脅威モデリングで考える Kubernetes セキュリティ / CloudNative Days Tokyo 2021 #CNDT2021 #CNDT2021_B

by mrtc0

Slide 1

Slide 1 text

,PIFJ.PSJUB(.01FQBCP *OD $MPVE/BUJWF%BZT5PLZP ڴҖϞσϦϯάͰߟ͑Δ ,VCFSOFUFTηΩϡϦςΟ

Slide 2

Slide 2 text

(.01FQBCP *OD4FOJPS&OHJOFFS ,PIFJ.PSJUB!NSUD ηΩϡϦςΟରࡦࣨ CMPHTTSGJO NSUD!TTSGJO

Slide 3

Slide 3 text

.ZSFDFOU"DUJWJUJFT DPOUBJOFSTFDVSJUZEFW HJUIVCDPNNSUDCPVIFLJ

Slide 4

Slide 4 text

"HFOEB ڴҖϞσϦϯάͱ͸ طଘͷ,VCFSOFUFTڴҖϞσϦϯά ڴҖϞσϦϯά͔ΒݟΔ,VCFSOFUFTΫϥελͷ"UUBDL4VSGBDFT

Slide 5

Slide 5 text

,VCFSOFUFT4FDVSJUZJT)BSE ,VCFSOFUFTίϯςφίϯςφΠϝʔδ$*ɾ$%ύΠϓϥΠϯιϑτ΢ΣΞFUD ɾෳࡶͳͷͰʮͲ͜ΛकΔ΂͖͔ʯʮԿ͔ΒकΔ΂͖͔ʯ͕෼͔Γʹ͍͘ɺ೉͘͠ײͯ͡͠·͏ cc ,VCFSOFUFTΫϥελ ɾίϯςφ͚ͩΛηΩϡΞʹͯ͠΋ɺଞͷͱ͜Ζʹ͕݀͋Ε͹ɺΫϥελΛঠѲ͞Εͯ͠·͏ NJTDPOpHSBUJPO 4VQQMZ$IBJO 7VMOFSBCJMJUJFT FUD

Slide 6

Slide 6 text

Կ͔ΒकΔ͔ɺԿΛकΔ͔ ɾγεςϜ͕ʮͲͷΑ͏ʹ߈ܸ͞ΕΔ͔ʯΛཧղ͢Δ͜ͱ͸๷ޚͷجຊ Կ͔ΒकΔͷ͔εΫϦϓτΩσΟ ߴ౓ͳ߈ܸ ಺෦൜ߦ ԿΛकΔͷ͔ػີσʔλ αʔόʔ ΞϓϦέʔγϣϯ ɾγεςϜɾΞʔΩςΫνϟͷཧղ ԿΛ͢ΔͨΊͷιϑτ΢ΣΞ αʔϏε ηΩϡϦςΟཁ݅͸ ͲͷΑ͏ͳػີ৘ใΛѻ͏ ͦͷσʔλ΁ͷΞΫηεํ๏͸ σʔλ͸ͲͷίϯϙʔωϯτͰॲཧ͢Δ

Slide 7

Slide 7 text

ڴҖϞσϦϯάͱ͸ γεςϜͷજࡏతͳڴҖΛ༧ଌ͢ΔͨΊͷϞσϧΛ࡞੒͢Δϓϩηε γεςϜΛந৅Խͯ͠શମ૾Λ၆ᛌ͢Δ͜ͱͰɺڴҖ ϦεΫͱͳΔཁҼ Λݟ͚ͭΔ ڴҖϞσϦϯά㱩ڴҖ෼ੳͰ͋Γɺຊདྷ͸ڴҖͷநग़ͷΈΛߦ͍·͕͢ɺຊηογϣϯͰ͸ରࡦ౳ʹ͍ͭͯ΋৮Ε·͢ɻ

Slide 8

Slide 8 text

ڴҖϞσϦϯάͷϑϨʔϜϫʔΫ 453*%& 1"45" 5SJLF 33" ݫີʹ͸33"͸ηΩϡϦςΟͷͨΊͷڴҖ෼ੳΛߦ͏ख๏Ͱ͸͋Γ·ͤΜ͕ɺ.P[JMMB,VCFSOFUFTͰ΋ར༻͞Ε͍ͯΔख๏ͳͷͰࡌ͍ͤͯ·͢ɻ ΋ͪΖΜɺ্هҎ֎ͷख๏΋͋Γ·͢ɻ

