Slide 1

Slide 1 text

DMBTTNFUIPEKQ ୯ཁૉೝূ͕ڐ͞ΕΔͷ͸ খֶੜ·ͰͩΑͶʔ ""ུ ୈճ๺ւಓ৘ใηΩϡϦςΟษڧձ -JHIUOJOH5BMLT   Ϋϥεϝιουגࣜձࣾ ࠤʑ໦ɹେี

Slide 2

Slide 2 text

classmethod.jp 2 ࣗݾ঺հ

Slide 3

Slide 3 text

classmethod.jp 3 ࣗݾ঺հ ࠤʑ໦ɹେี !TNPLFZNPOLFZBLB͢΋͚ !

Slide 4

Slide 4 text

classmethod.jp 4

Slide 5

Slide 5 text

classmethod.jp 5

Slide 6

Slide 6 text

classmethod.jp 6 http://www.techmix-‐‑‒hokkaido.com/

Slide 7

Slide 7 text

classmethod.jp 7 ͜Μͳײ͡ͷΠϕϯτͰ͢

Slide 8

Slide 8 text

classmethod.jp 8 ! ! ͸͡Ίʹ

Slide 9

Slide 9 text

認証の三要素 w 4PNFUIJOHZPVLOPX ஌͍ͬͯΔ΋ͷ  w ύεϫʔυɺ1*/ίʔυɺύλʔϯʜ ! w 4PNFUIJOHZPVIBWF ͍࣋ͬͯΔ΋ͷ  w ΧʔυɺνοϓɺσόΠεɺτʔΫϯʜ ! w 4PNFUIJOHZPVBSF ࣗ਎  w όΠΦϝτϦΫε w ࢦ໲ɺ੩຺ɺ೒࠼ɺFUD

Slide 10

Slide 10 text

最も使われているのがknow(パスワード) w ࠷΋࢖ΘΕ͍ͯΔ͕ނʹʜ w ΫϥοΫख๏͕ଟ਺͋Δ

Slide 11

Slide 11 text

推測(⽣生年年⽉月⽇日、社員番号、電話番号、e.t.c.) !  お前の誕生日、Facebookでダダ漏れwwww ! !              / ̄ ̄^ヽ              l      l        ____        _   ,--、l       ノ .     /_ノ  ヽ、_\    ,--、_ノ:: `ー'::   、ミー---‐,,l     o゚((●)) ((●))゚o    プギャアアアアアアアアアア アアアア   ,/   :::         i ̄ ̄  | .  /::::::⌒(__人__)⌒::::: \ /           l:::    l:::   ll   |     |r┬-|     |    (⌒) l   l .   l     !::    |:::   l   |     | |  |     |    ノ ~.レ-r┐、 |   l   l     |::    l:    l .  |     | |  |     |   ノ__  | .| | | |   l .   }    l:::::,r-----   l.  \      `ー'´     ./ 〈 ̄   `-Lλ_レレ ヽ  :l::::   ト:;;;;;;;;;/-/__...........  /                   ̄`ー‐---‐‐´

Slide 12

Slide 12 text

漏漏洩           ____        / \  /\  キリッ .     / (ー)  (ー)\     /   ⌒(__人__)⌒ \     |      |r┬-|    |  弊社のセキュリティは万全です      \     `ー'´   /   情報の持ち出しは一切出来ません     ノ            \   /´               ヽ  |    l              \  ヽ    -一''''''"~~``'ー--、   -一'''''''ー-、.   ヽ ____(⌒)(⌒)⌒) )  (⌒_(⌒)⌒)⌒)) ! !           ____         /_ノ  ヽ、_\  ミ ミ ミ  o゚((●)) ((●))゚o      ミ ミ ミ   だっておwwwwwwwwww /⌒)⌒)⌒. ::::::⌒(__人__)⌒:::\   /⌒)⌒)⌒) | / / /     |r┬-|    | (⌒)/ / / // | :::::::::::(⌒)    | |  |   /  ゝ  :::::::::::/ |     ノ     | |  |   \  /  )  / ヽ    /     `ー'´      ヽ /    /  |    |   l||l 从人 l||l      l||l 从人 l||l  ヽ    -一''''''"~~``'ー--、   -一'''''''ー-、   ヽ ____(⌒)(⌒)⌒) )  (⌒_(⌒)⌒)⌒))

