AliEaters#5_ちょっとしたAlibaba Cloudのセキュリティ関連の話

本資料はAliEaters#5(2018/07/10)での発表資料になります。イベントの詳細は下記のリングにてご確認ください
https://alibabacloud.connpass.com/event/91582/

Transcript

1. #JOCJO 2JV  1 BMJFBUFST ͪΐͬͱͨ͠ "MJCBCB
   $MPVEͷ ηΩϡϦςΟؔ࿈ͷ࿩
2. 8IP
   BN
   * 2 BMJFBUFST China ∞
3. 8IP
   BN
   * 3 #JOCJO 2JV KPCCJO BMJFBUFST
4. 8IP
   BN
   * ֎΁ͷ ޷ح৺ #
   ೥݄ དྷ ೔ ˞೥͋ͬͱ͍͏ؒͰͨ͠ 4 BMJFBUFST
5. 8IP
   BN
   * #
   
   ֎΁ͷ ޷ح৺ ೥݄ ୤ൡ ˞࣮͸৽ೖࣾһͰ͢ 5 BMJFBUFST
6. ΞδΣϯμ ᶃ ͳͥ͜ͷ಺༰ʹͨ͠ͷ͔ ᶄ ࣗ෼ͷ؍఺͔ΒΈͨ೔ຊʹ͓͚Δ"MJCBCB $MPVEͷݱঢ় ᶆ ʓʓͷཚ ᶅ "MJCBCB
   $MPVEͷηΩϡϦςΟ ᶇ ࠷ޙ 6 BMJFBUFST
7. ᶃ ͳͥ͜ͷ಺༰ʹͨ͠ͷ͔ ᶄ ࣗ෼ͷ؍఺͔ΒΈͨ೔ຊʹ͓͚Δ"MJCBCB $MPVEͷݱঢ় ᶆ ʓʓͷཚ ᶅ "MJCBCB
   $MPVEͷηΩϡϦςΟ ᶇ ࠷ޙ 7 BMJFBUFST
8. ᶃ ͳͥ͜ͷ಺༰ʹͨ͠ͷ͔ ೔ຊͷ*5ɺٕज़ऀ͸ ΦϯϓϨϛε͔Βղ์͞ΕɺΫϥ΢υʹஔ͔ΕΔͱڞʹɺ ηΩϡϦςΟ΁ͷݒ೦΋ҰஈͱහײʹͳͬͪΌ͏ 8 /FX
   3FUBJM /FX
   -PHJTUJDT &OUFSQSJTF
   *5 /FX
   .BOVGBDUVSJOH "MJCBCB
   $MPVEͰ ೔ຊʹΠϊϕʔγϣϯΛى͍ͨ͜͠ Ϋϥ΢υք۾Λ੝Γ্͍͖͍͛ͯͨ ηΩϡϦςΟʹؔ͢Δٞ࿦͸ආ͚ͯ͸௨Βͳ͍ BMJFBUFST
9. 
   ࣗ෼ͷ؍఺͔ΒΈͨ೔ຊʹ͓͚Δ"MJCBCB $MPVEͷݱঢ় "MJCBCB
   $MPVE
   ೥݄ʹ೔ຊ্཮ɺ೥݄αʔϏεఏڙ։࢝ ྆ऀؒίϛϡχέʔγϣϯෆ଍ʹΑΓɺ Ϣʔβ͕"MJCBCB
   $MPVEʹର͢Δޡղ͕͋Δ Ϣʔβ͕"MJCBCB
   $MPVEͷར༻Λ᪳᪯ 9
10. ᶅ "MJCBCB $MPVEͷηΩϡϦςΟ "MJCBCB
    $MPVEͬͯɺେৎ෉ 10 BMJFBUFST
11. վΊͯզʑͷ໿ଋΛਃ্͛͠Δ
    ͓٬༷ͷσʔλΛઈର৮Γ·ͤΜ 4JNPO
    )V 1SFTJEFOU
    PG
    "MJCBCB $MPVE ᶅ "MJCBCB $MPVEͷηΩϡϦςΟ 11 BMJFBUFST
12. ೥ɺӢ੘େձɾ๺ژ 1SPQPTFS
    PG
    l%BUB
    1SPUFDUJPO
    *OJUJBUJWFz ೥ Ӣ੘େձɾ্ւ %BUB
    1SJWBDZ
    'JSTU ೥ Ӣ੘େձɾ෢׽ վΊͯզʑͷ໿ଋΛਃ্͛͠Δ
    ͓٬༷ͷσʔλΛઈର৮Γ·ͤΜ ᶅ "MJCBCB $MPVEͷηΩϡϦςΟ 12 BMJFBUFST
13. ᶅ "MJCBCB $MPVEͷηΩϡϦςΟ 13 BMJFBUFST
14. ᶅ "MJCBCB $MPVEͷηΩϡϦςΟ 14 BMJFBUFST
15. ᶅ "MJCBCB $MPVEͷηΩϡϦςΟ https://www.alibabacloud.com/trust-center/soc γεςϜͷηΩϡϦςΟɺՄ༻ੑɺػີੑͷ؂ࠪ 15 BMJFBUFST
16. ᶅ "MJCBCB $MPVEͷηΩϡϦςΟ ถࠃͷҩྍอݥͷܞߦੑͱ੹೚ʹؔ͢Δ๏཯ https://www.alibabacloud.com/trust-center/hipaa 16 BMJFBUFST
