Upgrade to Pro — share decks privately, control downloads, hide ads and more …

脆弱性管理サービス Veetaをリリースした

Kazuhiko Yamashita
November 09, 2017
2.2k

脆弱性管理サービス Veetaをリリースした

第10回ペパボテックカンファレンス~インフラエンジニアがもっとおもしろくできる!~

Kazuhiko Yamashita

November 09, 2017
Tweet

More Decks by Kazuhiko Yamashita

Transcript

  1. ʙΘʔʔʔʂʂࠓ೔࠙਌ձ౜༲͛͋Δ͡ΌΜʂʂ࠷ߴ͡ΌΜʂʂʂฤʙ
    !QZBNB(.01FQBCP *OD
    ϖύϘςοΫΧϯϑΝϨϯεɹΠϯϑϥΤϯδχΞ͕΋ͬͱ͓΋͠Ζ͘Ͱ͖Δ
    ੬ऑੑ؅ཧαʔϏε
    7FFUBΛϦϦʔεͨ͠

    View full-size slide

  2. ΤϯδχΞ
    ࢁԼ࿨඙!QZBNB
    ϗεςΟϯάࣄۀ෦νʔϑςοΫϦʔυ
    IUUQTUFOTOBQPODPN

    View full-size slide

  3. -JOVYͷ౷߹Ϣʔβʔ؅ཧ
    50.-ܗࣜ
    )551+40/
    -%"1΍%#ͷ؅ཧͷӡ༻ෛՙ
    ѻ͍΍͍͢ϑΥʔϚοτ
    ൚༻ੑɾ֦ுੑ

    View full-size slide

  4. WFFUBPSH
    αʔόύοέʔδͷ
    ੬ऑੑ؅ཧαʔϏε

    View full-size slide

  5. WPM
    NSVCZͰ࣮ݱ͢Δ
    ҰาਐΜͩΠϯϑϥӡ༻

    View full-size slide

  6. 7FFUB
    JT
    -JOVYͷύοέʔδ੬ऑੑ؅ཧαʔϏε
    IUUQTXXXWFFUBUFDI

    View full-size slide

  7. 7FFUBͰग़དྷΔ͜ͱ
    wαʔόʹΠϯετʔϧ͞Εͨύοέʔδ৘ใͷநग़ɺݕࡧ
    wύοέʔδͷ੬ऑੑͷநग़ɺݕࡧ
    w੬ऑੑ৘ใͷӾཡ
    w੬ऑੑใࠂͷແࢹ
    w੬ऑੑൃݟ௨஌

    View full-size slide

  8. ΞʔΩςΫνϟ
    7FFUB
    7B[
    $7& /7% +7/
    ύοέʔδ৘ใͷ௨஌
    ύοέʔδ৘ใεΩϟϯ
    ਓྨ
    Ϩϙʔτ
    8ͰӾཡ

    View full-size slide

  9. ؅ཧ୯Ґ
    0SHBOJ[BUJPO
    4FSWJDF
    IPTU IPTU IPTU
    4FSWJDF
    IPTU IPTU IPTU
    Ξϥʔτ΍$7&ͷ؅ཧ৘ใ͸0SHBOJ[BUJPO 4FSWJDF )PTU୯ҐͰ؅ཧՄೳ

    View full-size slide

  10. ٕज़ελοΫ

    View full-size slide

  11. ςΫχΧϧϦʔυͱͯ͠

    View full-size slide

  12. αʔόͷ੬ऑੑ؅ཧͷলྗԽ

    View full-size slide

  13. 7VMT
    wΤʔδΣϯτϨε
    w044͔ͭɺ࡞ऀ͕೔ຊਓ
    w44)΋͘͠͸ϩʔΧϧͰεΩϟϯΛߦ͍ɺ݁ՌΛ+40/ϑΝΠϧʹग़ྗ
    w4MBDLͳͲͷ௨஌࿈ܞ

