Slide 1

Slide 1 text

SREを以てセキュリティエンジニアリングを制す ― class Dev"Sec"Opsの実装に向けて ― 株式会社Flatt Security 米内 貴志 (@lmt_swallow)

Slide 2

Slide 2 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 aYVXWTU` feYbdY€YƒwvutyrpYsThTxX` ˜ mnTjjYˆh‘—f`jdY”iYts– ˜ ™’Ye‰™‡†…„

Slide 3

Slide 3 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 aYVXWTU` s nl˜vmqzp}}mtkj–ih}™msg”‘u—e„‰ˆ†€…wr s |‡mmftvƒwmmo{u‰‚yqpr•“i’h s gfsmd}}eyxxxdzp}}b}kjdmwc

Slide 4

Slide 4 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 WUTV ‰ ‡…€yviƒˆpt†shu„gedqcx‚b ‰ `Y€garwdXf fe–™—d“’˜”•‘d“ kjihg l m

Slide 5

Slide 5 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 grhfsafhfebdpdcr`XWfebdVYTiUq i s•quep–qejmqkVf™T—gtl˜w” i yr’dndcr`dnd‰ˆdd‡…„†zƒ‚ i d€‘yqvd€xmvdvxu i ttt ~||}d

Slide 6

Slide 6 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 WVUT t€wydrywyixhThe€vucyixhsbaYh`UUXpg je€vucyixh’€‘€wh”‰yvdiˆc†˜rh€viy‘€–hs‚ {zwuvrysVpontmlnxkt

Slide 7

Slide 7 text

ÉÈÇÇÆÅÄÄÃÂÇÇÁÇÀÈ @(À76Ç)À'À%#!0ÂÇ6Ä"9ÀÇ'À$321

Slide 8

Slide 8 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 xwuXqWytphagftesdfcb`vYUriTV

Slide 9

Slide 9 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 x€`vsh`pywuitguedqraYbfXWVUTc ˜ˆh™d…”ˆ–“ˆgf‘ ‰‡†„ƒ†‚ˆ—•e’ i ˜ —ˆ”‘Š{…ƒ„}“|}z’† y~‚…Œ–wdu‘{…t† u‘py€•‰†h™m‚r ˜ h™ln zekjˆ‚ ¨§†£ƒ–“Šœ¡ ¦¥Ÿ¢l

Slide 10

Slide 10 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 tqpgcepsbdh`YWViUarTVfXV ‡“’‰‘ˆ†…„•ƒ‚” €yxw“ˆu‘v – ‰ †„junz“xpˆtrqx w€…ki|‰sy€gƒf‡ ‰ jed“˜{}r ywy™—y Ž”‘“w€ g’Šg

Slide 11

Slide 11 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 yxaVtiadrevfpcwb`YXsWUheTqugc hd˜eƒehd—˜e”“f‚™’ –‡‘‰ˆ†…g„•€ i œ ™˜’Žz‘ŽŒ‡”v‰›Š– ‘”ˆ”‰›…„ƒ”ŽŒ‡t~ …—}|“|x•wurƒ†š œ qn€“eomlyomke„‚“j” ƒ†› ˆ} ¨¦€”¤¢› Ÿž

Slide 12

Slide 12 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 r‚yxwXusv`‚p‚gvectXybuYwhda€‚yuXp‚fvqWVUiT –‰“•‡†…„q’‘ƒˆg™ˆqWVU rlpngk‡hoƒˆg™ˆqWVU }h~z|yxw|y{zu†ts†„‚h†…

Slide 13

Slide 13 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 r‚yxwXusv`‚p‚gvectXybuYwhda€‚yuXp‚fvqWVUiT –‰“•‡†…„q’‘ƒˆg™ˆqWVU rlpngk‡hoƒˆg™ˆqWVU }h~z|yxw|y{zu†ts†„‚h†…

Slide 14

Slide 14 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 rchdqa`YWpgfVbXUbpeiT ”‡’—–•vy‘pˆh„–•‚ˆxp€wu …p‰ƒ„ThtsT Œw—Š‘v•”’Ždœ‹`…™‚ Œ—Šy‘pu‡r›ƒˆ‚‰on†vo˜‚ Œq—Šy•ƒˆj•ˆx}lškT{ih‚ Œg—ŠX‚f ed”’„—“˜yk ¦•¡¥¤•…pžTv

Slide 15

Slide 15 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 rchdqa`YWpgfVbXUbpeiT ”‡’—–•vy‘pˆh„–•‚ˆxp€wu …p‰ƒ„ThtsT Œw—Š‘v•”’Ždœ‹`…™‚ Œ—Šy‘pu‡r›ƒˆ‚‰on†vo˜‚ Œq—Šy•ƒˆj•ˆx}lškT{ih‚ Œg—ŠX‚f ed”’„—“˜yk ¦•¡¥¤•…pžTv ²‰’°¯f¨oª’­v§ öüÙwvìiœ‹`‰on¿åâpæšfy‘wÚØiUbpŽvÕ ÓÑÏÎÓÑËÞvØie”ódÜÅÃÉõplšÁwu Þß×ø¾ø½èÍÞ¼Ìï×ÞûԻ׺ï¹Þ¸ß¼ûñÞplš’‡„T•ví³úãÐ

