Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
内部不正発覚後の被害極小化〜起こってしまった後にやること〜
Search
Recruit Technologies
March 06, 2019
Technology
0
490
内部不正発覚後の被害極小化〜起こってしまった後にやること〜
2019/03/06 Security Days Spring 2019での川崎の講演資料になります
Recruit Technologies
March 06, 2019
Tweet
Share
More Decks by Recruit Technologies
See All by Recruit Technologies
障害はチャンスだ! 障害を前向きに捉える
rtechkouhou
1
670
Flutter移行の苦労と、乗り越えた先に得られたもの
rtechkouhou
3
11k
ここ数年間のタウンワークiOSアプリのエンジニアのチャレンジ
rtechkouhou
1
1.5k
大規模環境をAWS Transit Gatewayで設計/移行する前に考える3つのポイントと移行への挑戦
rtechkouhou
1
1.9k
【61期 新人BootCamp】TOC入門
rtechkouhou
3
42k
【RTC新人研修 】 TPS
rtechkouhou
1
41k
Android Boot Camp 2020
rtechkouhou
0
41k
HTML/CSS
rtechkouhou
10
51k
TypeScript Bootcamp 2020
rtechkouhou
9
45k
Other Decks in Technology
See All in Technology
アジャイルな開発チームでテスト戦略の話は誰がする? / Who Talks About Test Strategy?
ak1210
1
610
システム・ML活用を広げるdbtのデータモデリング / Expanding System & ML Use with dbt Modeling
i125
1
330
【詳説】コンテンツ配信 システムの複数機能 基盤への拡張
hatena
0
260
株式会社Awarefy(アウェアファイ)会社説明資料 / Awarefy-Company-Deck
awarefy
3
11k
技術スタックだけじゃない、業務ドメイン知識のオンボーディングも同じくらいの量が必要な話
niftycorp
PRO
0
110
ABWG2024採択者が語るエンジニアとしての自分自身の見つけ方〜発信して、つながって、世界を広げていく〜
maimyyym
1
180
脳波を用いた嗜好マッチングシステム
hokkey621
0
290
2/18 Making Security Scale: メルカリが考えるセキュリティ戦略 - Coincheck x LayerX x Mercari
jsonf
0
220
実は強い 非ViTな画像認識モデル
tattaka
3
1.3k
Snowflake ML モデルを dbt データパイプラインに組み込む
estie
0
100
Fraxinus00tw assembly manual
fukumay
0
110
Охота на косуль у древних
ashapiro
0
110
Featured
See All Featured
The Language of Interfaces
destraynor
156
24k
GraphQLの誤解/rethinking-graphql
sonatard
68
10k
Chrome DevTools: State of the Union 2024 - Debugging React & Beyond
addyosmani
4
380
BBQ
matthewcrist
87
9.5k
Stop Working from a Prison Cell
hatefulcrawdad
267
20k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
chriscoyier
507
140k
Fontdeck: Realign not Redesign
paulrobertlloyd
83
5.4k
Speed Design
sergeychernyshev
27
810
Practical Orchestrator
shlominoach
186
10k
Build The Right Thing And Hit Your Dates
maggiecrowley
34
2.5k
Unsuck your backbone
ammeep
669
57k
Why You Should Never Use an ORM
jnunemaker
PRO
55
9.2k
Transcript
"%$$% % %$ !%#%
(C) Recruit Technologies Co.,Ltd. All rights reserved. 2 c i
R e t c e i r IT S4 C u i S4
(C) Recruit Technologies Co.,Ltd. All rights reserved. 3 . .
1 2 3
(C) Recruit Technologies Co.,Ltd. All rights reserved. 4 . .
1 2 3
(C) Recruit Technologies Co.,Ltd. All rights reserved. " 5
% ' !%#! +* ) $!* + &(
(C) Recruit Technologies Co.,Ltd. All rights reserved. " 6 (#%'!&+*$'
#%'( ! $ "
(C) Recruit Technologies Co.,Ltd. All rights reserved. 7 JNSA 2017
https://www.jnsa.org/result/incident/ 5 + ) ) + (
(C) Recruit Technologies Co.,Ltd. All rights reserved. 8
" # "!
(C) Recruit Technologies Co.,Ltd. All rights reserved. 2 9 2
(C) Recruit Technologies Co.,Ltd. All rights reserved. " 10
% ( !%#! .#-&#*# + $!, . ')
(C) Recruit Technologies Co.,Ltd. All rights reserved. 11 . .
