5分で分かる脆弱性スキャナVulsと無料パスワード管理システムbitwardenについて

MANABIYA LT大会(3/23-24)
https://teratail.connpass.com/event/77317/?utm_campaign=event_participate_to_follower&utm_medium=facebook&utm_source=notifications

Transcript

1. ෼Ͱ෼͔Δ੬ऑੑεΩϟφ 76-4ͱ 
 ແྉύεϫʔυ؅ཧγεςϜ 
 #*58"3%&/ʹ͍ͭͯ 
 "EBDIJ
   3ZP43&
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
2. ΞδΣϯμ ▸ ࣗݾ঺հ
   ▸ 7VMTΛ஌Βͳ͍օ͞Μ΁
   ▸ CJUXBSEFOʹ͍ͭͯ
   ▸ ·ͱΊ
3. ࣗݾ঺հ ▸ "EBDIJ
   3ZP43&
   ▸ !BEBDIJO
   ▸ CMPH 
 CMPHBEBDIJONF
   ▸ ୲౰ 
 ৽ٕज़ݕূ %FW0QT
   ▸ 044׆ಈ
   ʮ
   ੬ऑੑεΩϟφ
   7VMT> 
 ίϯτϦϏϡʔτ ٕज़޿ใ
4. ςΩετ 76-4Λ஌Βͳ͍օ͞Μ΁ ▸ IUUQTHJUIVCDPNGVUVSFBSDIJUFDUWVMT
   ▸ ੬ऑੑεΩϟφ
   7VMT 044 
 ʮ7VMOFSBCJMJUZ
   4DBOOFSʯͷུ
   ▸ -JOVYαʔόʹଘࡏ͢Δ੬ऑੑΛεΩϟϯ
   ▸ 04ύοέʔδ؅ཧର৅֎ͷϛυϧ΢ΣΞΛεΩϟϯ
   ▸ ΤʔδΣϯτϨεΞʔΩςΫνϟ TTI͑͞ܨ͕Ε͹
   ▸ ։ൃ͸ϑϡʔνϟʔΞʔΩςΫτͷਆށࢯ
5. ɾ̏ɾ 76-4
   3&10௨஌ػೳ ▸ 7VMT3FQP 
 ੬ऑੑͷՄࢹԽ 
 IUUQTHJUIVCDPNVTJVTJWVMTSFQP
   ▸ ௨஌ػೳ 
 ϝʔϧ͸΋ͪΖΜ 
 4MBDL͸εϨουࣜʹ 
 )JQDIBUରԠ 
 $IBUXPSL௨஌͸։ൃͯ͠·͢
6. ςΩετ '6563&
   76-4 ▸ 7VMTΫϥ΢υαʔϏε
   4BB4 
 IUUQTWVMTCJ[
   ▸ ࣗࣾγεςϜʹؔ܎͋Δ੬ऑੑͷΈ 
 ൈ͚࿙Εͳ͘ݕ஌͠ɺ 
 ՄࢹԽ͔ΒରԠ·ͰΛαϙʔτ
   ▸ ͱΜͰ΋ͳ͍΋ͷΛ࡞ͬͯ͠·ͬͨ
7. ɾ̏ɾ #*58"3%&/ʹ͍ͭͯ ▸ ແྉύεϫʔυ؅ཧγεςϜ
   ▸ QBTTXPSEతͳ΋ͷ
   ▸ 044ͰࣗࣾΦϯϓϨ༻ʹ%PDLFSͰߏஙӡӦͰ͖Δ 
 ˠͰ΋%#͸.4TRM πϥϛ
   ▸ ༷ʑͳXFCɺ֦ுػೳɺσεΫτοϓΞϓϦʹରԠ
   ▸ ΋ͪΖΜΫϥ΢υ൛΋͋Δ
   ▸ සൟʹΞοϓσʔτ͞ΕͯΔͷͰ೤͍
8. ɾ̏ɾ Πϯετʔϧ΋؆୯ ▸ 
   EPDLFS
   W 
 %PDLFS
   WFSTJPO
   DF
   ▸ 
   EPDLFSDPNQPTF
   W 
 EPDLFSDPNQPTF
   WFSTJPO
   
   CVJME
   EGC
   ▸ 
   DVSM
   T
   P
   CJUXBSEFOTI
   a 
 IUUQTSBXHJUIVCVTFSDPOUFOUDPNCJUXBSEFO 
 DPSFNBTUFSTDSJQUTCJUXBSEFOTI
   a 
 
