Slide 1
Slide 1 text
DMBTTNFUIPEKQ
୯ཁૉೝূ͕ڐ͞ΕΔͷ
খֶੜ·ͰͩΑͶʔ ""ུ
ୈճւಓใηΩϡϦςΟษڧձ
-JHIUOJOH5BMLT
Ϋϥεϝιουגࣜձࣾ
ࠤʑɹେี
Slide 2
Slide 2 text
classmethod.jp
2
ࣗݾհ
Slide 3
Slide 3 text
classmethod.jp
3
ࣗݾհ
ࠤʑɹେี
!TNPLFZNPOLFZBLB͚͢
!
Slide 4
Slide 4 text
classmethod.jp
4
Slide 5
Slide 5 text
classmethod.jp
5
Slide 6
Slide 6 text
classmethod.jp
6
http://www.techmix-‐‑‒hokkaido.com/
Slide 7
Slide 7 text
classmethod.jp
7
͜Μͳײ͡ͷΠϕϯτͰ͢
Slide 8
Slide 8 text
classmethod.jp
8
!
!
͡Ίʹ
Slide 9
Slide 9 text
認証の三要素
w 4PNFUIJOHZPVLOPX ͍ͬͯΔͷ
w ύεϫʔυɺ1*/ίʔυɺύλʔϯʜ
!
w 4PNFUIJOHZPVIBWF ͍࣋ͬͯΔͷ
w ΧʔυɺνοϓɺσόΠεɺτʔΫϯʜ
!
w 4PNFUIJOHZPVBSF ࣗ
w όΠΦϝτϦΫε
w ࢦɺ੩຺ɺ࠼ɺFUD
Slide 10
Slide 10 text
最も使われているのがknow(パスワード)
w ࠷ΘΕ͍ͯΔ͕ނʹʜ
w ΫϥοΫख๏͕ଟ͋Δ
Slide 11
Slide 11 text
推測(⽣生年年⽉月⽇日、社員番号、電話番号、e.t.c.)
!
お前の誕生日、Facebookでダダ漏れwwww
!
!
／￣￣^ヽ
l l ＿＿＿_
＿ ,--､l ﾉ . ／_ノ ヽ､_＼
,--､_ノ:: `ｰ':: ､ﾐｰ---‐,,l oﾟ(（●）) (（●）)ﾟo ﾌﾟｷﾞｬｱｱｱｱｱｱｱｱｱｱ
ｱｱｱｱ
,/ ::: i￣￣ | . ／::::::⌒（__人__）⌒::::: ＼
/ l::: l::: ll | |r┬-| | (⌒)
l l . l !:: |::: l | | | | | ﾉ ~.ﾚ-r┐､
| l l |:: l: l . | | | | | ノ__ | .| | |
| l . } l:::::,r----- ｌ. ＼ `ー'´ .／ 〈￣ ｀-Lλ_ﾚﾚ
ヽ :l:::: ﾄ:;;;;;;;;;/-/＿_........... / ￣｀ー‐---‐‐´
Slide 12
Slide 12 text
漏漏洩
＿＿＿_
／ ＼ ／＼ ｷﾘｯ
. ／ （ー） （ー）＼
／ ⌒（__人__）⌒ ＼
| |r┬-| | 弊社のセキュリティは万全です
＼ `ー'´ ／ 情報の持ち出しは一切出来ません
ノ ＼
／´ ヽ
| ｌ ＼
ヽ -一''''''"~~｀`'ー--､ -一'''''''ー-､.
ヽ ＿＿＿＿(⌒)(⌒)⌒) ) (⌒＿(⌒)⌒)⌒))
!
!