1 2 3
(C) Recruit Technologies Co.,Ltd. All rights reserved. 12
(C) Recruit Technologies Co.,Ltd. All rights reserved. 13 Ø W
e B b e l l M l il l ) ( l / Se l l il l ) ( l / b b l 3 Ua i i l
(C) Recruit Technologies Co.,Ltd. All rights reserved. 14 l +
l + l ) + l + l + l ( + IPA https://www.ipa.go.jp/files/000057060.pdf
(C) Recruit Technologies Co.,Ltd. All rights reserved. 15 l +
l + l ) + l + l + l ( + IPA https://www.ipa.go.jp/files/000057060.pdf
(C) Recruit Technologies Co.,Ltd. All rights reserved. 16 ( l
l l )/ l l IPA https://www.ipa.go.jp/files/000057060.pdf
(C) Recruit Technologies Co.,Ltd. All rights reserved. 17 l l
) l D I l ( IPA https://www.ipa.go.jp/files/000057060.pdf
(C) Recruit Technologies Co.,Ltd. All rights reserved. 18 l l
l 3 http://www.meti.go.jp/policy/economy/chizai/chiteki/trade-secret.html
(C) Recruit Technologies Co.,Ltd. All rights reserved. 1 CEMH 19
+)(%E0E >O?OEG:C.F!EM5 l 6#7BF4"J',#CIEA8N;B l 632*7BF432*&$DKM D32B=@ <O*<O@9N;B l 6/ 7BF4-B LO@9C9IEA8N;B http://www.meti.go.jp/policy/economy/chizai/chiteki/trade-secret.html
(C) Recruit Technologies Co.,Ltd. All rights reserved. 20 . .
1 2 3
(C) Recruit Technologies Co.,Ltd. All rights reserved. 21 2
2 2 9 2 2 9 2
(C) Recruit Technologies Co.,Ltd. All rights reserved. -%'lgs! pC" 22
-%'lg+,rbew:sYOqH R • &s ?uCSIRTs (A6 5. J • =1s^X/Gd/amcvc/Nrqac • =ZUs^X(/0[_S)→7/@K <Fr %2 • gk+,r:hn`M4qr%2 S a xj : 7V •B; r\y%2gWPiw •5.uQ-Sr: (M4r:gqapTqw]t) •$srE ffo}~ fsr3 >8&s )Dd9pqw |u s#LI*s#
(C) Recruit Technologies Co.,Ltd. All rights reserved. 23 i Ø
i H= Ø i i i S W = i n r o sr n ( ) U e b c FB = D
(C) Recruit Technologies Co.,Ltd. All rights reserved. 24 :NPO)&'.2,!/1&($ #
+- 17 https://digitalforensic.jp/wp-content/uploads/2018/10/guideline_7.1.pdf )&'.2,!/1&($,03
(C) Recruit Technologies Co.,Ltd. All rights reserved. 25
2 1
(C) Recruit Technologies Co.,Ltd. All rights reserved. 26 3*56-0+$ $&
"% () ! "% "% (HDD,SSD,USB!,SD) # & % "% "%(SaaS:Dropbox) IOT "% $ & "% "% (IaaS:AWS) Ø $&./)4$#' ! 12).% VDI %% $ "
(C) Recruit Technologies Co.,Ltd. All rights reserved. 27 IQPW
aFH SpBf8 wC %4)5& EsIQ IQTbc ]OTb IQ=qZ I Q9D^`E sIQEgIQ kze[ 7v Tb IQYdC 7v!M Tb $%*) & }8Tb,%/ $3'1. %2#"5.IQ <vLyFH-* u~ lNo IQ<v Ly-*r{]6 Ai aha FH!Eg :; #5(-5. N! >j n7 tAi |IQXx " ' IQkze[ 7v!IQ=q m lN Xx ?@e[GTbc!e [ # $%! J\Tb| lNo RU Xx_T IQ<v8Ly u~ IQ<v8a hAi!Eg :; #5(-5. ( 05+ VK<o !! !"
