Tweet
Tweet

Slide 1

Slide 1 text

Πϯφʔιʔε ͸͡Ί·ͨ͠ 
 4JN4UB !TIJNBHBKJ 
 /&44BQQPSP5FDI#SFXFSZ /FT5FDI#SFXFSZ 
 ˡϗϫΠτγϚϦεͷΞϧλ

Slide 2

Slide 2 text

ࣗݾ঺հ ɹ࡛ۄɹʢʙେֶͷ్த·Ͱʣ ˠࡳຈɹʢʙେֶɾ೥ʣ ˠਆಸ઒ʢʙେֶӃʙब৬ͯ͠೥൒͘Β͍ʣ ˠࡳຈɹʢʙ೥ͪΐͬͱɺݱࡏʣ ޷͖ͳ"84αʔϏεɿ4UFQ'VODUJPOT 4JN4UBʢΦϯϥΠϯͷ͕ͨ͢ʣ ,%%*ΞδϟΠϧ։ൃηϯλʔגࣜձࣾ ϓϥοτϑΥʔϜΤϯδχΞϦϯά෦ !TIJNBHBKJ 5XJUUFS 4FSWFSMFTT ΧάΧά

Slide 3

Slide 3 text

ϗϫΠτγϚϦεͱ ฻Β͍ͯ͠·͢🐿 ˢ౳਎େνϧλϦε 5XJUUFSΞΧ΢ϯτ΋͋ΔΑ !BMUB@XIJUFDIJQ ࠷ۙॳΊͯ ಈ෺පӃʹߦ͖·ͨ͠

Slide 4

Slide 4 text

աڈͷొஃࢿྉΞοϓͯ͠·͢ʢࠓ೔ͷࢿྉ΋ʂʣ IUUQTTQFBLFSEFDLDPNTIJNBHBKJ

Slide 5

Slide 5 text

ݸਓϒϩάΛӡ༻͍ͯ͠·͢͠·͕͡ ͠Ήͦ͘ "84ΞοϓσʔτΛ ຖिߋ৽ʂ 
 ͦͷଞ Ϋϥ΢υΨδΣοτ γϚϦεͷ࿩ͳͲ

Slide 6

Slide 6 text

"HFOEB • ϓϥοτϑΥʔϜΤϯδχΞͷ͓࢓ࣄ • Πϯφʔιʔεͱͷग़ձ͍ • ΠϯφʔιʔεͷޮՌͱ೉͠͞ • ·ͱΊ

Slide 7

Slide 7 text

ϓϥοτϑΥʔϜΤϯδχΞͷ ͓࢓ࣄ

Slide 8

Slide 8 text

ϓϥοτϑΥʔϜΤϯδχΞϦϯάͬͯʁ ϓϥοτϑΥʔϜɾΤϯδχΞϦϯάͱ͸Կ͔ʁ(BSUOFS IUUQTXXXHBSUOFSDPKQKBBSUJDMFTXIBUJTQMBUGPSNFOHJOFFSJOH ҎԼΛຬͨ͢ϓϥοτϑΥʔϜΛ 
 ߏங͢ΔΞϓϩʔνΛࢦ͢ ໨ඪɿ ɾ։ൃऀͷੜ࢈ੑ޲্ ɾϏδωεՁ஋ͷ૑ग़ ໨తɿ ɾ։ൃऀͷೝ஌ෛՙΛܰݮ ɾ։ൃऀͷΤΫεϖϦΤϯε޲্ खஈɿ ɾηϧϑαʔϏεػೳͷॆ࣮ ɾΠϯϑϥ΍ӡ༻ͷࣗಈԽ

Slide 9

Slide 9 text

,"(ϓϥοτϑΥʔϜνʔϜͷ͓࢓ࣄ • ࣾ಺ڞ௨(JU)VC&OUFSQSJTF4FSWFSʢ()&4ʣͷ؅ཧ • ()&4΍ࣗࣾΫϥ΢υ؀ڥͷίετ࠷దԽ • ࣗࣾΫϥ΢υ؀ڥ΍*E1ͷӡ༻ɺ؅ཧ • ࣗࣾΫϥ΢υ؀ڥͱ֤Ҋ݅؀ڥͷηΩϡϦςΟվળ 
 ˠ4FDVSJUZ)VC΍(VBSE%VUZͷಋೖɺ؅ཧͳͲ • ֤εΫϥϜνʔϜ΁ͷώΞϦϯάɺࢧԉϝχϡʔ࡞੒ • ͦͷଞɺͪΐͬͱ֎Ͱ͸࿩ͤͳ͍͜ͱͳͲ