Slide 9

Slide 9 text

453*%& ڴҖ ҙຯ ྫ 4QPPpOH ͳΓ͢·͠ ଞϢʔβʔ΁ͷͳΓ͢·͠ ωοτϫʔΫ্Ͱͷผ୺຤΁ͷͳΓ͢·͠ 5BNQFSJOH վ᜵ɺσʔλͷมߋ ϑΝΠϧ΍%#ɺωοτϫʔΫܦ࿏ͷվ᜵ 3FQVEJBUJPO ൱ೝɺ߈ܸ͍ͯ͠ͳ͍͜ͱΛओுͰ͖Δɻ ϩάͱͯ͠ه࿥͕࢒Βͳ͍ *OGPSNBUJPO%JTDMPTVSF ެ։͞ΕΔ΂͖Ͱͳ͍৘ใ͕Ӿཡ͞ΕΔ Τϥʔϝοηʔδ΍ϩάʹൿಗ͢΂͖৘ใؚ͕·ΕΔ "$-ͷෆඋ %FOJBMPG4FSWJDF αʔϏε๦֐ɺਖ਼ৗʹαʔϏεΛఏڙͰ͖ͳ͍ɻ ॲཧͷॏ͍ΤϯυϙΠϯτͷଘࡏ େྔͷΞΫηεɺσΟεΫ༰ྔͷѹഭ &MFWBUJPOPG1SJWJMFHF ݖݶঢ֨ɺҙਤͨ͠Ҏ֎ͷݖݶΛऔಘ͞ΕΔɻ ೚ҙͷίʔυΛ࣮ߦͰ͖Δ࢓૊Έͷଘࡏ ೝূɾೝՄͷෆඋ

Slide 10

Slide 10 text

%'% %BUB'MPX%JBHSBN ڴҖϞσϧର৅ͷίϯϙʔωϯτΛྻڍ͠ɺσʔλͷྲྀΕ΍ͲͷΑ͏ͳσʔλΛѻ͏͔هࡌ͢Δ

Slide 11

Slide 11 text

%'% %BUB'MPX%JBHSBN ϓϩηεσʔλͷೖग़ྗΛߦ͏΋ͷɻ8FCαʔϏε΍04ϓϩηεͳͲ σʔλετΞӬଓɾҰ࣍هԱྖҬɻΩϟογϡ΍%#ͳͲ ֎෦ΤϯςΟςΟ௚઀੍ޚͰ͖ͳ͍΋ͷɻϢʔβʔɺ֎෦αʔϏεͳͲ σʔλϑϩʔ֎෦ΤϯςΟςΟɺϓϩηεɺσʔλετΞؒͷσʔλͷྲྀΕ ৴པڥքԿ͔Λ੍ޚ͢Δͱ͜ΖʹҾ͘ڥքઢɻωοτϫʔΫɺϗετɺ૊৫ ڥքઢΛ௒͑Δ߈ܸʹࡽ͞ΕΔՄೳੑ͕ߴ͍ͱ͜Ζ

Slide 12

Slide 12 text

%'% %BUB'MPX%JBHSBN $/$''JOBODJBM6TFS(SPVQ 453*%& IUUQTHJUIVCDPNDODGpOBODJBMVTFSHSPVQUSFFNBTUFSQSPKFDUTLTUISFBUNPEFM

Slide 13

Slide 13 text

ڴҖͷಛఆ ڴҖͷಛఆΛ؆୯ʹ͢ΔͨΊʹ453*%&7BSJBOUT͕͋Δ 453*%&QFS&MFNFOU %'%ͷ͢΂ͯͷཁૉʹରͯ͠ɺ9ͷνΣοΫϚʔΫ͕͋Δ 453*%&ͷڴҖΛಋग़͢Δ 453*%&QFS*OUFSBDUJPO ৴པڥքͱަࠩ͢Δσʔλϑϩʔʹண໨͠ɺڴҖΛಋग़͢Δ γεςϜͷن໛΍ෳࡶ౓ʹΑͬͯ1SPT$POT͋Δ

Slide 14

Slide 14 text

"UUBDL5SFF ൃݟͨ͠ڴҖʹ͍ͭͯɺ۩ମతͳ߈ܸख๏Λྻڍ͢Δ FHผͷϢʔβʔʹͳΓ͢·͠Ͱ͖ΔڴҖ 4QPPpOH FHผͷϢʔβʔʹͳΓ͢·͠Ͱ͖ΔڴҖ 4QPPpOH ͳΓ͢·͢ख๏ͱͯ͠ʮෆਖ਼ϩάΠϯʯʮ౪ௌʯ͕ߟ͑ΒΕΔ ʮෆਖ਼ϩάΠϯʯΛ໨తͱͨ͠৔߹ɺͦͷख๏ͱͯ͠ ʮ૯౰Γ߈ܸʯʮϦετܕ߈ܸʯ͕ߟ͑ΒΕΔ ໨తͱखஈΛ໦ߏ଄Ͱදݱ͍ͯ͘͜͠ͱͰɺ ߈ܸύλʔϯΛ၆ᛌͰ͖ɺ ߈ܸ͕Ͱ͖ͳ͘ͳΔ৚݅Λಋग़Ͱ͖Δ

