Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Web技術の基本 8回目 / Introduction to Web technologies 8th class

Web技術の基本 8回目 / Introduction to Web technologies 8th class

muttan

May 18, 2018
Tweet

More Decks by muttan

Other Decks in Technology

Transcript

  1. Webٕज़ͷجຊ ୈ8ճ
    Keisuke KAMIYA

    View full-size slide

  2. ࠓճͷςʔϚ

    View full-size slide

  3. Chapter 7
    WebγεςϜͷߏஙͱӡ༻

    View full-size slide

  4. ໨࣍
    1. ఏڙ͢ΔαʔϏεͷݕ౼
    2. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    3. ωοτϫʔΫߏ੒ͷݕ౼
    4. αʔόߏ੒ͷݕ౼
    5. αʔόج൫ͷݕ౼
    6. ෛՙ෼ࢄ
    7. αʔόઃܭɾߏங
    8. σʔλϕʔεઃܭ
    9. ΞϓϦέʔγϣϯઃܭ
    10.ϩάӡ༻
    11.WebαΠτͷύϑΥʔϚϯε
    12.੬ऑੑ਍அ

    View full-size slide

  5. ໨࣍
    1. ఏڙ͢ΔαʔϏεͷݕ౼
    2. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    3. ωοτϫʔΫߏ੒ͷݕ౼
    4. αʔόߏ੒ͷݕ౼
    5. αʔόج൫ͷݕ౼
    6. ෛՙ෼ࢄ
    7. αʔόઃܭɾߏங
    8. σʔλϕʔεઃܭ
    9. ΞϓϦέʔγϣϯઃܭ
    10.ϩάӡ༻
    11.WebαΠτͷύϑΥʔϚϯε
    12.੬ऑੑ਍அ

    View full-size slide

  6. ఏڙ͢ΔαʔϏεͷݕ౼
    • ৽ͨͳαʔϏεΛ࢝ΊΔʹ͸, ఏڙ͢ΔαʔϏεͷݕ౼
    Λߦͳ͏ඞཁ͕͋Δ
    • ۩ମతʹ͸࣍ͷ಺༰ʹ͍ͭͯݕ౼Λߦ͏
    1. αʔϏεͷ಺༰
    2. ΞϓϦέʔγϣϯʹඞཁͳػೳɾσβΠϯ
    3. γεςϜج൫ʹඞཁͳػೳ

    View full-size slide

  7. ఏڙ͢ΔαʔϏεͷݕ౼
    • αʔϏεͷ಺༰ͷݕ౼
    ‣ ԿΛఏڙ͢Δͷ͔

    SNS, χϡʔεαΠτ, ܝࣔ൘, etc…
    ‣ ର৅͸୭͔

    உੑ, ঁੑ, ࣾձਓ, ֶੜ, etc…
    ‣ ԿΛ࢖ͬͯΞΫηε͢Δ͔

    PC, ܞଳ୺຤, λϒϨοτ, etc…
    ‣ ͲΜͳγνϡΤʔγϣϯͰ࢖༻͢Δͷ͔

    1೥த, Πϕϯτ࣌, ࡂ֐࣌, etc…

    View full-size slide

  8. ఏڙ͢ΔαʔϏεͷݕ౼
    • ΞϓϦέʔγϣϯʹඞཁͳػೳ

    αʔϏεͷ಺༰͔ΒඞཁͳػೳΛݕ౼͢Δ
    ‣ σʔλΛอଘ͢ΔͨΊʹDB͕ඞཁ
    ‣ ֎෦αʔϏεͱ࿈ܞ͢ΔͨΊʹAPIͷ࣮૷͕ඞཁ
    • ΞϓϦέʔγϣϯͷσβΠϯ

    ར༻ऀ΍ΞΫηε͢Δ୺຤Λ΋ͱʹܾఆ
    ‣ ߴྸऀͰ΋Θ͔Γ΍͍͢σβΠϯΛ༏ઌ
    ‣ εϚʔτϑΥϯ޲͚ͷσβΠϯ

    View full-size slide

  9. ఏڙ͢ΔαʔϏεͷݕ౼
    • γεςϜج൫ʹඞཁͳػೳ

    ඞཁͳػೳΛચ͍ग़͢ͱ, γεςϜج൫ʹٻΊΒΕΔػ
    ೳ͕ݟ͑ͯ͘Δ
    ‣ DB͕ཉ͚͠Ε͹DBαʔό͕ඞཁ
    ‣ ػີ৘ใΛѻ͏৔߹, ڧݻͳηΩϡϦςΟΛอͭ࢓૊
    Έ͕ඞཁ
    ‣ ৑௕Խߏ੒Λߦ͍, 24࣌ؒ365೔҆ఆՔಇΛ໨ࢦ͢

    View full-size slide

  10. ໨࣍
    1. ఏڙ͢ΔαʔϏεͷݕ౼
    2. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    3. ωοτϫʔΫߏ੒ͷݕ౼
    4. αʔόߏ੒ͷݕ౼
    5. αʔόج൫ͷݕ౼
    6. ෛՙ෼ࢄ
    7. αʔόઃܭɾߏங
    8. σʔλϕʔεઃܭ
    9. ΞϓϦέʔγϣϯઃܭ
    10.ϩάӡ༻
    11.WebαΠτͷύϑΥʔϚϯε
    12.੬ऑੑ਍அ

    View full-size slide

  11. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    • ఏڙ͢ΔαʔϏεͷ಺༰΍γεςϜج൫ΛܾΊͨޙ, ࠾
    ༻͢Δϓϩάϥϛϯάݴޠ΍ιϑτ΢ΣΞΛબఆ͢Δ
    1. ࢖༻͢Δϓϩάϥϛϯάݴޠ
    2. αʔόͷΦϖϨʔςΟϯάγεςϜ(OS)
    3. ϛυϧ΢ΣΞ

    View full-size slide

  12. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    • ࢖༻͢Δϓϩάϥϛϯάݴޠͷબఆ
    ‣ WebΞϓϦέʔγϣϯ࡞੒ʹ༻͍ΒΕΔϓϩάϥϛ
    ϯάݴޠ͸ओʹ, JavaScript, Perl, Python, PHP, Ruby,
    Java, VB, C#ͳͲ͕͋͛ΒΕΔ
    ‣ ࣾ΍νʔϜͱͯ͠ͷํ਑΍, ݴޠͷಘखෆಘखͳͲΛ
    ߟྀͯ͠࠾༻͢ΔϓϩάϥϛϯάݴޠΛܾఆ͢Δ

    View full-size slide

  13. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    ݴޠ ಛ௃
    +BWB4DSJQU
    w ϒϥ΢β্Ͱಈ࡞͢ΔΫϥΠΞϯτεΫϦϓτ
    w ۙ೥αʔόʔαΠυͰ΋࢖༻͞Ε͍ͯΔ /PEFͱ͔

    +BWB
    w ࣮ߦ؀ڥͷΠϯετʔϧ͕ඞཁ +&&ͱ͔

    w (6*΍ෳࡶͳॲཧ΋Ͱ͖Δ
    7JTVBM#BTJD
    $
    w "41/&5 .JDSPTPGUࣾͷϑϨʔϜϫʔΫ
    Ͱ࢖༻
    w (6*͕ಘҙ
    1)1
    w )5.-ʹຒΊࠐΜͰ࢖༻Մೳ
    w $΍+BWBͳͲΛܦݧ͍ͯ͠ΔͱΘ͔Γ΍͍͢
    1FSM 3VCZ 1ZUIPO
    w ςΩετॲཧʹڧ͍ ؾ͕͢Δ

    w ϑϨʔϜϫʔΫ͕๛෋
    w -JOVYͰ͸ඪ४Ͱ࣮ߦͰ͖ͦ͏

    View full-size slide

  14. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    • ΦϖϨʔςΟϯάγεςϜ(OS)

    ΞϓϦέʔγϣϯΛՔಇͤ͞ΔͨΊͷOS͸, Windows
    ܥαʔό͔Unix(Linux)ܥαʔόͷͲͪΒ͔Λબ୒͢Δ
    छྨ ಛ௃
    8JOEPXTܥ
    w (6*Ͱ΋ૢ࡞͕Մೳ
    w ϥΠηϯεྉ͕ඞཁ
    w ߈ܸͷର৅ʹͳΓ͕ͪ
    6/*9 -JOVY
    ܥ
    w $6*Ͱͷૢ࡞͕ϝΠϯ
    w 04ͷϥΠηϯε͸ແྉ͕ͩ αϙʔτ ঎༻
    ͸༗ྉ

    View full-size slide

  15. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    • ϛυϧ΢ΣΞ

    OSͱΞϓϦέʔγϣϯͷதؒʹҐஔ͢Διϑτ΢ΣΞ
    ‣ Webαʔό
    ‣ APαʔό
    ‣ DBMS
    • ར༻͢ΔϢʔβʔͷ܏޲ʹΑͬͯద੾ͳ΋ͷΛબ୒

    View full-size slide

  16. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    8FCαʔό
    ໊শ ಛ௃
    "QBDIF
    w ແঈ
    w 8JOEPXT-JOVYͰར༻Մ
    OHJOY
    w ༗ঈͰαϙʔτΛड͚ΒΕΔ
    w 8JOEPXT-JOVYͰར༻Մ
    w ػೳ͕γϯϓϧ
    w ಈ࡞͕ܰշ
    **4
    w 8JOEPXTʹඪ४૷උ
    w -JOVYͰ͸࢖༻Ͱ͖ͳ͍
    w "1αʔόͷػೳ΋࣋ͭ

