Upgrade to Pro — share decks privately, control downloads, hide ads and more …

弱いパスワードの作り方

Sho Ezawa
October 18, 2017

 弱いパスワードの作り方

社内用に作ったパスワードに関する情報まとめ。

イラスト:いらすとや
テンプレート:Azusa
http://sanographix.github.io/azusa-colors/

Sho Ezawa

October 18, 2017
Tweet

More Decks by Sho Ezawa

Other Decks in Technology

Transcript

  1. ऑ͍
    ύεϫʔυ
    ͷ࡞Γํ
    by @glico20

    View Slide

  2. ߐᖒ ঘ @glico20
    READYFOR᷂ͷΤϯδχΞ
    ৘ใηΩϡϦςΟεϖγϟϦετ ࢿ֨อ࣋ऀ
    READYFORϘʔυήʔϜ෦ɹ෦௕
    READYFORΧϥΦέ෦ɹ෭෦௕

    View Slide

  3. ڧ͍ύεϫʔυͬͯԿʁ

    View Slide

  4. ऑ͍ύεϫʔυ
    ͳΒ؆୯ʂ

    View Slide

  5. ໨త
    ऑ͍ύεϫʔυͷύλʔϯΛ஌ͬͯɺ
    ࢖͍ͬͯΔύεϫʔυͷڧ౓Λ޲্͞
    ͤΔ

    View Slide

  6. ର৅
    ࣗ෼ͷύεϫʔυڧ౓ʹࣗ৴͕ແ͍ํ
    ੲͷύεϫʔυΛͣͬͱ࢖͍ͬͯΔํ
    ύεϫʔυ͕όϨΔͱେࢂࣄʹͳΔํ

    View Slide

  7. ̍ɽ࢖ΘΕ͗ͯ͢όϨόϨ

    View Slide

  8. ̍ɽ࢖ΘΕ͗ͯ͢όϨόϨ
    123456
    123456789
    111111
    qwerty
    password
    19890822
    tanaka0822
    ೥΋ͨ͘͞Μ
    ࿙Ӯͨ͠ύεϫʔυͨͪ
    ஀ੜ೔͘Β͍ͳΒ4/4
    ͳͲͰ؆୯ʹ෼͔Δ࣌୅

    View Slide

  9. ࠷ऑͷύεϫʔυ
    ઐ໳஌͕ࣝͳͯ͘΋਺ඵͰಥഁͰ͖Δύεϫʔ
    υͰ͢ɻ
    ࢓ࣄͷࢿྉʹΞΫηεͰ͖ΔPC΍εϚϗͷ
    ϩοΫύεϫʔυͰ͸ઈରʹར༻͠ͳ͍Α͏
    ʹ͠·͠ΐ͏ɻ

    View Slide

  10. ̎ɽͱʹ͔͘୹͍ˍӳࣈ͚ͩ

    View Slide

  11. ̎ɽͱʹ͔͘୹͍ˍӳࣈ͚ͩ
    wikipedia ΑΓൈਮ

    View Slide

  12. ϒϧʔτϑΥʔε߈ܸͰҰൃ
    ୹͍ύεϫʔυ͸ϒϧʔτϑΥʔε߈ܸʢ૯
    ౰ΓʣʹΑΓඵࡴ͞Ε·͢ɻ
    લεϥΠυͷσʔλ͸2008೥ͷ΋ͷͳͷͰɺ
    ࠓͳΒॠ͖ఔ౓ͷ࣌ؒͰղಡՄೳͰ͢ɻ

    View Slide

  13. ̏ɽࣙॻʹ͋Δ୯ޠͷΈ

    View Slide

  14. ̏ɽࣙॻʹ͋Δ୯ޠͷΈ
    service
    baseball
    America
    mickey
    internet
    secret0822
    baseball0822
    Ұൠతͳ୯ޠɺਓ໊ɺ஍໊
    ͳͲ
    ஀ੜ೔ͳͲͷόϨ΍͍͢਺
    ࣈͱͷ૊Έ߹Θͤ΋ऑ͍

