外よりも中からの攻撃・ 事故がヤバイ、今やるべきクラウドセキュリティ対策

by Sudachi-Kun

Slide 1

Slide 1 text

֎ΑΓ΋த͔Βͷ߈ܸɾ  ࣄނ͕ϠόΠɺࠓ΍Δ΂͖ Ϋϥ΢υηΩϡϦςΟରࡦ Ϋϥ΢υ࢖͏ͱϦεΫ͸Ͳ͏ͳΔʁͦΕͰ΋ศར ͳΫϥ΢υαʔϏεɺਖ਼҆͘͠શʹ࢖͏ํ๏Λ͝ ঺հ͠·͢ɻ

Slide 2

Slide 2 text

ͬͦ͘͞Ͱ͕͢ ͝ΊΜͳ͍͞

Slide 3

Slide 3 text

͜ͷεϥΠυ͸ ߹ܭ 365εϥΠυ͋Γ·͢ ͔͠΋Webެ։͠·ͤΜ ʢͨͿΜʣ ͲΜͲΜߦ͖·͢

Slide 4

Slide 4 text

ࣗݾ঺հ

Slide 5

Slide 5 text

ᴡ౻ ጏਔ αΠτ΢ γϯδ ΞΠϨοτגࣜձࣾ cloudpackࣄۀ෦ 2013೥8݄ೖࣾ ʲϒϩάʳ ϩʔυόϥϯεͩͪ͘͢Μ http://blog.animereview.jp/

Slide 6

Slide 6 text

ϒϩά ׂͱ͍Ζ͍Ζॻ͍ͯ·ͯ͠

Slide 7

Slide 7 text

ݸਓϒϩά͚ͩͲ40ສPV ̍೔ฏۉ1500PV

Slide 8

Slide 8 text

ͦͷલ͸HPC΍ͬͯ·ͨ͠ ʢϋΠɾύϑΥʔϚϯεɾίϯϐϡʔςΟϯάʣ

Slide 9

Slide 9 text

GPU͍ͬͺ͍ͷͤͯ

Slide 10

Slide 10 text

Ϋϥελ ૊ΜͩΓ ͢ΔΘ͚Ͱ͢

Slide 11

Slide 11 text

ͦͷલ͸2೥͘Β͍ χʔτͯ͠·ͨ͠ ʢ24/365ۈ຿ʣ ʢͣͬͱήʔϜͯͨ͠ʣ

Slide 12

Slide 12 text

ߋʹͦͷલ͸ υεύϥͷ ๏ਓ෦ୂʹ͍·ͨ͠

Slide 13

Slide 13 text

2009೥ʹ GMO͞Μͷ αʔόʔ࡞ͬͨ࣌ͷ هࣄ ʢITmedia͞Μʣ

Slide 14

Slide 14 text

͋Δ೔γϯδ͸ ໨֮ΊΔͷͰ͢

Slide 15

Slide 15 text

࣌୅͸Ϋϥ΢υ͡ΌͶʁ

Slide 16

Slide 16 text

ͦͯ͠ΞΠϨοτʹ ඈͼࠐΉ

Slide 17

Slide 17 text

·ͣ୲౰ͨ͠ͷ͸ ϓϩδΣΫτϚωʔδϟʔ

Slide 18

Slide 18 text

ͦͯࣗࣾ͠Webߋ৽

Slide 19

Slide 19 text

͔Βͷ٬ઌৗற

Slide 20

Slide 20 text

΋͸΍ԿͰ΋԰

Slide 21

Slide 21 text

ݱࡏͷݞॻ͖

Slide 22

Slide 22 text

৘ใηΩϡϦςΟ؅ཧ੹೚ऀ

Slide 23

Slide 23 text

ݸਓ৘ใ؅ཧ੹೚ऀ

Slide 24

Slide 24 text

PCI DSS؅ཧ੹೚ऀ

Slide 25

Slide 25 text

ܦྺͱηΩϡϦςΟͷ γϯΫϩ཰͕ઈ๬త

Slide 26

Slide 26 text

͖͔͚ͬ͸ ৽ͨͳ؂ࠪରԠͱ લ೚ͷୀ৬

Slide 27

Slide 27 text

CTOླ໦ ʮγϯδ܅ηΩϡϦςΟ΍ͬͯʔʯ

Slide 28

Slide 28 text

͍͍ͬ͢Αʔ

Slide 29

Slide 29 text

1͔Βݱ৔Ͱୟ͔Εͯ ࠓʹࢸΓ·͢

Slide 30

Slide 30 text

ͦͯ͠ޛͬͨ

Slide 31

Slide 31 text

ٕज़ྗʢITϦςϥγʔʣͱ ηΩϡϦςΟϦςϥγʔ͸ શ͘΋ͬͯൺྫ͠ͳ͍

Slide 32

Slide 32 text

ΞΠϨοτגࣜձࣾ cloudpackࣄۀ෦ ͝঺հ

Slide 33

Slide 33 text

ΞΠϨοτגࣜձࣾ ઃཱ ࢿຊۚ ୅දऀ ैۀһ਺ ࣄۀ಺༰ γεςϜ։ൃɾอक ϚωʔδυϗεςΟϯά 2003೥10݄15೔ 7,000ສԁ ᜊ౻ কฏ 117໊ʢ2016೥3݄ݱࡏʣ

Slide 34

Slide 34 text

AWSΛ׆༻͠ͳ͕ΒϏδωεʹूதͰ͖Δ ίϯγΣϧδϡαʔϏε

Slide 35

Slide 35 text

4 ࣾ ࣾ 600 6೥ 6 ೥ؒAWSͷΈͰ 2 0 1 0 2 0 1 6

Slide 36

Slide 36 text

AWSϓϨϛΞίϯα ϧςΟϯά ύʔτφʔ ΞδΞ஍Ҭ5ࣾ ࠷্Ґύʔτφʔ 4೥࿈ଓ͸2ࣾͷΈ Premier > Advanced > Standard > Registered શੈք2331ࣾத

