5分で分かる脆弱性スキャナVulsと無料パスワード管理システムbitwardenについて

MANABIYA LT大会(3/23-24)
https://teratail.connpass.com/event/77317/?utm_campaign=event_participate_to_follower&utm_medium=facebook&utm_source=notifications

Transcript

1. ෼Ͱ෼͔Δ੬ऑੑεΩϟφ
   76-4ͱ
   

   ແྉύεϫʔυ؅ཧγεςϜ
   

   #*58"3%&/ʹ͍ͭͯ
   

   "EBDIJ3ZP43&
   
   

   View Slide

2. ΞδΣϯμ
   ▸ ࣗݾ঺հ
   ▸ 7VMTΛ஌Βͳ͍օ͞Μ΁
   ▸ CJUXBSEFOʹ͍ͭͯ
   ▸ ·ͱΊ
   

   View Slide

3. ࣗݾ঺հ
   ▸ "EBDIJ3ZP43&
   ▸ !BEBDIJO
   ▸ CMPH
   

   CMPHBEBDIJONF
   ▸ ୲౰
   

   ৽ٕज़ݕূ %FW0QT
   ▸ 044׆ಈʮ੬ऑੑεΩϟφ7VMT>
   

   ίϯτϦϏϡʔτ ٕज़޿ใ
   

   View Slide

4. ςΩετ
   76-4Λ஌Βͳ͍օ͞Μ΁
   ▸ IUUQTHJUIVCDPNGVUVSFBSDIJUFDUWVMT
   ▸ ੬ऑੑεΩϟφ7VMT 044
   
   

   ʮ7VMOFSBCJMJUZ4DBOOFSʯͷུ
   ▸ -JOVYαʔόʹଘࡏ͢Δ੬ऑੑΛεΩϟϯ
   ▸ 04ύοέʔδ؅ཧର৅֎ͷϛυϧ΢ΣΞΛεΩϟϯ
   ▸ ΤʔδΣϯτϨεΞʔΩςΫνϟ TTI͑͞ܨ͕Ε͹
   
   ▸ ։ൃ͸ϑϡʔνϟʔΞʔΩςΫτͷਆށࢯ
   

   View Slide

5. ɾ̏ɾ
   76-43&10௨஌ػೳ
   ▸ 7VMT3FQP
   

   ੬ऑੑͷՄࢹԽ
   

   IUUQTHJUIVCDPNVTJVTJWVMTSFQP
   ▸ ௨஌ػೳ
   

   ϝʔϧ͸΋ͪΖΜ
   

   4MBDL͸εϨουࣜʹ
   

   )JQDIBUରԠ
   

   $IBUXPSL௨஌͸։ൃͯ͠·͢
   

   View Slide

6. ςΩετ
   '6563&76-4
   ▸ 7VMTΫϥ΢υαʔϏε4BB4
   

   IUUQTWVMTCJ[
   ▸ ࣗࣾγεςϜʹؔ܎͋Δ੬ऑੑͷΈ
   

   ൈ͚࿙Εͳ͘ݕ஌͠ɺ
   

   ՄࢹԽ͔ΒରԠ·ͰΛαϙʔτ
   ▸ ͱΜͰ΋ͳ͍΋ͷΛ࡞ͬͯ͠·ͬͨ
   

   View Slide

7. ɾ̏ɾ
   #*58"3%&/ʹ͍ͭͯ
   ▸ ແྉύεϫʔυ؅ཧγεςϜ
   ▸ QBTTXPSEతͳ΋ͷ
   ▸ 044ͰࣗࣾΦϯϓϨ༻ʹ%PDLFSͰߏஙӡӦͰ͖Δ
   

   ˠͰ΋%#͸.4TRM πϥϛ
   
   ▸ ༷ʑͳXFCɺ֦ுػೳɺσεΫτοϓΞϓϦʹରԠ
   ▸ ΋ͪΖΜΫϥ΢υ൛΋͋Δ
   ▸ සൟʹΞοϓσʔτ͞ΕͯΔͷͰ೤͍
   

   View Slide

8. ɾ̏ɾ
   Πϯετʔϧ΋؆୯
   ▸ EPDLFSW
   

   %PDLFSWFSTJPODF
   ▸ EPDLFSDPNQPTFW
   

   EPDLFSDPNQPTFWFSTJPO CVJMEEGC
   ▸ DVSMTPCJUXBSEFOTIa
   

   IUUQTSBXHJUIVCVTFSDPOUFOUDPNCJUXBSEFO
   

   DPSFNBTUFSTDSJQUTCJUXBSEFOTIa
   

   TVEPDINPEVYCJUXBSEFOTI
   ▸ CJUXBSEFOTIJOTUBMM
   ▸ CJUXBSEFOTITUBSU
   ▸ CJUXBSEFOTIVQEBUFEC
   

   View Slide

9. ɾ̏ɾ
   1"44803%74#*58"3%&/
   ▸ QBTTXPSE IUUQTQBTTXPSEDPN
   
   

