Upgrade to Pro — share decks privately, control downloads, hide ads and more …

[SecHack367] What I can tell you as SecHack367 ...

[SecHack367] What I can tell you as SecHack367 Vehicle Security Team #SecHack365 #SecHack367

こちらはSecHack365 '18福岡回において,SecHack365 '17の卒業生としてのアドバイスなどについてまとめた公開用の資料です.

@_tokina23 Tokina(Himitu)

#SecHack365 #SecHack367

tokina (himitu)

August 22, 2018
Tweet

More Decks by tokina (himitu)

Other Decks in Technology

Transcript

  1. ࣗಈंηΩϡϦςΟνʔϜʴʁͷϝϯόʔ঺հ  n !P@IJ@SBOHPTUB o ࣗಈंηΩϡϦςΟ΍ɼंࡌγεςϜʹର ͢ΔϑΥϨϯδοΫͷݚڀʹैࣄɽ n !#BMJVT o

    ୺຤ؒωοτϫʔΫʹΑΔौ଺ղফͷ ݚڀʹैࣄ n !@UPLJOB o چ޿ౡࢢཱେֶʣిؾ௨৴େֶେֶӃ̎೥ o %ࣾʹೖࣾ༧ఆ o ͜Ε·ͰࣗಈंηΩϡϦςΟΛ͸͡Ί*P5 ηΩϡϦςΟʹैࣄ n !LJZPPPP o ϩϘοτٕज़ݚڀձɺߴઐ30#0$0/ɺ ߴઐηΩϡϦςΟίϯςετ౳ʹࢀՃ o ՄࢹԽγεςϜ΍ϩϘςΟΫεʹڵຯɽ n !4IJ@NB o GV[[JOH TZNCPMJDFYFDVUJPOͰιϑτ΢ΣΞͷ όάΛࣗಈͰݕ஌͢Δݚڀʹैࣄ n !JTFLBUVTJ͞Μ n !UJCCFST o ࣗવݴޠॲཧͷεϖγϟϦετ
  2. 9

  3. 4FD)BDL`ࣗಈंηΩϡϦςΟνʔϜͷྺ࢙ 18 / / >n40 / / / / /

    m1 IoTB"-* /I= WU %+G[ E;7M%#' E; !NJ ?AF 5H5]CANKk !d@ .Y GPS8R^C 5H5] &$l` !c\Qj ig3>n 9V !f= XZ6f= 2<b_: )(-aO 9V=SDP eh 7MTL &, 9VDP
  4. άϧʔϓͰͷ։ൃϓϩηεʢ݄ʙʣ 19   "  !60 2D?*'*: 1/$ 

       ".8A% 3& 2D?→ #  C0(v1) 3& <=,94 Unity<=,C0   )( 2D?#  #   Unity<=,7;@5  B+ 3&  7;@5C0 E> 3& @5$#  -+3& 3&
  5. !4IJ@NB ࣗ෼ͱ͍ۙ͜ͱΛ΍͍ͬͯΔਓͨͪͱ࿩͠߹͏͜ͱʹΑͬͯɺࣗ෼͕ؾʹͳ͍ͬͯ Δ͜ͱΛ௚઀ฉ͘͜ͱ͕Ͱ͖Δ఺͕͘͢͝Α͔ͬͨɻ άϧʔϓͰ΍Δ͜ͱΛڧ੍͢ΔͷͰ͸ͳ͘ɺҰਓͰ΍Δ͜ͱ͕Ͱ͖Δ؀ڥͰ΋͋Δ ͷͰ΍Γ͍ͨΑ͏ʹͰ͖Δײͩͬͨ͡ɻ nվળ఺ͱఏҊ Øٕज़͕ͱ͕Γ͍͗ͯͯ͢ɺ૬खʹ఻͑Δ͜ͱ͕͏·͘ͳ͍ਓʹͱͬͯ͸ͳ͔ͳ͔ධՁ ͯ͠΋Β͑ͣɺ͔ͳΓେมͩͬͨͱࢥ͏ɻϓϨθϯٕज़΍ਓؒ޻ֶʹֶ͍ͭͯͿػձ ͕͋ͬͨΒΑ͍ͷͰ͸ɻ Ø࡞ۀΛ෼୲͍ͯ͠ΔνʔϜͷ৔߹ɺϝϯόʔ͕Ұ࣌తʹൈ͚ͨ৔߹ʹඇৗʹۤ࿑͢Δ

    ͷͰ͸ɻใ࿈૬Λߦ͍΍͍͢؀ڥͮ͘Γɺͦͷ͓खຊ͕͋Ε͹Α͍ɻ Øҕһͷਓ͚ͩͰ͸ϑΥϩʔͰ͖ͳ͍ٕज़ྖҬɺϨϕϧͷਓ͕͍ΔͷͰɺࣗΒੵۃతʹ ৄ͍͠ਓͱίϯλΫτΛऔΔඞཁ͕͋ΔͷͰɺͦͷՍ͚ڮͱͳΔϝϯλʔ͕͍ͨ΄͏ ͕Α͍ͷͰ͸ɻ Øʮࣅ͍ͯΔ͔Βʯͱ͍͏ཧ༝ͰͷνʔϜ։ൃͰ͸ͳ͘ɺҰਓ͚ͩͰ΋ ׬݁Ͱ͖Δ࡞ۀྔͰɺίϥϘͰ͖ΔΑ͏ͳ࢓૊Έ͕΄͍͠ɻ 27