＿＿＿_
／_ノ ヽ､_＼
ﾐ ﾐ ﾐ oﾟ(（●）) (（●）)ﾟo ﾐ ﾐ ﾐ だっておｗｗｗｗｗｗｗｗｗｗ
/⌒)⌒)⌒. ::::::⌒（__人__）⌒:::＼ /⌒)⌒)⌒)
| / / / |r┬-| | (⌒)/ / / /／
| :::::::::::(⌒) | | | ／ ゝ :::::::::::/
| ノ | | | ＼ / ） /
ヽ / `ー'´ ヽ / ／
| | l||l 从人 l||l l||l 从人 l||l
ヽ -一''''''"~~｀`'ー--､ -一'''''''ー-､
ヽ ＿＿＿＿(⌒)(⌒)⌒) ) (⌒＿(⌒)⌒)⌒))
Slide 13
Slide 13 text
ブルートフォース
＿＿＿_
／ ＼
／ ⌒ ⌒ ＼ はいはいツールで100万回実行と…
／ （●） （●） ＼
| ､" ﾞ)（__人__）" .）| _＿＿＿＿＿＿＿＿＿_
＼ ｡｀ ⌒ﾟ:j´ ,／ jﾞ~~| | | |
＿＿／ ＼ |_＿| | | |
| | / , ＼ｎ|| | | |
| | / / r. （ こ） | | |
| | | ⌒ ーnｎｎ |＼ (⊆ｿ .|_|_＿＿＿＿_＿＿＿＿_|
￣ ＼＿_､("二）￣￣￣￣￣ｌ二二ｌ二二 ＿|_|＿_|＿
!
＿＿＿_
／ _ノ ヽ_ ＼
／｡（⌒） （⌒）o＼ アイス食ってたら突破できたｗｗｗ
／ :::⌒（__人__） ⌒::: ＼ _＿＿＿＿＿＿＿_
| ヽr┬-ﾉ | . | | |
. ＼ `ー'′ ／ | | |
／ ` ＼ .| | |
| r .| ＼.| | |
| ┴rｪｪｧ_ |＼ | |＿＿＿＿＿＿＿|
──‐‐｀ー-ｲ＿＿）ｌ二二ｌ￣￣ | | |
Slide 14
Slide 14 text
キーロガー
＿＿＿_
／ ＼
／:::::::─三三─＼
／::::::::: （ ○）三（○）＼
| ､" ﾞ)（__人__）ﾙ ﾟ｡ ﾟ _＿＿＿＿＿＿＿＿＿_
＼ ゝ'ﾟ ≦ 三 ﾟ | | |
＿＿／ ｡≧ 三 ＝ | | |
| | / , -ｧ, ≧= .| | キーロガーが |
| | / / .ｲﾚ,､ ＞ | | 検出されました |
| | | ⌒ ーnｎｎ ,≦｀Vヾ ヾ ≧ |_|_＿＿＿＿_＿＿＿＿_|
￣ ＼＿_､("二）｡ﾟ /｡･ｲﾊ ､＼､ｌ二二ｌ二二 ＿|_|＿_|＿
Slide 15
Slide 15 text
パケットキャプチャ
lllllllllllllllllllllllllllllllllllllllllllllllllll, llllllll ,,,,,, llllllll ,,,,,,
'''''''''''''''''''''llllllll''''''''''''''''''''''' ,,,,,,,,,,,,,,,,,,,,,,,,,llllllll,,,,,,,,,,,,,,,,,,,,,,,,, ,llllllll ,lllllll lll''''''lll, ,lllllllllllllllllllllllllllllllllllll,, llllllllllllllllllllllllllllllllllllllllllllll,, lllllllll ,llll,,''lllll,,
llllll,, llllll ,,llllll llllllllllllllllllllllllllllllllllllllllllllllllllllllllll llllllll llllllll 'lll,,,,,,lll' ''''''''''''''''''''''''''llllllllll' llllllll'''''''''''''''''''''''''''''''llllllll llllllll ''lllll, '''
'lllllll, lllllll ,lllllll' 'llllll, ,lllllll' llllllll llllllll '''''' ,,lllllll'' llllllll ,llllllll' llllllll,