Slide 10

Slide 10 text

,"(ϓϥοτϑΥʔϜνʔϜͷ͓࢓ࣄ • ࣾ಺ڞ௨(JU)VC&OUFSQSJTF4FSWFSʢ()&4ʣͷ؅ཧ • ()&4΍ࣗࣾΫϥ΢υ؀ڥͷίετ࠷దԽ • ࣗࣾΫϥ΢υ؀ڥ΍*E1ͷӡ༻ɺ؅ཧ • ࣗࣾΫϥ΢υ؀ڥͱ֤Ҋ݅؀ڥͷηΩϡϦςΟվળ 
 ˠ4FDVSJUZ)VC΍(VBSE%VUZͷಋೖɺ؅ཧͳͲ • ֤εΫϥϜνʔϜ΁ͷώΞϦϯάɺࢧԉϝχϡʔ࡞੒ • ͦͷଞɺͪΐͬͱ֎Ͱ͸࿩ͤͳ͍͜ͱͳͲ ˠ͜Ε͸ϓϥοτϑΥʔϜΤϯδχΞϦϯάͬΆ͍ ˠ͜Ε΋ϓϥοτϑΥʔϜΤϯδχΞϦϯάͬΆ͍͚Ͳൿີ ˠ͜͜ΑΓ্͸Πϯϑϥ΍$$P&ཁૉڧΊ

Slide 11

Slide 11 text

ηϧϑαʔϏεܕͷϓϥοτϑΥʔϜ 1MBUGPSN&OHJOFFSJOHPO4FSWFSMFTT IUUQTTQFBLFSEFDLDPN@LFOTIQMBUGPSNFOHJOFFSJOHPOTFSWFSMFTT • ҎԼͭ͸ʮ1MBUGPSN&OHJOFFSJOHPO4FSWFSMFTTʯ͔Βൈਮ • "NB[PO$PEF$BUBMZTU • "844FSWJDF$BUBMPH • #BDLTUBHF • ॳظ͸(JU)VCͳͲͷίʔυϦϙδτϦͰ΋ՄೳͰ͸ʁͱߟ͑Δ 
 ˠࣾ಺ͷ(JU)VC&OUFSQSJTF0SHBOJ[BUJPOΛબఆ

Slide 12

Slide 12 text

(JU)VC&OUFSQSJTFͷ੔උʹΑΔ஍൫ݻΊ ϙʔλϧϦϙδτϦͷ࡞੒ ϦϙδτϦͷ࡞੒ϧʔϧ੍ఆ 5FBNTʹΑΔݖݶ؅ཧ

Slide 13

Slide 13 text

(JU)VC&OUFSQSJTFͷ੔උʹΑΔ஍൫ݻΊ • ೝ஌ෛՙͷ௿ݮͱՄࢹੑ޲্ʹΑΔෛ࠴Խͷ༧๷ • ϙʔλϧϦϙδτϦͷ࡞੒ • ϦϙδτϦ࡞੒ϧʔϧͷ੍ఆ • ηΩϡϦςΟ໘ͷݟ௚͠ • 5FBNTʹΑΔϦϙδτϦ୯ҐͷΞΫηεݖݶઃఆ • 0SHBOJ[BUJPOʹ͓͚Δ#BTF1FSNJTTJPOTͷແޮԽ • ϦϙδτϦͷ7JTJCJMJUZΛݪଇ1SJWBUF΁มߋ • ࢧԉπʔϧ܈ͷѪশߟҊ

Slide 14

Slide 14 text

ࢧԉπʔϧ܈ʮLBHUPPMTʯͷߟҊ wҎԼͷΑ͏ͳ΋ͷΛࠓޙ࡞੒ɾఏڙ༧ఆ w (JU)VC"DUJPOT༻ͷ$PEF#VJME3VOOFSΛల։͢Δπʔϧ w /"5(BUFXBZΛࢦఆͨ࣌ؒ͠ͷΈϓϩϏδϣχϯά͢Δπʔϧ w ։ൃ؀ڥ޲͚ʹ/"5ΠϯελϯεΛ࡞੒͢ΔςϯϓϨʔτ wίϯϙʔωϯτ΍ίʔυεχϖοτͳͲɺ։ൃΛ௚઀αϙʔτ͢Δ΋ͷ΋࡞੒͍ͨ͠ LBHUPPMT w ϓϥοτϑΥʔϜνʔϜ͕ఏڙ͢ΔࢧԉπʔϧʢϦϙδτϦʣ܈ w *B$ɺίʔυεχϖοτͳͲศརͳπʔϧ΍ɺηΩϡϦςΟ্࣮ࢪͯ͠ཉ͍͠΋ͷΛల։༧ఆ

