自律制御するWebサーバのための高速に動作する権限分離アーキテクチャ / pepabo-web-priv-autonomous

by MATSUMOTO Ryosuke

Slide 1

Slide 1 text

௒ߴूੵϚϧνςφϯτ؀ڥʹ͓͚ΔͳΊΒ͔ͳγεςϜ দຊ྄հ(.01&1"#0JOD ϖύϘɾ͸ͯͳٕज़େձʙΠϯϑϥٕज़ج൫ʙ!෱Ԭ ࣗ཯੍ޚ͢Δ8FCαʔόͷͨΊͷ ߴ଎ʹಈ࡞͢Δݖݶ෼཭ΞʔΩςΫνϟ

Slide 2

Slide 2 text

ओ੮ݚڀһγχΞɾϓϦϯγύϧΤϯδχΞ দຊ྄հ!NBUTVNPUPSZ ϖύϘݚڀॴ IUUQSFTFBSDINBUTVNPUPSKQ

Slide 3

Slide 3 text

೥݄೔૑ઃ IUUQSBOEQFQBCPDPN

Slide 4

Slide 4 text

ϖύϘݚڀॴؔ࿈هࣄ w*/5&3/&58BUDI͞ΜʹΑΔऔࡐهࣄ ɹIUUQJOUFSOFUXBUDIJNQSFTTDPKQEPDTJOUFSWJFXIUNM w5IJOL*5͞ΜʹΑΔऔࡐهࣄ ɹIUUQTUIJOLJUDPKQBSUJDMF wϖύϘݚڀॴαΠτ ɹIUUQSBOEQFQBCPDPN

Slide 5

Slide 5 text

໨࣍ɿϖύϘݚڀॴͷऔΓ૊Έ wߴूੵϚϧνςφϯτ؀ڥͱ͸ w8FCαʔόͷߴ଎ʹಈ࡞͢Δݖݶ෼཭ΞʔΩςΫνϟ w8FCαʔόͷࣗ཯੍ޚ w·ͱΊ

Slide 6

Slide 6 text

ߴूੵϚϧνςφϯτ؀ڥͱ͸

Slide 7

Slide 7 text

ྫ͑͹ฐࣾͰ͸ ߴूੵϗεςΟϯάαʔϏε

Slide 8

Slide 8 text

ϗεςΟϯάαʔϏεͷಛ௃ wࣄۀऀ͸͓٬༷ͷ8FCίϯςϯπΛ੍ޚͰ͖ͳ͍ wϛυϧ΢ΣΞɾ04Ͱ੍ޚ͢Δඞཁ͕͋Δ wڞ༗ͷ৔߹͸Ϧιʔε੍ޚ΍ηΩϡϦςΟ͕ॏཁ wಛʹੑೳͱ͍͔ʹόϥϯεΛͱΔ͔ wฐࣾͰ͸௒ߴूੵͷڞ༗ϗεςΟϯάʹ߆͍ͬͯΔ

Slide 9

Slide 9 text

ͳͥ௒ߴूੵʹͩ͜ΘΔͷ͔

Slide 10

Slide 10 text

ಛʹن໛ͷେ͖͍ϩϦϙοϓʂ ສαΠτҎ্؅ཧ͓ͯ͠Γɺ೔ͷΞΫηε਺͸ԯҎ্

Slide 11

Slide 11 text

ݸਓ޲͚αΠτத৺ w໿ສαΠτΛӡ༻ wֶੜ΍ओ්ͩͬͨΓݸਓ͕झຯͰ࢖͏༻్͕ଟ͍ wϋʔυ΢ΣΞʹͲΕ͚ͩߴूੵͰ͖Δ͔ʹ௅ઓ wͱʹ͔҆͘͘ੑೳͷྑ͍΋ͷΛఏڙ͍ͨ͠ wιϑτ΢ΣΞٕज़ʹΑͬͯղܾ͍ͨ͠

