Tweet
Tweet

Slide 1

Slide 1 text

࠷৽ͷηΩϡϦςΟػೳͱ͔ ηΩϡϦςΟܥηογϣϯʹ͍ͭͯ ͻͨ͢ΒޠΔ 4FDVSJUZ+"84ӓాɹՂ༞

Slide 2

Slide 2 text

ࣗݾ঺հ ӓాɹՂ༞ ɾΫϥεϝιουגࣜձࣾ ɾ"84ࣄۀຊ෦ ɹιϦϡʔγϣϯΞʔΩςΫτ ɹηΩϡϦςΟνʔϜϦʔμʔ ɾ4FDVSJUZ+"84ӡӦ ɾ޷͖ͳαʔϏε ɹ"848"'Ϛωʔδυϧʔϧ AWS WAF

Slide 3

Slide 3 text

͜ͷηογϣϯͷ֓ཁ ൃද͞ΕͨηΩϡϦςΟαʔϏεͱ͔ (͋Δ͔͸஌ΒΜ) ηΩϡϦςΟܥͷηογϣϯ΍ ࠷ۙͷηΩϡϦςΟΞοϓσʔτʹ͍ͭͯ ࢥ͍ͭ͘··ͻͨ͢ΒޠΔ

Slide 4

Slide 4 text

ൃද͞Εͨ৽͍͠ηΩϡϦςΟαʔϏε ࣮ࡍͲ͏ͩͬͨͷ͔ʁ

Slide 5

Slide 5 text

ൃද͞Εͨ৽͍͠ηΩϡϦςΟαʔϏε θϩ (͍·ͷͱ͜Ζ)

Slide 6

Slide 6 text

͜ͷηογϣϯͷ֓ཁ վ ࠷ۙͷΞοϓσʔτͱ ηΩϡϦςΟܥηογϣϯΛத৺ʹ ͱΓ͋͑ͣ೴ोΛਨΕྲྀ͠ͳ͕Β ஻͍͖ͬͯ·͢

Slide 7

Slide 7 text

Ξοϓσʔτͷ࿩

Slide 8

Slide 8 text

Ξοϓσʔτͷ࿩ w ͷ"844VNNJU͕࢝·Δগ͠લ w ͷΞοϓσʔτ

Slide 9

Slide 9 text

Ξοϓσʔτͷ࿩ w ͷ"844VNNJU೔໨͕ऴྃͨ͠ޙ

Slide 10

Slide 10 text

Ξοϓσʔτͷ࿩ Control Towerͷ ౦ژϦʔδϣϯରԠ ৺ΑΓ͓଴͍ͪͯ͠·͢

Slide 11

Slide 11 text

࠷ۙ͋ͬͨΞοϓσʔτ w "NB[PO%FUFDUJWFϦϦʔε w 4FDVSJUZ)VCͷࣗಈम෮ػೳ

Slide 12

Slide 12 text

"NB[PO%FUFDUJWFϦϦʔε (VBSE%VUZͰݕ஌͠ ͨڴҖͷௐ͕ࠪͰ͖Δ ӈϒϩά͸ಈըͰղઆ ͋ΓɺσϞ͋Γɺϝ Ϧοτ͕ྑ͘Θ͔Γ· ͢ IUUQTEFWDMBTTNFUIPEKQ BSUJDMFTBNB[POEFUFDUJWF JOWFTUJHBUJPOEFNP

Slide 13

Slide 13 text

%FUFDUJWF΁ͷر๬ w ͍͍ײ͡ͷՄࢹԽ

Slide 14

Slide 14 text

4FDVSJUZ)VCͰ$*4ҧ൓Λࣗಈम෮ $*4ϕϯνϚʔΫͷ νΣοΫʹҧ൓ͨ͠Ϧ ιʔεΛࣗಈͰम෮Ͱ ͖Δ ͏͔ͬΓϧʔϓʹ஫ҙ IUUQTEFWDMBTTNFUIPEKQBSUJDMFT TFDVSJUZIVCDJTBVUPSFNFEJBUJPO

Slide 15

Slide 15 text

4FDVSJUZ)VCͷཁ๬ w ͍͍ײ͡ͷू໿ w ͍͍ײ͡ͷՄࢹԽ

Slide 16

Slide 16 text

ηογϣϯͷ࿩

Slide 17

Slide 17 text

ηογϣϯͷ࿩ w ࠓճ࿩͢ͷ͸ͭ w $64େن໛ͳ૊৫มભͱҎ্ͷ"84 ΞΧ΢ϯτͷԣஅతηΩϡϦςΟΨʔυϨʔϧӡ ༻ʹ͍ͭͯ w $64ݸͷηΩϡϦςΟϙϦγʔΛࣗ ಈ؂ࠪʂΞΧπΩྲྀɺ"84ηΩϡϦςΟͷऔΓ ૊Έ঺հ

Slide 18

Slide 18 text

7JTJPOBM͞Μ w $64େن໛ͳ૊৫มભͱҎ্ͷ"84ΞΧ΢ ϯτͷԣஅతηΩϡϦςΟΨʔυϨʔϧӡ༻ʹ͍ͭͯ

Slide 19

Slide 19 text

7JTJPOBM͞Μ

Slide 20

Slide 20 text

7JTJPOBM͞Μ

Slide 21

Slide 21 text

7JTJPOBM͞Μ

Slide 22

Slide 22 text

7JTJPOBM͞Μ w ༷ʑͳΨʔυϨʔϧͷ࣮૷ͷ࣮ྫ͕Θ͔Δ w ߏ੒ਤʹࡉ͔͍આ໌͕͍Ζ͍Ζ͋ͬͯͬ͘͡ΓோΊΔ ͱ͍͍ w ηογϣϯฉ͍ͯΈΑ͏ʂ

Slide 23

Slide 23 text

ΞΧπΩ͞Μ w $64ݸͷηΩϡϦςΟϙϦγʔΛࣗಈ؂ ࠪʂΞΧπΩྲྀɺ"84ηΩϡϦςΟͷऔΓ૊Έ঺հ

Slide 24

Slide 24 text

ΞΧπΩ͞Μ

Slide 25

Slide 25 text

ΞΧπΩ͞Μ

Slide 26

Slide 26 text

ΞΧπΩ͞Μ

Slide 27

Slide 27 text

ΞΧπΩ͞Μ

Slide 28

Slide 28 text

ΞΧπΩ͞Μ

Slide 29

Slide 29 text

ΞΧπΩ͞Μ w "84$POpHΛར༻ͨ͠ΨʔυϨʔϧͷΊͪΌ͘ ͪΌৄࡉͳ৘ใ͕঺հ͞Ε͍ͯΔ w "840SHBOJ[BUJPOTͱ࿈ܞͨࣗ͠ಈԽͷϋϚΓ Ͳ͜Ζ΋ࢀߟʹ͍ͨ͠ w ηογϣϯΛฉ͍ͯΈΑ͏ʂ

Slide 30

Slide 30 text

ࠓޙ΋΋ͬͱ΋ͬͱεςΩͳ ΞοϓσʔτΛظ଴͍ͯ͠·͢