''lllllll lllllll ,lllllll'' 'lllllll, lllllll' ,llllllll 'llllllll ,llllllll'' llllllll ,llllllll' ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, lllllllllllllll,,,,,,,
,,,,,,,,,,,,,ll,,,,,,,,,,lllllll,,,,,,,,,lll,,,,,,,,,,,,,, 'lllllll,, ,lllllll' ,llllllll' llllllll, ,,lllllllll' '''''''' ,,llllllll' llllllllllllllllllllllllllllllllllllllllllllllllllllll llllllll''''lllllllllllllll,,,,,
lllllllllllllllllllllllllllllllllllllllllllllllllllllllll' 'lllllll,,llllllll' ,lllllllll' 'llllllll,, ,,,llllllllllllllllll,,, ,,lllllllll' ' ' llllllll ''''lllllllllllll'
lllllll ,lllllllllllll,, ,lllllllll' 'lllllllll, ,,,,,llllllllll'' ''llllllllll,,,, ,,llllllllll'' lllllllll ''''''
lllllll ,,,,,llllllllll''''llllllllllll,,,,, ,,lllllllll'' 'lllllllll,, ,,,,,lllllllllllll''' ''lllllllllll,, ,,,,,lllllllllllll'' llllllll
lllllll ,,,,llllllllllllllll'''' ''''lllllllllllllllll,, ''''lll'' ''llll''' 'llllllll'''' ''lllllll'' 'llllllllllll'''' llllllll
lllllll, 'llll''''''' '''''''llll' ' ' ''''' '''''''''
┏┓ ┏━━┓ ＿＿＿ ┏┓┏┓
┏┛┗┓┃┏┓┃ ／⌒ ⌒＼. ┃┃┃┃
┗┓┏┛┃┗┛┃┏━━ ／（ ☆） （☆）＼━━━┓┃┃┃┃
┏┛┗┓┃┏┓┃┃ ／::::::⌒（__人__）⌒::::: ＼ ┃┃┃┃┃
┗┓┏┛┗┛┃┃┗━ | |r┬-| | ━┛┗┛┗┛
┃┃ ┃┃ ＼ `ー'´ ／ ┏┓┏┓
┗┛ ┗┛ ┗┛┗┛
Slide 16
Slide 16 text
ショルダーハック
!
ノﾉ）））､ヽ
／⌒ ⌒＼
／ （●） （●）＼
／ ::::::⌒（__人__）⌒:::ヽ 後ろから丸見えッスｗｗ
| |r┬-| |
＼ `ー'´ ／
_＼ (∩ヽ>―くヽ /フ―､
￣((つ⌒:::::::::::ヽ､ /:::::::::::: ／￣￣＼
ヽ ＼_ヽ:::::::::::l＝l:／ _ノ ＼
＼＿ノ:::::::::ｌ:::￣:| （ ●）（●）
|::::::::::::::::::::::. | （__人__）
|ヽ｡フ|ﾆﾆ□ﾆ | ｀ ⌒´ﾉ ＼
|______i| L| | } ＼
| ∧ ヽ } ＼
| | | ヽ ノ ＼
| /￣～ー、
（￣￣（） ヽ
|￣￣| | ＼
Slide 17
Slide 17 text
多要素認証(Multi-‐‑‒Factor Authentication)
w LOPXͱIBWFͱBSFΛΈ߹ΘͤΔ
w LOPX ύεϫʔυ
IBWF σόΠε
w LOPX ύεϫʔυ
BSF ࢦ
w FUD
!
w ཁૉೝূ 5XP'BDUPS"VUIFOUJDBUJPO
͕
Ұൠత
Slide 18
Slide 18 text
2段階認証(Two-‐‑‒Step Verification)
w ճͷೝূ͕͋Δ͜ͱ
w (PPHMF͕ʮஈ֊ೝূʯͱݴ͍ͬͯΔ
w ࣮ࡍೋཁૉͰೝূ͞ΕΔ
w ༻ޠ͕ෳ͋Δͱ͔ΓͮΒ͍ͳ͊
Slide 19
Slide 19 text
今⽇日の本題
wଟཁૉೝূΛ
͓͏ʂ
Slide 20
Slide 20 text
classmethod.jp
20
!