    View full-size slide

  14. ςΫχΧϧϦʔυͱͯ͠
    wαʔόͷ੬ऑੑ؅ཧͷলྗԽ
    7VMTͷಋೖˠΤʔδΣϯτϨε͕ෳ਺αʔϏεɺઍେن໛Ͱαʔόӡ༻Λ
    ߦ͍ͬͯΔϖύϘʹϚον͠ͳ͔ͬͨ
    IUUQTTQFBLFSEFDLDPNQZBNBWVMTYTUOTEFTIJNFSVDVJSVPYJOHKJBO[IJGBMTF[JEPOHIVB
    7VMTº45/4Ͱਓྨ͕޾ͤʹͳΕΔͱ
    ৴ͯٙ͡Θͳ͔ͬͨظ

    View full-size slide

  15. ͦ͏ɺԶୡ͸΋͏ΤʔδΣϯτͳ͠Ͱ͸
    ੜ͖͍͚ͯͳ͍ମʹͳͬͪ·ͬͨ

    View full-size slide

  16. 7VMTΤʔδΣϯτ4BB4
    wΤʔδΣϯτϨεͳઃܭ͔ΒΤʔδΣϯτܗࣜରԠ΁ͷύϫʔϓϨΠ
    wDVSSFOU഑Լͷ+40/Λ1BSTFͯ͠1045
    wґଘύοέʔδͷଟ͞

    View full-size slide

  17. 7VMT
    7B[
    7FFUB

    View full-size slide

  18. ΤϯδχΞ
    ͱͯ͠

    View full-size slide

  19. ΤϯδχΞͱͯ͠
    wϖύϘͷΠϯϑϥࣄ৘
    wࣗ෼ͷαʔϏεΛ࣋ͭ͜ͱ

    View full-size slide

  20. ϖύϘͷΠϯϑϥࣄ৘
    wαʔϏεΠϯϑϥ͸0QFO4UBDLΛ࠾༻
    w෺ཧαʔό୆
    wԾ૝αʔό୆
    IUUQTTQFBLFSEFDLDPNQZBNBQFQBCPOJPLFSVPQFOTUBDLIBDLT

    View full-size slide

  21. ϖύϘͷΠϯϑϥࣄ৘

    View full-size slide

  22. ༏Ε͍ͯΔͱ͍͏͜
    ͱ͸ଞͱͷൺֱʹΑͬ
    ͯৢ੒͞ΕΔ

    View full-size slide

  23. ࣗ෼ͷαʔϏε
    w୅දతαʔϏε
    wࣗݾֶशج൫

    View full-size slide

  24. ࠓޙͷ΍͍͖ͬͯ

    View full-size slide

  25. ࠓޙͷ΍͍͖ͬͯ
    wݕ஌ਫ਼౓ͷ޲্
    w69޲্
    wػցֶशɾ౷ܭ
    wNBDLFSFMQMVHJOWFFUB

    View full-size slide

  26. ݕ஌ਫ਼౓ͷ޲্
    w0QFO4$"1ରԠ
    wιʔεΠϯετʔϧରԠ

    View full-size slide

  27. ػցֶशɾ౷ܭ
    wύοέʔδͷ੬ऑੑ৘ใ
    wରԠͷඞཁՄ൱
    wରԠͷαδΣετ

    View full-size slide

  28. NBDLFSFMQMVHJOWFFUB
    [plugin.checks.veeta]
    command = “/usr/bin/mackerel-plugin-veeta -token xxxx

    -service example”

    View full-size slide

  29. 2༗ྉԽͷ༧ఆ͸ʁ

    View full-size slide

  30. ੬ऑੑ؅ཧ͸ָʹ͍ͯ͘͠
    1.

    View full-size slide

  31. ࣗ෼ͷܧଓత੒௕ͷͨΊʹ
    αʔϏεΛӡ༻͢Δ
    2.

    View full-size slide

  32. ΠϯϑϥΤϯδχΞ΋೤ҙ͑͋͞Ε͹
    αʔϏε࡞ΕΔ
    3.

    View full-size slide

  33. ϑΟʔυόοΫ͓଴͍ͪͯ͠·͢
    ࠷৽ͷ࠾༻৘ใΛνΣοΫˠ !QC@SFDSVJU

    View full-size slide