インシデントレスポンス演習II / Incident Response Exercise II

早稲田大学大学院経営管理研究科「サイバーセキュリティ」2026 夏の第13-14回(最終回)で使用したスライドです。

Transcript

1. Generated by Stable Image Core 2026 13-14 ( ) II (WBS) 2026 13-14 ( ) II — 2026-07-20 – p.1/22
2. https://speakerdeck.com/ks91/collections/cyber-security-2026-summer 2026 13-14 ( ) II — 2026-07-20 – p.2/22
3. (← ) 1 6 8 (1) • 2 6 8 (2) • 3 6 15 (1) • 4 6 15 (2) • 5 6 22 I (1) ( ) • 6 6 22 I (2) ( ) • 7 6 29 (1) ( ) • 8 6 29 (2) ( ) • 9 7 6 (1) • 10 7 6 (2) • 11 7 13 (1) • 12 7 13 (2) • 13 7 20 II (1) ( ) • 14 7 20 II (2) ( ) • W-IOI / ( ) 2026 13-14 ( ) II — 2026-07-20 – p.3/22
4. ( 20 ) 1 • 2 • 3 • 4 (TCP/IP ) • 5 • 6 • 7 • 8 • 9 • 10 World Wide Web • 11 Web API • 12 • 13 git GitHub • 14 • / / OK / 2026 13-14 ( ) II — 2026-07-20 – p.4/22
5. ( ) 2026 13-14 ( ) II — 2026-07-20 – p.5/22
6. II 2026 13-14 ( ) II — 2026-07-20 – p.6/22
7. 2026 13-14 ( ) II — 2026-07-20 – p.7/22
8. 6. (1) ( ) (2) I HLO 2026 7 16 ( ) 23:59 JST Waseda Moodle (Q & A ) 2026 13-14 ( ) II — 2026-07-20 – p.8/22
9. . . . . . . 28 27 (7/17( ) ) ( ) Gemma 4 31B (310 ) ( LLM) 2026 13-14 ( ) II — 2026-07-20 – p.9/22
10. II 10 2026 13-14 ( ) II — 2026-07-20 – p.10/22
11. 4 Discord AI (GM) NPC ( ) 202X → @mentions 2026 9 21 ( ) ( ) ( ) 91 21:35 21:25 10 21:25 21:35 2026 13-14 ( ) II — 2026-07-20 – p.11/22
12. ( 2026 ) ( ) A HLO 2026 13-14 ( ) II — 2026-07-20 – p.12/22
13. HarborLink Orchestrator (HLO) HarborLink P O R T O R C H E S T R AT I O N P L AT F O R M B2B SaaS HarborLink Orchestrator (HLO) CEO : : 16 : 800 : HLO ( ) 2026 13-14 ( ) II — 2026-07-20 – p.13/22
14. (NPC) AI (NPC : Non Player Character) @ ( ) @ceo : CEO ( ) : @cto : CTO ( ) : @eng : : , , @cr : : @pr : HLO : (CEO ) ( ) @ir : : ( ) @personnel : : @sns : W : @tv : TV : @police : ( ) : @meti : : @ppc : : @nco : : ← NEW! @ally : and/or CERT (Computer Emergency Response Team) ← NEW! @attacker : 2026 13-14 ( ) II — 2026-07-20 – p.14/22
15. (GM) NPC @gm : ( ) discord-agent-hub (WBS ) GM NPC agent-hub 1 1 agent-hub @ ( OK) GM NPC 2026 13-14 ( ) II — 2026-07-20 – p.15/22
16. (cto) (eng) – (1/1) (attribution) ( ) 2026 13-14 ( ) II — 2026-07-20 – p.16/22
17. 10 CEO CSIRT (Computer Security Incident Response Team) 1 CISO ( ) ← : ( ) 1 GM ( ) ( 5 ) CSIRT Zoom (19:30 ∼) ( ) Dropbox CTO ( ) CSIRT CEO (→ CEO CTO ) CSIRT Zoom 2026 13-14 ( ) II — 2026-07-20 – p.17/22
18. 10 GM GM (19:40 ) 20:30 10 21:25 21:35 Zoom Dropbox URL 2026 13-14 ( ) II — 2026-07-20 – p.18/22
19. . . . 1 : 2, 3, 4 2 : 3, 4, 5 3 : 4, 5, 6, 1 4 : 5, 6, 1, 2 5 : 6, 1, 2, 3 6 : 1, 2, 3, 4 2026 13-14 ( ) II — 2026-07-20 – p.19/22
20. 2026 13-14 ( ) II — 2026-07-20 – p.20/22
21. 7. 2026 7 27 ( ) 23:59 JST Waseda Moodle (Q & A ) 2026 13-14 ( ) II — 2026-07-20 – p.21/22
22. ( ) 2026 13-14 ( ) II — 2026-07-20 – p.22/22