Slide 15

Slide 15 text

"UUBDL5SFF "UUBDL5SFFͷ࡞੒ʹ͸߈ܸख๏ʹؔ͢Δ஌͕ࣝඞཁͱ͞ΕΔ ˠ࡞੒ऀͷ஌ࣝ΍ܦݧʹґଘͯ͠͠·͏ "UUBDL-JCSBSZͳͲɺ߈ܸύλʔϯΛ஝ੵͨ͠ϥΠϒϥϦΛࢀߟʹ͢Δ $"1&$IUUQTDBQFDNJUSFPSH "55$,IUUQTBUUBDLNJUFSPSH IUUQTBUUBDLNJUSFPSHNBUSJDFTFOUFSQSJTFDPOUBJOFST IUUQTXXXNJDSPTPGUDPNTFDVSJUZCMPHTFDVSFDPOUBJOFSJ[FEFOWJSPONFOUTXJUIVQEBUFEUISFBUNBUSJYGPSLVCFSOFUFT ίϯςφ,VCFSOFUFTͷ"55$,΋ଘࡏ͢Δ

Slide 16

Slide 16 text

ϦεΫ΁ͷରԠ ରࡦͷ༏ઌ౓Λߦ͏ͨΊʹϦεΫධՁΛߦ͏ $744IUUQTXXXJQBHPKQTFDVSJUZWVMO$744IUNM %3&"%IUUQTFOXJLJQFEJBPSHXJLJ%3&"%@ SJTL@BTTFTTNFOU@NPEFM .JUJHBUJPO؇࿨ࡦɺѱ༻Λࠔ೉ʹ͢Δ &MJNJOBUJOHػೳΛഉআ͢Δ 5SBOTGFSSJOHผͷԿ͔ʹϦεΫΛ೚ͤΔFHೝূΛ֎෦αʔϏεʹ೚ͤΔ "DDFQUJOHϦεΫΛड͚ೖΕΔ ࠜຊతͳղܾࡦ͕ଘࡏ͠ͳ͍έʔε΋͋Δ

Slide 17

Slide 17 text

طଘͷ,VCFSOFUFTڴҖϞσϦϯά

Slide 18

Slide 18 text

,VCFSOFUFTͷڴҖϞσϦϯά w 4FDVSJUZ"VEJU8( 5SBJMPG#JUT 33" IUUQTHJUIVCDPNLVCFSOFUFTDPNNVOJUZUSFFNBTUFSTJHTFDVSJUZTFDVSJUZBVEJUpOEJOHT

Slide 19

Slide 19 text

3BQJE3JTL"TTFTTNFOU 33" w αʔϏεʹؔ͢Δ࣭໰ w ࢓૊ΈɺίϯϙʔωϯτϦετɺϓϩτίϧɺσʔλͷอଘՕॴ΍อଘͷํ๏ͳͲ w $POUSPM'BNJMJFT γεςϜͷػີੑɺ׬શੑɺՄ༻ੑΛอޢ͢ΔͨΊͷٕज़తͳཁૉʹ͍ͭͯ w "VUIPSJ[BUJPO "VUIFOUJDBUJPO 4FDSFUT.BOBHFNFOU /FUXPSLJOH FUD w ίϯϙʔωϯτ͝ͱʹ$POUSPM'BNJMJFTͷධՁ w ۩ମతͳ߈ܸͷγφϦΦྻڍͱਂࠁ౓౳ͷධՁɺ୹ظతɾ௕ظతͳରࡦ w .P[JMMBͷ33"ςϯϓϨʔτΛΧελϚΠζ͍ͯ͠Δ IUUQTJOGPTFDNP[JMMBPSHHVJEFMJOFTSJTLSBQJE@SJTL@BTTFTTNFOUIUNM

Slide 20

Slide 20 text

$POUSPM'BNJMJFT LVCFMFU ೝূͳ͠Ͱ઀ଓͰ͖ΔαʔϏε͕͋Γɺ ͜ͷϙʔτʹΞΫηεͰ͖Δ߈ܸऀʹ 1PETQFDͳͲͷ৘ใ͕࿙Ӯ͢Δ

Slide 21

Slide 21 text

'JOEJOHT LVCFMFU ߈ܸʹ͍ͭͯͷධՁ ɾ߈ܸऀ͸৵ೖࡁΈ͔ɺ಺෦Ϣʔβʔ͕લఏ ɾϫʔΫϩʔυͷ৘ใ΍Ұ෦ͷΫϨσϯγϟϧ͕ ࿙Ӯ͢ΔՄೳੑ ରࡦʹ͍ͭͯ ɾϙʔτ͸σϑΥϧτͰด͡ΔΑ͏ʹมߋ ɾϙʔτ͸N5-4ʹΑͬͯอޢ

