Upgrade to Pro — share decks privately, control downloads, hide ads and more …

リモートワークを支える 社内セキュリティ基盤の構築と運用 /secueiry-for-wfh

リモートワークを支える 社内セキュリティ基盤の構築と運用 /secueiry-for-wfh

Internet Week 2020 で講演した資料です

Masayoshi Mizutani

November 24, 2020
Tweet

More Decks by Masayoshi Mizutani

Other Decks in Technology

Transcript

  1. 6

  2. ࣾ಺αʔϏεΛߏங͢Δ্Ͱͷݪଇ w ϦϞʔτϫʔΫ͕ʮಛผʯʹͳΒͳ͍Α͏ʹ͢Δ w #FGPSFίϩφ͔Βͷݪଇ w Ҏલ͔ΒϦϞʔτϫʔΫ΋Ұ෦ೝΊΒΕ͍ͯͨ w άϩʔόϧͷνʔϜ΋ݪଇಉ͡γεςϜΛ࢖͍ͬͯΔ w

    ࣾ಺*5νʔϜͷ࣋ͪ෺Λগͳ͘͢Δ w ෺ཧαʔόͷ؅ཧෛ୲ܰݮ w ΞϓϦέʔγϣϯͷϝϯςφϯεෛ୲ܰݮ w %3ػೳΛαʔϏεϓϩόΠμ΁Ҡৡ 
  3. ࣾ಺޲͚αʔϏεͷߏ੒֓ཁ wݪଇͱͯ͠4BB4Λ࢖͏ w υΩϡϝϯτ؅ཧɿ(PPHMF%SJWFɺ0OF%SJWF w ίϛϡχέʔγϣϯπʔϧɿ(NBJMɺ4MBDL w αʔϏεϚωδϝϯτπʔϧɿ4FSWJDF/PXɺ8PSLEBZɺ;FOEFTL w ϦϞʔτσεΫτοϓɿ"NB[PO8PSL4QBDFT

    wࣗ෼ͨͪͰαʔό؅ཧ͢Δඞཁ͕͋Δ΋ͷ͸"84্΁ w ϑΝΠϧαʔόɺ%)$1αʔόɺ"%%$αʔό wೝূೝՄ͸ݪଇ440͓Αͼ.'"Λར༻ w "[VSF"%ɺ(PPHMF4JHOJOͳͲ wͳΔ΂͘71/ʹཔΒͳ͍ w ଳҬɾ஗Ԇͷ໰୊ 
  4. ରࡦ  ֤αʔϏεʹ͓͚Δෆ৹ͳڍಈΛݕग़ wΫϥ΢υαʔϏε΁ͷෆ৹ߦಈݕग़ػೳΛ׆༻͢Δ w "84 (VBSE%VUZ (PPHMF "VEJUMPH ͳͲ

    w ௥Ճͷ࡞ۀͳͲಛʹͳ͘ར༻Մೳ wΫϥ΢υαʔϏεͷར༻ঢ়گΛ؂ࠪ͢Δ w શͯͷϩάΛ؂ࢹ͢Δͷ͸ෆՄೳͳͷͰ؂ࢹ͢Δର৅ΛߜΔ w $*4 $FOUFSGPS*OUFSOFU4FDVSJUZ #FODINBSLTΛࢀߟ w ࣗࣾͷϙϦγʔͳͲͱরΒ͠߹Θͤͯʮ໌֬ʹېࢭ͍ͯ͠ͳ͍͕͋·Γ๬·͠ ͘ͳ͍ߦҝʯΛ؂ࢹ 
  5. Ϋϥ΢υαʔϏε؂ࢹɿ6HVJTV w"84ͷ஫໨͢΂͖ΠϕϯτΛ 4MBDLʹ௨஌ w $MPVE5SBJMʢ؂ࠪϩάʣ͔Β֘ ౰ΠϕϯτΛநग़ w $*4CFODINBSLTΛࢀর w IUUQTEPDTBXTBNB[PODPN