Slide 15

Slide 15 text

LBHUPPMTୈ஄ɿ(VBSE%VUZ4VNNBSJ[FS (VBSE%VUZ͔Βͷ௨஌Λ ͦͷ··4/4Ͱૹ৴͢Δͱ ͚ͬ͜͏ೝ஌ෛՙߴ͍ͷͰ શ෦#FESPDLʹ౤͛ͯ ͍͍ײ͡ʹͯ͠௨஌͢Δπʔϧ

Slide 16

Slide 16 text

(VBSE%VUZ4VNNBSJ[FSͷߏ੒ ௨஌ઌʹ4MBDLʢ&ϝʔϧ౳΋ՄʣΛ࢖͏͜ͱͰ ʢ΄΅ʣϊʔίʔυΛ࣮ݱ AWS Cloud GuardDuty Step Functions Bedrock SNS Invoke Execute EventBridge User Threats E-Mail Publish Slack Security Hub ᶃ(VBSE%VUZͷΠϕϯτΛ௚઀र͏ ᶄ4FDVSJUZ)VCʹू໿͞ΕͨΠϕϯτΛर͏ ͷͲͪΒ͔Λબ୒ͯ͠σϓϩΠՄೳ

Slide 17

Slide 17 text

LBHUPPMTʢϓϥοτϑΥʔϜΤϯδχΞϦϯάʣͷ՝୊ • ,"(ͷ૊৫ܗଶ • ࣄۀձࣾͱҟͳΓɺ֤Ҋ֤݅νʔϜͰγεςϜ͕ҟͳΔ • "84͚ͩͰͳ͘(PPHMF$MPVE"[VSFͷҊ݅΋ͦͦ͜͜ • ϓϥοτϑΥʔϜνʔϜͷݶք • ΧόʔͰ͖Δٕज़ྖҬ͕ݶΒΕͯ͠·͏ 
 ˠʮࢧԉͰ͖Δ΋ͷʯͱʮٻΊΒΕ͍ͯΔ΋ͷʯͷΞϯϚον • πʔϧ૿ՃʹΑΔϝϯςφϯε΍վળ͕Ͱ͖Δ࿑ྗͷෆ଍ • ޮՌతʹ֤νʔϜΛࢧԉͰ͖Δ͔ͱ͍͏ෆ҆ɾɾɾ

Slide 18

Slide 18 text

Πϯφʔιʔεͱͷग़ձ͍

Slide 19

Slide 19 text

·ͣ͸ͪ͜ΒΛ͝ཡ͍ͩ͘͞

Slide 20

Slide 20 text

IUUQTZPVUVCF/0I@J'-:D TJ@,NF.TX#RER1(

Slide 21

Slide 21 text

No content

Slide 22

Slide 22 text

ɹͦ͏ͩɺ ɹΠϯφʔιʔεɺ ɹ΍Ζ͏ɻ

Slide 23

Slide 23 text

Πϯφʔιʔεͱ͸ʁ ΠϯφʔιʔεͰ࢝ΊΔ૊৫಺Φʔϓϯιʔε։ൃೖ໳ IUUQTTQFBLFSEFDLDPNZVIBUUPSJOOFSTPVSDFMFBSOJOHQBUIKBQBOFTF ҰݴͰද͢ͱʮࣾ಺Φʔϓϯιʔεʯ

Slide 24

Slide 24 text

LBHUPPMTͷํ਑มߋ LBHUPPMT w ϓϥοτϑΥʔϜνʔϜ͕ఏڙ͢ΔࢧԉπʔϧʢϦϙδτϦʣ܈ w *B$ɺίʔυεχϖοτͳͲศརͳπʔϧ΍ɺηΩϡϦςΟ্࣮ࢪͯ͠ཉ͍͠΋ͷΛల։༧ఆ w $0/53*#65*/(NEΛઃ͚ɺ։ൃऀ͔ΒͷίϯτϦϏϡʔγϣϯΛΦʔϓϯʹड͚ೖΕ

