脆弱性管理サービス Veetaをリリースした

by Kazuhiko Yamashita

Slide 1

Slide 1 text

ʙΘʔʔʔʂʂࠓ೔࠙਌ձ౜༲͛͋Δ͡ΌΜʂʂ࠷ߴ͡ΌΜʂʂʂฤʙ !QZBNB(.01FQBCP *OD ϖύϘςοΫΧϯϑΝϨϯεɹΠϯϑϥΤϯδχΞ͕΋ͬͱ͓΋͠Ζ͘Ͱ͖Δ ੬ऑੑ؅ཧαʔϏε 7FFUBΛϦϦʔεͨ͠

Slide 2

Slide 2 text

ΤϯδχΞ ࢁԼ࿨඙!QZBNB ϗεςΟϯάࣄۀ෦νʔϑςοΫϦʔυ IUUQTUFOTOBQPODPN

Slide 3

Slide 3 text

-JOVYͷ౷߹Ϣʔβʔ؅ཧ 50.-ܗࣜ )551+40/ -%"1΍%#ͷ؅ཧͷӡ༻ෛՙ ѻ͍΍͍͢ϑΥʔϚοτ ൚༻ੑɾ֦ுੑ

Slide 4

Slide 4 text

WFFUBPSH αʔόύοέʔδͷ ੬ऑੑ؅ཧαʔϏε

Slide 5

Slide 5 text

WPM NSVCZͰ࣮ݱ͢Δ ҰาਐΜͩΠϯϑϥӡ༻

Slide 6

Slide 6 text

7FFUB JT -JOVYͷύοέʔδ੬ऑੑ؅ཧαʔϏε IUUQTXXXWFFUBUFDI

Slide 7

Slide 7 text

No content

Slide 8

Slide 8 text

7FFUBͰग़དྷΔ͜ͱ wαʔόʹΠϯετʔϧ͞Εͨύοέʔδ৘ใͷநग़ɺݕࡧ wύοέʔδͷ੬ऑੑͷநग़ɺݕࡧ w੬ऑੑ৘ใͷӾཡ w੬ऑੑใࠂͷແࢹ w੬ऑੑൃݟ௨஌

Slide 9

Slide 9 text

ΞʔΩςΫνϟ 7FFUB 7B[ $7& /7% +7/ ύοέʔδ৘ใͷ௨஌ ύοέʔδ৘ใεΩϟϯ ਓྨ Ϩϙʔτ 8ͰӾཡ

Slide 10

Slide 10 text

؅ཧ୯Ґ 0SHBOJ[BUJPO 4FSWJDF IPTU IPTU IPTU 4FSWJDF IPTU IPTU IPTU Ξϥʔτ΍$7&ͷ؅ཧ৘ใ͸0SHBOJ[BUJPO 4FSWJDF )PTU୯ҐͰ؅ཧՄೳ

Slide 11

Slide 11 text

σϞ

Slide 12

Slide 12 text

ٕज़ελοΫ

Slide 13

Slide 13 text

՝୊ײ

Slide 14

Slide 14 text

ςΫχΧϧϦʔυͱͯ͠

Slide 15

Slide 15 text

αʔόͷ੬ऑੑ؅ཧͷলྗԽ

Slide 16

Slide 16 text

No content

Slide 17

Slide 17 text

7VMT wΤʔδΣϯτϨε w044͔ͭɺ࡞ऀ͕೔ຊਓ w44)΋͘͠͸ϩʔΧϧͰεΩϟϯΛߦ͍ɺ݁ՌΛ+40/ϑΝΠϧʹग़ྗ w4MBDLͳͲͷ௨஌࿈ܞ

Slide 18

Slide 18 text

ςΫχΧϧϦʔυͱͯ͠ wαʔόͷ੬ऑੑ؅ཧͷলྗԽ 7VMTͷಋೖˠΤʔδΣϯτϨε͕ෳ਺αʔϏεɺઍେن໛Ͱαʔόӡ༻Λ ߦ͍ͬͯΔϖύϘʹϚον͠ͳ͔ͬͨ IUUQTTQFBLFSEFDLDPNQZBNBWVMTYTUOTEFTIJNFSVDVJSVPYJOHKJBO[IJGBMTF[JEPOHIVB 7VMTº45/4Ͱਓྨ͕޾ͤʹͳΕΔͱ ৴ͯٙ͡Θͳ͔ͬͨظ

Slide 19

Slide 19 text

ͦ͏ɺԶୡ͸΋͏ΤʔδΣϯτͳ͠Ͱ͸ ੜ͖͍͚ͯͳ͍ମʹͳͬͪ·ͬͨ

Slide 20

Slide 20 text

7VMTΤʔδΣϯτ4BB4 wΤʔδΣϯτϨεͳઃܭ͔ΒΤʔδΣϯτܗࣜରԠ΁ͷύϫʔϓϨΠ wDVSSFOU഑Լͷ+40/Λ1BSTFͯ͠1045 wґଘύοέʔδͷଟ͞

Slide 21

Slide 21 text

7VMT 7B[ 7FFUB

Slide 22

Slide 22 text

ΤϯδχΞ ͱͯ͠

Slide 23

Slide 23 text

ΤϯδχΞͱͯ͠ wϖύϘͷΠϯϑϥࣄ৘ wࣗ෼ͷαʔϏεΛ࣋ͭ͜ͱ

Slide 24

Slide 24 text

ϖύϘͷΠϯϑϥࣄ৘ wαʔϏεΠϯϑϥ͸0QFO4UBDLΛ࠾༻ w෺ཧαʔό୆ wԾ૝αʔό୆ IUUQTTQFBLFSEFDLDPNQZBNBQFQBCPOJPLFSVPQFOTUBDLIBDLT

Slide 25

Slide 25 text

ϖύϘͷΠϯϑϥࣄ৘

Slide 26

Slide 26 text

༏Ε͍ͯΔͱ͍͏͜ ͱ͸ଞͱͷൺֱʹΑͬ ͯৢ੒͞ΕΔ

Slide 27

Slide 27 text

ࣗ෼ͷαʔϏε w୅දతαʔϏε wࣗݾֶशج൫

Slide 28

Slide 28 text

ࠓޙͷ΍͍͖ͬͯ

Slide 29

Slide 29 text

ࠓޙͷ΍͍͖ͬͯ wݕ஌ਫ਼౓ͷ޲্ w69޲্ wػցֶशɾ౷ܭ wNBDLFSFMQMVHJOWFFUB

Slide 30

Slide 30 text

ݕ஌ਫ਼౓ͷ޲্ w0QFO4$"1ରԠ wιʔεΠϯετʔϧରԠ

Slide 31

Slide 31 text

69޲্

Slide 32

Slide 32 text

ػցֶशɾ౷ܭ wύοέʔδͷ੬ऑੑ৘ใ wରԠͷඞཁՄ൱ wରԠͷαδΣετ

Slide 33

Slide 33 text

NBDLFSFMQMVHJOWFFUB [plugin.checks.veeta] command = “/usr/bin/mackerel-plugin-veeta -token xxxx  -service example”