WordPressのセキュリティについて / gifuwpm20-wordpress-security

Dda24cce92447593513292ec748c70c4?s=47 Koji Kuno
March 14, 2020
Programming
0
48

WordPressのセキュリティについて / gifuwpm20-wordpress-security

Gifu WordPress Meetup #20 での登壇資料です。

Dda24cce92447593513292ec748c70c4?s=128

Koji Kuno

March 14, 2020
Tweet

More Decks by Koji Kuno

See All by Koji Kuno
Dda24cce92447593513292ec748c70c4?s=48 oleindesign
0
17
Dda24cce92447593513292ec748c70c4?s=48 oleindesign
0
220
Dda24cce92447593513292ec748c70c4?s=48 oleindesign
0
45
Dda24cce92447593513292ec748c70c4?s=48 oleindesign
1
49
Dda24cce92447593513292ec748c70c4?s=48 oleindesign
1
140
Dda24cce92447593513292ec748c70c4?s=48 oleindesign
3
350
Dda24cce92447593513292ec748c70c4?s=48 oleindesign
0
76
Dda24cce92447593513292ec748c70c4?s=48 oleindesign
1
570
Dda24cce92447593513292ec748c70c4?s=48 oleindesign
0
140

Other Decks in Programming

See All in Programming
4ce43cd2535d0afe50065a743af646e9?s=48 dianaarnos
0
280
473b12ebcfb79adfaef97796e94fc25c?s=48 hironytic
4
460
D36d6bab8f1e0ff4bb3377571e5f7dcd?s=48 yutailang0119
5
180
E586b46d5b09f8109beb66bb146e4f20?s=48 tamappe
1
170
40f4d1f2e77078955bd01e9fb4a503ba?s=48 m_seki
0
120
Eac0bf787b5279aca5e699ece096956e?s=48 inamiy
9
560
83722380372c00bd75ac920f2089f6aa?s=48 zacky1972
1
160
85caff7f89434c74e9c6b4287d3c8e05?s=48 yoseiyamagishi
2
160
2559c50bf24b65eaba52fd7c75260c93?s=48 olgamaciaszek
1
590
7437b9552e193bb1f8ea757bf1a51175?s=48 aruneko
1
620
9bf923e39671cde83584e3e926296c13?s=48 kishikawakatsumi
12
2.3k
2ee9db3a5b6c492acf66ec14c8a5d8dc?s=48 slsops
0
300

Featured

See All Featured
15f2b8221f247985a27a627d2ece72f0?s=48 pauljervisheath
193
15k
B3d6434763caa0ef5dc4b792662c49f7?s=48 smashingmag
281
46k
E76911cbe088e5b850d966de3fc7435b?s=48 robhawkes
52
2.7k
96270e4c3e5e9806cf7245475c00b275?s=48 addyosmani
308
21k
5ce91fa49a613cbc3e20d5f96856473f?s=48 edds
55
9.2k
761be20b5ebd271008bcee1244fc5b52?s=48 matthewcrist
70
7k
64827b31aef81498662e8af4bd6d5157?s=48 jonrohan
1020
360k
812e1705ff0f8bc1bcf18587bde687d5?s=48 62gerente
582
200k
3d4519fd34b76fb265fc0237f3792bd4?s=48 danielanewman
196
19k
A60068bce2e73de3a37ca9d2dbe36092?s=48 bryan
28
3.2k
D83926c323d4f9289f947b4b4e76b939?s=48 jensimmons
205
9.9k
9128d500301ae51524e887bb680f471d?s=48 caitiem20
304
16k

Transcript

  1. 8PSE1SFTTͷηΩϡϦςΟʹ ͍ͭͯ (JGV8PSE1SFTT.FFUVQ ೥݄೔ʢ౔ʣʙ

  2. ࣗݾ঺հ w 8FC੍࡞ܥϑϦʔϥϯε w ࠷ۙʮσʔλɾαΠΤϯεʯʹ͍ͭͯڵຯ௡ʑ w ग़਎͸άϥϑΟοΫσβΠϯɻ8FC͸׬શಠֶɻ w ಈը഑৴ʹ΋खΛग़࢝͠Ίͨɻ

