www.icact.org

Member Login

TACT Journal Homepage

Call for Paper

Committee

Find My Paper

Author Homepage

Statistics & History

Welcome Message

Paper Procedure

FAQ

Paper Archives

Outstanding Papers

Program & Proceedings

Presentation Platform

Hotel & Travel Info

Photo Gallery

Scheduler Login

Seminar

Archives Login

Sponsors

Virual Oral Question and Answer


IEEE/ICACT20220047 Question.4 Questioner: vasaka.vis@mahidol.ac.th 2022-02-15 오후 2:58:48	IEEE/ICACT20220047 Answer.4 Answer by Auhor g20004tt@edu.tuis.ac.jp 2022-02-15 오후 2:58:48
Thank you for your presentation :) The research topic is very interesting. I have a few questions. (1) Why you target only OWASP API no.1 and no.5? (2) What programming languages you used to develop your proposed vulnerability assessment tool? Or you just use the existing opensource tool? (3) On slide no. 16, your proposed method could not detect the vulnerability No.1. Is there any reason behind? Or the version of your WordPress just does not contain this vulnerability?	Thanks for your question. (1) We targeted OWASP API' s No.1 and No.5 because these vulnerabilities are related to access control and are the most threatening to WebAPI. (2) We used Python to implement the proposed method. (3) We believe that this is because the vulnerability did not exist in the 4.7.0 version of WordPress. However, there is a possibility that an unknown vulnerability existed but we could not detect it, so we are considering improving the detection method of the proposed method.

Select Voice