クラウドの設定を監視する「クラウドセキュリティポスチャマネージメント(CSPM)」

by cm-toda-tomohiro

Slide 1

Slide 1 text

クラウドの設定を監視する「クラウドセキュリティポスチャマネージメント」 2022/07/26 "84ࣄۀ෦ ίϯαϧςΟϯά෦ 㖽ా ஌޺

Slide 2

Slide 2 text

2 ࣗݾ঺հ • ށా஌޺ ͱͩͱ΋ͻΖ • ॴଐɿ"84ࣄۀຊ෦ίϯαϧςΟϯά෦ • झຯɿΩϟϯϓɺྉཧ • ޷͖ͳαʔϏεɿ&$ɺ3%4

Slide 3

Slide 3 text

3 ΞδΣϯμ • Ϋϥ΢υαʔϏεར༻ͷҰൠԽ • ల։ɺઃఆϛεʹΑΔηΩϡϦςΟͷมԽͷྫ • Ϋϥ΢υηΩϡϦςΟϙενϟϚωʔδϝϯτ $41. ͱ͸ʁ • "84Ͱఏڙ͞Ε͍ͯΔαʔϏε • "844FDVSJUZ)VC • "84$POpH • "84$POpH$POGPSNBODF1BDLT • ·ͱΊ

Slide 4

Slide 4 text

4 Ϋϥ΢υηΩϡϦςΟ ϙενϟϚωʔδϝϯτ $41.

Slide 5

Slide 5 text

Ϋϥ΢υαʔϏεར༻ͷҰൠԽ • ࠷ۙͰ͸%9ͷਪਐʹ൐͍جװγεςϜ΍ӡ༻αʔϏεΛ "84Ϋϥ΢υʹҠߦ͢Δاۀ͕૿͖͓͑ͯͯΓ·͢ɻ • Ϋϥ΢υͷϝϦοτ • ΠϯϑϥετϥΫνϟͷߏஙɺมߋ͕؆୯ • ੈքதͷϦʔδϣϯ΁ͷ഑ஔ͕༰қ • Ϋϥ΢υͷ஫ҙ఺ • ల։ɺઃఆ͕༰қͰ͋ΔͨΊϛε͕ى͜Γ΍͍͢ ͦͷଞʹ΋͍Ζ͍Ζ͋Γ·͢ɻ

Slide 6

Slide 6 text

ల։ɺઃఆϛεʹΑΔηΩϡϦςΟͷมԽͷྫ • ηΩϡϦςΟάϧʔϓͰ3%144)ϙʔτ΁ͷ ΞΫηεڐՄΛશͯͷ*1ڐՄʹઃఆ • 4ετϨʔδͷҙਤ͠ͳ͍ύϒϦοΫΞΫηεઃఆ • *".ΞΫηεΩʔͷҙਤ͠ͳ͍༗ޮઃఆ • ϧʔτɺ*".Ϣʔβʔʹ.'"͕ઃఆ͞Ε͍ͯͳ͍

Slide 7

Slide 7 text

ల։ɺઃఆϛεʹΑΔηΩϡϦςΟͷมԽͷྫ • ηΩϡϦςΟάϧʔϓͰ3%144)ϙʔτ΁ͷ ΞΫηεڐՄΛશͯͷ*1ڐՄʹઃఆ • 4ετϨʔδͷҙਤ͠ͳ͍ύϒϦοΫΞΫηεઃఆ • *".ΞΫηεΩʔͷҙਤ͠ͳ͍༗ޮઃఆ • ϧʔτɺ*".Ϣʔβʔʹ.'"͕ઃఆ͞Ε͍ͯͳ͍ ॏେͳΠϯγσϯτʹͭͳ͕ΔՄೳੑ͕͋Δ

Slide 8

Slide 8 text

8 ͦͷͨΊઃܭ؂ࢹΛ͢Ε͹ͱߟ͑ΔͷͰ͕͢ɺɺɺ

Slide 9

Slide 9 text

ઃఆΛ؂ࢹ͢Δʹ͸Ϋϥ΢υͷ஌ࣝ΍ෳ਺؂ࢹπʔϧ ͷಋೖͰձࣾɾηΩϡϦςΟ෦໳ͷෛ୲͕͋Δ

Slide 10

Slide 10 text

10 ෛ୲Λܰݮ͠ɺΫϥ΢υͷܧଓతͳ ઃఆ؂ࢹɾ҆શੑΛอͭํ๏͸ͳ͍͔ɺɺɺʁ

Slide 11

Slide 11 text

Ϋϥ΢υηΩϡϦςΟϙενϟ Ϛωʔδϝϯτ $41.