(C) Recruit Technologies Co.,Ltd. All rights reserved. %!\Wb_7 28 %!\W#$aSVf
/bJ@`mrs; C • lsob 3dCSIRTb "5- ,& < • 2 )bOI/:U/R]TeT/?a`RT • 2KFbOI('(LPD)→./4= 19a * • W[#$a/X^Q>+`a* nqkppskD RgZ / .G •60aMh*WHAYf •,&dB%Da / (>+a /W`R_E`fNc) • ba8
(C) Recruit Technologies Co.,Ltd. All rights reserved. 2/64" 29 Ø
(GAKE ü +* ü FKH>;= &5BDCI FKH7,>':8 $/0<!-?13. ( J% # 5 - )
(C) Recruit Technologies Co.,Ltd. All rights reserved. ( 30 Ø
ü ü • • • • • • • • ) • + ( ࣄલ४උ
(C) Recruit Technologies Co.,Ltd. All rights reserved. i 31 W
r e Ø ü ü • T rt e e r • b i i e r i e w
(C) Recruit Technologies Co.,Ltd. All rights reserved. P M I
32 T Ø ü I ü • ) • O ) • R C ) • S ) S • C ) ࣄલ४උ
(C) Recruit Technologies Co.,Ltd. All rights reserved. "VP]Y0 33 Ø
'#r4pmso ü Jd`YB<i$NWGL ü X@Ze(X3!]b X7]@ZeiPWE S] Epklqi-ORT ]>/i=IW:[f6?i* acHF 9 '#r4 ,1\& G + )A ) %; &r.5 'J\E7UYGH2;K[Mg_3 !] )\^+QWbdI[GUhH [FD8bCGF
(C) Recruit Technologies Co.,Ltd. All rights reserved. 34 Ø ü
() ü P C P () ࣄલ४උ
(C) Recruit Technologies Co.,Ltd. All rights reserved. 35 Ø )
1 ü ü ( 1 1 ü ( ) 1
(C) Recruit Technologies Co.,Ltd. All rights reserved. H 36
Ø ü d u B P ü S ü o ü ü a p s I r ( ) , okk ü cs ü U w u ü s ü C D ü ) p ࣄલ४උ ͑ͷి Εͣʹ
(C) Recruit Technologies Co.,Ltd. All rights reserved. 37 Ø
ü ) ( ü ü ) ü b ü b W b b e
(C) Recruit Technologies Co.,Ltd. All rights reserved. 38 Ø C
P
(C) Recruit Technologies Co.,Ltd. All rights reserved. G 39
Ø b a ) / . c_ 099 ( 7.-7:19 9.-0 - 2 / -- : 9 01 9 7
(C) Recruit Technologies Co.,Ltd. All rights reserved. # !A>IF, 40
Ø %4 ü 5IYR\]UXS[]W_P C=D:< %4BD.P>@ML9I;O ;MG97778 []W_H">@MJ2 E1HGNK?F7778 3 '$^/ *- H & 9 ) (6 ( %4 &^+0 ࣄલ४උ
(C) Recruit Technologies Co.,Ltd. All rights reserved. C 41 Ø
h ü n ü a ya y y ü o ü si h ü ( ( ) ( Ø () ü ü tf du ӨͷΈ
(C) Recruit Technologies Co.,Ltd. All rights reserved. ( 42 Ø
ü ( )
(C) Recruit Technologies Co.,Ltd. All rights reserved. 43 Ø
) ü ü 2 ü 2 ü ) ü ( ü ) ü )
(C) Recruit Technologies Co.,Ltd. All rights reserved. S 44
Ø U S ü B UB U B B B . S
(C) Recruit Technologies Co.,Ltd. All rights reserved. C 45 SU
B P C P B B
(C) Recruit Technologies Co.,Ltd. All rights reserved. A 46 C
U s P s l B B D S
(C) Recruit Technologies Co.,Ltd. All rights reserved. . 47
(C) Recruit Technologies Co.,Ltd. All rights reserved.
48
(C) Recruit Technologies Co.,Ltd. All rights reserved. '$ 49 Ø
&(%$ +!/) ., (%#- /%$/*%
(C) Recruit Technologies Co.,Ltd. All rights reserved. 50 Ø ü
ü 2 2 2 2
(C) Recruit Technologies Co.,Ltd. All rights reserved. 2 51
Ø ü P ü P ü P ü ü ( ü C ) Ø ü
(C) Recruit Technologies Co.,Ltd. All rights reserved. >:DA% 52 Ø
<D D " ü /J=1&24K; " 99F@+C ":?G2RTN H4K; "-7(4A $0:?:F53 F@7*8B4B3 #' C RTNSSVN 4K; " !.E , U) #' C 4 " !. POIB4@22
(C) Recruit Technologies Co.,Ltd. All rights reserved. 53 Ø )
Ø ( (
(C) Recruit Technologies Co.,Ltd. All rights reserved. ) 54 l
l l l l l ( l ) 3 l l )
(C) Recruit Technologies Co.,Ltd. All rights reserved. ( 55 l
) l l l l
(C) Recruit Technologies Co.,Ltd. All rights reserved. 56
! $ %"#
(C) Recruit Technologies Co.,Ltd. All rights reserved. 57