Tweet
Tweet

Slide 1

Slide 1 text

にと 』 じ じ LJOUPOF $BGÉ ޿ౡ 7PM!෱ࢁ ͲΓ͌ !Q@SPDDB

Slide 2

Slide 2 text

5PEBZ`T5PQJDJTBCPVU  Ұൠతͳ8FCηΩϡϦςΟʹ͍ͭͯ  LJOUPOFͷηΩϡϦςΟʹ͍ͭͯ  LJOUPOFͷΧελϚΠζʹ͍ͭͯߟ͑Δ  +BWB4DSJQUͬͯͲΜͳ΋ͷʁ  ·ͱΊ Agenda

Slide 3

Slide 3 text

ͲΓ͌ʢ͍͚͕ΈΈͲΓʣ ΞʔϧεϦʔΠϯεςΟςϡʔτʢେࡕͷγεςϜ։ൃձࣾʣ &OHJOFFSˠ$VTUPNFS4VDDFTT .BSLFUJOH%JSFDUPS DMPVEVOJWFSTJUZೝఆτϨʔφʔ LJOUPOFΛڭ͑ΔઌੜͰ͢ ݩίεϓϨΤϯδχΞɻࠓͰ΋ίεϓϨ͸গʑɻ ίϛϡχςΟ׆ಈͳͲ l LJOUPOF $BGÉ ˠ ӡӦࣄ຿ہ l LJOUPOF $BGÉ+"1"/ˠ ʙ·Ͱ࣮ߦҕһ l ͦͷଞLJOUPOFҎ֎ͷίϛϡχςΟʹ΋ίϛοτத About me

Slide 4

Slide 4 text

CBTJDXFCTJUFTFDVSJUZ Security

Slide 5

Slide 5 text

What s Cyber Attack lίϯϐϡʔλʔγεςϜʹ৵ೖ͠ ѱҙͷ͋ΔߦҝΛ͓͜ͳ͏͜ͱz

Slide 6

Slide 6 text

Ϣʔβʔ͕8FCϖʔδʹ ΞΫηε͢Δ͜ͱͰෆਖ਼ͳ εΫϦϓτ͕࣮ߦ͞ΕΔ੬ ऑੑɾ߈ܸख๏ 8FCΞϓϦͷϢʔβʔࣗ ਎Ͱҙਤ͍ͯ͠ͳ͍ॲཧ͕ ࣮ߦ͞Εͯ͠·͏੬ऑੑɾ ߈ܸख๏ 02 XSS CSRF 01 ෆਖ਼ೖखͨ͠ΞΧ΢ϯτϦ ετΛݩʹ8FCαΠτʹ ෆਖ਼ϩάΠϯ͢Δ߈ܸ Password Attack 04 DoS Attack ߈ܸର৅ͷαΠτͳͲʹେ ྔʹσʔλΛૹ৴ͯ͠αʔ ϏεΛμ΢ϯͤ͞Δ߈ܸ 03

Slide 7

Slide 7 text

kintone s Security )PXBCPVULJOUPOF`T 4FDVSJUZ

Slide 8

Slide 8 text

࣮͸͔ͳΓݎ࿚ʹ࡞ΒΕ͍ͯΔDZCP[VDPN Ϋϥ΢υαʔϏεΛ҆શʹ࢖͏ͨΊʹॏཁͳͭͷରࡦ ● LJOUPOFͷηΩϡϦςΟʹDZCP[VDPNͷηΩϡϦςΟ ● Ϋϥ΢υαʔϏεʺ੬ऑ ● ԼखʹϨϯλϧαʔόʔͳͲΛआΓΔΑΓ҆શ ● ਖ਼͘͠࢖͍ͬͯΕ͹جຊతʹ͸໰୊͸ى͜Βͳ͍ ͦ͏ɺਖ਼͘͠࢖͍ͬͯΕ͹ɻ THE Security of Cybozu

Slide 9

Slide 9 text

kintone CUSTOMIZE

Slide 10

Slide 10 text

LJOUPOFΛ ศརʹ࢖͍͜ͳ͍ͨ͠ͳ ͱࢥͬͨ࣌ What ｓ the situation of kintone Customize Extension LJOUPOFͷجຊػೳͰ ͜ΕͰ͖ͳ͍ͳ ͱࢥͬͨ࣌ Limitation