Slide 12

Slide 12 text

Ϋϥ΢υηΩϡϦςΟϙενϟϚωʔδϝϯτͱ͸ʁ • ܧଓతͳηΩϡϦςΟɺίϯϓϥΠΞϯεରԠঢ়گͷ ֬ೝ͓ΑͼՄࢹԽɺରࡦΛ͢ΔιϦϡʔγϣϯ

Slide 13

Slide 13 text

Ϋϥ΢υηΩϡϦςΟϙενϟϚωʔδϝϯτͱ͸ʁ ɾηΩϡϦςΟϦεΫͷ෼ੳɺධՁ ۀքͷίϯϓϥΠΞϯεج४ʹ߹Θͤͨ෼ੳධՁ ɾ"84جૅηΩϡϦςΟͷϕετϓϥΫςΟε ɾ$*4"84'PVOEBUJPOT7FODINBSL ɾηΩϡϦςΟϦεΫͷରࡦ Ϋϥ΢υαʔϏεͷઃఆͰҧ൓͕͋ͬͨ৔߹ɺ ηΩϡϦςΟ؅ཧऀʹΞϥʔτ௨஌ɾमਖ਼ͷఏҊ ɾΫϥ΢υͷঢ়ଶ΍ηΩϡϦςΟϦεΫͷՄࢹԽ ܧଓతͳηΩϡϦςΟɺίϯϓϥΠΞϯεରԠঢ়گͷ ֬ೝ͓ΑͼՄࢹԽ

Slide 14

Slide 14 text

"84Ͱఏڙ͞Ε͍ͯΔαʔϏε Ϋϥ΢υηΩϡϦςΟϙενϟϚωʔδϝϯτͷαʔϏεͱͯ͠ Լه͕͍͟͝·͢ɻ • "844FDVSJUZ)VC • "84$POpH • "84$POpH$POGPSNBODF1BDLT

Slide 15

Slide 15 text

"844FDVSJUZ)VCͱ͸ʁ

Slide 16

Slide 16 text

"844FDVSJUZ)VCͱ͸ʁ • ηΩϡϦςΟαʔϏεͷݕग़݁ՌΛ Ұݩ؅ཧ • "84಺ͷηΩϡϦςΟͷঢ়ଶΛ೺Ѳɺ ՄࢹԽɺධՁ • ηΩϡϦςΟج४Λར༻ͨ͠ܧଓతͳ "84؀ڥͷࣗಈνΣοΫ͕Մೳ • "84جૅηΩϡϦςΟͷϕετϓϥΫςΟε • $*4"84'PVOEBUJPOT#FODINBSL • 1$*%44W

Slide 17

Slide 17 text

"844FDVSJUZ)VCͱ͸ʁ • 4FDVSJUZ)VCͷར༻ͳΒͼʹίϯϓϥΠΞϯεج४ͷ νΣοΫ༗ޮԽ͸ϫϯΫϦοΫͰՄೳ • ֤ϧʔϧͷઆ໌͕ίϯιʔϧ্Ͱ΋Θ͔Γ΍͘͢هࡌ • ίϯιʔϧ͕࢖͍΍͘͢ϧʔϧͷྫ֎ొ࿥΋؆୯ʹՄೳ

Slide 18

Slide 18 text

"84$POGJHͱ͸ʁ

Slide 19

Slide 19 text

"84$POGJHͱ͸ʁ • ֤छϦιʔεͷઃఆ͕$POpH3VMFTͰఆ Ίͨঢ়ଶͰ͋Δ͔ΛνΣοΫ • ϧʔϧ͸छྨ • Ϛωʔδυϧʔϧ"84ఏڙɺ఺༻ҙ `࣌఺ • ΧελϜϧʔϧར༻ऀ͕ࣗ༝ʹ࡞੒ "84-BNCEBར༻ • νΣοΫͰඇ४ڌͷ৔߹ɺमਖ਼ΞΫγϣϯ ʹΑΓࣗಈͰम෮ૢ࡞͕Մೳ