Slide 37

Slide 37 text

AWSίϯϐςϯγʔೝఆ AWSͷӡ༻อक ϏοάσʔλͷऔΓѻ͍

Slide 38

Slide 38 text

AWSύʔτφʔΞϫʔυ ࠷ߴӫ༪ͷ APN Partner of the Year 2೥࿈ଓड৆

Slide 39

Slide 39 text

ཁ͢Δʹ ಛʹAWSͷߏஙӡ༻อक͕ ಘҙͳձࣾͰ͢

Slide 40

Slide 40 text

ͳͷͰ͕͢

Slide 41

Slide 41 text

ࠓ೔͸AWSʹݶΒͣ Ϋϥ΢υͱ͍͏෼໺Ͱ ηΩϡϦςΟతͳ͓࿩Λ ͍ͨ͠ͱࢥ͍·͢

Slide 42

Slide 42 text

Ϋϥ΢υͷ ηΩϡϦςΟʹ͍ͭͯߟ͑Δ

Slide 43

Slide 43 text

ࢢ৔͸Ϋϥ΢υ΁ෆ͕҆͋Δ ͦͷ1Ґ͕ηΩϡϦςΟ

Slide 44

Slide 44 text

ͳ͔ͥ

Slide 45

Slide 45 text

ͳΜ͔ͩΑ͘෼͔Βͳ͍͔Β

Slide 46

Slide 46 text

͍΍͍΍ ΦϯϓϨͩΖ͏͕ Ϋϥ΢υͩΖ͏͕ ΍Δ͜ͱ͸ҰॹͰ͠ΐ

Slide 47

Slide 47 text

ͱɺࢥ͍ͬͯͨ࣌ظ͕ ࢲʹ΋͋Γ·ͨ͠

Slide 48

Slide 48 text

ྫ͑͹AWS

Slide 49

Slide 49 text

੹೚ڞ༗Ϟσϧ

Slide 50

Slide 50 text

Slide 51

Slide 51 text

ͬͦͪ͘͞ΐͬͱ ಠಛͳײ͡͠·͢ΑͶ

Slide 52

Slide 52 text

͡Ό͋΋ͬͱΧδϡΞϧͳ αʔϏεΛݟͯΈ·͠ΐ͏

Slide 53

Slide 53 text

Dropboxͱ͔ Evernoteͱ͔ Google Appsͱ͔

Slide 54

Slide 54 text

͜ΕΒ΋શ෦ Ϋϥ΢υαʔϏεͰ͢ΑͶ

Slide 55

Slide 55 text

தʹ͸ۀ຿Ͱ ར༻͞Ε͍ͯΔํ΋ ͍Βͬ͠ΌΔ͔΋͠Ε·ͤΜ

Slide 56

Slide 56 text

ͦͷ࣌ͷબఆج४ͬͯ ԿͰ͔͢ʁ

Slide 57

Slide 57 text

ศར͔ͩΒʁ ͔͔҆ͬͨΒʁ

Slide 58

Slide 58 text

ηΩϡϦςΟͷଆ໘Ͱ ධՁ͠·͔ͨ͠ʁ

Slide 59

Slide 59 text

ԿΛ࣋ͬͯͯ͠ ʮ҆શʯ ͱ͢Δ͔

Slide 60

Slide 60 text

೉͍͠Ͱ͢ΑͶ

Slide 61

Slide 61 text

cloudpackͰ͸ Ͳ͏͍ͯ͠Δ͔ͱ͍͏ͱ

Slide 62

Slide 62 text

ύεϫʔυΛೖྗͤ͞Δ αʔϏε͸ શͯ੬ऑͱ͍͏ߟ͑ํ

Slide 63

Slide 63 text

ͦΜͳ͜ͱݴͬͨΒͳΜʹ΋ ࢖͑ͳ͍͡Όͳ͍͔ʂ ͱ͍͏ͷ͸ͦͷ௨Γ ͳͷͰ͕͢ɺ

Slide 64

Slide 64 text

ࣗࣾͷActive Directory͔Β SSOʢγϯάϧαΠϯΦϯʣ Ͱ͖ͳ͍αʔϏε͸ ݪଇ࠾༻͠ͳ͍΋Μʂ ͱ͍͏ϙϦγʔΛ ͍࣋ͬͯ·͢

Slide 65

Slide 65 text

ͱ͍͏Θ͚Ͱ

Slide 66

Slide 66 text

cloudpack͸ݪଇɺ AWSͳͲ΁ͷϩάΠϯʹ ΞΧ΢ϯτ໊΋ ύεϫʔυ΋࢖͍·ͤΜ

Slide 67

Slide 67 text

ࣾ಺Ͱ͸ύεϫʔυΛ࢖͏ γνϡΤʔγϣϯ͸ɺ ύιίϯʹ ϩάΠϯ͢Δͱ͖ͱɺ SSO͢Δͱ͖ͷΈ

Slide 68

Slide 68 text

΋ͪΖΜSSOͳͷͰɺ Active Directoryʹ ొ࿥͞Ε͍ͯΔ ΞΧ΢ϯτ໊ͱ ύεϫʔυΛ༻͍·͕͢

Slide 69

Slide 69 text

υϝΠϯͱಉ͡ ໊લɺύεϫʔυͰ ֤छΫϥ΢υαʔϏεʹ ొ࿥͍ͯ͠Δ ͱ͔͍͏ མͪͰ͸ͳ͍Ͱ͢

Slide 70

Slide 70 text

SAMLʢαϜϧʣΛ ࢖͍ͬͯ·͢ ͋ͱKerberosೝূͰ͢Ͷ

Slide 71

Slide 71 text

ͳͷͰ ࣾ಺ͷดҬʹ͋Δ Active DirectoryΛ ઈରʹܦ༝͠ͳ͍ͱ ֤छαʔϏεʹ ϩάΠϯग़དྷͳ͍ͷͰɺ

Slide 72

Slide 72 text

ୈࡾऀ͕Πϯλʔωοτܦ༝ ͰΞΧ΢ϯτΛ৐ͬऔΔ͜ͱ ͕ઈରʹग़དྷͳ͍࢓૊Έ Ͱ͢

Slide 73

Slide 73 text

΋͠΋ɺ΋͠΋ɺ͋Γ͑ͳ͍ ͱ͸ࢥ͏͚Ͳ

Slide 74

Slide 74 text

ࣾ಺ͷωοτϫʔΫʹ ܨ͕Εͯ

Slide 75

Slide 75 text

ΞΧ΢ϯτ໊΋όϨͯͯ

Slide 76

Slide 76 text

ύεϫʔυ΋ ࿙Εͯͨͱͨ͠Β

Slide 77

Slide 77 text

ϩάΠϯͰ͖ͪΌ͏͡ΌΜ ͬͯ͜ͱͰ

Slide 78

Slide 78 text

શαʔϏεʹ ରԠग़དྷΔΑ͏ͳ ଟཁૉೝূ΋ ೖΕͯ·͢

Slide 79

Slide 79 text

1. ϋʔυ΢ΣΞೝূ 2. ΞΧ΢ϯτೝূ 3. ଟཁૉೝূ ͜ͷ3ͭΛ࢖͍ͬͯ·͢

Slide 80

Slide 80 text

ͱ͸͍͑

Slide 81

Slide 81 text

ΈΜͳ͕ΈΜͳ SSOͳ؀ڥΛ࡞ΕΔ Θ͚Ͱ͸ͳ͍Ͱ͢͠

Slide 82

Slide 82 text

ͦ͜·Ͱ͍ΒͶʔ͢ ͬͯձࣾ͞Μ΋ ͍Βͬ͠ΌΔͷͰ

Slide 83

Slide 83 text