    TFDVSJUZIVCMBUFTUVTFSHVJEF TFDVSJUZIVCDJTDPOUSPMTIUNM w ໋໊ͷ༝དྷ͸l᳉ுΓz  IUUQTHJUIVCDPNNNJ[VUBOJVHVJTV
  6. ରࡦ  ๷ޚ͚ͩͰͳ͘؂ࢹΛଟॏԽ w؂ࢹ͢ΔϙΠϯτΛෳ਺ʹ͢Δ͜ͱͰݕ஌࿙ΕΛ๷͙ w ԣͷల։ɿෳ਺ͷۀ຿༻αʔϏεͰͷ؂ࢹ w ॎͷల։ɿΤϯυϙΠϯτˠۀ຿༻αʔϏεˠࣗࣾαʔϏεج൫ w؂ࢹ͸߈ܸଆ͔Β؍ଌͰ͖ͳ͍ͨΊଟॏԽ͸༗༻ w

    ྫ͑͹ʮzඪతܕzϥϯαϜ΢ΣΞ߈ܸʯ͸εςϧεੑ͕௿͍ͱݴΘΕ͍ͯΔ w ؂ࢹϙΠϯτ͕ଟ͍͜ͱͰɺࠟ੻Λ࢒ͤΔՄೳੑ͕ߴ͘ͳΔ w ͨͩ͠ɺΞϥʔτൃใ਺͕૿Ճ͢Δͱ؂ࢹͷෛ୲͕େ͖͘ͳΔͨΊରࡦ͸ඞཁ  ࢀߟʮ40"3ʹΑΔηΩϡϦςΟ؂ࢹۀ຿ͷޮ཰Խͱ4FD0QTʯ$0%&#-6& IUUQTTQFBLFSEFDLDPNNJ[VUBOJTPBSBOETFDPQT
  7. ηΩϡϦςΟϩά؅ཧج൫ɿ.JOFSWB w"84"UIFOBΛར༻ͨ͠ ϩάݕࡧج൫Λߏஙɾӡ༻ w શจݕࡧγεςϜ w ࣾ಺αʔϏεɾΤϯυϙΠϯ τϩάɾ"84ϩάͳͲΛݕ ࡧՄೳ w

    ίετɿֹ݄ఔ౓  ࢀߟʮ"NB[PO"UIFOBΛ࢖ͬͨηΩϡϦςΟϩάݕࡧج൫ͷߏஙʯ IUUQTUFDIMJGFDPPLQBEDPNFOUSZ
  8. ରࡦ  ۀ຿σʔλ͓ΑͼγεςϜؔ࿈ϩάΛΫϥ΢υ΁อଘ w1$্ʹۀ຿σʔλΛۃྗ࢒͞ͳ͍Α͏ʹ͢Δ w (PPHMF%SJWF'JMF4USFBNͳͲΛ࢖͏͜ͱͰۀ຿σʔλΛΞοϓϩʔυ w ରԠϑΝΠϧͷฤूͳͲ͸ϒϥ΢β্Ͱ׬݁ͤ͞Δ wΫϥ΢υ্Ͱσʔλอޢ͢Δ͜ͱͰΠϯγσϯτʹର͢Δ଱ੑ͕ߴ·Δ w

    ϩʔΧϧɾΫϥ΢υ্ͷσʔλΛഁյ͞Εͯ΋ճ෮Մೳ w ϩʔΧϧͷσʔλΛࣺͯ΍͍͢ͷͰᝑମͷަ׵΋༰қ wϑΥϨϯδοΫʹར༻͢Δϩά΋Ϋϥ΢υ্΁ w $SPXE4USJLF'BMDPO &%3 &OEQPJOU%FUFDUJPO3FTQPOTF Ͱऔಘͨ͠ϩάΛΫϥ ΢υଆͰอ࣋͢Δ͜ͱͰ௥੻ͷͨΊͷ৘ใΛৗʹอશ w ᝑମ಺ͷσΟεΫΛϑΥϨϯδοΫ͢Δ͜ͱͳ͘Өڹൣғͷਪఆ͕༰қʹ