Slide 25

Slide 25 text

LBHJTNͷ௥Ճ ͲͪΒ΋Πϯφʔιʔεʢࣾ಺ΦʔϓϯιʔεʣͷҐஔ෇͚ ؅ཧӡ༻ͷओମ͕ϓϥοτϑΥʔϜνʔϜ͔༗ࢤ͔ͷҧ͍ LBHUPPMT w ϓϥοτϑΥʔϜνʔϜ͕ఏڙ͢ΔࢧԉπʔϧʢϦϙδτϦʣ܈ w *B$ɺίʔυεχϖοτͳͲศརͳπʔϧ΍ɺηΩϡϦςΟ্࣮ࢪͯ͠ཉ͍͠΋ͷΛల։༧ఆ w $0/53*#65*/(NEΛઃ͚ɺ։ൃऀ͔ΒͷίϯτϦϏϡʔγϣϯΛΦʔϓϯʹड͚ೖΕ LBHJTN w ֤νʔϜ΍νʔϜͳͲɺࣾ಺ͷ͋ΒΏΔ৔ॴ͔Βఏڙӡ༻͞ΕΔϓϩμΫτ w ϦϙδτϦͷ࡞੒ϧʔϧʹଇΕ͹୭Ͱ΋ఏڙ0, w ֤ϦϙδτϦͷϧʔϧʹै͑͹୭Ͱ΋ίϯτϦϏϡʔτ0,

Slide 26

Slide 26 text

LBHJTNͷJTNͬͯͳʹʁ

Slide 27

Slide 27 text

LBHJTNͷJTNͬͯͳʹʁ JOOFSTPVSDFNBO

Slide 28

Slide 28 text

ΠϯφʔιʔεͷޮՌͱ೉͠͞

Slide 29

Slide 29 text

ΠϯφʔιʔεͷޮՌ • Φʔϓϯͳ؀ڥͷߏங • πʔϧ΍φϨοδͷڞ༗ɺࣾ಺શମͰͷ஝ੵ • ʮंྠͷ࠶ൃ໌ʯͷ๷ࢭ • ίϥϘϨʔγϣϯจԽͷৢ੒ • ϑΟʔυόοΫͱίϯτϦϏϡʔγϣϯͷଅਐ • νʔϜؒͷڠྗମ੍ͷڧԽɺαΠϩԽͷղফ • ϓϩμΫτͱ૊৫ͷվળ • ੡඼඼࣭΍։ൃੜ࢈ੑͷ޲্ • ৽ͨͳΠϊϕʔγϣϯͷଅਐ

Slide 30

Slide 30 text

Πϯφʔιʔεͷ೉͠͞ • ܧଓతͳϝϯςφϯεͷཁٻ • ϝϯςφϯε͞Εͳ͍πʔϧ΍φϨοδ͸ෛ࠴Խ͢Δ • ʮ๩͍͔͠ΒϝϯςͰ͖ͳ͍ʯʮఏڙͯ͠ऴΘΓʯΛແ͍ͨ͘͠ • ίϥϘϨʔγϣϯจԽͷৢ੒ • (JWFͱ5BLFͷؔ܎͕ҰํతʹͳΓ͗͢ͳ͍Α͏ʹ͢Δ • ࣗൃతͳίϯτϦϏϡʔγϣϯ͕ߦ͑Δ؀ڥͱจԽ͕ඞཁ • վળʹΑΔޮՌͷଌఆ • ޮՌΛ࣮ײ͢ΔͨΊʹ͸ࢦඪΛઃ͚ɺ֤Ҋ݅Ͱܭଌͯ͠΋Β͏

Slide 31

Slide 31 text

Πϯφʔιʔεͷ೉͠͞ • ܧଓతͳϝϯςφϯεͷཁٻ • ϝϯςφϯε͞Εͳ͍πʔϧ΍φϨοδ͸ෛ࠴Խ͢Δ • ʮ๩͍͔͠ΒϝϯςͰ͖ͳ͍ʯʮఏڙͯ͠ऴΘΓʯΛແ͍ͨ͘͠ • ίϥϘϨʔγϣϯจԽͷৢ੒ • (JWFͱ5BLFͷؔ܎͕ҰํతʹͳΓ͗͢ͳ͍Α͏ʹ͢Δ • ࣗൃతͳίϯτϦϏϡʔγϣϯ͕ߦ͑Δ؀ڥͱจԽ͕ඞཁ • վળʹΑΔޮՌͷଌఆ • ޮՌΛ࣮ײ͢ΔͨΊʹ͸ࢦඪΛઃ͚ɺ֤Ҋ݅Ͱܭଌͯ͠΋Β͏ ˠࣾ಺ͷʮΠϯφʔιʔεʯͱ͍͏ίϛϡχςΟΛӡӦ͍ͯ͘͠೉͠͞