࠷௿ݶɺ͜Ε͚ͩ͸ ΍ͬͯཉ͍͠ͳͱ ࢥ͏͜ͱ͕͋Γ·͢

Slide 84

Slide 84 text

αʔϏεͷص্ධՁ

Slide 85

Slide 85 text

ಠཱߦ੓๏ਓ ৘ใॲཧਪਐػߏ ηΩϡϦςΟηϯλʔ͔Β ൃߦ͞Ε͍ͯΔɺ தখاۀͷͨΊͷ Ϋϥ΢υαʔϏε҆શར༻ͷ खҾ͖

Slide 86

Slide 86 text

Slide 87

Slide 87 text

͜Ε͕͘͢͝ྑ͘ग़དྷ͍ͯͯ cloudpackͷ಺෦؂ࠪ΍ ֎෦؂ࠪͰ΋࢖͍ͬͯ·͢

Slide 88

Slide 88 text

1߲໨ͣͭݟͯΈ·͢

Slide 89

Slide 89 text

Google AppsΛ ධՁͯ͠Έ·͠ΐ͏

Slide 90

Slide 90 text

1. ར༻ൣғͷ໌֬Խ Ϋϥ΢υαʔϏεͰͲͷۀ຿ɺ Ͳͷ৘ใΛѻ͏͔ݕ౼͠ɺ ۀ຿ͷ੾Γ෼͚΍ӡ༻ϧʔϧ ͷઃఆΛߦ͍·͔ͨ͠ʁ

Slide 91

Slide 91 text

ిࢠϝʔϧɺϑΝΠϧڞ༗ɺ εέδϡʔϧ؅ཧͱͯ͠ ར༻͢Δɻ

Slide 92

Slide 92 text

2. αʔϏεͷछྨͱίετ ۀ຿ʹ߹͏Ϋϥ΢υαʔϏε Λબఆ͠ɺίετʹ͍ͭͯ ֬ೝ͠·͔ͨ͠ʁ

Slide 93

Slide 93 text

໾һձঝೝࡁΈ

Slide 94

Slide 94 text

3. ѻ͏৘ใͷॏཁ౓ Ϋϥ΢υαʔϏεͰऔΓѻ͏ɺ ৘ใͷ؅ཧϨϕϧʹ͍ͭͯ ֬ೝ͠·͔ͨ͠ʁ

Slide 95

Slide 95 text

ݸਓ৘ใɺސ٬৘ใɺ ސ٬؀ڥ৘ใͳͲɺ ॏཁͳ৘ใΛऔΓѻ͏

Slide 96

Slide 96 text

4. ϙϦγʔ΍ϧʔϧͱͷ ੔߹ੑ ηΩϡϦςΟ্ͷϧʔϧͱ Ϋϥ΢υαʔϏεͷ ׆༻ͷؒʹ ໃ६΍ෆҰக͕ ੜ͡·ͤΜ͔

Slide 97

Slide 97 text

ࣾ಺ͷ౷߹ೝূج൫ʹ ΞαΠϯՄೳ͔ͭɺ ୯ಠͰ΋ ଟཁૉೝূʹରԠ͍ͯ͠Δ

Slide 98

Slide 98 text

5. ར༻؅ཧ୲౰ऀ Ϋϥ΢υαʔϏεͷಛੑΛ ཧղͨ͠ར༻؅ཧ୲౰ऀΛ ࣾ಺ʹ֬อ͠·͔ͨ͠ʁ

Slide 99

Slide 99 text

ద੾ͳ؅ཧऀΛ֬อͨ͠

Slide 100

Slide 100 text

6. Ϣʔβ؅ཧ Ϋϥ΢υαʔϏεͷϢʔβʹ ͍ͭͯద੾ʹ؅ཧग़དྷ·͔͢ʁ

Slide 101

Slide 101 text

ࣾ಺ͷ౷߹ೝূج൫ʹͯ ؅ཧՄೳ

Slide 102

Slide 102 text

7. ύεϫʔυ ύεϫʔυͷద੾ͳ ઃఆɾ؅ཧ͸࣮ࢪͰ͖·͔͢ʁ

Slide 103

Slide 103 text

ࣾ಺ͷ౷߹ೝূج൫ʹͯ ؅ཧՄೳ

Slide 104

Slide 104 text

8. σʔλͷෳ੡ αʔϏεఀࢭ౳ʹඋ͑ͯɺ ॏཁ৘ใΛखݩʹ֬อͯ͠ ඞཁͳ࣌ʹ࢖͑ΔͨΊͷ උ͑͸͋Γ·͔͢ʁ

Slide 105

Slide 105 text

αʔυύʔςΟ੡πʔϧ΍ αʔϏεΛར༻͢Δ ඞཁ͕͋Δ

Slide 106

Slide 106 text

9. ࣄۀऀͷ৴པੑ Ϋϥ΢υαʔϏεΛఏڙ͢Δ ࣄۀऀ͸ ৴པग़དྷΔࣄۀऀͰ͔͢

Slide 107

Slide 107 text

ੈքత༗໊اۀͰ͋Δɻ ISAE 3402 Type II ͱ SSAE 16 ೝূ ͱ ISO27001 ͳͲΛ औಘ͍ͯ͠Δɻ

Slide 108

Slide 108 text

10. αʔϏεͷ৴པੑ αʔϏεͷՔಇ཰ɺ ো֐ൃੜස౓ɺ ো֐࣌ͷճ෮໨ඪ࣌ؒͳͲͷ αʔϏεϨϕϧ͸ ࣔ͞Ε͍ͯ·͔͢ʁ

Slide 109

Slide 109 text

อূ͢ΔՔಇ཰͸99.9%

Slide 110

Slide 110 text

11. ηΩϡϦςΟରࡦ Ϋϥ΢υαʔϏεʹ͓͚Δ ηΩϡϦςΟରࡦ͕ ۩ମతʹެ։͞Ε͍ͯ·͔͢ʁ

Slide 111

Slide 111 text

ԼهWebαΠτͰ֬ೝͰ͖Δ https://support.google.com/ a/answer/60762?hl=ja

Slide 112

Slide 112 text

12. ར༻ऀαϙʔτ αʔϏεͷ࢖͍ํ͕ Θ͔Βͳ͍ͱ͖ͷࢧԉ ʢϔϧϓσεΫ΍FAQʣ͸ ఏڙ͞Ε͍ͯ·͔͢ʁ

Slide 113

Slide 113 text

FAQɺϝʔϧɺ24࣌ؒ365೔ ରԠͷి࿩αϙʔτ͕͋Δ

Slide 114

Slide 114 text

13. ར༻ऴྃ࣌ͷ σʔλͷ֬อ αʔϏεར༻͕ ऴྃͨ͠ͱ͖ͷɺ σʔλͷऔѻ৚݅ʹ͍ͭͯ ֬ೝ͠·͠ΐ͏ɻ

Slide 115

Slide 115 text

Google ͷ ϓϥΠόγʔ ϙϦγʔʹ ैͬͯɺ ͢΂ͯͷσʔλ͕ Google ͷαʔόʔ͔Β ࡟আ͞ΕΔ

Slide 116

Slide 116 text

14. ܖ໿৚݅ͷ֬ೝ Ұൠతܖ໿৚݅ͷ֤߲໨ʹͭ ͍ͯ֬ೝ͠·͠ΐ͏ɻ

Slide 117

Slide 117 text

ར༻ن໿Λ֬ೝͨ͠ɻ http://www.google.com/ apps/intl/ja/terms/ premier_terms.html

Slide 118

Slide 118 text

൑ఆ

Slide 119

Slide 119 text

߹֨

Slide 120

Slide 120 text

߹൱ཧ༝ cloudpackαʔϏεͷఏڙʹ ͓͍ͯॏཁͳπʔϧͱͳΔɻ े෼ͳSLA΍ɺ؅ཧऀػೳ͕ ఏڙ͞Ε͓ͯΓɺߋʹ͸ ౷߹ೝূج൫΁ͷ౷߹͕ Մೳͳ఺͔Βɺ߹֨ͱ͢Δɻ