Slide 20

Slide 20 text

"84$POpHͱ͸ʁ • ֤छϦιʔεͷઃఆ͕$POpH3VMFTͰఆ Ίͨঢ়ଶͰ͋Δ͔ΛνΣοΫ • ϧʔϧ͸छྨ • Ϛωʔδυϧʔϧ"84ఏڙɺ఺༻ҙ `࣌఺ • ΧελϜϧʔϧར༻ऀ͕ࣗ༝ʹ࡞੒ "84-BNCEBར༻ • νΣοΫͰඇ४ڌͷ৔߹ɺमਖ਼ΞΫγϣϯ ʹΑΓࣗಈͰम෮ૢ࡞͕Մೳ

Slide 21

Slide 21 text

"84$POGJH$POGPSNBODF1BDLTͱ͸ʁ • ެ։͞ΕͨαϯϓϧςϯϓϨʔτΛར༻͠ ͯෳ਺ͷ$POpH3VMFΛల։ • $*4΍1$*%44ʹ࢝·Γɺ)*1""/*45$4' 'FE3".1ͷ Α͏ͳίϯϓϥΠΞϯεج४ ΋Χόʔ • 4΍%ZOBNP%#ɺ*".ͳͲαʔϏεຖͷ αϯϓϧςϯϓϨʔτ΋͋Δ • ςϯϓϨʔτ͸$MPVE'PSNBUJPOͱಉ͡ ϑΥʔϚοτͰɺαϯϓϧςϯϓϨʔτΛ ΧελϚΠζͯ͠ར༻͢Δ͜ͱ΋Ͱ͖Δ

Slide 22

Slide 22 text

"84$POpH$POGPSNBODF1BDLTͱ͸ʁ • ॳΊ͸ʮSFTUSJDUFETTIʯʮSFTUSJDUFEDPNNPOQPSUTʯɺ ʮHVBSEEVUZFOBCMFEDFOUSBMJ[FEʯͳͲϚωʔδυϧʔϧΛ ͓ࢼ͍ͨͩ͘͠ͷ͕Θ͔Γ΍͓͘͢͢͢Ί • "84؀ڥʹߏங͢ΔαʔϏεܾ·͍ͬͯΔ৔߹͸ $POGPSNBODF1BDLTͷ͝ར༻΋͓͢͢Ί

Slide 23

Slide 23 text

23 ·ͱΊ

Slide 24

Slide 24 text

ຊηογϣϯͷ·ͱΊ • Ϋϥ΢υͷηΩϡϦςΟ΍ίϯϓϥΠΞϯεΛৗ࣌؂ࢹ͢Δ৔߹ɺ Ϋϥ΢υηΩϡϦςΟϙενϟϚωʔδϝϯτͷར༻͕ ಋೖ΍ձࣾɾηΩϡϦςΟ෦໳ͷෛ୲͕গͳ͓͘͢͢Ί • "84ʹ͸఺ͷαʔϏε͕͋Δ • "844FDVSJUZ)VC • "84$POGJH • "84$POGJH$POGPSNBODF1BDLT

Slide 25

Slide 25 text

ຊηογϣϯͷ·ͱΊ 4FDVSJUZ)VC $POGJH3VMFT $POGJH$POGPSNBODF 1BDLT ϧʔϧͷΧελϚΠζੑ º ˓ -BNCEBʹΑΔ ಠࣗϧʔϧ࡞੒ ˚ ςϯϓϨʔτΛมߋͯ͠ ϧʔϧͷΧελϚΠζ Մೳ ઃఆͷ ༰қੑ ग़དྷ߹͍ͷϧʔϧͷ๛෋͞ͳͲ ˓ ϫϯΫϦοΫͰઃఆ ηΩϡϦςΟج४ʹ ϧʔϧద༻ ˚ Ϛωʔδυܕϧʔϧ ఺ `࣌఺ ˓ ςϯϓϨʔτʹෳ਺ͷ ϧʔϧద༻ ӡ༻؅ཧͷ͠΍͢͞ ྫ֎ઃఆͱ͔ੋਖ਼ͷՄ൱ͱ͔ ˓ ݕग़݁Ռ͔Βੋਖ਼΍ ྫ֎ઃఆ͕Մೳ º ઃఆͷ؅ཧ͕ඞཁ ˚ ςϯϓϨʔτʹ؅ཧ͕ Մೳ ɾαʔϏεൺֱ

Slide 26

Slide 26 text

26 ॳΊͯͷ৔߹͸ 4FDVSJUZ)VCΛ༗ޮԽ͍͖ͨͩ "84جૅηΩϡϦςΟͷϕετϓϥΫςΟεͰ νΣοΫ͍ͨͩ͘ͷ͕ΦεεϝͰ͢ʂ

Slide 27

Slide 27 text

No content