Slide 12

Slide 12 text

8FCαʔόͷΞʔΩςΫνϟ

Slide 13

Slide 13 text

ϓϩηε਺ͱऩ༰αΠτ਺͕ॏཁ wϝϞϦ͸(#Ͱ$16ίΞ͸ݸ wαΠτ਺Λ਺ສ͔ΒສαΠτͰऩ༰͍ͨ͠ wϓϩηε਺͕αΠτ਺ʹґଘ͠ͳ͍Α͏ͳߏ੒ wෳ਺αΠτڞ༗ͷIUUQEϓϩηε͕ϦΫΤετ͞Εͨ ϗετ໊͔ΒಈతʹίϯςϯπΛݕग़ͯ͠ॲཧ˞ ˞IUUQIUUQEBQBDIFPSHEPDTDVSSFOUFOWIPTUT

Slide 14

Slide 14 text

ߴूੵͷͨΊͷΞʔΩςΫνϟ IUUQEϓϩηεݸºສສϓϩηεʢϢʔβݸผʹϓϩηεىಈʣ IUUQEϓϩηεݸ͙Β͍ͷԾ૝ϗετͰશϢʔβڞ༗ IUUQE Ϣʔβ" IUUQE Ϣʔβ# IUUQE Ϣʔβ$ IUUQE Ϣʔβ" Ϣʔβ# Ϣʔβ$ ޮ཰ྑ͘࢒ϦιʔεΛ࢖͑Δ ىಈʹඞཁ ͳϦιʔε ىಈʹඞཁ ͳϦιʔε ىಈʹඞཁ ͳϦιʔε ىಈʹඞཁͳϦιʔε 04 04

Slide 15

Slide 15 text

௒ߴूੵϚϧνςφϯτ؀ڥͷͨΊͷ ΞʔΩςΫνϟͷ՝୊

Slide 16

Slide 16 text

ࠓ೔͸ҎԼͷͭͷ՝୊ղܾͷ࿩ ηΩϡϦςΟͱੑೳͷཱ྆ ςφϯτಛ༗ͷݪҼಛఆ͕ࠔ೉

Slide 17

Slide 17 text

ηΩϡϦςΟͱੑೳͷཱ྆ wϚϧνςφϯτͷಛੑ্ςφϯτຖʹݫີʹݖݶ෼཭ wݖݶ෼཭ͷίετ͕ߴ͘ੑೳ͕ѱ͍ w௒ߴूੵΛҡ࣋͠ͳ͕ΒηΩϡϦςΟͱੑೳΛཱ྆͠ ͍͔ͯʹద੾ʹݖݶ෼཭͢Δ͔ ˠɹߴ଎ʹಈ࡞͢Δݖݶ෼཭ΞʔΩςΫνϟ͕ཉ͍͠

Slide 18

Slide 18 text

ςφϯτಛ༗ͷݪҼಛఆ͕ࠔ೉ wαʔόෛՙ͕ṧഭ͖ͯͨ͠ࠒʹ͸ݪҼ͕ແ਺ w௒ߴूੵϗεςΟϯάͩͱෛՙ͔͚͍ͯΔϢʔβ͕਺ ඦͷ୯ҐͰ͍ΔͱݪҼಛఆͱͦͷ੍ݶ͕ࠔ೉ wߴෛՙ΍ো֐࣌ͷӡ༻ίετ͸ඇৗʹߴ͍ ˠɹࣗ཯੍ޚ͍ͤͨ͞

