitive permissions requested by the app and requests excessive or unnecessary permissions, which could potentially lead to security and privacy risks. Last, security features will examine how security features are implemented and also check whether these features are implemented correctly according to security best practices and guidelines. So these analysis steps can help to identify and address potential vulnerabilities and fix problems early in the development process making the app more secure overall.

Select Voice