    View full-size slide

  17. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    "1αʔό
    ໊শ ಛ௃
    5PNDBU
    w +41΍+BWB4FSWMFUΛ࣮ߦ͢Δίϯςφ
    w "QBDIFͱͷ૊Έ߹ΘͤͰಈ࡞ͤ͞Δ͜ͱ͕ଟ͍
    6OJDPSO
    w 3BDLΞϓϦέʔγϣϯαʔό
    w 3VCZPO3BJMTͷΑ͏ͳ3BDLΞϓϦʹ࢖༻
    w ଞʹ΋1VNBͳͲ΋͋Δ
    **4
    w 8JOEPXTʹඪ४૷උ
    w -JOVYͰ͸࢖༻Ͱ͖ͳ͍
    w 8FCαʔόͷػೳ΋࣋ͭ

    View full-size slide

  18. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    %#.4
    ໊শ ಛ௃
    0SBDMF
    %BUBCBTF
    w 0SBDMF͕ࣾ։ൃ͢Δ঎༻%#.4
    w ߴػೳ͕ͩඇৗʹߴՁ
    w 8JOEPXT-JOVYͰར༻Մ
    .Z42-
    w ແঈͷ%#.4 044

    w 8JOEPXT-JOVYͰར༻Մ
    w ൺֱతγϯϓϧͳॲཧʹ޲͍͍ͯͦ͏
    42-4FSWFS
    w .JDSPTPGU͕ࣾ։ൃ
    w 8JOEPXTͱͷ਌࿨ੑ͕ߴ͍

    View full-size slide

  19. ໨࣍
    1. ఏڙ͢ΔαʔϏεͷݕ౼
    2. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    3. ωοτϫʔΫߏ੒ͷݕ౼
    4. αʔόߏ੒ͷݕ౼
    5. αʔόج൫ͷݕ౼
    6. ෛՙ෼ࢄ
    7. αʔόઃܭɾߏங
    8. σʔλϕʔεઃܭ
    9. ΞϓϦέʔγϣϯઃܭ
    10.ϩάӡ༻
    11.WebαΠτͷύϑΥʔϚϯε
    12.੬ऑੑ਍அ

    View full-size slide

  20. ωοτϫʔΫߏ੒ͷݕ౼
    • ωοτϫʔΫػث, αʔόΛͲͷΑ͏ͳωοτϫʔΫΛ
    ߏ੒͢Δ͔Λݕ౼͢Δ
    ‣ ࣍ͷΑ͏ͳ৚݅ʹΑͬͯݕ౼Λߦ͏
    - WebγεςϜͷ༻్
    - ཁٻ͞ΕΔηΩϡϦςΟϨϕϧ
    - ౤ೖՄೳͳίετ

    View full-size slide

  21. ωοτϫʔΫͷ෼ׂ
    ωοτϫʔΫػثͷߏ੒

    View full-size slide

  22. ωοτϫʔΫߏ੒ͷݕ౼ʢ෼ׂʣ
    • ωοτϫʔΫ͸େ͖͘෼͚ͯ3ͭʹ෼ׂ͢Δ
    1. ֎෦ωοτϫʔΫ

    Πϯλʔωοτͱ઀͍ͯ͠Δ෦෼
    2. ಺෦ωοτϫʔΫ

    Πϯλʔωοτͱִ཭͞Ε͍ͯΔ෦෼
    3. DMZ(DeMilitarized Zone, ඇ෢૷஍ଳ)

    ಺෦ωοτϫʔΫͱ֎෦ωοτϫʔΫͷؒʹ͓͔Ε, ෆ
    ਖ਼ͳ௨৴Λ๷͙ͨΊ಺෦ωοτϫʔΫ΁ͷ௨৴͸࠷௿
    ݶ௨͢෦෼

    View full-size slide

  23. DMZʢΠϯλʔωοτ͔Βͷ઀ଓΛड͚෇͚ΔωοτϫʔΫʣ
    ωοτϫʔΫߏ੒ͷݕ౼ʢ෼ׂʣ
    ಺෦ωοτϫʔΫ
    IDS/IPS WAF
    Webαʔό
    APαʔό DBαʔό
    ֎෦ωοτϫʔΫ
    ϑΝΠΞʔ΢ΥʔϧΑΓ
    ֎ͷωοτϫʔΫ
    ϑΝΠΞʔ΢Υʔϧ͸
    3ͭશͯʹଐ͢Δ
    ಺෦ωοτϫʔΫ
    ͸Πϯλʔωοτ
    ͔Βͷ઀ଓΛड͚
    ෇͚ͳ͍

    View full-size slide

  24. • ಺෦ωοτϫʔΫ͸֎෦ωοτϫʔΫʢΠϯλʔωο
    τʣ͔Β௚઀઀ଓΛड͚෇͚Δ͜ͱ͸ͳ͍
    ‣ DMZͱ಺෦ωοτϫʔΫͷ௨৴͸, ϑΝΠΞʔ΢Υʔ
    ϧ͕஥հ͢Δ͜ͱͰηΩϡϦςΟΛ֬อ͍ͯ͠Δ
    ωοτϫʔΫߏ੒ͷݕ౼ʢ෼ׂʣ
    ಺෦ωοτϫʔΫ

    View full-size slide

  25. ωοτϫʔΫͷ෼ׂ
    ωοτϫʔΫػثͷߏ੒

    View full-size slide

  26. • Πϯλʔωοτ͔Βͷ઀ଓ͕͋ΔγεςϜʹ͓͍ͯ, ߈
    ܸΛ๷͙ͨΊʹ͸ϑΝΠΞ΢Υʔϧ͸ඞਢ
    ‣ Ұํ, IDS, IPS, WAFͱݴͬͨΑ͏ͳઃඋ͸ߴՁͳͷ
    Ͱ, ٻΊΒΕΔηΩϡϦςΟཁ݅ʹΑͬͯ͸ಋೖ͠ͳ
    ͍͜ͱ΋…
    ωοτϫʔΫߏ੒ͷݕ౼ʢߏ੒ʣ
    ֎෦ωοτϫʔΫ
    IDS/IPS WAF
    Webαʔό

    View full-size slide

  27. • ݸਓ৘ใΛ࣋ͨͳ͍γεςϜͰ͋Ε͹, ෆਖ਼ΞΫηεʹ
    ΑΔඃ֐͕গͳ͍ͱߟ͑WAFͷಋೖΛݟૹΔ
    • ҰํͰ, ۚ༥ܥγεςϜͷΑ͏ʹෆਖ਼ΞΫηεʹΑΔඃ
    ֐͕ਙେͱͳΔ৔߹͸, WAFΛಋೖ͢Δ΂͖
    ‣ ສ͕Ұͷࣗମʹඋ͑ͯ, IDS, IPS, WAF΋৑௕ߏ੒Λݕ
    ౼ͨ͠΄͏͕ྑ͍
    ωοτϫʔΫߏ੒ͷݕ౼ʢߏ੒ʣ

    View full-size slide

  28. ωοτϫʔΫߏ੒ͷݕ౼ʢߏ੒ʣ
    ֎෦ωοτϫʔΫ
    IDS/IPS WAF
    Webαʔό
    IDS/IPS WAF
    ϝΠϯͷػث͕ނোͨ͠৔߹ʹ
    ΋͏ͭͷػثʹ੾ΓସΘΔ
    *%4*148"'ͷ৑௕Խߏ੒

    View full-size slide

  29. ໨࣍
    1. ఏڙ͢ΔαʔϏεͷݕ౼
    2. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    3. ωοτϫʔΫߏ੒ͷݕ౼
    4. αʔόߏ੒ͷݕ౼
    5. αʔόج൫ͷݕ౼
    6. ෛՙ෼ࢄ
    7. αʔόઃܭɾߏங
    8. σʔλϕʔεઃܭ
    9. ΞϓϦέʔγϣϯઃܭ
    10.ϩάӡ༻
    11.WebαΠτͷύϑΥʔϚϯε
    12.੬ऑੑ਍அ

    View full-size slide

  30. αʔόߏ੒ͷݕ౼
    • ωοτϫʔΫͷߏ੒͕ܾ·Δͱ, ֤ωοτϫʔΫʹ഑ஔ
    ͢Δαʔόͷߏ੒ͷݕ౼Λߦ͏
    ‣ ͲͷαʔόػثͰಈ࡞ͤ͞Δͷ͔
    ‣ αʔόػثͷ഑ஔઌͷωοτϫʔΫΛͲ͜ʹ͢Δ͔
    ‣ ৑௕ԽͷϨϕϧ

    View full-size slide

  31. ϩʔυόϥϯαʔ
    ഑ଐઌͷωοτϫʔΫ
    αʔόͷߏ੒

    View full-size slide

  32. αʔόߏ੒ͷݕ౼ʢϩʔυόϥϯαʣ
    • ϩʔυόϥϯα

    ෳ਺͋Δαʔόʹରͯ͠ϦΫΤετΛৼΓ෼͚Δػث
    F/W
    IDS/IPS/WAF
    ϩʔυόϥϯα
    8FCαʔόΛෳ਺୆ͱ͢Δ৔߹͸
    ϦΫΤετΛ֤αʔόʹ෼ࢄ͢Δ
    ϩʔυόϥϯαʔ͕ඞཁ

    View full-size slide

  33. αʔόߏ੒ͷݕ౼
    • ϩʔυόϥϯα͸WebαʔόΑΓΠϯλʔωοτدΓ
    ʹ഑ஔ͠, ഑ԼͱͳΔWebαʔόʹϦΫΤετΛৼΓ෼
    ͚Δ
    ‣ ϩʔυόϥϯα͕Ұ౓͢΂ͯͷϦΫΤεΛड͚औΔ
    ‣ Webαʔό͔ΒͷϨεϙϯε΋Ұ౓ϩʔυόϥϯα
    ͕ड͚औΓ, ϩʔυόϥϯα͔ΒΫϥΠΞϯτ΁ฦૹ