Slide 121

Slide 121 text

ঝೝ ೔෇ͱঝೝऀΛॻ͘

Slide 122

Slide 122 text

No content

Slide 123

Slide 123 text

֤߲໨ʹ ʮద߹͍ͯ͠ͳ͚Ε͹ ࠾༻ग़དྷͳ͍ʯ Ͱ͸ͳͯ͘

Slide 124

Slide 124 text

ϦεΫΛચ͍ग़ͯ͠ ೝࣝ͠·͠ΐ͏ͱ͍͏ͷ͕ ओࢫͰ͢

Slide 125

Slide 125 text

͖ͪΜͱϦεΫධՁ͢Ε͹ ࢖͑ΔΫϥ΢υαʔϏε͔ ൑அͰ͖·͢

Slide 126

Slide 126 text

ͦͯ͠ϦεΫΛࣾ಺ʹ ڞ༗͠·͠ΐ͏ ͦ͏͢Δ͜ͱͰ

Slide 127

Slide 127 text

Ϋϥ΢υͷεϐʔυײΛ อͪͭͭɺ اۀͱͯ͠ͷࣄۀܧଓੑΛ ߴΊΔ͜ͱ͕ ग़དྷΔ͔΋͠Ε·ͤΜ

Slide 128

Slide 128 text

΍ͬͺ؂ࠪ͸େࣄͩͳͬͯ

Slide 129

Slide 129 text

ηΩϡϦςΟΫϥελʹ͸ 3छྨͷਓ͕͍ؒΔͱ ࢥ͍ͬͯ·͢

Slide 130

Slide 130 text

؂ࠪܥ

Slide 131

Slide 131 text

߈ܸܥ

Slide 132

Slide 132 text

҉߸Խɾೝূٕज़ܥ

Slide 133

Slide 133 text

γϯδ͸؂ࠪܥ͔ͳʁ ͱ͍͏Θ͚Ͱ

Slide 134

Slide 134 text

վΊͯ؂ࠪʹ͍ͭͯ ߟ͑ͯΈ·ͨ͠

Slide 135

Slide 135 text

զʑ͕ݴ͏ͱ͜Ζͷ ηΩϡϦςΟͬͯͷ͸

Slide 136

Slide 136 text

͓͏ͪʹ伴͔͚Δͱ͔

Slide 137

Slide 137 text

໷஗͍ͱ͖͸ిؾ෇͚Δͱ͔

Slide 138

Slide 138 text

ͦ͏͍͏ͷ͡Όͳͯ͘

Slide 139

Slide 139 text

৘ใηΩϡϦςΟͷࣄ Ͱ͢ΑͶ

Slide 140

Slide 140 text

ͦ΋ͦ΋ ৘ใηΩϡϦςΟͬͯ ͳΜͷ͜ͱͰ͔͢

Slide 141

Slide 141 text

৘ใͷ ػີੑ ׬શੑ Մ༻ੑ

Slide 142

Slide 142 text

͜ͷ3ຊபͷࣄͰ͢

Slide 143

Slide 143 text

ػີੑ

Slide 144

Slide 144 text

ΞΫηεΛೝՄ͞Εͨऀ͚͕ͩ ৘ใʹ࣮֬ʹ ΞΫηεͰ͖Δ͜ͱ

Slide 145

Slide 145 text

׬શੑ

Slide 146

Slide 146 text

৘ใࢿ࢈͕׬શͳ ঢ়ଶͰอଘ͞Εɺ ಺༰͕ਖ਼֬Ͱ͋Δ͜ͱ

Slide 147

Slide 147 text

Մ༻ੑ

Slide 148

Slide 148 text

৘ใࢿ࢈͕ඞཁʹͳͬͨͱ͖ɺ ར༻Ͱ͖Δঢ়ଶʹ͋Δ͜ͱ

Slide 149

Slide 149 text

cloudpack͕औಘ͍ͯ͠Δ ֎෦؂ࠪɾೝূ͸ ͍Ζ͍Ζ͋ΔͷͰ͕͢

Slide 150

Slide 150 text

ʢެ։ग़དྷͳ͍ʣ

Slide 151

Slide 151 text

ʢެ։ग़དྷͳ͍ʣ

Slide 152

Slide 152 text

γϯδ͸ཱ৔্ ͍ΖΜͳ؂ࠪʹ ཱͪձ͏ͷͰ͕͢

Slide 153

Slide 153 text

࠷ۙࢥ͏͜ͱ͕͋Γ·͢

Slide 154

Slide 154 text

ೝূऔ͔ͬͨΒͬͯ ͳΜͳͷʁ

Slide 155

Slide 155 text

ࠃ಺ج४ ࠃࡍج४ ͍Ζ͍Ζ͋Γ·͚͢Ͳ

Slide 156

Slide 156 text

ຊདྷ͸ɺࣗࣾͷηΩϡϦςΟ ج४Λ໌֬ʹ͢Δͱ͔ɺηΩϡ ϦςΟҙࣝΛ্͛ΔͨΊʹ͋ ΔͨΊͷೝূن֨

Slide 157

Slide 157 text

Ͱ΋Կ೥͔΍ͬͯΔͱ ;ͱࢥ͏ΜͰ͢

Slide 158

Slide 158 text

؂ࠪͷҝʹࢿྉ༻ҙͯ͠

Slide 159

Slide 159 text

؂ࠪͷҝʹ͍Ζ͍Ζௐ੔ͯ͠

Slide 160

Slide 160 text

؂ࠪͷҝ ؂ࠪͷҝ

Slide 161

Slide 161 text

ηΩϡϦςΟͲ͍ͬͨ͜

Slide 162

Slide 162 text

ಛʹࢥͬͨͷ͸ SOC2΍ͬͨͱ͖Ͱ͢

Slide 163

Slide 163 text

SOC2ͱ͸ͳΜͳͷ͔

Slide 164

Slide 164 text

ಛఆඇӦར׆ಈ๏ਓ ೔ຊηΩϡϦςΟ؂ࠪڠձ JASA

Slide 165

Slide 165 text

Slide 166

Slide 166 text

SOC 2 ͱ SOC 3 ͬͯҰ൪্ʹॻ͍ͯ͋Δ ʢISMS͕෺଍Γͳ͍ͱ͔ ॻ͔Εͯ·͕͢ʣ

Slide 167

Slide 167 text

Α͠ɺ͜ΕऔΖ͏

Slide 168

Slide 168 text

SOC 2ͬͯͳʹ

Slide 169

Slide 169 text

ถࠃެೝձܭ࢜ڠձ ʢAICPAʣ͕ఆΊͨ αʔϏε૊৫ʢService Organization Controlʣͷ ౷੍ʹؔΘΔ ධՁۀ຿ͷ࢓૊Έ

Slide 170

Slide 170 text

Slide 171

Slide 171 text

SOC 3ͷํ͕Ғ͍ʁ ʢ਺ࣈతʹʣ

Slide 172

Slide 172 text

௚઀ɺ؂ࠪ๏ਓʹฉ͍ͯΈͨ

Slide 173

Slide 173 text

·ͣ SOC 1 SOC 2  SOC 3 ͕͋Γ·͢

Slide 174

Slide 174 text

SOC1 ࡒ຿ධՁ

Slide 175

Slide 175 text

SOC 2 ηΩϡϦςΟ Մ༻ੑ ॲཧͷΠϯςάϦςΟ ػີอ࣋ ϓϥΠόγʔ ͜ΕͷͲΕ͔1ͭҎ্

Slide 176

Slide 176 text

SOC 3 SOC 2ͷ಺༰Λ؆ૉʹͯ͠ ެ։จষʹͨ͠΋ͷ

Slide 177

Slide 177 text

ͳΔ΄Ͳ ໾ׂ͕ҧ͏ͷ͔ ࠓճ͸ηΩϡϦςΟʹ ϑΥʔΧε͍ͨ͠ͷͰ SOC 2Ͱ͢Ͷʂ

Slide 178

Slide 178 text

͍΍࣮͸΋͏1఺͋Γ·ͯ͠

Slide 179

Slide 179 text

Type 1 ͱ Type 2

Slide 180

Slide 180 text

Type 1 ͋Δ1೔Λ੾Γग़ͯ͠؂ࠪ͢Δ

Slide 181

Slide 181 text

Type 2 3ϲ݄Ҏ্ͷظؒΛ੾Γग़ͯ͠ ؂ࠪ͢Δ

Slide 182

Slide 182 text

ͳΔ΄Ͳ ໨ࢦ͢͸SOC 2 Type 2 ͱ͍͏͜ͱͰ͢Ͷʂ

Slide 183

Slide 183 text

؂ࠪ๏ਓ ʮ͸͍ɺͰ͕͢ ·ͣ͸Type 1͔Β औಘ͞ΕΔͷ͕ ྑ͍ͱࢥ͍·͢ʯ

Slide 184

Slide 184 text

Αʔ͠ ͡Ό͋ SOC 2 Type 1ͩʂ

Slide 185

Slide 185 text

ͦͯ͠ 2೥΋ͷࡀ݄͕͔͔Γ

Slide 186

Slide 186 text

ͳΜ΍͔Μ΍͋ͬͯ 2015೥8݄31೔ ΞΠϨοτגࣜձࣾ cloudpackࣄۀ෦ SOC2 Type1 डྖ ʢηΩϡϦςΟͱՄ༻ੑʣ

Slide 187

Slide 187 text

SOC2ͬͯɺ ͨͩͷϨϙʔτͰ ೝূͰ͸ͳ͍ΜͰ͢Ͷ

Slide 188

Slide 188 text