Slide 16

Slide 16 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 r‚yxwXusv`‚p‚gvectXybuYwhda€‚yuXp‚fvqWVUiT –‰“•‡†…„q’‘ƒˆg™ˆqWVU rlpngk‡hoƒˆg™ˆqWVU }h~z|yxw|y{zu†ts†„‚h†…

Slide 17

Slide 17 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 `ecgfdaYhibfXbWUVT rtvsvqpu ‡ ƒ7~}{xuvIi˜tq5p l’n“rmkh#e™–” ‡ sg—x‰ˆ†7…3…d„j y#‚w“zx€•yƒ€#xw–‘ ‡v…„ ‡ 4¹¸»º©¯¢²Iµ™“q5p ¦“°p«¸¥©»kh–” ‡ ‰ˆ†7…3¡™–p…d„j y#‚w“•yƒ€7®3‰ˆ¦–‘ ¾À¿vÁ¼ ‡ uvâä#ÚáԂÓØã×Ñuv Ð#ÏÎ×̘p¦#jy‚È ‡ Åß×ėxÕÞ#Âقw çæå ‡ û#÷#üôxjy‚È ‡ Åß×ìëÕÞ#Âقw Infæ ‡ ¡™z固x環境I目指3上で参考7 xプラ»&6²„ツ©ル#提示 `ec定義の例

Slide 18

Slide 18 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 r‚yxwXusv`‚p‚gvectXybuYwhda€‚yuXp‚fvqWVUiT –‰“•‡†…„q’‘ƒˆg™ˆqWVU rlpngk‡hoƒˆg™ˆqWVU }h~z|yxw|y{zu†ts†„‚h†…

Slide 19

Slide 19 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 cpqeb`XYi`XfbaWVTUhdqWg tvxuxsrw ‰ …7€}zwxIkdvs5r ƒn”p•tomj#ge˜– ‰ ui™z’‘ˆ7‡3ƒ‡f†l {#„y•|ƒz‚—…‚#€y˜“ ‰x‡† ‰ 4»º½¼«±¤´I·e•s5r ƒ¨•²r­º§«½mj˜– ‰ ’‘ˆ7‡3ƒ£e˜r‡f†l {#„y•—…‚7°3ƒ‹Š¨˜“ ÀÂÁxþ ‰ wxäæ#ÜãքÕÚåÙÓwx Ò#ÑÐÙÎdr¨#l{„Ê ‰ ÇáÙƙz×à#Äۄy Xèç ‰ ý#ù#þözl{„Ê ‰ ÇáÙîí×à#Äۄy YÁÀè ‰ £e|4z0I&3"% 27 zƒ½&6´†Ç«Æ#Ä wuV„9UsYaxfTdaRc`itCD@WhA‚egQp ePfITXHGaWEBivbHGqURgrV€y7UVTqWg g‰Tˆr…

Slide 20

Slide 20 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 cpqeb`XYi`XfbaWVTUhdqWg tvxuxsrw ‰ …7€}zwxIkdvs5r ƒn”p•tomj#ge˜– ‰ ui™z’‘ˆ7‡3ƒ‡f†l {#„y•|ƒz‚—…‚#€y˜“ ‰x‡† ‰ 4»º½¼«±¤´I·e•s5r ƒ¨•²r­º§«½mj˜– ‰ ’‘ˆ7‡3ƒ£e˜r‡f†l {#„y•—…‚7°3ƒ‹Š¨˜“ ÀÂÁxþ ‰ wxäæ#ÜãքÕÚåÙÓwx Ò#ÑÐÙÎdr¨#l{„Ê ‰ ÇáÙƙz×à#Äۄy Xèç ‰ ý#ù#þözl{„Ê ‰ ÇáÙîí×à#Äۄy YÁÀè ‰ £e|4z0I&3"% 27 zƒ½&6´†Ç«Æ#Ä €ThRxYprvfWd`xwWVyUUbtqTWgQ PiIWHsUXVFDECAq98aBpux765G ‡v…T„P

Slide 21

Slide 21 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 cpqeb`XYi`XfbaWVTUhdqWg tvxuxsrw ‰ …7€}zwxIkdvs5r ƒn”p•tomj#ge˜– ‰ ui™z’‘ˆ7‡3ƒ‡f†l {#„y•|ƒz‚—…‚#€y˜“ ‰x‡† ‰ 4»º½¼«±¤´I·e•s5r ƒ¨•²r­º§«½mj˜– ‰ ’‘ˆ7‡3ƒ£e˜r‡f†l {#„y•—…‚7°3ƒ‹Š¨˜“ ÀÂÁxþ ‰ wxäæ#ÜãքÕÚåÙÓwx Ò#ÑÐÙÎdr¨#l{„Ê ‰ ÇáÙƙz×à#Äۄy Xèç ‰ ý#ù#þözl{„Ê ‰ ÇáÙîí×à#Äۄy YÁÀè ‰ £e|4z0I&3"% 27 zƒ½&6´†Ç«Æ#Ä A@9T865 ˆdƒ@€weWgƒq†v‚Ug€`faƒu`cep rbb…btxWV6„SURqI6HXFEDhgUPGCe