  3. 8PSE1SFTTͷηΩϡϦςΟʹ ͍ͭͯ

  4. ৘ใηΩϡϦςΟͷ̏෼ྨ w ਓతڴҖ
 ˠ৘ใΛ౪Ήɾෆਖ਼ར༻ɾޡૢ࡞ͳͲਓ͕ى͜͢΋ͷ w ٕज़తڴҖ
 ˠෆਖ਼ΞΫηεɾվ͟ΜɾΫϥοΩϯά w ෺ཧతڴҖ
 ˠαʔόʔ͕෺ཧతʹյΕΔͳͲ

  5. 8PSE1SFTT͸ૂΘΕ΍͍͢ʁ w ʮૂΘΕ΍͍͢ʯͱࢥ͏ʢݸਓతײ૝ʣ w γΣΞ͔Βߟ͑ͯ8PSE1SFTTΛૂ͑͹खͬऔΓૣ͍ͱߟ ͑Δͷ͕ଥ౰ w ΦʔϓϯιʔεͳͷͰத਎͸୭Ͱ΋ݟΔ͜ͱ͕Ͱ͖Δ

  6. ຊ౰ʹ8PSE1SFTT͡Όͳ͍ͱμϝʁ w ͦͷ΢ΣϒαΠτ͕8PSE1SFTTͰ͋Δ΂͖ཧ༝͸ʁ w ଞͷແྉɾ༗ྉϒϩάαʔϏεͰ͸ͩΊʁ w ੩త΢ΣϒαΠτͰྑ͍ͷͰ͸ʁ

  7. ޮՌ͕ߴ͍ʢͱߟ͑ΒΕΔʣ ରࡦ ύεϫʔυͷ؅ཧ ΞοϓσʔτΛ͢Δ ϩάΠϯ63-Λมߋ͢Δ 44-Խ 8"'ಋೖ ࢖Θͳ͍ςʔϚɾϓϥάΠϯͷແޮԽ࡟আ

  8. ύεϫʔυͷ؅ཧ w ೦ͷͨΊॳظύεϫʔυ͔Βมߋ͓ͯ͜͠͏ w ҆શͳύεϫʔυͱ͸ʁʢ૯຿লࢀরʣ ໊લͳͲͷݸਓ৘ใ͔Β͸ਪଌͰ͖ͳ͍͜ͱ ӳ୯ޠͳͲΛͦͷ··࢖༻͠ͳ͍͜ͱ ΞϧϑΝϕοτͱ਺ࣈ͕ࠞࡏ͍ͯ͠Δ͜ͱ ద੾ͳ௕͞ͷจࣈྻͰ͋Δ͜ͱ ྨਪ͠΍͍͢ฒͼํ΍ͦͷ༰қͳ૊Έ߹Θͤʹ͠ͳ͍͜ͱ

  9. ύεϫʔυͷ࠷େղಡ࣌ؒ https://www.ipa.go.jp/security/txt/2008/10outline.html

  10. ΞοϓσʔτΛ͢Δ w 8PSE1SFTTίΞͷߋ৽ʢϚΠφʔ͸ࣗಈʣ w ϓϥάΠϯςʔϚͷߋ৽ w ίΞWFSʹରԠ͍ͯ͠Δ͔֬ೝ͢Δ΂͖

  11. ϓϥάΠϯͷબͼํ

  12. όοΫΞοϓΛऔಘ͠Α͏ w ΞοϓσʔτΛ࣮ߦͯ͠ը໘͕ਅͬനʹʜ w ͦΜͳ࣌ʹ͸ɺόοΫΞοϓσʔλͰ෮ݩ͠·͢ w "MMJO0OF81.JHSBUJPO͕ʢݸਓతʹ͸ʣ͓͢͢Ί
 ˠόοΫΞοϓऔಘͱ෮ݩ͕؆୯ w ීஈ͔ΒఆظతͳόοΫΞοϓΛεέδϡʔϧԽ͢Δ