Slide 13

Slide 13 text

ブルートフォース         ____         /     \      /   ⌒  ⌒ \   はいはいツールで100万回実行と…    /    (●)  (●) \     |   、" ゙)(__人__)" .)|    ___________    \      。` ⌒゚:j´ ,/ j゙~~| | |             | __/          \  |__| | |             | | | /   ,              \n||  | |             | | | /   /         r.  ( こ) | |             | | | | ⌒ ーnnn        |\ (⊆ソ .|_|___________|  ̄ \__、("二) ̄ ̄ ̄ ̄ ̄l二二l二二  _|_|__|_ !          ____        / _ノ  ヽ_ \      /。(⌒) (⌒)o\   アイス食ってたら突破できたwww     / :::⌒(__人__) ⌒::: \  _________     |     ヽr┬-ノ      | . | |            | .    \    `ー'′    /  | |            |     /    `      \  .| |             |     |  r        .|  \.| |             |     |  ┴rェェァ_    |\  | |_______| ──‐‐`ー-イ__)l二二l ̄ ̄    | |  |

Slide 14

Slide 14 text

キーロガー         ____         /     \      /:::::::─三三─\    /::::::::: ( ○)三(○)\     |   、" ゙)(__人__)ル ゚。 ゚     ___________    \      ゝ'゚      ≦ 三 ゚ | |             | __/     。≧       三 = | |             | | | /    ,   -ァ,       ≧=  .| |  キーロガーが   | | | /   /    .イレ,、       >  | |  検出されました  | | | | ⌒ ーnnn ,≦`Vヾ  ヾ ≧   |_|___________|  ̄ \__、("二)。゚ /。・イハ 、\、l二二l二二  _|_|__|_