   TVEP
   DINPE
   V Y
   CJUXBSEFOTI
   ▸ 
   CJUXBSEFOTI
   JOTUBMM
   ▸ 
   CJUXBSEFOTI
   TUBSU
   ▸ 
   CJUXBSEFOTI
   VQEBUFEC
9. ɾ̏ɾ 1"44803%
   74
   #*58"3%&/ ▸ QBTTXPSE
   IUUQTQBTTXPSEDPN 
 ɾ1FSTPOBM
   VTF
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   VTFS 
 ɾ'BNJMMFT
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   VTFS 
 ɾ5FBNT4UBOEBSE
   
   
   
   
   
   
   
   
   
   
   
   
   
   VTFS 
 ɾ5FBNT1SP
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   VTFS
   ▸ CJUXBSEFO
   IUUQTCJUXBSEFODPN 
 ɾ1FSTPOBM
   VTF
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   VTFS'SFF
   ▸ ɾ'BNJMMFT
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   VTFS 
 ɾ5FBNT
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   VTFS
   BEE
   VTFS 
 ɾ&OUFSQSJTF 0OQSFNJTF
   
   VTFS
   ▸ ೥ׂؒҾ͖ͳΒ͞Βʹ҆͘
10. ɾ̏ɾ ·ͱΊ #*58"3%&/ ▸ ࣗલͰӡӦͰ͖ΔͷͰηΩϡΞ
    ▸ ෛՙ΋ಛʹͳ͍ γϯΫͯ͠ϩʔΧϧʹอଘ͞ΕΔͨΊ
    ▸ ΤΫηϧͰ؅ཧ͢Δπϥϛ͕ͳ͍
    ▸ CJUXBSEFO
    DMJ΋ࠓޙରԠ͢Δ
    ▸ ϝϞϦʔ(#Ҏ্͡Όͳ͍ͱಈ͔ͳ͍ ൵͠Έ
    ▸ "84Ͱ͸ͳ͘༨ͬͨ1$ʹ-JOVYೖΕΕ͹ӡӦඅZFO
11. ӡ༻΍ 
 όοΫΞοϓͳͲ 
 ڭ͑ͯ΄͍ͦ͜͠ͷ͋ͳͨ
12. ɾ̏ɾ #-0( #*58"3%&/ ▸ <EPDLFS><'SFF
    0QFO
    4PVSDF
    1BTTXPSE
    .BOBHFS>ແྉύεϫʔυ؅ཧγεςϜ CJUXBSEFOΛΠϯετʔϧͯ͠Έͨ 
 IUUQTCMPHBEBDIJONFBSDIJWFT
    ▸ <EPDLFS><'SFF
    0QFO
    4PVSDF
    1BTTXPSE
    .BOBHFS>CJUXBSEFOͷSFTUPSF͕NTTRMͰ େมͩͬͨ݅ 
 IUUQTCMPHBEBDIJONFBSDIJWFT
    ▸ <EPDLFS><44-><DFSUJ fi DBUF><VQEBUF>CJUXBSEFOͷ-FU`T
    &ODSZQUΛߋ৽ͯ͠Έͨ 
 IUUQTCMPHBEBDIJONFBSDIJWFT
    ▸ ͍ͭʹCJUXBSEFOͷσεΫτοϓΞϓϦ൛͕ϦϦʔε͞Ε͔ͨΒͷϖϥΠν͞ΜͰϖϥϯν 
 IUUQTCMPHBEBDIJONFBSDIJWFT
13. ɾ̏ɾ #-0( 76-4 ▸ ʲ੬ऑੑεΩϟφʳ7VMTΛΠϯετʔϧͯ͠Έͨʂ 
 IUUQTCMPHBEBDIJONFBSDIJWFT
    ▸ <7VMT><ӡӦ>;BCCJYͱ7VMTΛ࿈ܞ͔͕ͨͬͨ͠վΊͯఆظ࣮ߦํ๏ΛεΫϦϓτʹม͑ͯΈͨ 
 IUUQTCMPHBEBDIJONFBSDIJWFT
    
    ▸ <7VMT><"NB[PO
    -JOVY><$FOU04><4ZTUFN7><FUDJOJUE>7VMT3FQPͷىಈεΫϦϓ τΛ࡞ͬͯίϛολʔʹͳͬͨ 
 IUUQTCMPHBEBDIJONFBSDIJWFT
    ▸ <7VMT><EPDLFS><$PSF04>׬શʹ๨Ε͍࣮ͯͨՈEPDLFSαʔόʹ7VMTೖΕͯ͜ͷϒϩάΛ੬ ऑੑεΩϟϯͯ͠Έͨ 
 IUUQTCMPHBEBDIJONFBSDIJWFT
14. ͝ਗ਼ௌ͋Γ͕ͱ͏ ͍͟͝·ͨ͠ʂ