Ͱ΋΍Δͱ෼͔ΔͷͰ͕͢ ͲΜͳೝূΑΓ΋ ج४͕ݫͯ͘͠ ਏͯ͘ਏͯ͘ਏͯ͘

Slide 189

Slide 189 text

ߋʹ಺༰͕ެ։͞ΕΔ ͍ͬͯ͏

Slide 190

Slide 190 text

ී௨ɺྫ͑͹ɺ ISMSऔ͔ͬͨΒͬͯ ͲΜͳ؂ࠪ಺༰Ͱ ࢦఠࣄ߲͕͜Μͳ಺༰Ͱ ͜ΜͳձࣾͰͨͬͯ͠

Slide 191

Slide 191 text

ެ։͞Εͳ͍Ͱ͢ΑͶ

Slide 192

Slide 192 text

SOC2͸ɺ શ෦ެ։͞ΕͪΌ͏

Slide 193

Slide 193 text

ฐ͓ࣾ٬༷ʹ͸ େखاۀ༷΋ ͍Βͬ͠ΌΔͷͰ

Slide 194

Slide 194 text

ηΩϡϦςΟઐ໳෦ୂ͕͍ͯ ͔ͳΓࡉ͔͘ ݟͯ͘ΔΜͰ͢Ͷ

Slide 195

Slide 195 text

Լखͳ͜ͱॻ͔ΕͨΒ΋͏ ΍͹͍ ΍͹͍ ΍͹͍

Slide 196

Slide 196 text

ͦ͏͍͏ҙຯͰ͸ SOC2 ͕࠷΋ߟ͑ͤ͞ΒΕͨ ͱࢥ͍·ͨ͠ ԿΛߟ͔͑ͨͬͯݴ͏ͱ

Slide 197

Slide 197 text

ੑѱઆ

Slide 198

Slide 198 text

͓ӄ༷Ͱγϯδ͸ ୭΋৴༻͠ͳ͘ͳΓ·ͨ͠ ʢԿ

Slide 199

Slide 199 text

ͱ͍͏ͷ͸

Slide 200

Slide 200 text

ެ։͍ͯ͠Δ WebαΠτͳͲ΁ͷ ߈ܸ͔Β৘ใ࿙Ӯ ͱ͔΋͋Γ·͕͢

Slide 201

Slide 201 text

ͦΕΑΓ΋

Slide 202

Slide 202 text

USBϝϞϦૠͯ͠ σʔλ΋ͬͯͬͪΌ͏ͱ͔

Slide 203

Slide 203 text

ࣗ෼ͷεϚϗܨ͍Ͱ σʔλ΋ͬͯͬͪΌ͏ͱ͔

Slide 204

Slide 204 text

Ոͷύιίϯͱ Ϋϥ΢υαʔϏεʹܨ͍Ͱ σʔλ΋ͬͯͬͪΌ͏ͱ͔

Slide 205

Slide 205 text

தʹ͸ѱҙΛ΋ͬͯ΍Δਓ΋ ͍ΔͷͰ͕͢

Slide 206

Slide 206 text

͍͍ͩͨ͸ ʮͦΜͳͭ΋Γ͸ແ͔ͬͨʯ

Slide 207

Slide 207 text

ʮࡴͭ͢΋Γ͸ແ͔ͬͨʯ

Slide 208

Slide 208 text

1ճͷॏେΠϯγσϯτͰ

Slide 209

Slide 209 text

ձࣾ͸ඈͼ·͢ ʢ࣮ࡍʹඈ͹ͳͯ͘΋ ͦΕ͘Β͍ͷ֮ޛ͸ඞཁʣ

Slide 210

Slide 210 text

ͳͷͰɺੑળઆ͸ηΩϡϦςΟ ͱ͍͏؍఺Ͱ͸੒Γཱͨͳ͍ ͱࢥ͍·ͨ͠

Slide 211

Slide 211 text

ͱ͋Δ େखήʔϜاۀ͞Μͱͷ ҿΈձͰ

Slide 212

Slide 212 text

ʮISMSࣙΊΑ͏ͱ ࢥͬͯΔΜͰ͢ΑͶʯ

Slide 213

Slide 213 text

͍͍ͱࢥ͏ɻ

Slide 214

Slide 214 text

ISMSΑΓ΋ང͔ʹ ࠓ࣌ͳݱ࣮తͳ ΑΓ࣮ફతͳ ηΩϡϦςΟӡ༻͕ PDCAͰճͬͯΔΜͰ͢΋ͷ

Slide 215

Slide 215 text

͜ͷล͸ɺͱ͋Δࠃࡍج४ͷ ؂ࠪһͱ࿩ͯͯ͠΋ ಉ͡Α͏ͳ࿩୊ʹͳΓ

Slide 216

Slide 216 text

ʮن͕֨࣌୅ʹ௥͍͍͍ͭͯ ͳ͍ͷͰɺࡉ͔͍͜ͱ͸ྟػ ԠมʹਐΊ͍ͨͰ͢ʯ

Slide 217

Slide 217 text

;Ήʔͦ͏Ͱ͔͢ʔ

Slide 218

Slide 218 text

͡Ό͋ࠓ࣌ͷن֨ͬͯ Ͳ͏ͳͷʁͱࢥͬͯ

Slide 219

Slide 219 text

ISO27017 ͬͯΏʔࠓ࣌ͬΆ͍ͷ͕ ͋ΔΜͰ͕͢

Slide 220

Slide 220 text

΋ͪΖΜ৽͍͠෺޷͖ͳ γϯδͱͯ͠͸ɺ ͜Ε΋ߦ͘༧ఆͰ͸ ͋Δ΋ͷͷ

Slide 221

Slide 221 text

ͱ͋Δେख ๭؂ࠪһͷ ൃݴ

Slide 222

Slide 222 text

ʮޚࣾͷ৔߹͸ҙຯͳ͍Ͱ͢Αʯ

Slide 223

Slide 223 text

·͔͡

Slide 224

Slide 224 text

ηΩϡϦςΟʹ ׬ᘳͬͯ ઈରʹ ͳ͍͡Όͳ͍Ͱ͔͢

Slide 225

Slide 225 text

͔ͩΒԿࣄʹ΋ ج४͕ඞཁͩͱࢥ͏ΜͰ͢

Slide 226

Slide 226 text

૊৫ʹԿͷج४΋ͳ͍ͱ͔ɺ औҾઌͷؔ܎Ͱ࢓ํແ͘ͱ͔ ͦʔΏʔͱ͖ ೝূܥ͸ศརͩͱࢥ͍·͕͢

Slide 227

Slide 227 text

͡Ό͋ϓϥΠόγʔϚʔΫ ࣋ͬͯΔ͔Βͬͯ ઈରʹݸਓ৘ใ ࿙Εͳ͍͔ͬͯ ͦ͏͡Όͳ͍͠

Slide 228

Slide 228 text

IPS/IDS/WAF ࢖ͬͯΔ͔Βͬͯ ઈର҆શͱ͸ݴ͑ͳ͍͠

Slide 229

Slide 229 text

PCIDSS Ϩϕϧ1·Ͱ΍ͬͯ ӡ༻ճͯ͠Δ͔Βͬͯ ઈରʹΫϨδοτΧʔυ৘ใ ͕࿙Εͳ͍ͬͯ༁͡Όͳ͍͠

Slide 230

Slide 230 text

ηΩϡϦςΟʹઈରͬͯ ͳ͍ͱࢥ͏ΜͰ͢

Slide 231

Slide 231 text

࣌୅͸ͲΜͲΜมΘΔ͠ ηΩϡϦςΟͷ͋Γ͔ͨ΋ ໨·͙Δ͘͠มΘΓ·͢ΑͶ

Slide 232

Slide 232 text

͔ͩΒେࣄͳͷ͸ࣗࣾج४ Λ ެ։ग़དྷΔ͘Β͍ʹ ಁ໌ੑΛߴΊΔ͜ͱ ͩͱࢥ͏ΜͰ͢

Slide 233

Slide 233 text

Ϋϥ΢υΫϥ΢υݴ͍ͬͯΔ ͜ͷ࣌୅ʹٻΊΒΕΔ ηΩϡϦςΟͱ͸ ಁ໌ੑͷࣄͩͱࢥ͍·͢

Slide 234

Slide 234 text

͜ͷลΓ͸ւ֎ͷํ͕ ਐΜͰΔͳ͊ͱ͍͏ ҹ৅͕͋ͬͯ

Slide 235

Slide 235 text

ͱ͍͏͔ITશൠ͕ ೔ຊ஗Εؾຯͬͯ ײ͡΋൱Ί·ͤΜ͕ ʢશͯͰ͸ͳ͍Ͱ͕͢ʣ

Slide 236

Slide 236 text

ͱ͋ΔIDaaSͰ ৘ใ࿙Ӯࣄ͕݅͋Γ·ͨ͠

Slide 237

Slide 237 text

LastPass ͝ଘ͡Ͱ͔͢ʁ

Slide 238

Slide 238 text

Ϋϥ΢υ্ʹࣗ෼ͷϩάΠϯ ύεϫʔυΛอ؅͢Δͱ͍͏ ͚ͩ͜͜ฉ͘ͱ ڪΖ͍͠αʔϏεͰ͕͢ɺ ࣮ࡍ࢖͏ͱ௒ศར

Slide 239

Slide 239 text

Ϛελʔύεϫʔυ ͱ͍͏ͷΛઃఆͯ͠ɺ ͦΕ͚͓͚֮ͩ͑ͯ͹ɺ ଞͷαʔϏεͷύεϫʔυ͸ ֮͑ͳͯ͘΋͍͍Α͍ͬͯ͏ αʔϏεͳͷͰ͕͢ɺ

Slide 240

Slide 240 text

֎෦͔Βͷ߈ܸͰ ͜ͷϚελʔύεϫʔυ͕ ྲྀग़͢Δͱ͍͏ க໋తͳࣄނ͕ى͖·ͨ͠

Slide 241

Slide 241 text

݁Ռతʹ͸ͦͷύεϫʔυ͸ ҉߸Խ͞Εͨঢ়ଶͩͬͨͷͰɺ ߈ܸऀ͕෮߸Խͯ͠ར༻͢Δ ͜ͱ͸ग़དྷͳ͍ͱ͍͏݁࿦Ͱ ऴΘͬͨͷͰ͕͢

Slide 242

Slide 242 text

ར༻ऀ͔Βͨ͠Βؔ܎ແ͘ Ѩඓڣש ൷൑ͷཛྷ

Slide 243

Slide 243 text

ͦͷதͰ΋ɺ ͳΔ΄Ͳͱࢥͬͨίϝϯτ͕ ͋Γ·ͯ͠ɺ

Slide 244

Slide 244 text

ෆຬ͕͋ΔͳΒ͹ɼαʔϏεͷར༻ ΛࢭΊͨํ͕Α͍Ͱ͠ΐ͏ … ࢲͨ ͪͷΠϯλʔωοτ͸ɼࠃՈϨϕϧ ͷࢧԉΛड͚ͨ߈ܸʹࡽ͞Ε͍ͯ· ͢ɻ͢΂ͯͷߦಈɼσδλϧσόΠ ε಺ͷ͢΂ͯͷΤϯτϦɼ઀ଓ͢Δ Πϯλʔωοτͷ͢΂ͯ͸੬ऑͰ͢ɻ ͦͷதͰՄೳͳ࠷ળͷࡦ͕ɼࠓճى ͬͨ͜͜ͱͳͷͰ͢ …

