JVNに情報掲載した話

2017.04.12 総関西サイバーセキュリティLT大会
https://sec-kansai.connpass.com/event/50957/

Transcript

1. +7/ʹ৘ใܝࡌͨ͠࿩
   ૯ؔ੢αΠόʔηΩϡϦςΟ-5େձ
   CZ5.0500,"
   

   View Slide

2. ࣗݾ঺հ
   w 5.0500," !U@NPUPPLB
   
   w ৬ۀ
   w αʔό؅ཧऀ
   w 47(1%'औѻऀ
   w .BDJ048FCΞϓϦ։ൃऀ
   w झຯɿੜϩάΛ௥͍͔͚Δ͜ͱ
   w ৘ใηΩϡϦςΟεϖγϟϦετʢय़ʣ
   

   View Slide

3. +7/
   օ͞Μීஈݟͯ·͔͢ʁ
   
   
   

   View Slide

4. View Slide

5. +7/ͱ͸
   w +BQBO7VMOFSBCJMJUZ/PUFT
   w +1$&35ͱ*1"ͱͷڞಉӡӦ
   w ੬ऑੑ৘ใ͕೔ຊޠͱӳޠͰެ։͞ΕΔ
   w IUUQTKWOKQ
   

   View Slide

6. ͋Δ೔
   

   View Slide

7. lޚ͕ࣾ഑෍ͯ͠ΔΞϓϦɺ
   ੬ऑੑ͋Γ·ͬͤz
   

   View Slide

8. ໰୊ͷΞϓϦͷಛ௃
   w ഑෍͍ͯ͠ΔΞϓϦʢˠ8FCΞϓϦͰ͸ͳ͍ʣ
   w Ϣʔβ͕ࢦఆͨ͠αʔόʹ઀ଓ
   w ͦͷαʔό͔ΒσʔλΛμ΢ϯϩʔυ
   w ੔ܗͯ͠දࣔ
   w Ͳͷαʔό͔Βμ΢ϯϩʔυͨ͠ͷ͔΋දࣔ
   

   View Slide

9. ໰୊ͷΞϓϦͷಛ௃
   w ഑෍͍ͯ͠ΔΞϓϦʢˠ8FCΞϓϦͰ͸ͳ͍ʣ
   w Ϣʔβ͕ࢦఆͨ͠αʔόʹ઀ଓ
   w ͦͷαʔό͔ΒσʔλΛμ΢ϯϩʔυ
   w ੔ܗͯ͠දࣔ
   w Ͳͷαʔό͔Βμ΢ϯϩʔυͨ͠ͷ͔΋දࣔ
   

   View Slide

10. ࢦఠ͞Εͨ੬ऑੑ
    w ѱҙͷ͋ΔσʔλΛμ΢ϯϩʔυͤ͞Δͱɺ

    ઀ଓઌදࣔΛِ૷Ͱ͖ͯ͠·͏
    w ِ૷࣌ɿ44-5-4ূ໌ॻΤϥʔ΋ݕ஌Ͱ͖ͳ͍
    w .*5. .BOJOUIF.JEEMF
    ߈ܸΛݕ஌Ͱ͖ͳ͍
    w मਖ਼ࣗମ͸ଈ೔׬ྃͰ͖Δ಺༰
    

    View Slide

11. ԿΛ΍ͬͨͷ͔ʁ
    w मਖ਼
    w ࠶ݱςετɿಉ͡߈ܸ͕ޮ͔ͳ͍͜ͱΛ֬ೝ
    w *1"ʹใࠂ
    w ܝࡌ಺༰ͷଧͪ߹Θͤ
    w ରࡦόʔδϣϯͷެ։
    w ཌ೔ɺ+7/͔Βͷ৘ใ഑৴ˠϝσΟΞ΋औΓ্͛
    ଟ͘ͷར༻ऀ͕Ξοϓσʔτͯ͘͠Εͨ
    

    View Slide

12. *1"΁ͷใࠂ
    +7/ͷதʹϦϯΫ͋Γ
    

    View Slide

13. *1"΁ͷใࠂ
    w 8FCͱϝʔϧ
    w 8FC͸ʮ४උதʯ
    w ϝʔϧ͸1(1ਪ঑
    w ۙ೥Ͱ͸ଟ๩ʹͳ͖͍ͬͯͯΔ
    w ใࠂ͸͓ૣΊʹ
    w զʑͷ৔߹͸Ӧۀ೔ఔ౓Ͱɺ࠷ॳͷใࠂʹฦ৴
    

    View Slide

14. *1"΁ͷใࠂ
    w छྨ͸̐ͭ
    w ιϑτ΢ΤΞ੡඼੬ऑੑؔ࿈৘ใ
    w ΢ΣϒΞϓϦέʔγϣϯ੬ऑੑؔ࿈৘ใ
    w ݕূίʔυ
    w ࣗࣾ੡඼ʹؔ͢Δ੬ऑੑؔ࿈৘ใ
    w ͦΕͧΕɺ༷ࣜ΍هೖྫ͕ެ։͞Ε͍ͯΔ
    

    View Slide

15. ࠷ޙʹ
    w +7/
    w ʮઈରʹ҆શʯͳΜͯແ͍ɻ΋ͪΖΜࣗࣾ੡඼΋ɻ
    w ରࡦόʔδϣϯͷ഑෍खॱ
    w ߈ܸऀ͕߈ܸΛ։࢝͢Δલʹ৽όʔδϣϯΛ഑෍͍ͨ͠
    w ৽όʔδϣϯ΁ͷΞοϓσʔτΛଅ͢ࠂ஌

    ɹˠ+7/
    w ରࡦόʔδϣϯΛग़ͤͳ͍࣌ɿར༻தࢭΛଅ͢ɺͳͲ΋ݕ౼
    w େࣄͳ͜ͱɿར༻ऀΛޢΔ͜ͱ
    

    View Slide

16. ׬
    

    View Slide