Slide 22

Slide 22 text

,VCFSOFUFTͷڴҖϞσϦϯά w $/$''JOBODJBM6TFS(SPVQ 453*%& IUUQTHJUIVCDPNDODGpOBODJBMVTFSHSPVQUSFFNBTUFSQSPKFDUTLTUISFBUNPEFM

Slide 23

Slide 23 text

"UUBDL7FDUPST IUUQTHJUIVCDPNDODGpOBODJBMVTFSHSPVQUSFFNBTUFSQSPKFDUTLTUISFBUNPEFM

Slide 24

Slide 24 text

(JU-BC,VCFSOFUFT"HFOU w (JU-BC,VCFSOFUFT"HFOU IUUQTBCPVUHJUMBCDPNCMPHUISFBUNPEFMJOHLVCFSOFUFTBHFOU IUUQTBCPVUHJUMBCDPNIBOECPPLTFDVSJUZUISFBU@NPEFMJOHIPXUPIUNM ,VCFSOFUFTࣗମͷڴҖϞσϦϯάͰ͸͋Γ·ͤΜ͕ɺ ,VCFSOFUFTͱΠϯςάϨʔγϣϯ͢Διϑτ΢ΣΞͷࣄྫͳͷͰɺڍ͍͛ͯ·͢

Slide 25

Slide 25 text

ՍۭͷΫϥελΛڴҖϞσϦϯά͢Δ

Slide 26

Slide 26 text

ՍۭͷΫϥελͷ%'% ؆୯ͷͨΊʹҰ෦লུ͍ͯ͠·͢

Slide 27

Slide 27 text

453*%&QFS*OUFSBDUJPO ߈ܸऀͱϓϩηεؒͷσʔλϑϩʔʹݶఆ͍ͯ͠·͢ 453*%&ͷநग़΋Ұ෦ͷΈͰ͢

Slide 28

Slide 28 text

"55$, &YQPTFE%BTICPBSE "SHP$% "SHP8PSLMPBE (SBGBOB ,VCFSOFUFT%BTICPBSE IUUQTB[VSFNJDSPTPGUDPNFOVTCMPHEFUFDUMBSHFTDBMFDSZQUPDVSSFODZNJOJOHBUUBDLBHBJOTULVCFSOFUFTDMVTUFST IUUQTXXXJOUF[FSDPNCMPHDPOUBJOFSTFDVSJUZOFXBUUBDLTPOLVCFSOFUFTWJBNJTDPOpHVSFEBSHPXPSLqPXT ࣄྫ

Slide 29

Slide 29 text

"55$, $MPVE$SFEFOUJBMT,VCFDPOpH ΤϯυϙΠϯτ୺຤ͷอޢ΋ඞཁ

Slide 30

Slide 30 text

"UUBDL5SFF "UUBDL5SFFʹͯ͠۩ମతͳ ߈ܸख๏Λྻڍ͢Δ

Slide 31

Slide 31 text

4VNNBSZ ڴҖϞσϦϯάɾڴҖ෼ੳͰજࡏతͳϦεΫΛચ͍ग़͢͜ͱ͕Ͱ͖Δ γεςϜɾσʔλΛอޢ͢Δʹ͸ɺͲ͜ΛकΕ͹Α͍͔͕ݟ͑ͯ͘Δ ΋ͪΖΜສೳͰ͸ͳ͍͠ɺͦΕΛߦ͏ͨΊͷτϨʔχϯά΋ඞཁ ,VCFSOFUFT΍ίϯςφͷ"55$,Λࢀরͯ͠۩ମతͳ߈ܸख๏Λ஌Δ Ϋϥελ߈ུͷͨΊʹԿΛ଍͕͔Γʹ͢Δͷ͔ɺ߈ܸΛӬଓԽ͢ΔͨΊʹԿΛ࢓ֻ͚Δͷ͔ ˠࣗ෼ͨͪͷ࡞ٕͬͨज़ج൫΍ιϑτ΢ΣΞͷ"55$,ͷ࡞੒ͯ͠׆༻͢Δ ݟ͔ͭͬͨڴҖΛνΣοΫϦετԽͯ͠αʔϏε։ൃʹ׆͔͢