Slide 19

Slide 19 text

ແ͍ͷͰ͋Ε͹࡞Γ·͠ΐ͏

Slide 20

Slide 20 text

ֶज़ݚڀͷΞϓϩʔνͰ৽ٕज़Λ ݚڀ։ൃɾಋೖ

Slide 21

Slide 21 text

೥݄೔૑ઃ IUUQSBOEQFQBCPDPN

Slide 22

Slide 22 text

No content

Slide 23

Slide 23 text

ηΩϡϦςΟͱੑೳͷཱ྆ ͱ͍͏՝୊Λղܾ

Slide 24

Slide 24 text

8FCαʔόͷ ߴ଎ʹಈ࡞͢Δݖݶ෼཭ΞʔΩςΫνϟ

Slide 25

Slide 25 text

௒ߴूੵԼͰͷಈతίϯςϯπͷݖݶ෼཭ wTV&9&$͸ϦΫΤετຖʹϓϩηεͷੜ੒ഁغ͕ඞཁͰ஗͍ w'BTU$(*͸Ϣʔβ਺ʹԠͯ͡ϓϩηε਺ͱϝϞϦྔ૿Ճ wNPE@SVJE΍TVJE͸ੑೳɾηΩϡϦςΟ໘Ͱ໰୊͋Γ˞ wݖݶ෼཭ͷͨΊͷίετΛͲ͏Լ͛Δ͔ w௒ߴूੵͷͨΊͷݖݶ෼཭ΞʔΩςΫνϟݕ౼ ˞দຊ྄հ Ԭ෦णஉ εϨου୯ҐͰݖݶ෼཭Λߦ͏8FCαʔόͷΞΫηε੍ޚΞʔΩςΫνϟ ిࢠ৘ใ௨৴ֶձ࿦จࢽ 7PM+# /P QQ 0DU

Slide 26

Slide 26 text

NPE@QSPDFTT@TFDVSJUZΛݚڀ։ൃ w"QBDIFͷεϨου୯Ґͷݖݶ෼཭ΞʔΩςΫνϟ wNPE@QIQͳͲͷ%40ͷݖݶ෼཭Λߴ଎ʹߦ͑Δ wϦΫΤετ࣌ͷݖݶ෼཭ͷίετΛ௿ݮ wϓϩηεͷੜ੒ഁغ͔ΒεϨουͷੜ੒ഁغ΁ ˞দຊ྄հ Ԭ෦णஉ εϨου୯ҐͰݖݶ෼཭Λߦ͏8FCαʔόͷΞΫηε੍ޚΞʔΩςΫνϟ ిࢠ৘ใ௨৴ֶձ࿦จࢽ 7PM+# /P QQ 0DU IUUQTHJUIVCDPNNBUTVNPUPSNPE@QSPDFTT@TFDVSJUZ

Slide 27

Slide 27 text

$(*QSPDFTT PXOFSVTFS $(*QSPDFTT PXOFSSPPU QIQDHJJOEFYQIQ PXOFSVTFS $(*QSPDFTT PXOFSVTFS TFUVJE TFUHJE ʜ GPSL FYFDWF TVFYFDQSPHSBN TFUVJESPPU UFSNJOBUFQSPDFTT FYFDWF 1BSFOUIUUQEQSPDFTT PXOFSSPPU $IJMEIUUQEQSPDFTT PXOFSBQBDIF ˞$(*TV&9&$NPEFM

Slide 28

Slide 28 text

εϨουͱ-JOVY$BQBCJMJUJFT w਌ϓϩηε͔Βݖݶ෼཭ͷͨΊͷ$BQBCJMJUZ DBQ ͷΈΛҾ͖ܧ͙ wNPE@QIQͳͲʹΑΔಈతίϯςϯπ࣮ߦ࣌ʹεϨουΛ࡞Δ wεϨου্ͰݖݶมߋޙʹDBQΛམͱͯ͠ίϯςϯπ࣮ߦ w7JSUVBMJOH˞Λ࢖ͬͯɺ"QBDIFͦͷ΋ͷΛ֤छಛݖΛམͱͭͭ͠ 3FBE0OMZͷCJOEϚ΢ϯτͱඞཁϑΝΠϧͱϦιʔε੍ݶԽͷ DISPPU؀ڥʹͯىಈ͓ͤͯ͘͞ͱΑΓڧݻ IUUQTHJUIVCDPNNBUTVNPUPSNSVCZWJSUVBMJOH

Slide 29

Slide 29 text

1BSFOUIUUQEQSPDFTT PXOFSSPPU $IJMEIUUQEQSPDFTT PXOFSBQBDIF NQTUISFBE PXOFSVTFS NQTUISFBE PXOFSBQBDIF JOEFYQIQ PXOFSVTFS TFUVJE TFUHJE ʜ VOTFUDBQT DSFBUFUISFBE TFUDBQT EFTUSPZUISFBE QBSTF SVO QSDUM TFUVJETFUHJEDBQT NQTUISFBE PXOFSVTFS ˞%40NPE@QSPDFTT@TFDVSJUZNPEFM 7JSUVBMJOH&OWJSPONFOU