Slide 32

Slide 32 text

ʮ೉͠͞ʯʹର͢Δ,"(ͷ͍͍ॴʢએ఻ʣ • ΞδϦςΟͱࣗ༝౓͕ߴ͍ • উखʹLBHUPPMTͱ͔LBHJTNͱ͔࡞ͬͯ΋ڐ͞ΕΔ • ͋Δఔ౓͸ࣗݾͷ੹೚ʹ͓͍ͯਐΊΒΕΔͷͰૉૣ͘औΓ૊ΊΔ • ࣦഊΛա౓ʹ੹ΊΔจԽ͕ͳ͍ • ৺ཧతͳϓϨογϟʔ͕΄ͱΜͲͳ͍ • ʮೋਓ໨ʹགྷΔਓʯ͕͍Δ • औΓ૊Έʹରͯ͠৐ͬͯ͘ΕΔޙԡͯ͘͠͠ΕΔਓ͕͍Δ • ʮΠϯφʔιʔεʯͱ͍͏ίϛϡχςΟӡӦ͕ʢൺֱతʣָʹ࣮ફͰ͖Δ 
 ʢࣗ૸Ͱ͖Δ΄Ͳ؆୯Ͱ͸ͳ͍ͷͰؤுΓ·͢ʣ νʔϜʹϊϦΛ΋ͨΒͨ࣌͠ʹ͍ͨʮೋਓ໨ʹགྷΔਓʯͷڞ௨఺ IUUQTTQFBLFSEFDLDPNQJZPOBLBKJNBUJNVOJOPSJXPNPUBSBTJUBTIJOJJUBFSSFONVOJZPOHSVSFOOPHPOHUPOHEJBO

Slide 33

Slide 33 text

ࢀߟɿΞδϟΠϧ։ൃηϯλʔݑষ

Slide 34

Slide 34 text

ԿΑΓֶΜͰ࣮ફ͢΂͖ʂ νʔϜτϙϩδʔ Πϯφʔιʔεύλʔϯ ίϛϡχςΟ

Slide 35

Slide 35 text

࣮ફྫɿEFWJPΑΓ Πϯφʔιʔε1MBUGPSN&OHJOFFSJOH͍ͣΕ΋,"(͕໨ࢦ͢΂͖࢟ͷҰͭͳؾ͕͢Δ $MBTTNFUIPEྲྀͷ1MBUGPSN&OHJOFFSJOH IUUQTEFWDMBTTNFUIPEKQBSUJDMFTDMBTTNFUIPEQMBUGPSNFOHJOFFSJOHEFWJP

Slide 36

Slide 36 text

࣮ફྫɿ4FSWFSMFTT%BZT5PLZPΑΓ 1MBUGPSN&OHJOFFSJOHͷ࣮ફʹఆ·ͬͨਖ਼ղ͸ແ͘ɺ૊৫ʹద߹͍ͤͯ͘͜͞ͱ͕ॏཁͩͱ௧ײ ͍·͋ΔνʔϜʹϑΟοτͤ͞Δ4FSWFSMFTTͦͯ͠1MBUGPSN&OHJOFFSJOH΁ͷ௅ઓ IUUQTTQFBLFSEFDLDPNTFJLFTFSWFSMFTTGJUTUIFUFBNZPVIBWFBOEQMBUGPSNFOHJOFFSJOH

Slide 37

Slide 37 text

·ͱΊ

Slide 38

Slide 38 text

·ͱΊ • ϓϥοτϑΥʔϜΤϯδχΞϦϯάͷऔΓ૊ΈΛ࢝ΊΔ্Ͱɺ 
 ΠϯφʔιʔεʹײԽ͞Εɺཱ྆ͤ͞ΔܗͰൃ଍ 
 ˠʮLBHUPPMTʯͱʮLBHJTNʯ • ΠϯφʔιʔεʹΑΓνʔϜؒͷίϥϘϨʔγϣϯ͕ਪਐ͞Εɺ 
 ंྠͷ࠶ൃ໌Λ๷͙͜ͱ͕Ͱ͖Δ • Πϯφʔιʔε׆ಈ͸ίϛϡχςΟʹࣅ͍ͯΔ 
 ˠద੾ʹӡӦ͠ͳ͚Ε͹ޮՌΛൃشͤͣɺٕज़ෛ࠴ͷԹচͱͳΔ • ϓϥοτϑΥʔϜΤϯδχΞͱͯ͠ηϧϑαʔϏεܕͷࢧԉΛਪਐ 
 Πϯφʔιʔε׆ಈͱͷ૬৐ޮՌʹΑΓɺΑΓ։ൃऀମݧͷ޲্Λ໨ࢦ͢ • ઌਓͷφϨοδͱίϛϡχςΟ͔Βֶͼɺ࣮ફ͢Δʂ

Slide 39

Slide 39 text

5IBOLZPVʂ