!
ͬͯΈΔ
Slide 21
Slide 21 text
Amazon Web Services
Slide 22
Slide 22 text
Amazon Web Services
w ύεϫʔυʹՃ͑ͯ.'"ΞϓϦΛͬͨϫϯ
λΠϜύεϫʔυೝূ͕͑Δ
!
w "84ΞΧϯτٴͼ*".ΞΧϯτʹର͠
ઃఆͰ͖Δ
!
w ϋʔυΣΞ.'"σόΠεͱԾ.'"σό
Πεͷ྆ํ͕ར༻Մೳ
!
w .'"Λઃఆ͢Δ͜ͱͰηΩϡΞʹ"84͕ར
༻ग़དྷΔʂ
Slide 23
Slide 23 text
Amazon Web Services
w Ծ.'"σόΠε
Slide 24
Slide 24 text
Amazon Web Services
w *".%BTICPBSE 6TFST
Slide 25
Slide 25 text
Amazon Web Services
Slide 26
Slide 26 text
Amazon Web Services
w αΠϯΠϯ࣌ʹ.'"ίʔυ͕ٻΊΒΕΔ
Slide 27
Slide 27 text
Amazon Web Services
w εϚϗ͕յΕͨΒͲʔ͢Δͷʁ
w ෳͷσόΠεͰ.'"Λઃఆ͓ͯ͘͠
w "VUIZͰແ͘αʔϏεଆʹઃఆ͕
อଘ͞ΕΔ
w "84αϙʔτʹ͓ئ͍͢Δ
Slide 28
Slide 28 text
Gmail (他Googleサービス)
Slide 29
Slide 29 text
Gmail (他Googleサービス)
w (NBJMΛ࢝Ί(PPHMFܥαʔϏεଟཁૉೝূ
͕͑Δ
!
w (PPHMFۘͷ(PPHMF"VUIFOUJDBUPSΛ͏
w ଞͷԾ.'"ΞϓϦͪΖΜ͑Δ
Slide 30
Slide 30 text
Gmail (他Googleサービス)
w ઃఆ ΞΧϯτͱΠϯϙʔτ
Slide 31
Slide 31 text
Gmail (他Googleサービス)
w ηΩϡϦςΟ ஈ֊ೝূϓϩηε
Slide 32
Slide 32 text
Gmail (他Googleサービス)
w ઃఆը໘͕දࣔ͞ΕΔͷͰ։࢝
Slide 33
Slide 33 text
Gmail (他Googleサービス)
w ܞଳిͷϝʔϧΞυϨεΛೖྗ
Slide 34
Slide 34 text
Gmail (他Googleサービス)
w OPSFQMZ!HPPHMFDPN͔Βϝʔϧ͕ಧ͘
Slide 35
Slide 35 text
Gmail (他Googleサービス)
w ܞଳిͷϝʔϧΞυϨεΛೖྗ
Slide 36
Slide 36 text
Gmail (他Googleサービス)
w ৴པ͓ΈͰ
Slide 37
Slide 37 text
Gmail (他Googleサービス)
w ࠷ޙͷ֬ೝ
Slide 38
Slide 38 text
Gmail (他Googleサービス)
w ஈ֊ೝূʹͳΔ ίʔυ͕ϝʔϧͰ௨͞ΕΔ
Slide 39
Slide 39 text
Gmail (他Googleサービス)
w ϝʔϧ௨Ϋι໘ष͍
ﾉ Ｌ＿＿＿_̲
⌒ ＼ ／ ＼
／ （○） （○）＼
／ （_̲_̲⼈人_̲_̲） ＼
| |::::: |
＼ l;;;;;;l ／l!| !
