Upgrade to Pro — share decks privately, control downloads, hide ads and more …

脅威モデリングで考える Kubernetes セキュリティ / CloudNative Day...

mrtc0
November 04, 2021

脅威モデリングで考える Kubernetes セキュリティ / CloudNative Days Tokyo 2021 #CNDT2021 #CNDT2021_B

mrtc0

November 04, 2021
Tweet

More Decks by mrtc0

Other Decks in Programming

Transcript

  1. 453*%& ڴҖ ҙຯ ྫ 4QPPpOH ͳΓ͢·͠ ଞϢʔβʔ΁ͷͳΓ͢·͠ ωοτϫʔΫ্Ͱͷผ୺຤΁ͷͳΓ͢·͠ 5BNQFSJOH վ᜵ɺσʔλͷมߋ

    ϑΝΠϧ΍%#ɺωοτϫʔΫܦ࿏ͷվ᜵ 3FQVEJBUJPO ൱ೝɺ߈ܸ͍ͯ͠ͳ͍͜ͱΛओுͰ͖Δɻ ϩάͱͯ͠ه࿥͕࢒Βͳ͍ *OGPSNBUJPO%JTDMPTVSF ެ։͞ΕΔ΂͖Ͱͳ͍৘ใ͕Ӿཡ͞ΕΔ Τϥʔϝοηʔδ΍ϩάʹൿಗ͢΂͖৘ใؚ͕·ΕΔ "$-ͷෆඋ %FOJBMPG4FSWJDF αʔϏε๦֐ɺਖ਼ৗʹαʔϏεΛఏڙͰ͖ͳ͍ɻ ॲཧͷॏ͍ΤϯυϙΠϯτͷଘࡏ େྔͷΞΫηεɺσΟεΫ༰ྔͷѹഭ &MFWBUJPOPG1SJWJMFHF ݖݶঢ֨ɺҙਤͨ͠Ҏ֎ͷݖݶΛऔಘ͞ΕΔɻ ೚ҙͷίʔυΛ࣮ߦͰ͖Δ࢓૊Έͷଘࡏ ೝূɾೝՄͷෆඋ
  2. 3BQJE3JTL"TTFTTNFOU 33" w αʔϏεʹؔ͢Δ࣭໰ w ࢓૊ΈɺίϯϙʔωϯτϦετɺϓϩτίϧɺσʔλͷอଘՕॴ΍อଘͷํ๏ͳͲ w $POUSPM'BNJMJFT γεςϜͷػີੑɺ׬શੑɺՄ༻ੑΛอޢ͢ΔͨΊͷٕज़తͳཁૉʹ͍ͭͯ w

    "VUIPSJ[BUJPO "VUIFOUJDBUJPO 4FDSFUT.BOBHFNFOU /FUXPSLJOH FUD w ίϯϙʔωϯτ͝ͱʹ$POUSPM'BNJMJFTͷධՁ w ۩ମతͳ߈ܸͷγφϦΦྻڍͱਂࠁ౓౳ͷධՁɺ୹ظతɾ௕ظతͳରࡦ w .P[JMMBͷ33"ςϯϓϨʔτΛΧελϚΠζ͍ͯ͠Δ IUUQTJOGPTFDNP[JMMBPSHHVJEFMJOFTSJTLSBQJE@SJTL@BTTFTTNFOUIUNM