    View full-size slide

  34. αʔόߏ੒ͷݕ౼ʢϩʔυόϥϯαʣ
    F/W
    IDS/IPS/WAF
    ϩʔυόϥϯα
    ϩʔυόϥϯα͕Ұ౓શͯड͚औΓ
    αʔόʹৼΓ෼͚Δαʔό͔ΒͷϨε
    ϙϯε΋ϩʔυόϥϯα͕஥հ͠ฦૹ
    ৑௕Խ͢ΔͱՄ༻ੑ͸޲্͢Δ͕
    ӡ༻ίετ΋૿Ճ͢Δ
    DMZ ಺෦ωοτϫʔΫ

    View full-size slide

  35. ϩʔυόϥϯαʔ
    ഑ଐઌͷωοτϫʔΫ
    αʔόͷߏ੒

    View full-size slide

  36. αʔόߏ੒ͷݕ౼ʢ഑ଐઌͷωοτϫʔΫʣ
    • αʔόػثʢ֎෦͔Β઀ଓ͞ΕΔαʔόʣ͸DMZʹઃ
    ஔ͢Δ΂͖
    • ηΩϡϦςΟϨϕϧΛ޲্ͤ͞ΔͨΊʹ, ֎෦ʹެ։͢
    Δ΂͖Ͱ͸ͳ͍৘ใʢݸਓ৘ใɾػີ৘ใʣ͸Πϯ
    λʔωοτͱͷ઀ଓ͕ߦΘΕͳ͍಺෦ωοτϫʔΫʹ
    ഑ஔ͢Δ΂͖

    View full-size slide

  37. αʔόߏ੒ͷݕ౼ʢϩʔυόϥϯαʣ
    F/W
    IDS/IPS/WAF
    ϩʔυόϥϯα
    Πϯλʔωοτͱͷ઀ଓ͕ඞཁͳ
    αʔό͸%.;ʹ഑ஔ͢Δ
    ৑௕Խ͢ΔͱՄ༻ੑ͸޲্͢Δ͕
    ӡ༻ίετ΋૿Ճ͢Δ
    DMZ ಺෦ωοτϫʔΫ
    ػີσʔλ͸
    ಺෦ωοτϫʔΫʹ

    View full-size slide

  38. ϩʔυόϥϯαʔ
    ഑ଐઌͷωοτϫʔΫ
    αʔόͷߏ੒

    View full-size slide

  39. αʔόߏ੒ͷݕ౼ʢαʔόͷߏ੒ʣ
    • ߏங͢ΔγεςϜͷ༻్΍ཁ݅ʹΑͬͯߏ੒Λม͑Δ
    ‣ ίετΛॏࢹ͠, ࠷௿ݶͷαʔόػثͰߏ੒
    ‣ Մ༻ੑΛॏࢹ͠, ػثނোʹΑΔαʔϏεఀࢭΛۃྗ
    ແ͘͢
    • جຊతʹ, αʔόͷ਺͕ଟ͚Ε͹ଟ͍΄ͲՄ༻ੑ͸޲্
    ͢Δ͕, ؅ཧίετ͕૿Ճ͢Δ

    View full-size slide

  40. αʔόߏ੒ͷݕ౼ʢαʔόͷߏ੒ʣ
    ίετΛ཈͑ͨαʔόߏ੒ྫ
    F/W
    IDS/IPS/WAF
    ϩʔυόϥϯα
    ͭͷαʔόػثͰ "1αʔόͱ
    8FCαʔόͷͭΛՔಇͤ͞Δ
    DMZ ಺෦ωοτϫʔΫ
    %#αʔό͸಺෦ωοτϫʔΫʹ
    ஔ͘͜ͱͰ Πϯλʔωοτʹ
    ௚઀ͭͳ͕Βͳ͍Α͏ʹ
    Webαʔό
    APαʔό
    Webαʔό
    APαʔό
    DBMS
    ϦΫΤετͷ૭ޱͱͳΔ8FCαʔόͱ
    ϦΫΤετ਺ʹԠͯ͡ෛՙ͕େ͖͘ͳΔ
    "1αʔό͸৑௕Խ

    View full-size slide

  41. αʔόߏ੒ͷݕ౼ʢαʔόͷߏ੒ʣ
    Մ༻ੑΛॏࢹͨ͠αʔόߏ੒ྫ
    F/W
    IDS/IPS/WAF
    ϩʔυόϥϯα
    "1αʔό͸֎෦ʹެ։͢Δඞཁ͕ແ
    ͍ͷͰ ಺෦ωοτϫʔΫʹ഑ஔ
    DMZ ಺෦ωοτϫʔΫ
    %#αʔό͸ϨϓϦέʔγϣϯ
    Webαʔό
    Webαʔό
    DBMS(Master)
    8FCαʔό "1αʔό %#αʔό
    ͦΕͧΕΛ৑௕Խ͢Δ
    APαʔό
    APαʔό DBMS(Slave)

    View full-size slide

  42. ໨࣍
    1. ఏڙ͢ΔαʔϏεͷݕ౼
    2. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    3. ωοτϫʔΫߏ੒ͷݕ౼
    4. αʔόߏ੒ͷݕ౼
    5. αʔόج൫ͷݕ౼
    6. ෛՙ෼ࢄ
    7. αʔόઃܭɾߏங
    8. σʔλϕʔεઃܭ
    9. ΞϓϦέʔγϣϯઃܭ
    10.ϩάӡ༻
    11.WebαΠτͷύϑΥʔϚϯε
    12.੬ऑੑ਍அ

    View full-size slide

  43. αʔόج൫ͷݕ౼
    • αʔόߏ੒ΛܾΊͨޙ, ͲͷΑ͏ʹαʔόΛௐୡ͢Δ͔
    Λݕ౼͢Δ
    • ҎԼͷ3ͭͷબ୒ࢶ͕ߟ͑ΒΕΔ
    1. ΦϯϓϨϛε
    2. Ϩϯλϧαʔό
    3. Ϋϥ΢υ

    View full-size slide

  44. ΦϯϓϨϛε
    Ϩϯλϧαʔό
    Ϋϥ΢υ

    View full-size slide

  45. • ΦϯϓϨϛε(on-premises)

    ʮࣗࣾӡ༻ʯΛࢦ͢ݴ༿Ͱ͋Γ, ࣗ਎Ͱϋʔυ΢ΣΞΛ
    ߪೖ͠, ࣗࣾอ༗෺݅΍σʔληϯλʔ౳ʹઃஔ͠ӡ༻
    ͢Δํ๏
    αʔόج൫ͷݕ౼ʢΦϯϓϨϛεʣ
    ϝϦοτ
    ‣ ࣗࣾͷཧ૝ͷߏ੒Λ૊Ή͜ͱ͕ग़དྷΔ
    ‣ ࣗࣾʹஔ͔ΕΔͷͰ, ݸਓ৘ใͳͲͷػີ৘ใΛଞࣾ
    ͷ؅ཧ͢Δαʔόʹஔ͘ඞཁ͕ͳ͍

    View full-size slide

  46. • ҰํͰ, ࣗ਎Ͱӡ༻͢Δίετ͕͔͔Δ
    ‣ ෦඼ͷܦ೥ྼԽ
    ‣ ো֐ରԠ etc…
    • ॳظίετ͕ߴ͍
    ‣ ͦ΋ͦ΋αʔόػث͕ඇৗʹߴՁ
    ‣ αʔόػثΛઃஔ͢Δ৔ॴʢσʔληϯλʔ౳ʣ
    αʔόج൫ͷݕ౼ʢΦϯϓϨϛεʣ

    View full-size slide

  47. ΦϯϓϨϛε
    Ϩϯλϧαʔό
    Ϋϥ΢υ

    View full-size slide

  48. • Ϩϯλϧαʔό

    ଞऀ͕ߏங͠ି͠ग़͍ͯ͠ΔαʔόΛؒआΓͯ͠, ͦ͜
    ʹWebΞϓϦέʔγϣϯΛઃஔ͢Δ
    αʔόج൫ͷݕ౼ʢϨϯλϧαʔόʣ
    ϝϦοτ
    ‣ طʹߏங͞Ε͍ͯΔͷͰ, ৽ͨʹػثΛߏங, ӡ༻͢
    Δඞཁ͸ແ͘, ઃஔ৔ॴΛ༻ҙ͢Δඞཁ΋ͳ͍
    ‣ ηΩϡϦςΟͷ֬อ΍ػثͷো֐ରԠ͸ఏڙ͕ࣾߦ
    ͳ͏

    View full-size slide

  49. • ҰํͰ, ߏ੒ͷࣗ༝౓͕௿͍
    ‣ ػثͷߏ੒Λมߋ͢Δ͜ͱ͸Ͱ͖ͳ͍
    ‣ γεςϜͷσʔλͷਖ਼֬ͳॴࡏ͸Θ͔Βͳ͍
    ‣ ػثͷ௥ՃʢεέʔϧΞ΢τ/Ξοϓʣ͕Ͱ͖ͳ͍
    - ࣅͨαʔϏεʹPaaS͕͋Δ͕, ͦͪΒͰ͸εέʔϧ
    Ξ΢τ/Ξοϓ΋Մೳ
    αʔόج൫ͷݕ౼ʢϨϯλϧαʔόʣ