Slide 30

Slide 30 text

γεςϜίʔϧͷ਺Λൺֱ wQIQJOGP ΁ͷΞΫηεΛTUSBDF͔Βղੳ w$(*ʴTV&9&$ճ wNPE@QIQNPE@QSPDFTT@TFDVSJUZճ wΦʔόʔϔουʹͳͬͯΔγεςϜίʔϧ wDMPOF PQFO DMPTF FYFDWF ͳͲTV&9&$ؔ࿈ ˞TUSBDFDGQ1*% ˞DBUDHJMPHcHSFQWFQPMM@XBJUcHSFQWGVUFYcQFSMBOF QSJOU@JG

Slide 31

Slide 31 text

No content

Slide 32

Slide 32 text

ಋೖલޙͷ$16࢖༻ྔൺֱ Ұ೔ͷΞΫηε਺͸ͲͪΒͷαʔό΋໿ສʢαʔϏεશମͰ͸਺ेԯʣ $(*ʴTV&9&$ %40ʴNPE@QSPDFTT@TFDVSJUZ ˙TZTUFN ˙VTFS ˙JEMF

Slide 33

Slide 33 text

ͦͷଞͷϝϦοτ wෛՙ͕େ෯ʹ௿ݮʢ1)1ར༻ऀ͕ଟ਺ʣ w%40ͳͷͰϓϩηεϦιʔεΧ΢ϯλΛऔಘՄೳ wࣗ཯੍ޚతʹϓϩηεࣗ਎ͷϦιʔε࢖༻ྔΛܭଌ͠ ͯղੳ͔ͯ͠ΒԿΒ͔ͷ੍ޚ͕Մೳʹ ˠɹࣗ཯੍ޚͷલఏ৚݅Λຬͨ͢

Slide 34

Slide 34 text

ߴूੵ؀ڥԼͰ΋ߴ଎͔ͭ҆ఆతͳ ݖݶ෼཭ΞʔΩςΫνϟ͕Ͱ͖ͨ

Slide 35

Slide 35 text

͞Βʹಥ͖٧Ί͍ͯ͘

Slide 36

Slide 36 text

ӡ༻վળͷͨΊʹ͸ߴूੵԽʹ࠷దͳ Ϧιʔε੍ޚΞʔΩςΫνϟ͕ඞཁ

Slide 37

Slide 37 text

ςφϯτಛ༗ͷݪҼಛఆͱ ੍ޚ͕ࠔ೉ͱ͍͏՝୊Λղܾ͍ͨ͠

Slide 38

Slide 38 text

8FCαʔόͷࣗ཯੍ޚ

Slide 39

Slide 39 text

ैདྷͷᮢ஋؂ࢹ ᮢ஋

Slide 40

Slide 40 text

มԽ఺ݕग़ʹΑΔݕ஌Ͱ͖Δ࣌఺ͷ૿Ճ

Slide 41

Slide 41 text

ᮢ஋ҎԼͰ΋܏޲มԽΛݕ஌Ͱ͖Δ w܏޲มԽͷੵΈॏͶʹΑΓߴෛՙʹͳΔͱԾఆ wߴෛՙݕ஌࣌ʹ͸ݪҼ͕ແ਺ʹ͋Δঢ়ଶʹͳΔ wᮢ஋͸௒ա͍ͯ͠ͳ͍͕܏޲͕มԽͨ࣌͠఺Λ஌Δ w8FCαʔϏεج൫ʹ͓͍ͯ͸มԽ఺΍֎Ε஋ʹ͸Կ ͔ݪҼ͕͋Δ͸ͣ

Slide 42

Slide 42 text

܏޲มԽͨ࣌͠఺ͰԿΛ͢΂͖͔ wҟৗݕ஌ͳͷͰGBMTFQPTJUJWFOFHBUJWF͕ॏཁ wݕ஌੍͙ͯ͢͠ݶΛ͢Δͱޡݕ஌ͷӨڹ͕େ͖͍ wͱ͸͍͑ݕग़ͨ͠ΒݪҼΛಛఆͯ͠ΞΫγϣϯ͢΂͖ w͜ΕΒͷಛੑΛ׆੍͔͢ޚख๏Λߟ͑Δ wඇఆৗͳσʔλͷ౷ܭ஋ΛͲ͏׆༻͢Δ͔

