5分で分かる脆弱性スキャナVulsと無料パスワード管理システムbitwardenについて

5059d3f370ad7e1f4d8de4be79ae1a2c?s=47 adachin
March 23, 2018

 5分で分かる脆弱性スキャナVulsと無料パスワード管理システムbitwardenについて

5059d3f370ad7e1f4d8de4be79ae1a2c?s=128

adachin

March 23, 2018
Tweet

Transcript

  1. ෼Ͱ෼͔Δ੬ऑੑεΩϟφ 76-4ͱ
 ແྉύεϫʔυ؅ཧγεςϜ
 #*58"3%&/ʹ͍ͭͯ 
 3:0"%"$)* ͋ͩͪΜ  

  2. ɾ̏ɾ ΞδΣϯμ ▸ ࣗݾ঺հ ▸ 7VMTΛ஌Βͳ͍օ͞Μ΁ ▸ CJUXBSEFOʹ͍ͭͯ ▸ ·ͱΊ

  3. ɾ̏ɾ ࣗݾ঺հ ▸ ΠϯϑϥΤϯδχΞ 43& ͋ͩͪΜ ▸ !BEBDIJO ▸ ٕज़ϒϩά


    CMPHBEBDIJONF ▸ ୲౰
 ৽ٕज़ݕূ %FW0QT ϨϏϡʔ ▸ 044׆ಈʮ੬ऑੑεΩϟφ7VMT>
 ίϛολʔ σόοΧʔ ޿ใ
  4. ΰΰΰ….

  5. ςΩετ 76-4Λ஌Βͳ͍օ͞Μ΁ ▸ IUUQTHJUIVCDPNGVUVSFBSDIJUFDUWVMT ▸ ੬ऑੑεΩϟφ7VMT 044 
 ʮ7VMOFSBCJMJUZ4DBOOFSʯͷུ ఱۭͷʙ9

     ▸ -JOVYαʔόʹଘࡏ͢Δ੬ऑੑΛεΩϟϯ ▸ 04ύοέʔδ؅ཧର৅֎ͷϛυϧ΢ΣΞΛεΩϟϯ ▸ ΤʔδΣϯτϨεΞʔΩςΫνϟ TTI͑͞ܨ͕Ε͹  ▸ ։ൃ͸ϑϡʔνϟʔΞʔΩςΫτͷਆށࢯ ▸ ˞͜ͷࣸਅ͸ϫϯϥϯΫ্ͷધ্ύʔςΟʔͰϞώʔτҿΜͰΔͱ͜ΖΛܹࣸ͞Ε·ͨ͠
  6. ɾ̏ɾ 76-43&10௨஌ػೳ ▸ 7VMT3FQP
 ੬ऑੑͷՄࢹԽ
 IUUQTHJUIVCDPNVTJVTJWVMTSFQP ▸ ௨஌ػೳ
 ϝʔϧ͸΋ͪΖΜ
 4MBDL͸εϨουࣜʹ


    )JQDIBUରԠ
 $IBUXPSL͸ࠓࢲؤுͬͯΔZP
  7. ςΩετ '6563&76-4 ▸ 7VMTΫϥ΢υαʔϏε4BB4
 IUUQTWVMTCJ[ ▸ ࣗࣾγεςϜʹؔ܎͋Δ੬ऑੑͷΈ
 ൈ͚࿙Εͳ͘ݕ஌͠ɺ
 ՄࢹԽ͔ΒରԠ·ͰΛαϙʔτ ▸

    ͱΜͰ΋ͳ͍΋ͷΛ࡞ͬͯ͠·ͬͨ
  8. ΰΰΰ…..

  9. ɾ̏ɾ #*58"3%&/ʹ͍ͭͯ ▸ ແྉύεϫʔυ؅ཧγεςϜ ▸ QBTTXPSEతͳ΋ͷ ▸ 044ͰࣗࣾΦϯϓϨ༻ʹ%PDLFSͰߏஙӡӦͰ͖Δ
 ˠͰ΋%#͸.4TRM πϥϛ

     ▸ ༷ʑͳXFCɺ֦ுػೳɺσεΫτοϓΞϓϦʹରԠ ▸ ΋ͪΖΜΫϥ΢υ൛΋͋Δ ▸ සൟʹΞοϓσʔτ͞ΕͯΔͷͰ೤͍
  10. ɾ̏ɾ Πϯετʔϧ΋؆୯ ▸ EPDLFSW
 %PDLFSWFSTJPODF ▸ EPDLFSDPNQPTFW
 EPDLFSDPNQPTFWFSTJPO CVJMEEGC ▸