    View full-size slide

  50. ΦϯϓϨϛε
    Ϩϯλϧαʔό
    Ϋϥ΢υ

    View full-size slide

  51. • Ϋϥ΢υ

    ଞऀ͕ఏڙ͢ΔԾ૝తͳαʔόΛઃஔͰ͖Δ؀ڥͷத
    ʹαʔόΛઃஔͯ͠ར༻͢Δར༻ܗଶ
    ‣ ௨ৗΫϥ΢υ͸3ͭʹ෼ྨ͞ΕΔ
    - SaaS(Software as a Service)
    - PaaS(Platform as a Service)
    - IaaS(Infrastructure as a Service)
    • ࠓճ͸IaaSΛલఏʹ͢Δ
    αʔόج൫ͷݕ౼ʢΫϥ΢υʣ

    View full-size slide

  52. • SaaS(Software as a Service)

    ΠϯλʔωοτΛ࢖֤ͬͯछΞϓϦέʔγϣϯΛఏڙ
    ͢Δ࢓૊ΈʢྫɿGmail, GoogleεϓϨουγʔτʣ
    • PaaS(Platform as a Service)

    ΞϓϦέʔγϣϯΛ࣮ߦ͢ΔͨΊͷ؀ڥ. ։ൃऀ͸Ξϓ
    Ϧέʔγϣϯͷ։ൃʹͷΈ஫ྗ͢Δ͜ͱ͕ग़དྷΔ
    • IaaS(Infrastructure as a Service)

    CPU,ϝϞϦ,σΟεΫ,ωοτϫʔΫͳͲͷϨϕϧ͔Βࣗ
    ਎Ͱߏங͢Δࣄ͕ՄೳͳαʔϏε
    αʔόج൫ͷݕ౼ʢΫϥ΢υʣ

    View full-size slide

  53. αʔόج൫ͷݕ౼ʢΫϥ΢υʣ
    ϝϦοτ
    ‣ ػثͷߪೖ΍ઃஔ৔ॴͷ֬อ͕ෆཁ
    ‣ ࣗ༝ͳߏ੒(ϝϞϦ, ετϨʔδ, ωοτϫʔΫ)
    ‣ εέʔϧΞ΢τ/Ξοϓ͕Մೳ
    σϝϦοτ
    ‣ ηΩϡϦςΟରࡦ͸ࣗ਎Ͱߦ͏
    ‣ ϛε͢Δͱലେͳ੥ٻ͕ඈΜͰ͘Δʢ͜Ε͸σϝϦο
    τͰ͸ͳ͍ؾ͕͢Δ͕ʣ
    ‣ ଞʹൺ΂ͯଟ͘ͷ஌͕ࣝඞཁ
    ʢॳ৺ऀ͕AWSͰϛεͬͯෆਖ਼ར༻͞Εͯ$6,000੥ٻɿhttps://qiita.com/mochizukikotaro/items/a0e98ff0063a77e7b694ʣ

    View full-size slide

  54. ໨࣍
    1. ఏڙ͢ΔαʔϏεͷݕ౼
    2. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    3. ωοτϫʔΫߏ੒ͷݕ౼
    4. αʔόߏ੒ͷݕ౼
    5. αʔόج൫ͷݕ౼
    6. ෛՙ෼ࢄ
    7. αʔόઃܭɾߏங
    8. σʔλϕʔεઃܭ
    9. ΞϓϦέʔγϣϯઃܭ
    10.ϩάӡ༻
    11.WebαΠτͷύϑΥʔϚϯε
    12.੬ऑੑ਍அ

    View full-size slide

  55. ෛՙ෼ࢄ
    • ෛՙ෼ࢄ

    αʔόΛෳ਺୆ฒྻʹ഑ஔͯ͠ϦΫΤετΛৼΓ෼͚Δ
    ͜ͱͰ, αʔόͷෛՙΛܰݮ͢Δ͜ͱ
    ‣ αʔό1୆ͷॲཧೳྗ͸௿ͯ͘΋, ฒྻ਺Λ૿΍͢ʢε
    έʔϧΞ΢τʣ͢Δ͜ͱͰγεςϜશମͷॲཧೳྗ͸
    ޲্͠, Մ༻ੑ΋޲্͢Δ

    View full-size slide

  56. ෛՙ෼ࢄ
    • ෛՙ෼ࢄ͸ϩʔυόϥϯα͕ߦͳ͏
    ‣ ApacheͳͲͷιϑτ΢ΣΞʹ΋ϩʔυόϥϯαͷػ
    ೳ͕͍͍ͭͯΔ΋ͷ͕͋Δ
    • ෛՙ෼ࢄͷํ๏Λ2ͭ঺հ
    1. ϥ΢ϯυϩϏϯํࣜ
    2. ಈత෼ࢄํࣜ

    View full-size slide

  57. ϥ΢ϯυϩϏϯํࣜ
    ಈత෼ࢄํࣜ

    View full-size slide

  58. ෛՙ෼ࢄʢϥ΢ϯυϩϏϯํࣜʣ
    • ϥ΢ϯυϩϏϯํࣜ

    ֤αʔόʹॱ൪ʹϦΫΤετΛৼΓ෼͚Δํࣜ
    Webαʔό
    Webαʔό
    Webαʔό
    ϩʔυόϥϯα






    ֤ϦΫΤετͷෛՙ͕౳͘͠
    αʔόͷॲཧೳྗ΋౳͍͠ͳΒ͹ෛՙ͸ۉ౳
    ϩʔυόϥϯα͕
    ϦΫΤετΛৼΓ෼͚

    View full-size slide

  59. ෛՙ෼ࢄʢϥ΢ϯυϩϏϯํࣜʣ
    • ֤Ϛγϯͷॲཧೳྗ͕౳͘͠, ॲཧͷෛՙ͕౳͍͠৔߹
    ʹݶΓ, αʔόෛՙ͸౳͘͠ͳΔ
    • ͨͩ͠, ϦΫΤετͷॲཧ಺༰ʢෛՙʣʹ͹Β͖͕ͭ͋
    Δ৔߹΍, Ϛγϯͷॲཧೳྗʹ͹Β͖͕ͭ͋Δ৔߹, αʔ
    ό͝ͱͷෛՙͷภΓ͕େ͖͘ͳΔ

    View full-size slide

  60. ϥ΢ϯυϩϏϯํࣜ
    ಈత෼ࢄํࣜ

    View full-size slide

  61. ෛՙ෼ࢄʢಈత෼ࢄํࣜʣ
    • ಈత෼ࢄํࣜ

    αʔόͷෛՙΛ؂ࢹ͠, ෛՙ͕গͳ͍αʔόʹৼΓ෼͚
    Webαʔό
    Webαʔό
    Webαʔό
    ϩʔυόϥϯα






    ෛՙ͕গͳ͍αʔόʹ
    ༏ઌతʹৼΓ෼͚


    ߴෛՙ
    ෛՙ͕ߴ͍ঢ়ଶͷαʔό͸,
    ϩʔυόϥϯα͕࢓ࣄͷׂΓৼΓΛݮΒ͢Α͏ʹͳΔ

    View full-size slide

  62. ෛՙ෼ࢄʢಈత෼ࢄํࣜʣ
    • αʔό΍௨৴ͷঢ়ଶΛݟͯಈతʹৼΓ෼͚Δ
    ‣ αʔόͷίωΫγϣϯ਺
    ‣ సૹͨ͠σʔλͷྔ
    ‣ Ԡ౴͕ૣ͍αʔό
    • ҎԼͷΑ͏ͳγεςϜʹద͍ͯ͠Δ
    ‣ ෼ࢄର৅ͷαʔόͷॲཧೳྗ͕ͦΕͧΕҟͳΔ
    ‣ ϦΫΤετ͝ͱʹॲཧ͕࣌ؒҟͳΔ

    View full-size slide

  63. ύʔγεςϯε

    View full-size slide

  64. ෛՙ෼ࢄʢύʔγεςϯεʣ
    • ύʔγεςϯε

    ಉҰͷΫϥΠΞϯτ͔ΒͷΞΫηεΛ൑அ͠, ৗʹಉ͡
    αʔόʹసૹ͢Δηογϣϯ؅ཧػೳ
    ‣ ϩάΠϯͯ͠ར༻͢ΔλΠϓͷαΠτͰ, ϩʔυόϥ
    ϯαʹΑͬͯຖ౓ผͷαʔόʹৼΓ෼͚ΒΕΔͱηο
    γϣϯ؅ཧ͕೉͘͠ͳΔͨΊ, ίϨΛ๷͙ػೳ

    View full-size slide

  65. ෛՙ෼ࢄʢಈత෼ࢄํࣜʣ
    Webαʔό
    Webαʔό
    Webαʔό
    ϩʔυόϥϯα
    ϦΫΤετͷૹ৴ݩΛ൑ผ͠ ಉ
    ҰΫϥΠΞϯτ͔ΒͷϦΫΤετ
    ͸ৗʹಉ͡αʔόʹৼΓ෼͚Δ
    ಉҰΫϥΠΞϯτ͔Βͷ઀ଓ͕ಉ͡αʔόʹूத͢ΔͷͰ
    ηογϣϯ؅ཧ͕΍Γ΍͍͢

    View full-size slide

  66. ໨࣍
    1. ఏڙ͢ΔαʔϏεͷݕ౼
    2. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    3. ωοτϫʔΫߏ੒ͷݕ౼
    4. αʔόߏ੒ͷݕ౼
    5. αʔόج൫ͷݕ౼
    6. ෛՙ෼ࢄ
    7. αʔόઃܭɾߏங
    8. σʔλϕʔεઃܭ
    9. ΞϓϦέʔγϣϯઃܭ
    10.ϩάӡ༻
    11.WebαΠτͷύϑΥʔϚϯε
    12.੬ऑੑ਍அ