  13. ϩάΠϯ63-Λมߋ͢Δ IUUQTTBNQMFDPNXQMPHJOQIQ

  14. ϩάΠϯ63-Λมߋ͢Δ w खಈͰରԠ΋Մೳ
 ˠϋʔυϧ͕ߴ͍ͷͰϓϥάΠϯͰػೳ௥Ճ͕Φεεϝ w 4JUF(VBSE811MVHJO w ʲ஫ҙʳ༗ޮԽͨ͠Βඪ४ઃఆͰϩάΠϯ63-͕มߋ ͞Εͯ͠·͏ͷͰѻ͍ʹ஫ҙ w

    Ճ͑ͯϩάΠϯը໘ʹ#"4*$ೝূΛ෇͚Δͱ͍͏ख΋

  15. 44-Խ w 4FDVSF4PDLFUT-BZFSͷུ w ΢ΣϒαΠτͱσόΠεʢ1$ͳͲʣͱͷؒͰ΍ΓऔΓ͢ ΔσʔλΛ҉߸Խͯ͠౪Έʹ͘͘͢Δ࢓૊Έ w IUUQTʙͰΞΫηεͰ͖Δ΢ΣϒαΠτ͸ରԠࡁΈ w (PPHMF$ISPNFͳͲͰ͸ରԠ͍ͯ͠ͳ͍ͱʮอޢ͞Εͯ

    ͍ͳ͍௨৴ʯͱදࣔ͞ΕͨΓ͢Δ

  16. 44-Խͷํ๏ w ར༻͍ͯ͠ΔαʔϏε΍αʔόʔʹΑ༷ͬͯʑͳͷͰҰ ֓ʹํ๏ΛఏࣔͰ͖ͳ͍ w طଘ΢ΣϒαΠτΛରԠ͢Δ৔߹ɺαΠτ಺ʹઃஔ͞Ε ͍ͯΔϦϯΫશ͕ͯIUUQTʙʹͳ͍ͬͯͳ͍ͱ׬શͳ 44-Խʹ͸ͳΒͳ͍ʢNJYFEDPOUFOUʣ w ద౰ʹ΍Βͣʹ༗ࣝऀʹ૬ஊ͢Δ͜ͱΛ͓קΊ͠·͢

  17. 8"'ಋೖ w 8FC"QQMJDBUJPO'JSFXBMMͷུ w αʔόʔଆPSϓϥάΠϯͰͷಋೖ͕Ұൠత w 9TFSWFSϩϦϙTBLVSB͸ར༻Մೳ w 8PSEGFODF4FDVSJUZ'JSFXBMM.BMXBSF4DBOͳͲ w

    81ɾϓϥάΠϯͷػೳʹΑΔΞΫηεΛޡͬͯःஅͯ͠ ͠·͏͜ͱ͕͋Δˠνϡʔχϯά͕ඞཁͳ৔߹΋͋Δ

  18. ࢖Θͳ͍ςʔϚɾϓϥάΠϯͷ ແޮԽ࡟আ w ඪ४Ͱ5XFOUZʙςʔϚ͕ෳ਺Πϯετʔϧ͞Ε͍ͯΔ͕ ෆཁͳΒ࡟আʢఆظతʹߋ৽͍ͯ͠Ε͹0,ʣ w ࢖Θͳ͍PSݹ͍ϓϥάΠϯ͸ɺ࡟আPS৐Γ׵͑ʢஔ͖׵ ͑ʣΛݕ౼͢Δ w ఆظతʹ֬ೝ͢Δश׳Λ࣋ͭͱϕλʔ

  19. ·ͱΊ w *%ͱ18͸ΦϦδφϦςΟΛ࣋ͭ w ߋ৽͠ͳ͍ͳΒ8PSE1SFTT࢖Θͳ͍ʢ͘Β͍ͷؾ࣋ͪͰʣ w όοΫΞοϓ͸ඞਢʢ෮ݩ΋࿅शͯ͠ΈΑ͏ʣ w ϩάΠϯ63-Λมߋͯ͠#"4*$ೝূ΋ซͤΔͱ٢ w

    44-Խ͸ࠓ΍ৗࣝʢඞਢʣϨϕϧ