Slide 43

Slide 43 text

զʑ͕๬ΉͳΊΒ͔ͳঢ়ଶͱ͸

Slide 44

Slide 44 text

όϥϯεͷྑ͍མͱ͠ॴΛݟ͚ͭΔ wྫ͑͹ߴूੵͳϚϧνςφϯτ؀ڥ wશମͷϦιʔε͕ۭ͍͍ͯΔঢ়گͰ͸ࣗ༝ʹ࢖͑Δ wϦιʔε͕ṧഭ͖ͯͨ࣌͠ͷΈʹ੍ݶΛ͔͚Δ wṧഭ࣌ͷ੍ݶର৅͸໰୊ͱͳΔςφϯτͷΈ wશମͱͯ҆͠ఆͨ͠ͳΊΒ͔ͳঢ়ଶΛ࡞Γ͍ͨ

Slide 45

Slide 45 text

͞Βʹ۩ମతʹ

Slide 46

Slide 46 text

ϨϯαόΛྫʹݕ஌ɾ੍ޚΛߟ͑Δ wมԽ఺ݕग़࣌ʹͲͷϗετ͕มԽ఺είΞ͕ߴ͍͔ w֤ϗετͷϦιʔε࢖༻܏޲ͷॏΈ෇͚Λߦ͏ wॏΈ෇͚ϦετΛ܏޲มԽຖʹߋ৽͍ͯ͘͠ wશϦιʔε͕ṧഭ͖ͯͨ͠ΒϦετΛݩʹࣗಈ੍ޚ

Slide 47

Slide 47 text

ॏΈ෇͚Ϧετͷੜ੒ 8FCαʔό ϓϩηε ॏΈ෇͚Ϧετ FYNBQMFDPN NBUTVNPUPSKQ FYBNQMFKQ FYBNQMFPSH ɾ ɾ ϗετຖʹϦιʔε࢖༻܏޲ ͷॏΈ෇͚ϦετΛߋ৽ ྫ͑͹ߴ͍είΞΛܭଌͨ͠৔߹ͷΈϦετΛߋ৽ͯ͘͠౳

Slide 48

Slide 48 text

αʔόͷϦιʔε͕ṧഭ͖ͯͨ͠Β੍ޚ αʔόϦιʔε͕ඡഭ͍ͯ͠ͳ͍৔߹͸ϦετͷॏΈ෇͚ͷΈʹ຿ΊΔ ॏΈ෇͚Ϧετ FYNBQMFDPN NBUTVNPUPSKQ FYBNQMFKQ FYBNQMFPSH ɾ ɾ ϗετຖʹϦιʔε࢖༻܏޲ ͷॏΈ෇͚ϦετΛߋ৽ αʔόશମͷϦιʔε͕ඡഭ͖ͯͨ͠Β ϦετΛݩʹ8FCαʔόࣗ਎੍͕ޚ 8FCαʔό ϓϩηε

Slide 49

Slide 49 text

࣌ܥྻσʔλͷੜ੒ wϨεϙϯεੜ੒ʹফඅͨ͠Ϧιʔε஋͔Βੜ੒ wؔ܎ੑͷ͋Δෳ਺ͷ࣌ܥྻσʔλ͔Β૬ؔؔ܎ͷ࣌ܥ ྻσʔλΛ࡞Δ͜ͱ΋Ͱ͖Δ wαʔόશମͷมԽͱϗετ୯ମͷมԽʹ૬͕ؔ͋Ε͹ ͦΕ͸αʔόʹେ͖͘ෛՙΛ͔͚͍ͯΔɺͳͲ

Slide 50

Slide 50 text

σʔλੜ੒ͱղੳιϑτ΢ΣΞ͸࣮૷ࡁΈ w8FCαʔόͷػೳ֦ுNPE@NSVCZOHY@NSVCZ wϓϩηεͷϦιʔεফඅ஋औಘNSVCZSFTPVSDF wมԽ఺ݕग़ΤϯδϯNSVCZDIBOHFpOEFS w૬ؔ܎਺ੜ੒ΤϯδϯNSVCZDPSSFMBUJPO