    View full-size slide

  67. αʔόઃܭ
    • WebγεςϜͰ࢖༻͞ΕΔαʔό͸༻్ʹΑͬͯରো
    ֐ੑ΍, ηΩϡϦςΟΛߟྀͨ͠ઃܭʹ͢Δඞཁ͕͋Δ
    • ҎԼͷ3఺ʹ஫໨
    1. σΟεΫߏ੒
    2. ηΩϡϦςΟ
    3. γεςϜج൫ςετ

    View full-size slide

  68. σΟεΫߏ੒
    ηΩϡϦςΟ
    γεςϜج൫ςετ

    View full-size slide

  69. αʔόઃܭʢσΟεΫߏ੒ʣ
    • σΟεΫ

    ϋʔυσΟεΫ΍SSDͳͲαʔόͷهԱྖҬ
    • σΟεΫ͸γεςϜσΟεΫͱσʔλ༻σΟεΫʹ෼͚
    ͓͍ͯͨ΄͏͕ྑ͍
    γεςϜ
    σʔλ
    σʔλ
    ϕʔε
    04΍ϛυϧ΢ΣΞͷ࣋ͭ
    αʔόͷಈ࡞ʹඞཁͳσʔλ
    8FCγεςϜ͕ಈ࡞͢ΔͨΊʹ
    ඞཁͳσʔλ

    View full-size slide

  70. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID(Redundant Arrays of Inexpensive Disks)

    ෳ਺୆ͷετϨʔδΛ૊Έ߹ΘͤΔ͜ͱͰ, 1ͭͷԾ૝
    తͳετϨʔδͱͯ͠ೝࣝͤ͞৑௕ੑΛ֬อ͢Δٕज़
    ‣ 1987೥ʹΧϦϑΥϧχΞେֶόʔΫϨΠߍʹ͓͍ͯ
    ࿦จԽ͞Εͨ
    ‣ ෳ਺୆ͷετϨʔδʹσʔλΛ෼ࢄͯ͠ॻ͖ࠐΉํ๏
    Λ࢖͏͜ͱͰ, ৑௕Խ͕Մೳ

    View full-size slide

  71. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID0

    1ͭͷσʔλΛෳ਺ͷσΟεΫʹ෼ࢄͯ͠ॻ͖ࠐΉετ
    ϥΠϐϯάΛ࠾༻. ߴ଎Ͱ͋Δ͕৑௕ੑ͸௿͍
    B C D E F
    B C D
    ετϨʔδ
    σʔλ
    1
    2
    3
    4

    View full-size slide

  72. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID0

    1ͭͷσʔλΛෳ਺ͷσΟεΫʹ෼ࢄͯ͠ॻ͖ࠐΉετ
    ϥΠϐϯάΛ࠾༻. ߴ଎Ͱ͋Δ͕৑௕ੑ͸௿͍
    B C D E F
    B C D
    ετϨʔδ
    σʔλ
    1
    2
    3
    4
    B
    C
    D
    B
    C
    D
    E
    F
    ෳ਺ͷσΟεΫʹ

    ෼ࢄͯ͠ʢฒྻͯ͠ʣॻ͖ࠐΉ
    σΟεΫ͕୆Ͱ΋
    ނো͢Δͱ෮چෆՄೳ

    View full-size slide

  73. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID1

    ಉ͡σʔλΛෳ਺ͷσΟεΫʹಉ࣌ʹॻ͖ࠐΉϛϥʔϦ
    ϯάΛ࠾༻. RAID0ʹൺ΂৑௕ੑΛॏࢹ
    B C D E F
    B C D
    ετϨʔδ
    σʔλ
    1a
    1b
    2a
    2b

    View full-size slide

  74. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID1

    ಉ͡σʔλΛෳ਺ͷσΟεΫʹಉ࣌ʹॻ͖ࠐΉϛϥʔϦ
    ϯάΛ࠾༻. RAID0ʹൺ΂৑௕ੑΛॏࢹ
    B C D E F
    B C D
    ετϨʔδ
    σʔλ
    1a
    1b
    2a
    2b
    B
    B

    View full-size slide

  75. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID1

    ಉ͡σʔλΛෳ਺ͷσΟεΫʹಉ࣌ʹॻ͖ࠐΉϛϥʔϦ
    ϯάΛ࠾༻. RAID0ʹൺ΂৑௕ੑΛॏࢹ
    B C D E F
    B C D
    ετϨʔδ
    σʔλ
    1a
    1b
    2a
    2b
    B C
    B C

    View full-size slide

  76. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID1

    ಉ͡σʔλΛෳ਺ͷσΟεΫʹಉ࣌ʹॻ͖ࠐΉϛϥʔϦ
    ϯάΛ࠾༻. RAID0ʹൺ΂৑௕ੑΛॏࢹ
    B C D E F
    B C D
    ετϨʔδ
    σʔλ
    1a
    1b
    2a
    2b
    B C D
    B C D

    View full-size slide

  77. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID1

    ಉ͡σʔλΛෳ਺ͷσΟεΫʹಉ࣌ʹॻ͖ࠐΉϛϥʔϦ
    ϯάΛ࠾༻. RAID0ʹൺ΂৑௕ੑΛॏࢹ
    B C D E F
    ετϨʔδ
    σʔλ
    1a
    1b
    2a
    2b
    B C D
    B C D
    B
    B

    View full-size slide

  78. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID1

    ಉ͡σʔλΛෳ਺ͷσΟεΫʹಉ࣌ʹॻ͖ࠐΉϛϥʔϦ
    ϯάΛ࠾༻. RAID0ʹൺ΂৑௕ੑΛॏࢹ
    B C D E F
    ετϨʔδ
    σʔλ
    1a
    1b
    2a
    2b
    B C D
    B C D
    B C
    B C

    View full-size slide

  79. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID1

    ಉ͡σʔλΛෳ਺ͷσΟεΫʹಉ࣌ʹॻ͖ࠐΉϛϥʔϦ
    ϯάΛ࠾༻. RAID0ʹൺ΂৑௕ੑΛॏࢹ
    B C D E F
    ετϨʔδ
    σʔλ
    1a
    1b
    2a
    2b
    B C D
    B C D
    B C D
    B C D

    View full-size slide

  80. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID1

    ಉ͡σʔλΛෳ਺ͷσΟεΫʹಉ࣌ʹॻ͖ࠐΉϛϥʔϦ
    ϯάΛ࠾༻. RAID0ʹൺ΂৑௕ੑΛॏࢹ
    B C D E F
    ετϨʔδ
    σʔλ
    1a
    1b
    2a
    2b
    B C D
    B C D
    B C D E
    B C D E

    View full-size slide

  81. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID1

    ಉ͡σʔλΛෳ਺ͷσΟεΫʹಉ࣌ʹॻ͖ࠐΉϛϥʔϦ
    ϯάΛ࠾༻. RAID0ʹൺ΂৑௕ੑΛॏࢹ
    B C D E F
    ετϨʔδ
    σʔλ
    1a
    1b
    2a
    2b
    B C D
    B C D
    B C D E F
    B C D E F

    View full-size slide

  82. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID5

    ύϦςΟʢޡΓగਖ਼ූ߸ʣΛಉ࣌ʹॻ͖ࠐΉ͜ͱͰ, 1
    ୆ʹো֐͕ൃੜͯ͠΋෮چ͕Մೳ
    B C D E F
    B C D
    ετϨʔδ
    σʔλ
    ετϨʔδ͸࠷௿୆ඞཁ
    1
    2
    3
    4

    View full-size slide

  83. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID5

    ύϦςΟʢޡΓగਖ਼ූ߸ʣΛಉ࣌ʹॻ͖ࠐΉ͜ͱͰ, 1
    ୆ʹো֐͕ൃੜͯ͠΋෮چ͕Մೳ
    B C D E F
    B C D
    ετϨʔδ
    σʔλ
    1
    2
    3
    4
    B
    C
    D
    1
    ύϦςΟΛ෇Ճ

    View full-size slide

  84. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID5

    ύϦςΟʢޡΓగਖ਼ූ߸ʣΛಉ࣌ʹॻ͖ࠐΉ͜ͱͰ, 1
    ୆ʹো֐͕ൃੜͯ͠΋෮چ͕Մೳ
    B C D E F
    B C D
    ετϨʔδ
    σʔλ
    1
    2
    3
    4
    B
    C
    D
    1
    B
    C
    D
    1

    View full-size slide

  85. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID5

    ύϦςΟʢޡΓగਖ਼ූ߸ʣΛಉ࣌ʹॻ͖ࠐΉ͜ͱͰ, 1
    ୆ʹো֐͕ൃੜͯ͠΋෮چ͕Մೳ
    B C D E F
    B C D
    ετϨʔδ
    σʔλ
    1
    2
    3
    4
    B
    C
    D
    1
    B
    C
    D
    1
    1
    E
    F

    View full-size slide

  86. αʔόઃܭʢσΟεΫߏ੒ʣ
    • RAID5

    ύϦςΟʢޡΓగਖ਼ූ߸ʣΛಉ࣌ʹॻ͖ࠐΉ͜ͱͰ, 1
    ୆ʹো֐͕ൃੜͯ͠΋෮چ͕Մೳ
    B C D E F
    B C D
    ετϨʔδ
    σʔλ
    1
    2
    3
    4
    B
    C
    D
    1
    B
    C
    D
    1
    1
    E
    F
    ୆յΕͯ΋෮چՄೳ