Slide 245

Slide 245 text

ΫϨʔϚʔͨͪͷ΍͍ͬͯΔ ͜ͱ͸ɼྑ৺తͳاۀʹର͠ ͯɼ໰୊ͷൃදΛࢭΊͤ͞Δ ͜ͱʹͳΓ·͢ɻ୭ʹ΋ϝϦο τ͸͋Γ·ͤΜɻ

Slide 246

Slide 246 text

Կ͕ى͖͔ͨΛൃද͢Δ͜ͱ ʹΑͬͯɼଞͷاۀ͸ɼपล ๷ޚͰͦΕʹԠ͑Δ͜ͱ͕Ͱ ͖ΔΑ͏ʹͳΓ·͢ …

Slide 247

Slide 247 text

Πϯλʔωοτʹ઀ଓ͢Ε͹ɼ ୭΋߈ܸ͔Β҆શͰ͸͋Γ· ͤΜɻใࠂͷಁ໌ੑʹΑͬͯ ͷΈɼద੾ͳηΩϡϦςΟ͸ ୡ੒Ͱ͖ΔͷͰ͢ɻ

Slide 248

Slide 248 text

͔ͩΒͦ͜ cloudpack͸ ύεϫʔυΛೖྗ͢Δͱ͍͏ ߦҝͦͷ΋ͷΛ γεςϜͰΧόʔ͢Δ͜ͱͰ ࣙΊͨͷͰ͕͢

Slide 249

Slide 249 text

ͩͱͯ͠΋ಁ໌ੑ͸ॏཁͩ

Slide 250

Slide 250 text

ͱ͍͏Θ͚Ͱ ͜Μͳͷ࡞Γ·ͨ͠

Slide 251

Slide 251 text

Slide 252

Slide 252 text

ηΩϡϦςΟϗϫΠτϖʔύʔ ΛಡΜͰΈΔ

Slide 253

Slide 253 text

ηΩϡϦςΟʹର͢Δಁ໌ੑ Λ֬อ͢ΔͨΊʹɺ SOC 2؂ࠪͰهड़͞Εͨ ಺༰Λ؆ૉԽͯ͠ɺ ؂ࠪһͷίϝϯτΛ ল͍ͨ΋ͷ͕ ϕʔεͱͳ͍ͬͯ·͢ɻ

Slide 254

Slide 254 text

ࣾ಺Ͱ࡞ͬͨಡΈ෺Ͱ͸ ͋Δ΋ͷͷɺ؂ࠪ๏ਓ΍ ֤ηΩϡϦςΟ؂ࠪһɺ AWSJapan΍ τϨϯυϚΠΫϩͳͲͷ اۀʹΑΔઐ໳తͳ ϨϏϡʔ΋ߦΘΕ͍ͯ·͢

Slide 255

Slide 255 text

ͦͷํ͕৴ጪੑ΋ ߴ·Γ·͢͠

Slide 256

Slide 256 text

·ͣ࢝Ίʹ ʮ੹೚ڞ༗Ϟσϧʯ ʹ͍ͭͯղઆ͍ͯ͠·͢

Slide 257

Slide 257 text

Slide 258

Slide 258 text

͓٬༷͕ࣗ͝਎Ͱ࡞੒͞Εͨ ϓϩάϥϜ΍σʔλͷηΩϡ ϦςΟ͸ɺࣗ͝਎Ͱอޢͯ͠ ͍ͩͨ͘ඞཁ͕͋Γ·͢

Slide 259

Slide 259 text

ͪΐͬͱಥ͖์͍ͯ͠Δײ΋ ͋Γ·͕͢ɺͦ͏Ͱ͸ͳͯ͘

Slide 260

Slide 260 text

͜Ε·ͰΦϯϓϨϛε؀ڥͰ ͸શͯʹ͍ͭͯηΩϡϦςΟ Λ֬อ͢Δඞཁ͕͋ͬͨ͜ͱ ͱൺֱ͢Δͱɺ͓٬༷͕ηΩϡ ϦςΟΛ֬อͯ͠௖͘ൣғ͕ ݶఆ͞Ε͍ͯ·͢ΑͶɺ ͱ͍͏͜ͱͰ͢

Slide 261

Slide 261 text

ͦͷޙɺ ࣄۀ֓ཁͷઆ໌͕͋Γʔͷ

Slide 262

Slide 262 text

֤ೝূͷ࿩͕͋Γʔͷ

Slide 263

Slide 263 text

BCPରࡦͷ࿩͕͋Γʔͷ

Slide 264

Slide 264 text

cloudpack CSIRT ͷ࿩΋͍ͯ͠·͢

Slide 265

Slide 265 text

CSIRTͱ͸ɺ੬ऑੑ৘ใΛ ऩूͯ͠ɺͦͷӨڹͷ༗ແͱ ۓٸ౓ʹ͍ͭͯ൑அͯ͠ɺ ରԠΛߦ͏νʔϜͷࣄͰ͢

Slide 266

Slide 266 text

ޙ΄Ͳࡉ͔͘આ໌͠·͢

Slide 267

Slide 267 text

ͰɺηΩϡϦςΟ૊৫ͷઆ໌ ͕͋Γʔͷ

Slide 268

Slide 268 text

ڭҭମ੍ͷઆ໌͕͋Γʔͷ

Slide 269

Slide 269 text

ਖ਼ࣾһʹΑΔӡ༻ۀ຿ͷ਱ߦ ಺෦͔Βͷ߈ܸϦεΫΛ࠷খ ݶʹ཈͑ΔҰ؀ͱͯ͠ɺ cloudpackӡ༻ۀ຿ʹؔΘΔ ελοϑʹ͍ͭͯ͸ɺਖ਼ࣾһ ޏ༻ܖ໿Λߦ͍ͬͯΔͱ ॻ͍ͯ͋Γ·͢

Slide 270

Slide 270 text

ଓ͍ͯ ϑΝγϦςΟͷ࿩Ͱ͢ ݐ෺ɾ෦԰ͷηΩϡϦςΟ

Slide 271

Slide 271 text

ΧʔυΩʔೝূͱ͔ ؂ࢹΧϝϥͱ͔ ిݯ͕ແఀిͱ͔ ϩά͸ແظݶอଘͱ͔ ͦΜͳ࿩Ͱ͢

Slide 272

Slide 272 text

࣍͸ωοτϫʔΫ෦෼

Slide 273

Slide 273 text

Slide 274

Slide 274 text

ೝূγεςϜ΍ ύεϫʔυϙϦγʔ ೝূ৘ใͷҰݩ؅ཧ ʹ͍ͭͯઆ໌

Slide 275

Slide 275 text

ӡ༻ۀ຿୺຤ͷηΩϡϦςΟ Ξϯν΢ΠϧεೖΕΔͱ͔ ϩάऔΔͱ͔ USBϝϞϦ͸࢖͑·ͤΜͱ͔ ͋Γ͕͚ͪͩͲɺͪΌΜͱॻ ͍ͯެ։͢Δ

Slide 276

Slide 276 text

࣍͸VPN୺຤ ϦϞʔτͰܨ͍Ͱ͘Δਓ΋͍Δ͚Ͳɺ Ͳ͏΍ͬͯηΩϡϦςΟΛ ୲อ͍ͯ͠Δ͔͍ͬͯ͏ ࿩Λॻ͍͍ͯ·͢ ূ໌ॻೝূͱ͔ɺঝೝ੍ͱ͔ɺ ୺຤ͷ҉߸Խͱ͔