    View Slide

  15. ࣙॻ߈ܸͷඪతʹ
    ࣙॻ߈ܸ͸ͦͷ໊ͷ௨ΓɺࣙॻσʔλΛ࢖ͬ
    ͯύεϫʔυΛಥഁ͠Α͏ͱ͢Δ߈ܸɻ
    ௕͍ύεϫʔυͰ΋ࣙॻʹࡌ͍ͬͯΔ୯ޠͩ
    ͚Ͱ͸ɺ͙͢ʹಥഁ͞ΕΔՄೳੑେͰ͢ɻ

    View Slide

  16. ̐ɽ࢖͍ճ͠

    View Slide

  17. ̐ɽ࢖͍ճ͠
    શͯͷαΠτͰ
    ಉ͡ύεϫʔυ
    ࢓ࣄͰ࢖͏ύεϫʔυ΋
    શ͘ಉ͡

    View Slide

  18. ύεϫʔυϦετ߈ܸ
    ผͷWebαΠτ͔Β࿙ΕͨύεϫʔυΛϦετ
    Խ͠ɺͦΕΛ࢖ͬͯύεϫʔυΛಥഁ͢Δ߈ܸ
    ࢓ࣄͰ΋ಉ͡ύεϫʔυΛ࢖͍ͬͯΔͱେࢂࣄ
    ʹͳΔ͜ͱ΋…ɻ

    View Slide

  19. ·ͱΊ

    View Slide

  20. ऑ͍ύεϫʔυͨͪ
    1. ࢖ΘΕ͗ͯ͢όϨόϨ
    2. ͱʹ͔͘୹͍ˍӳࣈ͚ͩ
    3. ࣙॻʹ͋Δ୯ޠͷΈ
    4. ࢖͍ճ͠

    View Slide

  21. ͓·͚

    View Slide

  22. ऑ͘ͳ͍
    ύεϫʔυ

    View Slide

  23. ʮύεϑϨʔζʯ

    View Slide

  24. ʮύεϑϨʔζʯͬͯʁ
    ΞϝϦΧࠃཱඪ४ٕज़ݚڀॴ(NIST)͕ਪ঑͢Δɹ
    ࠷௿64จࣈͰεϖʔε΋ೖΕΒΕΔύεϫʔυ
    ex)

    Everything that’s worth doing is actually pretty
    hard and takes a lot of work. There are no short
    cuts. (103จࣈ)

    - ϚʔΫɾβοΧʔόʔάࢯͷϋʔόʔυେֶଔۀࣜεϐʔνΑΓൈਮ

    View Slide

  25. ʮύεϑϨʔζʯͷϝϦσϝ
    ϑϨʔζʹ͢Ε͹௕ͯ͘΋֮͑΍͘͢ɺܻ਺͕ଟ͍ͷͰղ
    ಡ͞Εʹ͍͘ɻ(NISTͷݟղ)
    ͔͠͠ɺ

    ೖྗ͕ΊΜͲ͍͘͞͠ɺࣗಈೖྗʹ͢Δͱ௕ͯ͘๨Ε΍͢
    ͘ɺ୯ޠͰߏ੒͞Ε͍ͯΔͷͰࣙॻ߈ܸʹڧ͍ͷ͔ٙ໰ɻ
    ͦ΋ͦ΋ɺ·ͩεϖʔεΛؚΜͩύεϫʔυΛ࢖͑ΔWeb
    αΠτ͕΄΅ͳ͍ɻ(ݸਓͷݟղ)

    View Slide

  26. ͦ͜Ͱ

    View Slide

  27. ୹ॖύεϑϨʔζ

    View Slide

  28. ୹ॖύεϑϨʔζ
    ͋ͳͨͱաͨ͝͠೔ʑΛ ͜ͷڳʹম͖෇͚Α͏ɹ
    ࢥ͍ग़͞ͳͯ͘΋ େৎ෉ͳΑ͏ʹ
    anatato sugoshita hibiwo kono muneni yaki
    tukeyou omoidasa nakutemo daijyoubu
    nayouni
    ashkmytondn → @ShkmYt0nDn
    Ͳ΍ͬ

    View Slide

  29. ࢀߟ
    • ϑϨʔζɿʮΨʔωοτʯ(Ԟ՚ࢠ)ͷՎࢺΑΓ
    • ݩωλɿ

    ອըʮԦ༷ͨͪͷϰΝΠΩϯάʯʢখֶؗʣ
    ୈ̎רΑΓ

    View Slide