    DVSMTPCJUXBSEFOTIa
 IUUQTSBXHJUIVCVTFSDPOUFOUDPNCJUXBSEFO
 DPSFNBTUFSTDSJQUTCJUXBSEFOTIa
 TVEPDINPEV YCJUXBSEFOTI ▸ CJUXBSEFOTIJOTUBMM ▸ CJUXBSEFOTITUBSU ▸ CJUXBSEFOTIVQEBUFEC
  11. ɾ̏ɾ 1"44803%74#*58"3%&/ ▸ QBTTXPSE IUUQTQBTTXPSEDPN 
 ɾ1FSTPOBMVTFVTFSˠݸਓͰܖ໿ͳ͏
 ɾ'BNJMMFTVTFS
 ɾ5FBNT4UBOEBSEVTFS
 ɾ5FBNT1SPVTFSˠߴ͍ͬ

    ▸ CJUXBSEFO IUUQTCJUXBSEFODPN 
 ɾ1FSTPOBMVTFVTFS'SFFˠ΍ͬ͑͢ແྉ
 ɾ'BNJMMFTVTFS
 ɾ5FBNTVTFSBEEVTFS
 ɾ&OUFSQSJTF 0OQSFNJTF VTFSˠ͍҆ͬ ▸ ೥ׂؒҾ͖ͳΒ͞Βʹ҆͘
  12. ɾ̏ɾ ·ͱΊ #*58"3%&/ ▸ ࣗલͰӡӦͰ͖ΔͷͰηΩϡΞ ▸ ෛՙ΋ಛʹͳ͍ γϯΫͯ͠ϩʔΧϧʹอଘ͞ΕΔͨΊ  ▸

    ΤΫηϧͰ؅ཧ͢Δπϥϛ͕ͳ͍ ▸ CJUXBSEFODMJ΋ࠓޙରԠ͢Δ ▸ ϝϞϦʔ(#Ҏ্͡Όͳ͍ͱಈ͔ͳ͍ ൵͠Έ  ▸ "84Ͱ͸ͳ͘༨ͬͨ1$ʹ-JOVYೖΕΕ͹ӡӦඅZFO
  13. ӡӦ΍
 όοΫΞοϓͳͲ
 ڭ͑ͯ΄͍ͦ͜͠ͷ͋ͳͨ

  14. ɾ̏ɾ #-0( #*58"3%&/ ▸ <EPDLFS><'SFF0QFO4PVSDF1BTTXPSE.BOBHFS>ແྉύεϫʔυ؅ཧγεςϜ CJUXBSEFOΛΠϯετʔϧͯ͠Έͨ
 IUUQTCMPHBEBDIJONFBSDIJWFT ▸ <EPDLFS><'SFF0QFO4PVSDF1BTTXPSE.BOBHFS>CJUXBSEFOͷSFTUPSF͕NTTRMͰ େมͩͬͨ݅


    IUUQTCMPHBEBDIJONFBSDIJWFT ▸ <EPDLFS><44-><DFSUJpDBUF><VQEBUF>CJUXBSEFOͷ-FU`T&ODSZQUΛߋ৽ͯ͠Έͨ
 IUUQTCMPHBEBDIJONFBSDIJWFT ▸ ͍ͭʹCJUXBSEFOͷσεΫτοϓΞϓϦ൛͕ϦϦʔε͞Ε͔ͨΒͷϖϥΠν͞ΜͰϖϥϯν
 IUUQTCMPHBEBDIJONFBSDIJWFT
  15. ɾ̏ɾ #-0( 76-4 ▸ ʲ੬ऑੑεΩϟφʳ7VMTΛΠϯετʔϧͯ͠Έͨʂ
 IUUQTCMPHBEBDIJONFBSDIJWFT ▸ <7VMT><ӡӦ>;BCCJYͱ7VMTΛ࿈ܞ͔͕ͨͬͨ͠վΊͯఆظ࣮ߦํ๏ΛεΫϦϓτʹม͑ͯΈͨ
 IUUQTCMPHBEBDIJONFBSDIJWFT ▸

    <7VMT><"NB[PO-JOVY><$FOU04><4ZTUFN7><FUDJOJUE>7VMT3FQPͷىಈεΫϦϓ τΛ࡞ͬͯίϛολʔʹͳͬͨ
 IUUQTCMPHBEBDIJONFBSDIJWFT ▸ <7VMT><EPDLFS><$PSF04>׬શʹ๨Ε͍࣮ͯͨՈEPDLFSαʔόʹ7VMTೖΕͯ͜ͷϒϩάΛ੬ ऑੑεΩϟϯͯ͠Έͨ
 IUUQTCMPHBEBDIJONFBSDIJWFT
  16. ͝ਗ਼ௌ͋Γ͕ͱ͏ ͍͟͝·ͨ͠ʂ