Slide 277

Slide 277 text

ଞʹ΋ɺۀ຿ωοτϫʔΫ ͦͷ΋ͷͷ੬ऑੑݕࠪͱ͔ ϖωτϨςετͱ͔΋ ΍ͬͯΔ࿩Λॻ͍͍ͯ·͢

Slide 278

Slide 278 text

AWSͷӡ༻อकΛ͍ͯ͠Δ cloudpackʹͱͬͯ ؊৺ͳͷ͸ ͔͜͜ΒઌͰ͢

Slide 279

Slide 279 text

cloudpack͔ΒAWS΁ͷ ΞΫηεʹؔ͢ΔηΩϡϦςΟ

Slide 280

Slide 280 text

ސ٬Linux΍Windows΁ͷ ΞΫηε͸Ͳ͏ͯ͠Δ͔

Slide 281

Slide 281 text

Slide 282

Slide 282 text

શͯͷຊ൪؀ڥʹ͸ ౿Έ୆ܦ༝Ͱͳ͍ͱ ΞΫηεͰ͖ͳ͍ ౿Έ୆΁͸ADೝূ͕ඞཁ શͯͷૢ࡞͕ಈըͰ ه࿥͞ΕΔ ʢOCRͯ͠ςΩετԽ΋ͯ͠Δʣ

Slide 283

Slide 283 text

ͳͷͰɺADͰແޮԽͨ͠ Ϣʔβʔ͸ ސ٬؀ڥʹ͸ ΞΫηεͰ͖ͳ͍

Slide 284

Slide 284 text

AWSϚωδϝϯτίϯιʔϧ ͸Ͳ͏͔

Slide 285

Slide 285 text

Slide 286

Slide 286 text

ී௨͸ϒϥ΢βΛ։͍ͯ ΞΧ΢ϯτ໊ͱ ύεϫʔυΛೖྗ͠·͕͢

Slide 287

Slide 287 text

ΞΧ΢ϯτ໊΋ ύεϫʔυ΋͋Γ·ͤΜͷͰ

Slide 288

Slide 288 text

ࣾ಺ઐ༻WebαʔϏε ͔ΒͰͳ͍ͱ ϩάΠϯͰ͖·ͤΜ ౰વɺ ΞΫηεϩά͕࢒Γ·͢

Slide 289

Slide 289 text

࣮ࡍʹͲ͏΍ͬͯ ϩάΠϯ͢Δ͔ ಈըͰ͓໨ʹ͔͚·͢ ʢॳͷࢼΈͳͷͰ Ұ࣌ఀࢭͱ͔Θ͔Γ·ͤΜ ͝ΊΜͳ͍͞ʣ

Slide 290

Slide 290 text

https://www.youtube.com/watch?v=BUEvNrrrqnU ౰೔͸σϞ͠·͕ͨ͠ ҎԼͷURL͔ΒͲ͏ͧ

Slide 291

Slide 291 text

ϩάͷ࿩ AWSͷૢ࡞ϩά͸ શͯऔಘ͍ͯ͠·͢ ʢCloudTrailϩάʣ

Slide 292

Slide 292 text

͋·Γʹ΋๲େͳͷͰ Splunk΍Logstorage ͱ͍ͬͨαʔυύʔςΟ੡ͷ πʔϧͰՄࢹԽ͍ͯ͠·͢

Slide 293

Slide 293 text

ͦͯ͠CSIRTͷ͓࿩

Slide 294

Slide 294 text

੹೚ڞ༗Ϟσϧͷ࿩͕ ͋Γ·ͨ͠

Slide 295

Slide 295 text

͓٬༷ͷ੹೚ൣғ෦෼Ͱ ੬ऑੑ͕ ෼͔͍ͬͯͨͱͯ͠ ͦؔ͜܎ͳ͍͔Β ஌Βͳ͍ͽΐʔΜ ͳΜͯ͜ͱ͸͋Γ·ͤΜʂ

Slide 296

Slide 296 text

Slide 297

Slide 297 text

͋ͱ͸αʔϏε঺հͳͲͳͲ ͋Γ·ͯ͠

Slide 298

Slide 298 text

શ48ϖʔδ

Slide 299

Slide 299 text

݁ߏαΫαΫಡΊ·͢ͷͰ ͳʹ͔ͷࢀߟʹ ͳͬͨΓͨ͠Β خ͍͠Ͱ͢…

Slide 300

Slide 300 text

2015೥ͷ6݄ࠒʹॻ͍ͨͷͰ ͦΖͦΖ͍Ζ͍Ζ௚ͦ͏ͱ ࢛ۤീ͓ۤͯ͠Γ·͕͢

Slide 301

Slide 301 text

ԿʹͤΑಁ໌ੑ͕େࣄ ͱ͍͏͜ͱͰ

Slide 302

Slide 302 text

cloudpackͰ͸ ϗϫΠτϖʔύʔࡇΓ ͕։࠵தͰ͢

Slide 303

Slide 303 text

ηΩϡϦςΟͷΈͳΒͣ MSP΍֤छαʔϏεͷ ϗϫΠτϖʔύʔΛॻ͍ͯɺ ͱʹ͔͘ެ։͍ͯ͘͠ͱ͍͏ ํ਑Ͱ͢

Slide 304

Slide 304 text

΋͠ࣄނͬͯ΋ ٽ͔ͳ͍ ϏϏΒͳ͍ Ӆ͞ͳ͍ʂʂ

Slide 305

Slide 305 text

ͱ͸͍͑

Slide 306

Slide 306 text

ެ։͢Δ͜ͱͰඇ೉ΛཋͼΔ ͜ͱ΋͋Δ͔΋͠Ε·ͤΜ

Slide 307

Slide 307 text

ͦͷఔ౓ͷରࡦͰ େৎ෉ͩͱࢥͬͯΜͷʁ ͬͯͳ۩߹Ͱ… ؤுͬͨͷʹ͔ͳͽ͍…

Slide 308

Slide 308 text

͍΍͍΍ɺͦ͏͡Όͳͯ͘

Slide 309

Slide 309 text

׬ᘳͳηΩϡϦςΟͳΜͯ ͋Γ·ͤΜ͔Β

Slide 310

Slide 310 text

ੵΈॏͶੵΈॏͶ

Slide 311

Slide 311 text

1ͭͷେ͖ͳରࡦͰ େৎ෉ʂ͍ͬͯ͏ͷ͸ ΋͸΍ͦΕࣗ਎͕ ϘτϧωοΫʹͳΔࣄ͕͋ͬͯ ӡ༻͕ਏ͍ΜͰ͢ΑͶ

Slide 312

Slide 312 text

ബ͍૚ΛԿຕ΋Կຕ΋ॏͶͯ ੵΈॏͶ͍ͯ͘ ΦχΦϯϨΠϠʔηΩϡϦςΟ ۄͶ͗๷ޚ

Slide 313

Slide 313 text

֎ଆ͚ͩ͡Όແͯ͘ ಺ଆ͔Βͷ߈ܸ΍ࣄނ΋ ͔ͬ͠ΓରॲɾରԠग़དྷΔΑ ͏ʹ͍ͨ͠Ͱ͢Ͷ ΦχΦϯϨΠϠʔํࣜͳΒ ࣮૷͠΍͍͢ͱࢥ͍·͢Α

Slide 314

Slide 314 text

AWSʹݶͬͨ࿩Λগ͠

Slide 315

Slide 315 text

Ϋϥ΢υαʔϏεͬͯɺ ͍ΖΜͳηΩϡϦςΟରࡦΛ ֤͕࣮ࣾࢪ͍ͯ͠ΔͷͰ͕͢

Slide 316

Slide 316 text

ྫ͑͹AWS͸Ͳ͏͔

Slide 317

Slide 317 text

Slide 318

Slide 318 text

ͳΜ͔͍ͬͺ͍͋ͬͨ

Slide 319

Slide 319 text

• PCI DSS Ϩϕϧ 1 • SOC 1/ ISAE 3402 • SOC 2 • SOC 3 • FIPS 140-2 • CSA • FedRAMP (SM) • DIACAP ͓Αͼ FISMA • ISO 27001 • MPAA • ୈ 508 ৚/VPAT • ITAR • HIPAA • DoD CSM Ϩϕϧ 1-2ɺ3-5 • ISO 9001 • CJIS • FERPA • G-Cloud • IT-Grundschutz • IRAPʢΦʔετϥϦΞʣ • MTCS Tier 3 Certiﬁcation