    View full-size slide

  87. σΟεΫߏ੒
    ηΩϡϦςΟ
    γεςϜج൫ςετ

    View full-size slide

  88. αʔόઃܭʢηΩϡϦςΟʣ
    • OSΠϯετʔϧ࣌ʹॳظઃఆ͞Ε͍ͯΔID΍ύεϫʔ
    υΛͦͷ··์ஔ͍ͯ͠Δ͜ͱͰ߈ܸ͞ΕΔ͜ͱ΋
    ‣ ͦͷੲ, Oracle DatabaseͷॳظID͕scott, ύεϫʔυ
    ͕tigerͱ͍͏૊Έ߹ΘͤͩͬͨͨΊ, ѱ༻ͷλʔήο
    τʹͳΓ͕ͪͩͬͨͱ͔
    ‣ αʔόͰ͸ͳ͍͚Ͳ, ࠷ۙ͸CanonͷωοτϫʔΫΧ
    ϝϥ͕࿩୊ʹͳͬͯ·ͨ͠Ͷ

    http://cweb.canon.jp/caution/180426.html

    View full-size slide

  89. αʔόઃܭʢηΩϡϦςΟʣ
    • ҰൠతͳηΩϡϦςΟରࡦ
    ‣ OS΍αʔόιϑτ΢ΣΞ͸ৗʹ࠷৽Λҡ࣋
    ‣ ෆཁͳαʔϏεͳͲ͸ఀࢭ͍ͯ͠Δ͔
    ‣ ςετʹ࢖༻ͨ͠ΞΧ΢ϯτ͕࢒͍ͬͯͳ͍͔
    ‣ ύεϫʔυ͕ਪଌ͞Εʹ͍͔͘
    ‣ ΞΫηε੍ޚʢϑΝΠϧʣ͕ద੾͔
    ‣ ΞΫηεϩάΛద੾ʹ؅ཧ, ֬ೝ͍ͯ͠Δ͔

    View full-size slide

  90. σΟεΫߏ੒
    ηΩϡϦςΟ
    γεςϜج൫ςετ

    View full-size slide

  91. αʔόઃܭʢγεςϜج൫ςετʣ
    • αʔόߏங׬ྃޙ, ࠷ޙʹαʔόͷઃఆ͕ਖ਼͘͠ߦΘΕ
    ͍ͯΔ͔ςετΛߦ͏
    ‣ ઃఆϑΝΠϧ͕ਖ਼͘͠هࡌ͞Ε͍ͯΔ͔
    ‣ ςετϢʔβʔ΍ಛݖϢʔβʔͰϩάΠϯෆՄೳ͔
    ‣ ࠶ىಈ࣌ʹࢦఆͨ͠ϓϩάϥϜ͕ࣗಈىಈ͍ͯ͠Δ͔

    View full-size slide

  92. αʔόઃܭʢγεςϜج൫ςετʣ
    • αʔό΍ΞϓϦέʔγϣϯͷ੬ऑੑ਍அιϑτ΢ΣΞ
    ʢ͜͜Ͱ঺հ͢Δͷ͸OSSʣ
    ‣ αʔό(OS, ϛυϧ΢ΣΞ)਍அ
    - OpenVAS
    - Vuls
    ‣ ΞϓϦέʔγϣϯ਍அ
    - OWASP Zedd Attack Policy(ZAP)
    - Nikto
    ͜ͷลͷ࿩͸͋ͱͰ΋Ͱ͖ͯ·͢

    View full-size slide

  93. ໨࣍
    1. ఏڙ͢ΔαʔϏεͷݕ౼
    2. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    3. ωοτϫʔΫߏ੒ͷݕ౼
    4. αʔόߏ੒ͷݕ౼
    5. αʔόج൫ͷݕ౼
    6. ෛՙ෼ࢄ
    7. αʔόઃܭɾߏங
    8. σʔλϕʔεઃܭ
    9. ΞϓϦέʔγϣϯઃܭ
    10.ϩάӡ༻
    11.WebαΠτͷύϑΥʔϚϯε
    12.੬ऑੑ਍அ

    View full-size slide

  94. σʔλϕʔεઃܭ
    • ҎԼͷྲྀΕͰσʔλϕʔεઃܭΛߦͳ͏
    1. ࿦ཧઃܭϑΣʔζ

    σʔλϕʔεʹ֨ೲ͢΂͖σʔλͷચ͍ग़͠, σʔ
    λಉ࢜ͷؔ࿈ੑΛఆٛ͢Δ
    2. ෺ཧઃܭϑΣʔζ

    ࿦ཧઃܭͰఆٛ͞ΕͨσʔλΛ, ࣮ࡍͲͷΑ͏ʹ֨
    ೲ͢Δ͔ΛܾΊΔ

    View full-size slide

  95. ࿦ཧઃܭ
    ෺ཧઃܭ

    View full-size slide

  96. σʔλϕʔεઃܭ
    • ࿦ཧઃܭϑΣʔζ

    σʔλϕʔεʹ֨ೲ͢΂͖σʔλͷચ͍ग़͠, σʔλಉ
    ࢜ͷؔ࿈ੑΛఆٛ͢Δ
    • ҎԼ4ͭͷ޻ఔΛ౿ΜͰઃܭ͢Δ
    1. σʔλͷચ͍ग़͠
    2. ϦϨʔγϣϯͱଟॏ౓
    3. ৄࡉͳ৘ใͷચ͍ग़͠
    4. σʔλͷ੔ཧ

    View full-size slide

  97. σʔλϕʔεઃܭ
    1. ֨ೲ͢Δ΂͖σʔλΛߟ͑Δ


    2. σʔλͷؔ࿈ੑ΍ଟॏ౓Λݕ౼
    ঎඼ ࡏݿ ஫จ ސ٬
    ސ٬
    ஫จ
    ஫จ
    ஫จ
    ஫จ
    ஫จ
    ஫จ
    1 0..*
    ஫จ
    ஫จ
    ஫จ
    ஫จ
    ஫จ
    ஫จ
    ঎඼
    1 1..*
    n..* : nҎ্
    1ͭͷސ٬͸0ճҎ্ʢෳ਺΋͋Δʣͷ஫จΛ͢Δ
    1ͭͷ஫จʹ͸1ͭҎ্ͷ঎඼͕ରԠ͢Δ

    View full-size slide

  98. σʔλϕʔεઃܭ
    3. ৄࡉͳ৘ใͷચ͍ग़͠
    ࡏݿ
    ঎඼*%
    ঎඼໊
    ࡏݿ਺
    ঎඼
    ঎඼*%
    ঎඼໊
    Ձ֨
    ஫จ
    ஫จ*%
    ஫จ಺༰
    ސ٬*%
    ଐੑ

    View full-size slide

  99. σʔλϕʔεઃܭ
    4. σʔλͷ੔ཧ
    ࡏݿ
    ঎඼*%
    ঎඼໊
    ࡏݿ਺
    ঎඼
    ঎඼*%
    ঎඼໊
    Ձ֨
    ஫จ
    ஫จ*%
    ஫จ಺༰
    ސ٬*%
    ஫จ໌ࡉ
    ஫จ*%
    ঎඼*%
    ஫จ਺
    ͍ΘΏΔਖ਼نԽΛ͢Δ. ͍Α͍Α࣍͸෺ཧઃܭ΁

    View full-size slide

  100. ࿦ཧઃܭ
    ෺ཧઃܭ

    View full-size slide

  101. σʔλϕʔεઃܭʢ෺ཧઃܭʣ
    • ෺ཧઃܭϑΣʔζ

    ࿦ཧઃܭͰఆٛ͞ΕͨσʔλΛ, ࣮ࡍͲͷΑ͏ʹ֨ೲ͢
    Δ͔ΛܾΊΔ
    • ҎԼ3ͭͷ޻ఔΛ౿ΜͰઃܭ͢Δ
    1. σʔλܕͷݕ౼
    2. ࡧҾ(ΠϯσοΫε)ͷ࡞੒
    3. จࣈίʔυ, σΟεΫྖҬ

    View full-size slide

  102. σʔλϕʔεઃܭ
    1. σʔλܕͷݕ౼

    ֨ೲ͍ͨ͠σʔλ͕ʮจࣈྻͰ͋Δ͔਺ࣈͰ͋Δ͔ʯ
    ΍ʮจࣈྻ͸Կจࣈ·Ͱ࢖༻Մೳ͔ʯʮ਺஋ͷ্ݶ͸
    ͍ͭ͘ʹ͢Δ͔ʯΛܾΊΔ
    ߲໨ σʔλܕ
    ঎඼*% ܻͷจࣈྻ
    ঎඼໊ ௕͕͞ʙͷจࣈྻ
    Ձ֨ ܻ·Ͱͷ੔਺
    ঎඼ςʔϒϧ

    View full-size slide

  103. σʔλϕʔεઃܭ
    2. ΠϯσοΫεͷ࡞੒

    සൟʹݕࡧ͞ΕΔσʔλʹؔͯ͠͸, ΠϯσοΫεΛઃ
    ఆ͓ͯ͘͜͠ͱͰߴ଎ʹܭࢉ͢Δ͜ͱ͕Մೳ.
    ߲໨ σʔλܕ ͦͷଞ
    ঎඼*% ܻͷจࣈྻ
    ࡏݿ਺ ௕͕͞ʙͷจࣈྻ */%&9
    ࡏݿςʔϒϧ