17. ᶅ "MJCBCB $MPVEͷηΩϡϦςΟ υΠπͷʮΫϥ΢υίϯϐϡʔςΟϯά *5
    ηΩϡϦςΟʔʯඪ४ https://www.alibabacloud.com/trust-center/c5 17 BMJFBUFST
18. ᶅ "MJCBCB $MPVEͷηΩϡϦςΟ γϯΨϙʔϧࠃ಺ͷΫϥ΢υαʔϏεࣄۀऀ޲͚ͷެతͳ৘ใηΩϡϦςΟ؅ཧن֨ https://www.alibabacloud.com/trust-center/mtcs 18
     TOP SECRET BMJFBUFST
19. Document Center -> Trust Center -> Security Whitepaper ᶅ "MJCBCB $MPVEͷηΩϡϦςΟ 19 BMJFBUFST
20. ᶅ "MJCBCB $MPVEͷηΩϡϦςΟ 20 BMJFBUFST
21. ᶅ "MJCBCB $MPVEͷηΩϡϦςΟ ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ޡղ͸ɺਅ伨ͳର࿩Ͱղফ ΢ι͸ɺෆมͳࣄ࣮Ͱ࿦ഁ 21 BMJFBUFST
22. ࠓ͸͜͜ ᶃ ͳͥ͜ͷ಺༰ʹͨ͠ͷ͔ ᶄ ࣗ෼ͷ؍఺͔ΒΈͨ೔ຊʹ͓͚Δ"MJCBCB $MPVEͷݱঢ় ᶆ ʓʓͷཚ ᶅ "MJCBCB
    $MPVEͷηΩϡϦςΟ ᶇ ࠷ޙ 22 BMJFBUFST
23. "MJCBCB .PPODBLF
    (BUF  
     ௚઀తʹ ηΩϡϦςΟͱ͸ؔ܎ͳ͍ ᶆ ݄ṷͷཚ 23 BMJFBUFST
24. ᶆ ݄ṷͷཚ   
       "MJCBCB͸தळઅʹࣾһ޲͚ʹ݄ṷΛ༻ҙ͢Δ఻౷͕͋Δɻ ೥ͷ݄ṷͷύοέʔδ͕ඇৗʹՄѪ͘ɺେਓؾͩͬͨɻ "MJCBCB͸͜ͷঢ়گΛߟྀ͠ɺ͞Βʹ಺෦޲͚ʹ݄ṷΛ༧໿͢ΔαΠτΛެ։ എܠ ࣾһ ਓ ͕ࣗಈతʹ༧໿͢ΔϓϩάϥϜΛ࡞Γɺ݄ṷΛ༧໿ͨ͠ɻ ࣄ݅ൃ֮ޙɺશһୀ৬ ࣄ݅ 24 BMJFBUFST
25. Chinese Speed T 
     7- (&/+ 16/
    +"64. :=9<;8 16:00 16:30 17:30 17:00 ! '(&&2 (0
    8 (*%1(& 35 %&$,.)#  " 25 ᶆ ݄ṷͷཚ  
     BMJFBUFST
26.  HR
        ( ) 26 ᶆ ݄ṷͷཚ  2ͷҙݟ BMJFBUFST
27. य़અظؒͷసച԰໰୊ మಓͷ੾ූΛେྔʹ༧໿ͯ͠ɺߴ஋Ͱసച खஈͷҰͭ͸ϓϩάϥϜͰͷࣗಈ༧໿ 27 ᶆ ݄ṷͷཚ  2ͷҙݟ தࠃಛ༗ͷࣄ৘ ʴ ൴Βͷ৬ͷಛੑ ηΩϡϦςΟ෦ॺ ෆਖ਼Λ๷͙ଆ͕ෆਖ਼ߦҝΛ൜͢ BMJFBUFST
28. य़અظؒͷసച԰໰୊ మಓͷ੾ූΛେྔʹ༧໿ͯ͠ɺߴ஋Ͱసച खஈͷҰͭ͸ϓϩάϥϜͰͷࣗಈ༧໿ 28 ᶆ ݄ṷͷཚ  2ͷҙݟ தࠃಛ༗ͷࣄ৘ ʴ ൴Βͷ৬ͷಛੑ ηΩϡϦςΟ෦ॺ ෆਖ਼Λ๷͙ଆ͕ෆਖ਼ߦҝΛ൜͢   
       BMJFBUFST
29. 2016
     29 ᶆ ݄ṷͷཚ  ࣄ͕݅ى͖Δ΄ͲՄѪ͍݄ṷͪΌΜͨͪ
30. ࠓ͸͜͜ ᶃ ͳͥ͜ͷ಺༰ʹͨ͠ͷ͔ ᶄ ࣗ෼ͷ؍఺͔ΒΈͨ೔ຊʹ͓͚Δ"MJCBCB $MPVEͷݱঢ় ᶆ ʓʓͷཚ ᶅ "MJCBCB
    $MPVEͷηΩϡϦςΟ ᶇ ࠷ޙ 30 BMJFBUFST
31. ࠷ޙ "MJ&BUFST  ʮAlibaba Cloud 
      ʯͰݴͬͨ͜ͱ 31 BMJFBUFST
32. ࠷ޙ ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ಀ͛ͪΌବ໨ͩ
    XXX ޡղ͸ɺਅ伨ͳର࿩Ͱղফ ΢ι͸ɺෆมͳࣄ࣮Ͱ࿦ഁ "MJ&BUFST 
    Ͱݴ͍͍ͨ͜ͱ 32 BMJFBUFST
33.     ! 33
     Ѩཬಶઆ໌ܭը "MJ&BUFSTϢʔβձ ୈ̎࣍தؒใࠂ BMJFBUFST