インシデントレスポンス演習 II / Incident Response Exercise II

Slide 1

Slide 1 text

Hardening for cyber security — generated by Stable Diffusion XL v1.0 2024 11-12 II (WBS) 2024 11-12 II — 2024-07-15 – p.1/33

Slide 2

Slide 2 text

https://speakerdeck.com/ks91/collections/cyber-security-2024-summer 2024 11-12 II — 2024-07-15 – p.2/33

Slide 3

Slide 3 text

( ) 1 6 10 (1) • 2 6 10 (2) • 3 6 17 • 4 6 17 • 5 6 24 I ( ) • 6 6 24 I ( ) • 7 7 1 • 8 7 1 • 9 7 8 • 10 7 8 • 11 7 15 II ( ) • 12 7 15 II ( ) • 13 7 22 14 7 22 W-IOI / ( ) 2024 11-12 II — 2024-07-15 – p.3/33

Slide 4

Slide 4 text

( 20 ) 1 • 2 • 3 • 4 (TCP/IP ) • 5 • 6 • 7 • 8 • 9 • 10 World Wide Web • 11 Web API • 12 • 13 git GitHub • 14 • SSH • (6/24 ) / (2 ) OK / 2024 11-12 II — 2024-07-15 – p.4/33

Slide 5

Slide 5 text

( ) + + 2024 11-12 II — 2024-07-15 – p.5/33

Slide 6

Slide 6 text

II 10 2024 11-12 II — 2024-07-15 – p.6/33

Slide 7

Slide 7 text

2024 11-12 II — 2024-07-15 – p.7/33

Slide 8

Slide 8 text

5. (1) ( ) (2) I OvenAI CEO 2024 7 11 ( ) 23:59 JST Waseda Moodle (Q & A ) 2024 11-12 II — 2024-07-15 – p.8/33

Slide 9

Slide 9 text

. . . . . . 12 9 (7/14( ) ) ( ) 2024 11-12 II — 2024-07-15 – p.9/33

Slide 10

Slide 10 text

I CEO CEO CEO ⇒ NPC CEO 2024 11-12 II — 2024-07-15 – p.10/33

Slide 11

Slide 11 text

W M ⇒ 2024 11-12 II — 2024-07-15 – p.11/33

Slide 12

Slide 12 text

N ⇒ 2024 11-12 II — 2024-07-15 – p.12/33

Slide 13

Slide 13 text

A ( ) ( ) ( ) ( ) ( ) AI ⇒ 2024 11-12 II — 2024-07-15 – p.13/33

Slide 14

Slide 14 text

T ⇒ 2024 11-12 II — 2024-07-15 – p.14/33

Slide 15

Slide 15 text

M OvenAI ⇒ 2024 11-12 II — 2024-07-15 – p.15/33

Slide 16

Slide 16 text

Y CSIRT ⇒ 2024 11-12 II — 2024-07-15 – p.16/33

Slide 17

Slide 17 text

W E2E ⇒ E2E (End-to-End) (end) (end) 2024 11-12 II — 2024-07-15 – p.17/33

Slide 18

Slide 18 text

A ⇒ 2024 11-12 II — 2024-07-15 – p.18/33

Slide 19

Slide 19 text

L ⇒ 2024 11-12 II — 2024-07-15 – p.19/33

Slide 20

Slide 20 text

II 15 2024 11-12 II — 2024-07-15 – p.20/33

Slide 21

Slide 21 text

4 Discord ( ) ( ) AI AI AI 2024 10 14 ( ) ( ) ( ) 112 ^^; 21:55 21:45 10 21:45 2024 11-12 II — 2024-07-15 – p.21/33

Slide 22

Slide 22 text

112 (1/2) OvenAI CEO ( COO ) ^^; AI 2024 11-12 II — 2024-07-15 – p.22/33

Slide 23

Slide 23 text

112 (2/2) OvenAI 5. . . . CSIRT (?) AI (← ) 2024 11-12 II — 2024-07-15 – p.23/33

Slide 24

Slide 24 text

A B B A B B 5 2024 11-12 II — 2024-07-15 – p.24/33

Slide 25

Slide 25 text

AI (NPC : Non Player Character) @ / OvenAI @ceo : CEO ( ) : @cto : CTO ( ) : @eng : : ( ), ( ), ( , ) @cr : : @pr : OvenAI : @br : ( ) : @personnel : : @sns : W : @tv : TV : @police : ( ) : @caa : : 2024 11-12 II — 2024-07-15 – p.25/33

Slide 26

Slide 26 text

(cto) (eng) – (1/n) APT (Advanced Persistent Threat; ) : APT33 ( ), APT29 ( ), APT38 ( ), etc. AWS (Amazon Web Services; ) Amazon.com 2024 11-12 II — 2024-07-15 – p.26/33

Slide 27

Slide 27 text

→ 2024 11-12 II — 2024-07-15 – p.27/33

Slide 28

Slide 28 text

10 5 ( ) ( ) CSIRT (Computer Security Incident Response Team) 1 CISO ( ) ← : 1 ( ) 1 ( Discord ) ( ^^;) ( ) CSIRT Zoom OvenAI CTO CSIRT CEO “ ” 2024 11-12 II — 2024-07-15 – p.28/33

Slide 29

Slide 29 text

10 21:45 21:55 2024 11-12 II — 2024-07-15 – p.29/33

Slide 30

Slide 30 text

2024 11-12 II — 2024-07-15 – p.30/33

Slide 31

Slide 31 text

6. II (1) ( ) (2) 2024 7 18 ( ) 23:59 JST Waseda Moodle (Q & A ) 2024 11-12 II — 2024-07-15 – p.31/33

Slide 32

Slide 32 text

(1 ) 2024 11-12 II — 2024-07-15 – p.32/33

Slide 33

Slide 33 text

2024 11-12 II — 2024-07-15 – p.33/33