Slide 15

Slide 15 text

パケットキャプチャ  lllllllllllllllllllllllllllllllllllllllllllllllllll,            llllllll                         ,,,,,,                                                               llllllll        ,,,,,,  '''''''''''''''''''''llllllll'''''''''''''''''''''''  ,,,,,,,,,,,,,,,,,,,,,,,,,llllllll,,,,,,,,,,,,,,,,,,,,,,,,,       ,llllllll    ,lllllll lll''''''lll,    ,lllllllllllllllllllllllllllllllllllll,,  llllllllllllllllllllllllllllllllllllllllllllll,,                          lllllllll     ,llll,,''lllll,,   llllll,,    llllll   ,,llllll     llllllllllllllllllllllllllllllllllllllllllllllllllllllllll       llllllll     llllllll 'lll,,,,,,lll'     ''''''''''''''''''''''''''llllllllll'    llllllll'''''''''''''''''''''''''''''''llllllll                       llllllll      ''lllll, '''    'lllllll,   lllllll   ,lllllll'         'llllll,       ,lllllll'           llllllll     llllllll  ''''''              ,,lllllll''        llllllll        ,llllllll'                       llllllll,     ''lllllll  lllllll  ,lllllll''         'lllllll,     lllllll'           ,llllllll      'llllllll                  ,llllllll''           llllllll           ,llllllll'    ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,    lllllllllllllll,,,,,,, ,,,,,,,,,,,,,ll,,,,,,,,,,lllllll,,,,,,,,,lll,,,,,,,,,,,,,,        'lllllll,,   ,lllllll'          ,llllllll'       llllllll,              ,,lllllllll'            ''''''''         ,,llllllll'     llllllllllllllllllllllllllllllllllllllllllllllllllllll   llllllll''''lllllllllllllll,,,,, lllllllllllllllllllllllllllllllllllllllllllllllllllllllll'         'lllllll,,llllllll'            ,lllllllll'        'llllllll,,            ,,,llllllllllllllllll,,,                 ,,lllllllll'       '              '    llllllll    ''''lllllllllllll'          lllllll               ,lllllllllllll,,           ,lllllllll'          'lllllllll,      ,,,,,llllllllll''  ''llllllllll,,,,                ,,llllllllll''                           lllllllll       ''''''          lllllll               ,,,,,llllllllll''''llllllllllll,,,,,      ,,lllllllll''            'lllllllll,,   ,,,,,lllllllllllll'''      ''lllllllllll,,        ,,,,,lllllllllllll''                             llllllll          lllllll          ,,,,llllllllllllllll''''     ''''lllllllllllllllll,,  ''''lll''            ''llll'''    'llllllll''''           ''lllllll''          'llllllllllll''''                           llllllll          lllllll,            'llll'''''''          '''''''llll'                        '              '            '''''                                  '''''''''    ┏┓  ┏━━┓         ___         ┏┓┏┓  ┏┛┗┓┃┏┓┃        /⌒  ⌒\.         ┃┃┃┃  ┗┓┏┛┃┗┛┃┏━━ /( ☆)  (☆)\━━━┓┃┃┃┃  ┏┛┗┓┃┏┓┃┃   /::::::⌒(__人__)⌒::::: \   ┃┃┃┃┃  ┗┓┏┛┗┛┃┃┗━ |     |r┬-|       | ━┛┗┛┗┛    ┃┃      ┃┃     \      `ー'´     /      ┏┓┏┓    ┗┛      ┗┛                       ┗┛┗┛

Slide 16

Slide 16 text

ショルダーハック !        ノノ)))、ヽ        /⌒  ⌒\      / (●)  (●)\     / ::::::⌒(__人__)⌒:::ヽ  後ろから丸見えッスww     |     |r┬-|    |     \      `ー'´    / _\ (∩ヽ>―くヽ  /フ―、  ̄((つ⌒:::::::::::ヽ、 /:::::::::::: / ̄ ̄\    ヽ \_ヽ:::::::::::l=l:/   _ノ  \         \_ノ:::::::::l::: ̄:|    ( ●)(●)       |::::::::::::::::::::::. |     (__人__)      |ヽ。フ|ニニ□ニ |     ` ⌒´ノ \       |______i|  L|   |         }     \        |    ∧  ヽ        }     \       |    | |    ヽ     ノ       \       |        / ̄~ー、              ( ̄ ̄()  ヽ               | ̄ ̄| |   \

Slide 17

Slide 17 text

多要素認証(Multi-‐‑‒Factor  Authentication) w LOPXͱIBWFͱBSFΛ૊Έ߹ΘͤΔ w LOPX ύεϫʔυ  IBWF σόΠε  w LOPX ύεϫʔυ  BSF ࢦ໲  w FUD ! w ཁૉೝূ 5XP'BDUPS"VUIFOUJDBUJPO ͕ Ұൠత

Slide 18

Slide 18 text

2段階認証(Two-‐‑‒Step  Verification)   w ճͷೝূ͕͋Δ͜ͱ w (PPHMF͕ʮஈ֊ೝূʯͱݴ͍ͬͯΔ w ࣮ࡍ͸ೋཁૉͰೝূ͞ΕΔ w ༻ޠ͕ෳ਺͋Δͱ෼͔ΓͮΒ͍ͳ͊