    View full-size slide

  104. σʔλϕʔεઃܭ
    3. จࣈίʔυ, σΟεΫྖҬͷઃఆ
    1. σʔλϕʔεʹ֨ೲ͢Δจࣈྻͷจࣈίʔυ

    ਖ਼͘͠ઃఆ͠ͳ͍ͱจࣈԽ͚ͷݪҼʹ
    2. ׂΓ౰ͯΔσΟεΫྖҬ

    σΟεΫͷׂ౰ྔ͕গͳ͍ͱ, σʔλΛ֨ೲ͖͠Ε
    ͳ͘ͳͬͯ͠·͏

    View full-size slide

  105. ໨࣍
    1. ఏڙ͢ΔαʔϏεͷݕ౼
    2. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    3. ωοτϫʔΫߏ੒ͷݕ౼
    4. αʔόߏ੒ͷݕ౼
    5. αʔόج൫ͷݕ౼
    6. ෛՙ෼ࢄ
    7. αʔόઃܭɾߏங
    8. σʔλϕʔεઃܭ
    9. ΞϓϦέʔγϣϯઃܭ
    10.ϩάӡ༻
    11.WebαΠτͷύϑΥʔϚϯε
    12.੬ऑੑ਍அ

    View full-size slide

  106. ΞϓϦέʔγϣϯઃܭ
    • ఏڙ͢ΔαʔϏεͷ಺༰͔Β, جຊઃܭͱৄࡉઃܭΛߦ
    ͍, ͦͷઃܭ಺༰ΛݩʹϓϩάϥϜ, ςετΛߦͳ͏
    1. جຊઃܭ
    2. ৄࡉઃܭ
    3. ςετ
    • ࠓճ΋γϣοϐϯάαΠτΛྫʹઆ໌

    View full-size slide

  107. جຊઃܭ
    ৄࡉઃܭ
    ςετ

    View full-size slide

  108. ΞϓϦέʔγϣϯઃܭʢجຊઃܭʣ
    • جຊઃܭʢ֎෦ઃܭʣϑΣʔζ

    ఏڙ͍ͨ͠αʔϏεʹج͍ͮͯ, ΞϓϦέʔγϣϯͷಈ
    ࡞ϑϩʔΛઃܭ
    ‣ ۩ମతʹ͸,
    - ΞϓϦέʔγϣϯ͕࣋ͭ΂͖ػೳҰཡ
    - ը໘ͷϨΠΞ΢τ
    - ΞϓϦέʔγϣϯͷߏ੒ਤ

    View full-size slide

  109. ΞϓϦέʔγϣϯઃܭʢجຊઃܭʣ
    ը໘දࣔ ஫จొ࿥ ࡏݿҾ౰
    ܾࡁॲཧ
    ϩάΠϯ
    ϦΫΤετॲཧ
    γϣοϐϯάαΠτ
    ΞϓϦέʔγϣϯΛߏ੒͢ΔϓϩάϥϜɿ
    Ϟδϡʔϧ
    ΞϓϦέʔγϣϯͷߏ੒

    View full-size slide

  110. جຊઃܭ
    ৄࡉઃܭ
    ςετ

    View full-size slide

  111. ΞϓϦέʔγϣϯઃܭʢৄࡉઃܭʣ
    • ৄࡉઃܭʢ಺෦ઃܭʣϑΣʔζ

    ۩ମతʹͲͷϞδϡʔϧΛ࡞੒͢Ε͹ྑ͍͔Λݕ౼ɾઃ
    ܭΛߦ͏
    ‣ ۩ମతʹ͸,
    - Ϟδϡʔϧͷॲཧ಺༰
    - Ϟδϡʔϧؒͷ࿈ܞํ๏
    - ը໘ͷભҠϑϩʔ

    View full-size slide

  112. جຊઃܭ
    ৄࡉઃܭ
    ςετ

    View full-size slide

  113. ΞϓϦέʔγϣϯઃܭʢςετʣ
    • ςετ

    ࡞੒׬ྃͷޙ, ΞϓϦέʔγϣϯͷςετΛߦͳ͏
    ‣ ୯ମςετ(Ϣχοτςετ)

    Ϟδϡʔϧ୯ҐͰߦͳ͏ςετ
    ‣ ࿈݁ςετ

    Ϟδϡʔϧಉ࢜Λ݁߹ͨ͠ঢ়ଶͰ, جຊઃܭͲ͓Γʹ
    ಈ࡞͢Δ͔Λ֬ೝ͢Δςετ

    View full-size slide

  114. ໨࣍
    1. ఏڙ͢ΔαʔϏεͷݕ౼
    2. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    3. ωοτϫʔΫߏ੒ͷݕ౼
    4. αʔόߏ੒ͷݕ౼
    5. αʔόج൫ͷݕ౼
    6. ෛՙ෼ࢄ
    7. αʔόઃܭɾߏங
    8. σʔλϕʔεઃܭ
    9. ΞϓϦέʔγϣϯઃܭ
    10.ϩάӡ༻
    11.WebαΠτͷύϑΥʔϚϯε
    12.੬ऑੑ਍அ

    View full-size slide

  115. ϩάӡ༻
    • ϩάϑΝΠϧ

    αʔό΍ωοτϫʔΫػثͷಈ࡞தͷঢ়ଶͷมԽ΍ΞΫηε
    ͞Εͨܗ੻ͳͲΛه࿥͢ΔςΩετϑΝΠϧ
    ‣ γεςϜϩά

    OSͷΠϕϯτ΍ΤϥʔΛه࿥
    ‣ ΞϓϦέʔγϣϯϩά

    ΞϓϦέʔγϣϯͷಈ࡞Λه࿥
    ‣ ΞΫηεϩά

    WebαʔόͳͲ͕ड͚ͨϦΫΤετΛه࿥

    View full-size slide

  116. ϩάӡ༻
    γεςϜϩά TZTMPH

    0DUBSUFNJTIUUQE
    0DUBSUFNJTSD4UBSUJOHIUUQETVDDFFEFE
    0DUBSUFNJTJOFUJOFUETUBSUVQTVDDFFEFE
    0DUBSUFNJTTTIE<>-JTUFOFSDSFBUFEPOQPSU
    0DUBSUFNJTTTIETTIETUBSUVQTVDDFFEFE
    0DUBSUFNJTTTIE<>%BFNPOJTSVOOJOH
    Ҿ༻ɿhttp://www.itmedia.co.jp/help/howto/linux/0007master/04/06.html
    σʔλϕʔεͱͷ઀ଓʹࣦഊ͠·ͨ͠
    σʔλϕʔεͱͷ઀ଓʹࣦഊ͠·ͨ͠
    σʔλϕʔεͱͷ઀ଓʹࣦഊ͠·ͨ͠
    σʔλϕʔεʹϢʔβΛ௥Ճ
    ΞϓϦέʔγϣϯϩά

    View full-size slide

  117. ϩάӡ༻
    • ϩάϑΝΠϧ͔Β͸, ʮػث΍ΞϓϦέʔγϣϯͷΤ
    ϥʔ৘ใʯ΍ʮෆਖ਼ͳΞΫηεͷܗ੻ʯͳͲͷ༗ӹͳ
    ৘ใ͕ه࿥͞Ε͍ͯΔ
    ‣ ͔͠͠, શͯΛ࢒͓ͯ͘͠ͱσΟεΫΛѹഭ͢Δ
    ‣ ద౰ͳλΠϛϯάͰผͷϑΝΠϧʹ੾Γ෼͚ͨΓ, ݹ
    ͍΋ͷΛ࡟আ͢Δ
    - ϩάӡ༻

    View full-size slide

  118. ϩάӡ༻
    • ϩάϩʔςʔγϣϯ

    ͋Δ୯Ґʢ1೔, 1िؒ, 1ϲ݄ʣor ͋ΔαΠζ(100MB,
    500MBʣͰϩάϑΝΠϧΛ੾Γ෼͚, ݹ͍ϩάΛόοΫ
    ΞοϓϑΝΠϧʹҠߦຢ͸࡟আ͢Δ͜ͱ
    ‣ ϋ΢εΩʔϓͱ΋ݺ͹ΕΔ

    View full-size slide

  119. ϩάӡ༻
    YYYYYY
    YYYYYY
    YYYYYY
    YYYYYY
    YYYYYY
    YYYYYY
    YYYYYY
    YYYYYY
    YYYYYY
    YYYYYY
    ௥ه͞Εଓ͚Δͱ σΟεΫ༰ྔΛѹഭ͠
    Մಡੑ΋௿Լ͢Δ
    YYYYYY
    YYYYYY
    YYYYYY
    YYYYYY
    YYYYYY
    YYYYYY
    ɾ೔෇͝ͱʹ෼ׂ͢Δ
    ɾ˓೔લͷϑΝΠϧ͸࡟আͱ͍͏ӡ༻ʹ͢Δ
    YYYYYY
    YYYYYY
    YYYYYY
    ϩάϩʔςʔγϣϯͳ͠
    ϩάϩʔςʔγϣϯ͋Γ

    View full-size slide

  120. ϩάӡ༻
    • ΞΫηεϩάղੳ

    ͲͷαΠτ͔Β༠ಋ͞Εͨͷ͔, ͲͷΑ͏ͳΩʔϫʔυ
    ͰΞΫηε͞Ε͔ͨ, ϖʔδ͝ͱͷΞΫηε਺, ίϯόʔ
    δϣϯ཰(CVR)ͳͲ͔ΒαΠτͷಈ޲Λղੳ͢Δ͜ͱ
    • ҎԼͷιϑτ΢ΣΞ͕༗໊
    ‣ ApacheLogViewer
    ‣ Visitors