Slide 320

Slide 320 text

ͳΔ΄ͲΘ͔ΒΜ

Slide 321

Slide 321 text

͖ͬ͞΋ݴ͍·ͨ͠ ؂ࠪΛ໨తͱͯ͠͸͍͚ͳ͍

Slide 322

Slide 322 text

࣮ࡍʹͲΜͳ ηΩϡϦςΟରࡦ͕ औΕΔͷ͔ɺ ͪΌΜͱධՁͯ͠ΈΔ͜ͱ͕ େࣄ

Slide 323

Slide 323 text

ྫ͑͹AWSʹ͸ rootΞΧ΢ϯτ ͱ IAMΞΧ΢ϯτ ͱ͍͏ΞΧ΢ϯτ͕͋Γ·͢ ࡉ͔͘ݴ͑͹APIΩʔͱ͔͋Γ·͕͢

Slide 324

Slide 324 text

LinuxͰ Α͘ݴΘΕ·ͤΜ͔ʁ

Slide 325

Slide 325 text

root͸࢖ͬͪΌμϝͽΐΜ

Slide 326

Slide 326 text

AWSͰ΋ͦͷ௨Γ

Slide 327

Slide 327 text

جຊతʹ͸ IAM  Identity and Access Management Λ࢖͍·͠ΐ͏ ͱ͍ͯ͠·͢

Slide 328

Slide 328 text

ൃߦͨ͠ΞΧ΢ϯτʹରͯ͠ ͲΜͳݖݶΛ౉͔͢ ΊͪΌͪ͘Όࡉ͔͘ ઃఆͰ͖Δ ͠ɺ

Slide 329

Slide 329 text

ʮݸʯΛಛఆͰ͖ΔͷͰ ϩάʹՁ஋͕ग़Δ

Slide 330

Slide 330 text

ࣄނͬͨͱ͖ʹ ΞΧ΢ϯτ΋ఀࢭ͠΍͍͢

Slide 331

Slide 331 text

ଞͷΫϥ΢υαʔϏε͸ Ͳ͏ͩΖ͏͔

Slide 332

Slide 332 text

ଟཁૉೝূ͸ ؆୯ʹઃఆग़དྷ·͔͢ʁ

Slide 333

Slide 333 text

ඞཁͳਓʹ ඞཁͳ͚ͩͷݖݶΛ ౉͢͜ͱ͕ग़དྷ·͔͢ʁ

Slide 334

Slide 334 text

΋ͷʹΑͬͯ͸ ࣾ֎͔ΒͷΞΫηεΛ ېࢭ͢Δ͜ͱ΋ ग़དྷΔͱ͍͍͔΋Ͱ͢ΑͶ

Slide 335

Slide 335 text

ͦ͏ʂ ͔ͩΒͦ͜େࣄͳͷ͸

Slide 336

Slide 336 text

ص্ධՁ ʢྑͦ͞͏ͩͬͨΒ ࣮ࡍ࢖ͬͯΈΔʣ

Slide 337

Slide 337 text

ࣗࣾʹΨΠυϥΠϯ͕ ແ͚Ε͹ɺ ઌఔͷΨΠυϥΠϯΛࢀߟʹ ࡞Γ·͠ΐ͏

Slide 338

Slide 338 text

͜ͷ࿩͸ ͩͪ͘͢Μϒϩάʹ΋ ॻ͖·͕ͨ͠

Slide 339

Slide 339 text

௒ϕϯνϟʔͰ 3ਓ͘Β͍͔͍͠ͳ͔ͬͨ ্ཱͪ͛ؒ΋ͳ͍ձࣾʹ ͖ͬ͞ͷධՁγʔτͷ಺༰Λ ؙ͝ͱฉ͍ͨ͜ͱ͕͋Γ·͢

Slide 340

Slide 340 text

Կ͕͍ͬͯ͢͝

Slide 341

Slide 341 text

ଈ೔Ͱશ෦ճ౴௖͖·ͨ͠

Slide 342

Slide 342 text

༧૝௨Γ্ཱͪ͛ؒ΋ͳ͍ Ϋϥ΢υαʔϏε͕ͩͬͨ ނʹ ڧݻͳηΩϡϦςΟ ͱ͸ݴ͑ͳ͍΋ͷͷ

Slide 343

Slide 343 text

͖ͪΜͱճ౴͍͚ͯͨͩͨ͠ɺ ͔͠΋ެ։ͯ͠΋ྑ͍ͱ ݴͬͯ௖͚ͨͷʹ͸ ײಈ͠·ͨ͠

Slide 344

Slide 344 text

ͲΜͳαʔϏεΛ ར༻͢Δʹ΋ ϦεΫ͕͋Δͷ͸ ౰ͨΓલͰ͢

Slide 345

Slide 345 text

ࣗࣾͷαʔϏεͩͬͨΒ 100%҆શ͔ͬͯ ͦ͏Ͱ͸ͳ͍Ͱ͢ΑͶ

Slide 346

Slide 346 text

Ϋϥ΢υʹͳΔͱ ͲΜͲΜ෼͔Βͳ͘ͳΔ ͱ͍͏ؾ͕ͯ͠͠·͏ ͔ͩΒ͖ͪΜͱධՁͯ͠ ಁ໌ੑΛ֬อ͢Δ

Slide 347

Slide 347 text

ߋʹ৘ใΛࣾ಺Ͱڞ༗ͯ͠ ԿʹؾΛ͚ͭΕ͹ྑ͍͔Λ ߟ͑ͯ࢖͏

Slide 348

Slide 348 text

Ϋϥ΢υ࣌୅ͷྲྀΕͷ଎͞ʹ ηΩϡϦςΟ͸ ௥͍ͭ͘Μ͡Όແͯ͘ Ҿͬு͍͔ͬͯͳ͖Ό ͍͚ͳ͍ ͱࢥ͏ΜͰ͢

Slide 349

Slide 349 text

LastPassͷ݅Ͱ΋ ࿩͠·͕ͨ͠

Slide 350

Slide 350 text

ࣄۀऀؒͰ΋৘ใΛ ڞ༗Ͱ͖ΔΑ͏ʹͳͬͯ ΑΓྑ͍αʔϏεΛ Έͳ͞ΜͱҰॹʹ࡞Γ্͛ͯ ͍͘͜ͱ͕ग़དྷͨΒ ಁ໌ੑͷߴ͍ ૉ੖Β͍͠ະདྷ͕͋Δͳͱ ࢥ͍·ͨ͠

Slide 351

Slide 351 text

׬ ͳͷͰ͕͢

Slide 352

Slide 352 text

એ఻

Slide 353

Slide 353 text

T - :441 6 6 S t i cf W n AC 3 1 1 2 rC vy t t n l n D E n C r Sf po Sf r S i ei CA C a C E ei 1 1 s Sf r CA W a A c 0 . .4. 6 /64 2 :441 6 6

Slide 354

Slide 354 text

GET! Twitter …

Slide 355

Slide 355 text

@awscloud_jp @jawsdays !0 +( #jawsdays #jawsphoto *1 %",.2$! 3! , 84-&! 17:009 )6 #3/5 9:00916:30 Tweet'7 Workshop

Slide 356

Slide 356 text

AWSެࣜFacebookΛϑΥϩʔͯ͠ AWS (&5 ެࣜFacebookͷ ʰ͍͍Ͷʂʱ਺͕ ૿͑Ε ͹૿͑Δ΄Ͳɺ Ϗʔۄ ͕ͳ͘ͳΓɺ࠷ޙʹ Ԡื༻Ϋʔϙϯ൪߸͕ ݱΕ·͢ʂ

Slide 357

Slide 357 text

"84'BDFCPPL ϖʔδʹ ͍͍Ͷʂ͠Α͏ʂ ΞϚκϯ ΢Σϒ αʔϏε 17࣌ʙͷ࠙਌ձʹͯɺԠื༻URLΛެ։͠·͢ http://bit.ly/AWS-JP-FB

Slide 358

Slide 358 text

͞Βʹ

Slide 359

Slide 359 text

ग़ுʰދ͸ͪձʱin HOOTERS ৽॓ʂ ʢࢀՃඅແྉɾҿΈ์୊ʣ ͜ͷ͋ͱ19:00 - 21:00

Slide 360

Slide 360 text

͜Μͳ͓ళͰձࣾઆ໌ձΛ͢Δͱ͍͏νϟϨϯδਫ਼ਆ

Slide 361

Slide 361 text

/P ಺༰ ୲౰ -BNCEB ൺاɺଜओ %FW0QT ݹ౉ʢൺاɺଜओʣ ৘γεɾηΩϡϦςΟ γϯδ 43&ʢ4JUF3FMJBCJMJUZ &OHJOFFSJOHʣ ۨᖒ ୤ൡ ޙ౻ɺ૿ా ΤϯυϢʔβʔ੮ /55υίϞळӬ༷ɾകᖒ༷