9.17--CAESARII Edition Daily Topics

Thread Content

9.17--In the CAESARII version, those who answer daily questions correctly receive 10 wealth points, while those who get them wrong receive 3 wealth points. A security incident recently occurred on a certain e-commerce website, where an item worth 1000 yuan was purchased for just 1 yuan. Analysis revealed that this was due to the use of the Http protocol for browsing purposes, as a performance optimization measure during design; attackers were able to modify the price of items added to the shopping cart by forging data packets. Taking advantage of this vulnerability, attackers added items worth 1000 yuan to the shopping cart at a cost of 1 yuan each, and since there was no verification process during payment, this problem occurred. An analysis of the causes of this issue on the website, along with solutions, is provided. What is the most correct statement? A. This issue arose due to the use of insecure protocols; to prevent similar problems from occurring again, the entire website needs to be upgraded in terms of security, with all accesses requiring the use of HTTPS. B. This issue occurred because no proper work such as threat modeling was done before the website was developed, resulting in those threats going unnoticed and no appropriate measures being taken to address them. C. This issue was caused by coding defects, and it can be resolved by making modifications to the website so that product prices are verified during order payment. D. This isn’t a problem with the website itself; it’s necessary to call the police to intervene and punish the attackers