Slide 11

Slide 11 text

Think about that again *TUIBUBCTPMVUFMZOFDFTTBSZ ͦΕ͸ຊ౰ʹඞཁʁ

Slide 12

Slide 12 text

໨ʹݟ͑Δίετ͕͔͔ Βͳ͍ͷͰΈΜͳ͜Εʹ ૸Γ͕ͪɻ࣮͸ݟ͑ͳ͍ ίετ͕͔͔͍ͬͯΔ WRITE CODE )JavaScript HOW TO CUSTOMIZE for kintone ίετ͔͔Δ͔Βܟԕ͞ Ε͕͚ͪͩͲ৴པੑ͸ؒ ҧ͍ͳ͍ɻͪΌΜͱͨ͠ ͱ͜ΖΛબఆ͢Ε͹ Ҏ ԼSZ ORDER TO DEVELOPER ༗ঈɾແঈ͍Ζ͍Ζ ͪΌΜͱͨ͠ͱ͜ΖΛબ ఆ͢Ε͹ ͓ͦΒ͘ ؒҧ ͍ͳ͍ɻ΀Β͙ҕһձϝ ϯόʔͱ͔ USE PLUGINS

Slide 13

Slide 13 text

に に JavaScript

Slide 14

Slide 14 text

A Problem Occurred Α͘Θ͔Βͳ͍··αϯϓ ϧίʔυΛࣸܦɻॻ͍ͯ͋ Δҙຯ͸ͪΌΜͱཧղͯ͠ Δʁ Copy Sample Code ಈ͔ͳ͍ཧ༝Λࣗ෼Ͱ͙͞ Εɻࢼߦࡨޡ͠Ζɻσόο άͬͯ஌ͬͯΔʁ Not Work Τϥʔग़ͨɻΑ͘Θ͔Βͳ ͍͔Β์ஔʂ+BWB4DSJQU֎ ͢ʂͬͯਓ͸ͦ΋ͦ΋ࣗ෼ ͰίʔυΛॻ͘ͳ Error I don t Care

Slide 15

Slide 15 text

The meaning why Using JavaScript ίʔσΟϯάΨΠυϥΠ ϯͬͯݟͨ͜ͱ͋Δʁ LJOUPOFʹ΋ͪΌΜͱ͋ ΔΑɻ஌Βͳ͍ਓ͸ EFW/FUͰݕࡧʂ ͍΍ͦ΋ͦ΋+BWBͰ΋ +"7"Ͱ΋ͳ͍͔Βɻͦ Εҧ͏ݴޠɻ+BWB4DSJQU આ໌ͯ͠Έͯʁ 01 03 ͪΌΜͱνϡʔτϦΞϧ ΍͔ͬͯΒΧελϚΠζ ͯ͠Δʁ"1*υΩϡϝϯ τͪΌΜͱಡΜͰΔʁ࢓ ༷΍੍໿ॻ͍ͯ͋ΔΑ ͦΜͳʹ؆୯ͩͱࢥͬͯ Δʁಉظॲཧͱ͔ඇಉظ ॲཧͱ͔γϯάϧεϨο υͱ͔ίʔϧόοΫͱ͔ 02 04

Slide 16

Slide 16 text

·ͣ͸LJOUPOFͷجຊػೳͰͷ࣮ݱՄ൱Λߟ͑Δɻ Ͱ͖ͳ͔ͬͨ৔߹ʹ͸ΧελϚΠζΛݕ౼ɻ ແܭըʹ΍Βͳ͍ɻ΍Έ͘΋ʹ΍Βͳ͍ɻ ΍ΔͱܾΊͨΒࢮ͵ؾͰ΍ΕɻͦΕ͘Β͍͠ͳ͍ ͱεΩϧ͸਎ʹ͔ͭͳ͍ɻ৘ใ࿙͍͑͸ίʔυॻ ͘ਓͷεΩϧʹ͔͔ͬͯΔɻ 01 thinking 02 NO biginning blindly 03 Work like hell

Slide 17

Slide 17 text

$3&%*545IJTQSFTFOUBUJPOUFNQMBUFXBTDSFBUFECZ4MJEFTHP JODMVEJOHJDPOTCZ'MBUJDPO BOEJOGPHSBQIJDT JNBHFTCZ'SFFQJL 1MFBTFLFFQUIJTTMJEFGPSBUUSJCVUJPO THANKS %PZPVIBWFBOZRVFTUJPOT 5XJUUFSˠ !Q@SPDDB 'BDFCPPLˠQ$" ͲΓ͌ XXXLJOUPOFDBGFDPN