Slide 19

Slide 19 text

今⽇日の本題 wଟཁૉೝূΛ ࢖͓͏ʂ

Slide 20

Slide 20 text

classmethod.jp 20 ! ! ΍ͬͯΈΔ

Slide 21

Slide 21 text

Amazon  Web  Services

Slide 22

Slide 22 text

Amazon  Web  Services w ύεϫʔυʹՃ͑ͯ.'"ΞϓϦΛ࢖ͬͨϫϯ λΠϜύεϫʔυೝূ͕࢖͑Δ ! w "84ΞΧ΢ϯτٴͼ*".ΞΧ΢ϯτʹର͠ ઃఆͰ͖Δ ! w ϋʔυ΢ΣΞ.'"σόΠεͱԾ૝.'"σό Πεͷ྆ํ͕ར༻Մೳ ! w .'"Λઃఆ͢Δ͜ͱͰηΩϡΞʹ"84͕ར ༻ग़དྷΔʂ

Slide 23

Slide 23 text

Amazon  Web  Services w Ծ૝.'"σόΠε

Slide 24

Slide 24 text

Amazon  Web  Services w *".%BTICPBSE6TFST

Slide 25

Slide 25 text

Amazon  Web  Services

Slide 26

Slide 26 text

Amazon  Web  Services w αΠϯΠϯ࣌ʹ.'"ίʔυ͕ٻΊΒΕΔ

Slide 27

Slide 27 text

Amazon  Web  Services w εϚϗ͕յΕͨΒͲʔ͢Δͷʁ w ෳ਺ͷσόΠεͰ.'"Λઃఆ͓ͯ͘͠ w "VUIZ͸୺຤Ͱ͸ແ͘αʔϏεଆʹઃఆ͕ อଘ͞ΕΔ w "84αϙʔτʹ͓ئ͍͢Δ

Slide 28

Slide 28 text

Gmail  (他Googleサービス)

Slide 29

Slide 29 text

Gmail  (他Googleサービス) w (NBJMΛ࢝Ί(PPHMFܥαʔϏε΋ଟཁૉೝূ ͕࢖͑Δ ! w (PPHMFۘ੡ͷ(PPHMF"VUIFOUJDBUPSΛ࢖͏ w ଞͷԾ૝.'"ΞϓϦ΋΋ͪΖΜ࢖͑Δ

Slide 30

Slide 30 text

Gmail  (他Googleサービス) w ઃఆΞΧ΢ϯτͱΠϯϙʔτ

Slide 31

Slide 31 text

Gmail  (他Googleサービス) w ηΩϡϦςΟஈ֊ೝূϓϩηε

Slide 32

Slide 32 text

Gmail  (他Googleサービス) w ઃఆը໘͕දࣔ͞ΕΔͷͰ։࢝

Slide 33

Slide 33 text

Gmail  (他Googleサービス) w ܞଳి࿩ͷϝʔϧΞυϨεΛೖྗ

Slide 34

Slide 34 text

Gmail  (他Googleサービス) w OPSFQMZ!HPPHMFDPN͔Βϝʔϧ͕ಧ͘

Slide 35

Slide 35 text

Gmail  (他Googleサービス) w ܞଳి࿩ͷϝʔϧΞυϨεΛೖྗ

Slide 36

Slide 36 text

Gmail  (他Googleサービス) w ৴པ͸͓޷ΈͰ

Slide 37

Slide 37 text

Gmail  (他Googleサービス) w ࠷ޙͷ֬ೝ

Slide 38

Slide 38 text

Gmail  (他Googleサービス) w ஈ֊ೝূʹͳΔ ίʔυ͕ϝʔϧͰ௨஌͞ΕΔ

Slide 39

Slide 39 text

Gmail  (他Googleサービス) w ϝʔϧ௨஌Ϋι໘౗ष͍                       ノ  L____̲                         ⌒  \  /  \               /  (○)  (○)\             /        (_̲_̲⼈人_̲_̲)      \             |                  |:::::          |             \                l;;;;;;l        /l!|  !             /          `̀ー'              \  |i         /                                      ヽ  !l  ヽi         (      ⼂丶-‐‑‒  、              しE  |そ    ドンッ!!           `̀ー、_ノ                        ∑  l、E  ノ  <                                 レY^V^ヽl