Slide 51

Slide 51 text

੍ݶख๏΋࣮૷ࡁΈ wϦΫΤετ୯ҐͰ$16΍*0ͳͲͷׂ౰Λมߋ wDHSPVQ NSVCZDHSPVQ ΍SMJNJU NSVCZSFTPVSDF wϗετ୯ҐͰͷಉ࣌઀ଓ਺Λมߋ wNPE@NSVCZ΍NPE@WIPTU@NBYDMJFOUT

Slide 52

Slide 52 text

ϦΫΤετ୯ҐͰͷϦιʔε੍ޚ 8FCαʔό ϓϩηε ΫϥΠΞϯτ ϦΫΤετ Ϩεϙϯε Ϩεϙϯεੜ੒ͷॲཧͷؒͷΈ ϓϩηεΛಛఆͷDHSPVQʹΞλον ʢ$16ͳͲʣ DHSPVQΞλον DHSPVQσλον

Slide 53

Slide 53 text

ϛυϧ΢ΣΞ͕ಛ௃ྔநग़ɾղੳɾ੍ޚ Λࣗ཯తʹߦ͏Α͏ʹͳΔ

Slide 54

Slide 54 text

ޙ͸࣮ફ͢ΔͷΈ

Slide 55

Slide 55 text

·ͱΊ

Slide 56

Slide 56 text

·ͱΊ wߴूੵ؀ڥͷݖݶ෼཭ίετͷޮ཰Խ wϓϩμΫγϣϯ؀ڥͰେ෯ͳ੒Ռ͕ग़ͨ wߴूੵ؀ڥͷߴෛՙӡ༻ٕज़ͷͨΊͷࣗ཯੍ޚ wࠓ೥தʹ͸ϓϩμΫγϣϯಋೖ͢Δ༧ఆ

Slide 57

Slide 57 text

ࠓޙͷݚڀ։ൃͷ༧ఆ w45/4ϓϩάϥϚϒϧͳ࣍ੈ୅-JOVYೝূج൫ w#JHGPPUϩάl׆༻zج൫ wIBDPOJXBϓϩάϥϚϒϧͳ࣍ੈ୅ίϯςφΤϯδϯ w8FCαʔόͷࣗ཯੍ޚ wಈతฏߧੑΛ࣋ͭ8FCαʔϏεج൫ wػցֶशʹΑΔγεςϜͷଐੑͷ෼ྨͱঢ়ଶ؂ࢹ

Slide 58

Slide 58 text

ಈతฏߧੑʹ͍ͭͯৄ͘͠஌Γ͍ͨ৔߹ͷࢿྉ IUUQTTQFBLFSEFDLDPNNBUTVNPUP@SOBNFSBLBEJEFBEFTJHO

Slide 59

Slide 59 text

ͳΊΒ͔ͳγεςϜ

Slide 60

Slide 60 text

ͳΊΒ͔ͳγεςϜͷίϯηϓτ γεςϜʹͱͬͯͷϢʔβ΍ɺγεςϜΛߏ੒͢Δαʔό౳ͷཁૉ͕ɺͲͷ Α͏ͳΧςΰϦʹଐ͢Δ͔ɺ͍͔ͳΔಛ௃Λ͔࣋ͭΛɺਫ਼៛ʹೝࣝ͢Δ ͦͷࡍɺϢʔβ΍γεςϜ؅ཧऀͱ͍ͬͨਓؒʹ࿑ۤΛڧ͍ΔΑ͏ͳ໌ࣔత ͳૢ࡞Λ՝͞ͳ͍ ͓ΑͼͰಘͨΑΓਫ਼៛ͳΧςΰϦ΍ݸผͷಛ௃ɺ͋Δ͍͸ͦΕΒͷؒͷ ؔ܎ੑʹج͖ͮɺͦͷ࣌ʑͷঢ়گʹԠͯ͡࠷దͳαʔϏεΛఏڙ͢Δ ࣗ཯੍ޚ͸ͳΊΒ͔ͳγεςϜͱ͍͏ίϯηϓτΛ8FCαʔό΁ద༻͢Δྫ

Slide 61

Slide 61 text

ݚڀһੵۃతʹืूத IUUQSBOEQFQBCPDPN