／ `̀ｰ' ＼ |i
／ ヽ !l ヽi
（ ⼂丶-‐‑‒ 、 しＥ |そ ドンッ！！
`̀ー､＿ﾉ ∑ l､Ｅ ﾉ <
ﾚY^Ｖ^ヽｌ
Slide 40
Slide 40 text
Gmail (他Googleサービス)
w (PPHMF"VUIFOUJDBUPS͕͑Δ
Slide 41
Slide 41 text
Gmail (他Googleサービス)
w σόΠεΛબͿ
Slide 42
Slide 42 text
Gmail (他Googleサービス)
w "VUIFOUJDBUPSͷઃఆ
Slide 43
Slide 43 text
Gmail (他Googleサービス)
w ཁૉೝূʹͳΔ .'"ͷίʔυΛೖྗ͢Δ
Slide 44
Slide 44 text
Gmail (他Googleサービス)
w εϚϗ͕յΕͨΒͲʔ͢Δͷʁ
Slide 45
Slide 45 text
Github
Slide 46
Slide 46 text
Github
w $POGJHVSBUJPO 4FDVSJUZ
Slide 47
Slide 47 text
Github
w ΞϓϦͱ4.4ͱ྆ํ͑Δ
Slide 48
Slide 48 text
Github
w ଞͱಉ༷ʹೋ࣍ݩόʔίʔυͰઃఆ
Slide 49
Slide 49 text
Github
w ઃఆޙɺϦΧόϦίʔυΛμϯϩʔυͯ͠
͓͘
w (PPHMFͷόοΫΞοϓίʔυͱಉ͡
Slide 50
Slide 50 text
Github
w ཁૉೝূʹͳΔ .'"ͷίʔυΛೖྗ͢Δ
Slide 51
Slide 51 text
その他多要素認証が使えるサービス
w 5XP'BDUPS"VUI '"
w IUUQTUXPGBDUPSBVUIPSH
!
w %SPQCPY
w &WFSOPUF
w 4LZQF
w #BOLPG"NFSJDB
w &OHJOF:BSE
w )FSPLV
w .JDSPTPGU"[VSF
Slide 52
Slide 52 text
classmethod.jp
52
!
!
·ͱΊ
Slide 53
Slide 53 text
まとめ
w ύεϫʔυ͚ͩͷೝূ੬ऑ
w ଟཁૉೝূʹ͢Δ͜ͱͰ؆୯ʹηΩϡϦςΟ
͕ڧԽग़དྷΔ
w ख͕ؒϫϯεςοϓ૿͑ΔσϝϦοτΑΓη
ΩϡϦςΟ্ͷϝϦοτͷ΄͏͕େ͖͍
w ୯ཁૉೝূ͕ڐ͞ΕΔͷ͕খֶੜ·ͰͩΑͶ
(Letʼ’s 多要素認証) >
Slide 54
Slide 54 text
classmethod.jp
54
!
!
༨ஊ
Slide 55
Slide 55 text
まとめ
＿＿＿_̲
／_̲ノ ヽ､_̲＼
ﾐ ﾐ ﾐ oﾟ(（●）) (（●）)ﾟo ﾐ ﾐ ﾐ だっておｗｗｗｗｗｗｗｗｗｗ
/⌒)⌒)⌒. ::::::⌒（_̲_̲⼈人_̲_̲）⌒:::＼ /⌒)⌒)⌒)
| / / / |r┬-‐‑‒| | (⌒)/ / / /／
| :::::::::::(⌒) | | | ／ ゝ :::::::::::/
| ノ | | | ＼ / ） /
ヽ / `̀ー'´́ ヽ / ／
| | l||l 从⼈人 l||l l||l 从⼈人 l||l
ヽ -‐‑‒⼀一''''''"~∼~∼｀`̀'ー-‐‑‒-‐‑‒､ -‐‑‒⼀一'''''''ー-‐‑‒､
ヽ ＿＿＿＿(⌒)(⌒)⌒) ) (⌒＿(⌒)⌒)⌒))
!
!
・利利⽤用するサービスの選択
・保存する情報の選択
Slide 56
Slide 56 text
No content