   ɾ1FSTPOBMVTFVTFS
   

   ɾ'BNJMMFTVTFS
   

   ɾ5FBNT4UBOEBSEVTFS
   

   ɾ5FBNT1SPVTFS
   ▸ CJUXBSEFO IUUQTCJUXBSEFODPN
   
   

   ɾ1FSTPOBMVTFVTFS'SFF
   ▸ ɾ'BNJMMFTVTFS
   

   ɾ5FBNTVTFSBEEVTFS
   

   ɾ&OUFSQSJTF 0OQSFNJTF
   VTFS
   ▸ ೥ׂؒҾ͖ͳΒ͞Βʹ҆͘
   

   View Slide

10. ɾ̏ɾ
    ·ͱΊ #*58"3%&/
    
    ▸ ࣗલͰӡӦͰ͖ΔͷͰηΩϡΞ
    ▸ ෛՙ΋ಛʹͳ͍ γϯΫͯ͠ϩʔΧϧʹอଘ͞ΕΔͨΊ
    
    ▸ ΤΫηϧͰ؅ཧ͢Δπϥϛ͕ͳ͍
    ▸ CJUXBSEFODMJ΋ࠓޙରԠ͢Δ
    ▸ ϝϞϦʔ(#Ҏ্͡Όͳ͍ͱಈ͔ͳ͍ ൵͠Έ
    
    ▸ "84Ͱ͸ͳ͘༨ͬͨ1$ʹ-JOVYೖΕΕ͹ӡӦඅZFO
    

    View Slide

11. ӡ༻΍
    

    όοΫΞοϓͳͲ
    

    ڭ͑ͯ΄͍ͦ͜͠ͷ͋ͳͨ
    

    View Slide

12. ɾ̏ɾ
    #-0( #*58"3%&/
    
    ▸ <'SFF0QFO4PVSDF1BTTXPSE.BOBHFS>ແྉύεϫʔυ؅ཧγεςϜ
    CJUXBSEFOΛΠϯετʔϧͯ͠Έͨ
    

    IUUQTCMPHBEBDIJONFBSDIJWFT
    ▸ <'SFF0QFO4PVSDF1BTTXPSE.BOBHFS>CJUXBSEFOͷSFTUPSF͕NTTRMͰ
    େมͩͬͨ݅
    

    IUUQTCMPHBEBDIJONFBSDIJWFT
    ▸ <44->fi
    DBUF>CJUXBSEFOͷ-FU`T&ODSZQUΛߋ৽ͯ͠Έͨ
    

    IUUQTCMPHBEBDIJONFBSDIJWFT
    ▸ ͍ͭʹCJUXBSEFOͷσεΫτοϓΞϓϦ൛͕ϦϦʔε͞Ε͔ͨΒͷϖϥΠν͞ΜͰϖϥϯν
    

    IUUQTCMPHBEBDIJONFBSDIJWFT
    

    View Slide

13. ɾ̏ɾ
    #-0( 76-4
    
    ▸ ʲ੬ऑੑεΩϟφʳ7VMTΛΠϯετʔϧͯ͠Έͨʂ
    

    IUUQTCMPHBEBDIJONFBSDIJWFT
    ▸ <7VMT><ӡӦ>;BCCJYͱ7VMTΛ࿈ܞ͔͕ͨͬͨ͠վΊͯఆظ࣮ߦํ๏ΛεΫϦϓτʹม͑ͯΈͨ
    

    IUUQTCMPHBEBDIJONFBSDIJWFT
    ▸ <7VMT><"NB[PO-JOVY><$FOU04><4ZTUFN7><FUDJOJUE>7VMT3FQPͷىಈεΫϦϓ
    τΛ࡞ͬͯίϛολʔʹͳͬͨ
    

    IUUQTCMPHBEBDIJONFBSDIJWFT
    ▸ <7VMT><$PSF04>׬શʹ๨Ε͍࣮ͯͨՈEPDLFSαʔόʹ7VMTೖΕͯ͜ͷϒϩάΛ੬
    ऑੑεΩϟϯͯ͠Έͨ
    

    IUUQTCMPHBEBDIJONFBSDIJWFT
    

    View Slide

14. ͝ਗ਼ௌ͋Γ͕ͱ͏
    ͍͟͝·ͨ͠ʂ
    

    View Slide