    View full-size slide

  121. ໨࣍
    1. ఏڙ͢ΔαʔϏεͷݕ౼
    2. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    3. ωοτϫʔΫߏ੒ͷݕ౼
    4. αʔόߏ੒ͷݕ౼
    5. αʔόج൫ͷݕ౼
    6. ෛՙ෼ࢄ
    7. αʔόઃܭɾߏங
    8. σʔλϕʔεઃܭ
    9. ΞϓϦέʔγϣϯઃܭ
    10.ϩάӡ༻
    11.WebαΠτͷύϑΥʔϚϯε
    12.੬ऑੑ਍அ

    View full-size slide

  122. WebαΠτͷύϑΥʔϚϯε
    • ύϑΥʔϚϯε

    ϨεϙϯελΠϜ+Մ༻ੑʹΑͬͯධՁ͞ΕΔ, Web
    ϖʔδͷੑೳࢦඪ
    ‣ WebγεςϜ͸ར༻ऀ͕૿Ճ͢Ε͹͢Δ΄Ͳύ
    ϑΥʔϚϯε͕௿Լ͕ͪ͠
    ‣ ϨεϙϯελΠϜ͕1ඵͰ΋௿Լ͢Δͱ, ར༻ऀ͸ܶత
    ʹ௿Լ͍ͯ͠·͏
    - ߴ଎Խ͸ࢸ্໋୊

    View full-size slide

  123. ύϑΥʔϚϯεͷࢦඪ
    ύϑΥʔϚϯε؂ࢹ

    View full-size slide

  124. WebαΠτͷύϑΥʔϚϯε
    • ύϑΥʔϚϯεͷࢦඪ

    جຊతʹ, ϦΫΤετΛ͔ͯ͠ΒϨεϙϯε͕ฦͬͯ͘
    Δ·Ͱͷ࣌ؒΛܭଌ͠, ͦΕΛύϑΥʔϚϯεͱ͢Δ.
    • ܭଌํ๏͸ҎԼͷ༷ͳ΋ͷ͕͋Δ
    ‣ Ԡ౴࣌ؒ
    ‣ දࣔ׬ྃ࣌ؒ
    ‣ ϖʔδಡΈࠐΈ࣌ؒ
    ‣ Մ༻ੑ

    View full-size slide

  125. WebαΠτͷύϑΥʔϚϯε
    • Ԡ౴࣌ؒ

    HTTPϦΫΤετΛൃߦ͔ͯ͠Β, HTTPϨεϙϯε͕ฦͬͯ͘Δ·Ͱ
    ͷ࣌ؒ
    • දࣔ׬ྃ࣌ؒ

    HTTPϦΫΤετΛൃߦ͔ͯ͠Β, ը໘ͷඳը͕ऴྃ͢Δ·Ͱͷ࣌ؒ
    • ϖʔδಡΈࠐΈ࣌ؒ

    ϖʔδͷಡΈࠐΈ։͔࢝Β׬ྃ·Ͱͷ࣌ؒ
    • Մ༻ੑ

    Τϥʔͳ͘WebϖʔδʹΞΫηεͰ͖ͨ֬཰

    View full-size slide

  126. ύϑΥʔϚϯεͷࢦඪ
    ύϑΥʔϚϯε؂ࢹ

    View full-size slide

  127. WebαΠτͷύϑΥʔϚϯε
    • ύϑΥʔϚϯε؂ࢹ

    ఆظతʹύϑΥʔϚϯεΛ؂ࢹ͢Δ͜ͱͰύϑΥʔϚϯ
    εͷ௿ԼΛݕ஌͠, ݪҼΛௐࠪͯ͠ద੾ͳૢ࡞Λ͢Δ͜
    ͱͰѱԽΛ๷͙͜ͱ
    ‣ ݪҼௐࠪΛԁ׈ʹߦͳ͏ͨΊʹ, αʔόͷෛՙঢ়ଶ
    (CPU, ϝϞϦ)Λಉ࣌ʹ؂ࢹ͓ͯ͘͜͠ͱ΋ඞཁ

    View full-size slide

  128. WebαΠτͷύϑΥʔϚϯε
    • ύϑΥʔϚϯεΛৗ࣌؂ࢹ͓ͯ͘͜͠ͱͰ, Մ༻ੑΛ޲
    ্ͤ͞Δ͜ͱ΋Ͱ͖Δ
    • αʔό؂ࢹπʔϧʹ͸ҎԼͷ༷ͳ΋ͷ͕͋Δ
    ‣ Mackerel(Hatena)
    ‣ Zabbix(Zabbix)
    ‣ Pandora FMS(Artica ST)
    ‣ Nagios(Ethan Galstad)
    • ύϑΥʔϚϯε௿ԼͷݪҼ͸, ਪଌͤͣʹܭଌ͠Α͏

    View full-size slide

  129. ໨࣍
    1. ఏڙ͢ΔαʔϏεͷݕ౼
    2. ར༻ݴޠ, ιϑτ΢ΣΞͷݕ౼
    3. ωοτϫʔΫߏ੒ͷݕ౼
    4. αʔόߏ੒ͷݕ౼
    5. αʔόج൫ͷݕ౼
    6. ෛՙ෼ࢄ
    7. αʔόઃܭɾߏங
    8. σʔλϕʔεઃܭ
    9. ΞϓϦέʔγϣϯઃܭ
    10.ϩάӡ༻
    11.WebαΠτͷύϑΥʔϚϯε
    12.੬ऑੑ਍அ

    View full-size slide

  130. ੬ऑੑ਍அ
    • ֎෦ʹެ։͢ΔWebγεςϜʹ͓͍ͯ, ੬ऑੑରࡦ͸ඞ
    ਢͱ΋ݴ͑Δ
    • ߏங౰ॳʹରࡦΛߦͬͨͱͯ͠΋, ӡ༻͍ͯ͠Δؒʹ࢖
    ༻͍ͯ͠ΔOS΍ϛυϧ΢ΣΞʹ੬ऑੑ͕ൃݟ͞ΕΔ͜
    ͱ͕͋Δ
    ‣ ੬ऑੑ਍அσʔλϕʔεΛఆظతʹ֬ೝʢҎલʹ΋Ͱ
    ͖ͯͨCVE͋ͨΓ͕༗໊ʣ

    View full-size slide

  131. ੬ऑੑ਍அ
    • Ұํ, ࣗࣾͰ։ൃͨ͠ϥΠϒϥϦ, ϑϨʔϜϫʔΫ౳͸ࣗ
    ࣾͰ੬ऑੑΛௐࠪʢςετʣ͢Δඞཁ͕͋Δ
    • ࣮ࡍͷ߈ܸख๏Λ༻͍ͯWebγεςϜͷςετΛߦ͏
    ͜ͱΛϖωτϨʔγϣϯςετͱ͍͏.
    ‣ ࣮ࡍͷγεςϜʹ, SQLΠϯδΣΫγϣϯ΍DoS߈ܸ,
    σΟϨΫτϦτϥόʔαϧͳͲΛ࢓ֻ͚Δ

    View full-size slide

  132. ੬ऑੑ਍அ
    • ϖωτϨʔγϣϯςετπʔϧΛ࢖༻ͤͣ, ઐ໳ͷاۀ
    ʹґཔͯ͠੬ऑੑ਍அΛ͢Δ͜ͱ΋Մೳ
    ‣ ߴֹͰ͸͋Δ͕, πʔϧͰ͸ัଊ͖͠Εͳ͍੬ऑੑΛ
    ݟ͚ͭΔ͜ͱ΋Մೳʹ
    • ϖωτϨʔγϣϯςετ͸, WebγεςϜ͚ͩͰͳ͘, γ
    εςϜ΋ؚΊͯશମΛςετͰ͖Δͱ͍͏ར఺͕͋Δ

    View full-size slide

  133. ࢀߟϦϯΫ
    • Webٕज़ͷجຊ

    http://www.sbcr.jp/products/4797388817.html
    • PostgreSQLͱMySQLɺ࢖͏ͳΒͲͬͪʁ σʔλϕʔε
    ઐ໳Ո͕8ͭͷࢹ఺Ͱపఈൺֱʂ

    https://employment.en-japan.com/engineerhub/entry/
    2017/09/05/110000#݁࿦ͲͬͪΛͲΜͳαʔϏεʹ࢖
    ͏΂͖
    • ୈ4ճ ϓϥοτϑΥʔϜΛ࡞ΔPaaSΛཧղ͢Δ

    http://gihyo.jp/admin/serial/01/cloud_career/0004 _

    View full-size slide

  134. ࢀߟϦϯΫ
    • ϦΫΤετͷ෼ࢄػೳ

    http://www.fujitsu.com/jp/products/network/security-
    bandwidth-control-load-/ipcom/material/data/1/3.html
    • RAIDͱ͸

    http://www.hitachi.co.jp/products/it/storage-solutions/
    techsupport/basicknowledge/raid.html
    • ҆શͳ΢ΣϒαΠτͷߏஙͱӡ༻؅ཧʹ޲͚ͯͷ16ϲ
    ৚ ʙηΩϡϦςΟରࡦͷνΣοΫϙΠϯτʙ

    https://www.ipa.go.jp/security/vuln/websitecheck.html

    View full-size slide

  135. ࢀߟϦϯΫ
    • ϩάϩʔςʔγϣϯ

    https://www.nttpc.co.jp/yougo/
    %E3%83%AD%E3%82%B0%E3%83%AD%E3%83%BC
    %E3%83%86%E3%83%BC%E3%82%B7%E3%83%A7
    %E3%83%B3.html

    View full-size slide