Slide 22

Slide 22 text

ÉÈÇÇÆÅÄÄÃÂÇÇÁÇÀÈ $8534)60(' %#$"! 72"&1

Slide 23

Slide 23 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 uhsxwvW`rtigewvciYbtaXV ftpdeqgUTq yd„w~™‚z{ƒ‰xir†on y}„w`rt˜h•ˆpucv’‘s™’…bon y”„w`vpu‡viYj‰‡ˆqh†…on y„„w|oƒ ‚qx€y`ˆl “vŽ’‘vft‹qW

Slide 24

Slide 24 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 uhsxwvW`rtigewvciYbtaXV ftpdeqgUTq yd„w~™‚z{ƒ‰xir†on y}„w`rt˜h•ˆpucv’‘s™’…bon y”„w`vpu‡viYj‰‡ˆqh†…on y„„w|oƒ ‚qx€y`ˆl “vŽ’‘vft‹qW

Slide 25

Slide 25 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 –uk”etih—f˜jp•€‰m†… –dk”„xvsrpo‡’h“gftgl‘†… –ik”„e‡’beq‚dncwya`†… –Yk”™†X WVhfˆUgT„cƒ zeuyxesvrwt ¢›Ÿ’€œežšv–wŽŒ™†ƒŠ t‡‰‘…X„xf€~™gher{

Slide 26

Slide 26 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 cwrywsqYusihqxywrywsahfb`eWgqVpXdqtvUT

Slide 27

Slide 27 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 …€sƒ€tqawtievqud…b‚ttYwXqawtieqgxWfVr`„pUcqa…yhT ~m˜xctnlrqu}iWgev {™–•“ss™zkjy‘dsf™c—”’‰|ˆpw‡†

Slide 28

Slide 28 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 „ix`iywu‚ytswr€qpƒafdcƒgvb€XWV€eUhTY €XWV€eU˜h’j‘ƒˆ ‡q™g“–†e…

Slide 29

Slide 29 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 g€wƒ€xvtyxsrcvi‚hadb`XYVbeWuhfqpUT ”˜dfp•“bˆ‡–‘†… —„‰™

Slide 30

Slide 30 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 fitaubpgwevcXdqVUs`YWrTha €‚„„yxƒ • ‹7†…ƒ€}~Iqj‡|y5x ‰tdvezusp#mkhf • {oi€˜—–”7“3‰“l’r #e‚‰€ˆg‡‘ˆ#†…h™ „Œ • 4ÁÀñ·ªºI½k›y5x ‰®e¸x³À­•±Ãsphf • ˜—–”7“3‰©kžx“l’r #eg‡‘ˆ7¶3‰‘®h™ ÆÈDŽÉÄ • }~êì#âéܐÛàëßÙ}~ Ø#×ÖßÔjx®#rÐ • ÍçßÌi€Ýæ#Êᐠïîí • そ# 他# 様々€rÐ • Íçß 便利Ýæ#ÊᐠInfî • ©k‚ 固€ 環境I 目指3 上で参考7 €‰ プラÃ&6º’ ツ± ル# 提示 重大さ e 義の例 「検査Us` のYWV 、自組織のXdq 判e の ロジックを合わせc いr 、合わない…… 」 結果Vv てXdq 別の目標を持V うVv ても、計測r 困難になa こVr

Slide 31

Slide 31 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 f…w†…xcq€xtsycƒprvg„ihdeb‚aYuXWVrvT`U ƒprvxyxw{eqjgfgp˜l„ihd™k —u–•d”“€o’d‘huwd‰tzˆt‡ ”•d’l–lŒ‹Š‰ˆ‡‘g`…„ƒU ¯ª«•zz€¨¯¦™¡¥o§z­£›¢«“¥¦š¨˜z«¯¨«¯o¢¥£o¦œ¢§› ›€“œ¢—ošŸ­£o—«

Slide 32

Slide 32 text

ÉÈÇÇÆÅÄÄÃÂÇÇÁÇÀÈ

Slide 33

Slide 33 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 WUTV ‰ ‡…€yviƒˆpt†shu„gedqcx‚b ‰ `Y€garwdXf fe–™—d“’˜”•‘d“ kjihg ‰ f‡¤‚f‡‹™z” ª‰ “™‘…ˆ†ž ‘¢¡§x‚b ‰ e€œ„–œ|{™—™f€~wv|{™’}x•srqp€‚n ©›¥d“mŸ•užu£lŽ ›³Ÿ¶ •”°µ®´n© ¸ ¹

Slide 34

Slide 34 text

ÆÈÉÉÅÇÄÃÉÉÂÉÁÀ HFBIC5A@S9&610'2490PIG3)À$ÃÇÇ8Á QHÁÀQÅÇ#(7"5 db`bYa YXaVcXWaT`U yYYi`srr`yb`yXgwvqrufa

Slide 35

Slide 35 text

ぜひこの辺語り合いましょう! @lmt_swallow