Slide 40

Slide 40 text

Gmail  (他Googleサービス) w (PPHMF"VUIFOUJDBUPS͕࢖͑Δ

Slide 41

Slide 41 text

Gmail  (他Googleサービス) w σόΠεΛબͿ

Slide 42

Slide 42 text

Gmail  (他Googleサービス) w "VUIFOUJDBUPSͷઃఆ

Slide 43

Slide 43 text

Gmail  (他Googleサービス) w ཁૉೝূʹͳΔ .'"ͷίʔυΛೖྗ͢Δ

Slide 44

Slide 44 text

Gmail  (他Googleサービス) w εϚϗ͕յΕͨΒͲʔ͢Δͷʁ

Slide 45

Slide 45 text

Github

Slide 46

Slide 46 text

Github w $POGJHVSBUJPO4FDVSJUZ

Slide 47

Slide 47 text

Github w ΞϓϦͱ4.4ͱ྆ํ࢖͑Δ

Slide 48

Slide 48 text

Github w ଞͱಉ༷ʹೋ࣍ݩόʔίʔυͰઃఆ

Slide 49

Slide 49 text

Github w ઃఆޙɺϦΧόϦίʔυΛμ΢ϯϩʔυͯ͠ ͓͘ w (PPHMFͷόοΫΞοϓίʔυͱಉ͡

Slide 50

Slide 50 text

Github w ཁૉೝূʹͳΔ .'"ͷίʔυΛೖྗ͢Δ

Slide 51

Slide 51 text

その他多要素認証が使えるサービス w 5XP'BDUPS"VUI '"  w IUUQTUXPGBDUPSBVUIPSH ! w %SPQCPY w &WFSOPUF w 4LZQF w #BOLPG"NFSJDB w &OHJOF:BSE w )FSPLV w .JDSPTPGU"[VSF

Slide 52

Slide 52 text

classmethod.jp 52 ! ! ·ͱΊ

Slide 53

Slide 53 text

まとめ w ύεϫʔυ͚ͩͷೝূ͸੬ऑ w ଟཁૉೝূʹ͢Δ͜ͱͰ؆୯ʹηΩϡϦςΟ ͕ڧԽग़དྷΔ w ख͕ؒϫϯεςοϓ૿͑ΔσϝϦοτΑΓη ΩϡϦςΟ޲্ͷϝϦοτͷ΄͏͕େ͖͍ w ୯ཁૉೝূ͕ڐ͞ΕΔͷ͕খֶੜ·ͰͩΑͶ (Letʼ’s  多要素認証)  >

Slide 54

Slide 54 text

classmethod.jp 54 ! ! ༨ஊ

Slide 55

Slide 55 text

まとめ                     ____̲                   /_̲ノ    ヽ、_̲\     ミ  ミ  ミ    o゚((●))  ((●))゚o            ミ  ミ  ミ      だっておwwwwwwwwww   /⌒)⌒)⌒.  ::::::⌒(_̲_̲⼈人_̲_̲)⌒:::\      /⌒)⌒)⌒)   |  /  /  /          |r┬-‐‑‒|        |  (⌒)/  /  /  //   |  :::::::::::(⌒)        |  |    |      /    ゝ    :::::::::::/   |          ノ          |  |    |      \    /    )    /   ヽ        /          `̀ー'´́            ヽ  /        /     |        |      l||l  从⼈人  l||l            l||l  从⼈人  l||l     ヽ        -‐‑‒⼀一''''''"~∼~∼``̀'ー-‐‑‒-‐‑‒、      -‐‑‒⼀一'''''''ー-‐‑‒、       ヽ  ____(⌒)(⌒)⌒)  )    (⌒_(⌒)⌒)⌒))   ! ! ・利利⽤用するサービスの選択   ・保存する情報の選択

Slide 56

Slide 56 text

No content