Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Deep Securityの運用TIPS
Search
Sponsored
·
Ship Features Fearlessly
Turn features on and off without deploys. Used by thousands of Ruby developers.
→
fnifni
November 21, 2016
Technology
1
570
Deep Securityの運用TIPS
2016年11月18日に開催された、トレンドマイクロ社主催のDIRECTIONで登壇した資料です。
fnifni
November 21, 2016
Tweet
Share
More Decks by fnifni
See All by fnifni
Azure Sentinel ~ 導入から2ヶ月間の運用の肌感 ~
fnifni21
2
890
踏み台環境におけるAmazon Maice活用の提案 #secjaws #secjaws08
fnifni21
0
2.6k
Deep Securityのホットデータを活用する ~AWS WAFの場合~
fnifni21
0
940
Other Decks in Technology
See All in Technology
Ruby版 JSXのRuxが気になる
sansantech
PRO
0
150
小さく始めるBCP ― 多プロダクト環境で始める最初の一歩
kekke_n
1
400
OWASP Top 10:2025 リリースと 少しの日本語化にまつわる裏話
okdt
PRO
3
710
CDKで始めるTypeScript開発のススメ
tsukuboshi
1
390
Bill One急成長の舞台裏 開発組織が直面した失敗と教訓
sansantech
PRO
2
370
AWS Network Firewall Proxyを触ってみた
nagisa53
1
220
GSIが複数キー対応したことで、俺達はいったい何が嬉しいのか?
smt7174
3
150
Claude_CodeでSEOを最適化する_AI_Ops_Community_Vol.2__マーケティングx_AIはここまで進化した.pdf
riku_423
2
550
MCPでつなぐElasticsearchとLLM - 深夜の障害対応を楽にしたい / Bridging Elasticsearch and LLMs with MCP
sashimimochi
0
160
GitLab Duo Agent Platform × AGENTS.md で実現するSpec-Driven Development / GitLab Duo Agent Platform × AGENTS.md
n11sh1
0
130
2026年、サーバーレスの現在地 -「制約と戦う技術」から「当たり前の実行基盤」へ- /serverless2026
slsops
2
240
Data Hubグループ 紹介資料
sansan33
PRO
0
2.7k
Featured
See All Featured
The Language of Interfaces
destraynor
162
26k
Redefining SEO in the New Era of Traffic Generation
szymonslowik
1
210
Navigating Team Friction
lara
192
16k
Chrome DevTools: State of the Union 2024 - Debugging React & Beyond
addyosmani
10
1.1k
Evolving SEO for Evolving Search Engines
ryanjones
0
120
How to build a perfect <img>
jonoalderson
1
4.9k
First, design no harm
axbom
PRO
2
1.1k
The innovator’s Mindset - Leading Through an Era of Exponential Change - McGill University 2025
jdejongh
PRO
1
90
StorybookのUI Testing Handbookを読んだ
zakiyama
31
6.6k
Crafting Experiences
bethany
1
48
Six Lessons from altMBA
skipperchong
29
4.1k
Product Roadmaps are Hard
iamctodd
PRO
55
12k
Transcript
cloudpack flow Deep Security operation TIPS The meaning of tuning
telling you softly
cloudpack ྲྀ Deep Security ͷӡ༻ TIPS νϡʔχϯάͷۃҙΛͦͬͱ͋ͳͨʹ
Who am I ? • ٢ాͻΖ͔ͣ ( hirokazu yoshida )
Security Engineer at cloudpack http://qiita.com/fnifni
607
ਪઃఆͷݕࡧͰ ਪ͞ΕΔ͜ͱ͕ͳ͍ϧʔϧୡ͕ ͋Γ·͢
දతͳਪ͞ΕΔ͜ͱ͕ͳ͍ϧʔϧୡ • 1000608 - Generic SQL Injection Prevention • 1000552
- Generic Cross Site Scripting(XSS) Prevention
͜ͷϧʔϧͬͯDSͷWAFػೳͰ͠ΐʁ ͳΜͰਪ͞Εͳ͍ͷʁ
ͩͬͯνϡʔχϯάେม͡ΌΜ ʢதͷਓஊʣ
ͦΜͳΘ͚Ͱ νϡʔχϯάϙΠϯτΛհ
ϧʔϧͷੑ࣭ΛΔ
ϧʔϧͷಛੑΛΔ • 1000608 Generic SQL Injection Prevention SQL ΠϯδΣΫγϣϯ߈ܸͰ Α͘ΘΕΔจࣈɾه߸Λ
ݕ͢Δϧʔϧ
ϧʔϧͷಛੑΛΔ • 1000552 Generic Cross Site Scripting(XSS) Prevention XSS߈ܸͰ Α͘ΘΕΔจࣈɾه߸Λ
ݕ͢Δϧʔϧ
߈ܸ௨৴ͱਖ਼ৗ௨৴ͷݟۃΊ
߈ܸ௨৴Λݕͨ͠έʔε GET /index.htm?mode=pc'+ORDEr+By+999+--+; HTTP/1.1 GET /?1=@ini_set(\"display_errors\", \"0\");@set_time_limit(0);@set_magic_quotes_runtime(0);echo '->|';file_put_contents(dirname(['SCRIPT_FILENAME']).'/cache/ cachee.php','<?php eval([1]);?>');echo
'|<-'; HTTP/1.1"
ਖ਼ৗ௨৴Λݕͨ͠έʔε token=uzWoZpwAFsGfXcosY86KcfWLGnMuNIonRM1+zorRM RHrRj8S2D4LbIztTXa58mT90g8U+3YnfFnEA6PNY2xLHg= token=uzWoZpwAFsGfXcosY86KcfWLGnMuNIonRM1%2Bzor RMRHrRj8S2D4LbIztTXa58mT90g8U %2B3YnfFnEA6PNY2xLHg%3D
Ͱ͜Εʁ POST /system/page/setting_tag HTTP/1.1 _method=POST&data[CompanyMaterial] [all_pages_tag]=<script>\r\n\tconsole.log('hoge');\r\n</ script>&data[CompanyMaterial][entry_complete_tag]=
ਖ਼ৗΛΒͳ͍ͱ ҟৗΛΔ͜ͱͰ͖·ͤΜ
γεςϜੜ͖ γεςϜͷݸੑΛΓ ʑͷӡ༻ͰݕΛΔ͜ͱ͕ νϡʔχϯάͷۃҙ
Thank you !