Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Hardening 1010 CashFlow 大阪 振り返り会 (2017/7/13) #9...
Search
Jun Matsumoto
July 20, 2017
Technology
0
300
Hardening 1010 CashFlow 大阪 振り返り会 (2017/7/13) #9 NearMULL
2017/6/23,24 に開催された Hardening 1010 CashFlow (#h1010cf)
#9 NearMULL 大阪振り返り会(2017/7/13)
Jun Matsumoto
July 20, 2017
Tweet
Share
More Decks by Jun Matsumoto
See All by Jun Matsumoto
OWASP ZAP 簡単な使い方
jun_matsumoto
3
2.8k
Other Decks in Technology
See All in Technology
決済サービスを支えるElastic Cloud - Elastic Cloudの導入と推進、決済サービスのObservability
suzukij
0
280
型を書かないRuby開発への挑戦
riseshia
0
200
When an innocent-looking ListOffsets Call Took Down Our Kafka Cluster
lycorptech_jp
PRO
0
110
生成AIの利用とセキュリティ /gen-ai-and-security
mizutani
1
1.5k
AWS SES VDMで 将来の配信事故を防げた話
moyashi
0
210
Shifting from MCP to Skills / ベストプラクティスの変遷を辿る
yamanoku
4
710
「ストレッチゾーンに挑戦し続ける」ことって難しくないですか? メンバーの持続的成長を支えるEMの環境設計
sansantech
PRO
3
400
AWSをCLIで理解したい! / I want to understand AWS using the CLI
mel_27
2
220
Ultra Ethernet (UEC) v1.0 仕様概説
markunet
3
230
開発組織の課題解決を加速するための権限委譲 -する側、される側としての向き合い方-
daitasu
5
320
「Blue Team Labs Online」入門 - みんなで挑むログ解析バトル
v_avenger
0
130
20260305_【白金鉱業】分析者が地理情報を武器にするための軽量なアドホック分析環境
yucho147
2
210
Featured
See All Featured
Why Your Marketing Sucks and What You Can Do About It - Sophie Logan
marketingsoph
0
100
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
47
8k
Build The Right Thing And Hit Your Dates
maggiecrowley
39
3.1k
Applied NLP in the Age of Generative AI
inesmontani
PRO
4
2.1k
How to Get Subject Matter Experts Bought In and Actively Contributing to SEO & PR Initiatives.
livdayseo
0
81
The World Runs on Bad Software
bkeepers
PRO
72
12k
A better future with KSS
kneath
240
18k
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
smashingmag
254
22k
Skip the Path - Find Your Career Trail
mkilby
1
72
Save Time (by Creating Custom Rails Generators)
garrettdimon
PRO
32
2.4k
Visualization
eitanlees
150
17k
Unlocking the hidden potential of vector embeddings in international SEO
frankvandijk
0
200
Transcript
None
ࣗݾհ ∗ ·ͭͱ ͡ΎΜʢHardeningॳࢀՃʣ ∗ ։ൃʢϓϩάϥϚʣ→ωοτϫʔΫɾγ εςϜཧ→ใγεςϜ→։ൃʢηΩ ϡϦςΟؔ࿈ʣ 2
ڝٕ։͔࢝Β1࣌ؒऑ
WebαΠτվ͟Μ
∗ ݕ ∗ ޡݕ Barracuda WAF
None
ใڞ༗ͷαΠΫϧ
None
∗ ޕલதɺࡏݿΛΒͯ͠͠·ͬͨ… ࣦഊ 1 "! "8 $ ; I_500` I
3T^Z> I_500` I VKXPLPQ^Y� 2000 500 150000 300 125000 250 9+N^PR^� 100 700 210000 420 175000 350 @HFA� 500 30000 9000000 18000 7500000 15000 -2R\U� 100 3000 900000 1800 750000 1500 O^R^J]SM^� 1000 4000 1200000 2400 1000000 2000 PWZ05� 2000 5000 1500000 3000 1250000 2500 (.#CNP[� 100 10000 3000000 6000 2500000 5000 -C7� 600 15000 4500000 9000 3750000 7500 BEG*� 600 900 270000 540 225000 450
∗ ࡏݿՃͱೖΕͷᴥᴪ Ø ٗࢣ Patrick Hurley͞Μ ͷϚΠφεൃͰࡏݿ͕ ૿͍͑ͯͨʁ Ø ࡏݿใࠂͷλΠϛϯά (14:00, 17:00) Ͱൃ֮
∗ ࡏݿ͕૿͑ͨͷͰ ࠂΛग़ͯ͠ചΔͧʂ Λमਖ਼͢Δ ࣦഊ 2
είΞੳ 1 Team� 4:D8 � <� ='� 3'� '� /%'�
6'� 1 6906780 14 2400 2800 2600 2100 300 2 23380397 7 2600 2600 2600 2900 1000 3 54284400 1 3000 3000 2900 2835 0 4 7678260 13 2400 2500 2300 15375 0 5 26962776 5 2400 2700 2500 500 1700 6 14385551 11 3000 3300 3100 1775 0 7 32919260 3 2400 2700 2500 1925 1800 8 15927099 10 2400 2700 2500 1120 2000 9 19625350 8 2400 2700 2500 1075 6600 10 17194924 9 2600 2600 2500 1270 1800 11 25319470 6 2400 2700 2600 7020 1200 12 30367854 4 2600 2700 2600 190 2000 13 36963410 2 2400 2800 2600 11900 1800 14 10060614 12 2400 2600 2400 16000 1200 15 -17931510 15 2400 2600 2400 16740 1200
None
είΞੳ 2 Team� 4:D8 � <� ,PNJ� <� '/&'� &)�
1� 1 6906780 14 7674200 14 -767420 -0.10 ?� 2 23380397 7 51956437 2 -28576040 -0.55 ?� 3 54284400 1 60316000 1 -6031600 -0.10 ?� 4 7678260 13 17062800 11 -9384540 -0.55 ?� 5 26962776 5 29958640 7 -2995864 -0.10 ?� 6 14385551 11 16145400 12 -1759849 -0.11 ?� 7 32919260 3 29926600 8 2992660 0.10 36 � 8 15927099 10 33869430 4 -17942331 -0.53 ?� 9 19625350 8 39250700 3 -19625350 -0.50 ?� 10 17194924 9 17368610 10 -173686 -0.01 ?� 11 25319470 6 23017700 9 2301770 0.10 � 12 30367854 4 30674600 6 -306746 -0.01 ?� 13 36963410 2 33603100 5 3360310 0.10 a?� 14 10060614 12 11178460 13 -1117846 -0.10 ?� 15 -17931510 15 -19923900 15 1992390 -0.10 ?�
∗ ࡏݿ Ø ECཧαΠτΛਅͬઌʹ֬ೝ Ø ചΕے / ߴऩӹΛઈ͞ͳ͍ Ø ਖ਼֬ʹཧʢೖΕʣ ∗ ϚΠφεධՁ (-10%) Ø hardening ΞΧϯτ
Ø ࡞ۀใࠂॻ Ø ෆਖ਼ߦҝɺ΄͔ ∗ ϑΝΠϯϓϨΠ (+??%) Ø ʮڝٕഎܠʯʹࠐ·ΕͨωλΛಡΈղ͘ ·ͱΊ
͋Γ͕ͱ͏͍͟͝·ͨ͠ʂ