JetpackSecurityを今さら学んでみた

Transcript

1. +FUQBDL4FDVSJUZΛ
   ࠓ͞ΒֶΜͰΈͨ
   

   View Slide

2. w !TPCBZB5XJUUFS
   w !TPCBZB(JUIVC
   w TPCZB;FOO
   ࣗݾ঺հ
   ͦ͹԰Λ໊৐ͬͯΔͷʹͦ͹࡞Γ͸ۤखͰ͢ɻ
   ೋ೔ਲ͍ܥΤϯδχΞͱͯ͠೔ʑؤுͬͯ·
   ͢ɻ
   

   View Slide

3. ͓඼ॻ͖
   ֓
   ཁ
   ࢖
   ͯ
   Έ
   ͨ
   4IBSFE1SFGFSFODFT
   ͱ
   
   ಉ
   ͡
   ϑ
   Π
   ϧ
   ʹ
   ॻ
   ͘
   յ
   Ε
   ͨ
   ྫྷ
   ੩
   ʹ
   ߟ
   ͑
   Δ
   ୤
   ઢ
   ͠
   ͢
   ͗
   ͨ
   

   View Slide

4. ֓ཁ
   

   View Slide

5. 
   

   View Slide

6. શ෦ؙݟ͑
   

   View Slide

7. ͝ਗ਼ௌ
   ͋Γ͕ͱ͏͍͟͝·ͨ͠
   

   View Slide

8. ݩσʔλ ҉߸ԽࡁΈσʔλ
   +FUQBDL
   4FDVSJUZ
   

   View Slide

9. ݩσʔλ ҉߸ԽࡁΈσʔλ
   +FUQBDL
   4FDVSJUZ
   ҉߸Խ෮߸ʹ࢖͏伴͸ʁ
   

   View Slide

10. ࢖ͬͯΈͨ
    

    View Slide

11. ී௨ͷ4IBSFE1SFGFSFODFTΑΓ͸
    ύϥϝʔλ͕ଟ͍
    

    View Slide

12. View Slide

13. σʔλͷอଘ͸Կ΋มΘΒͳ͍
    

    View Slide

14. Ωʔ΋஋΋҉߸Խ͞ΕͯΔʂʂ
    

    View Slide

15. 4IBSFE1SFGFSFODFTͱ
    ಉ͡ϑΝΠϧʹॻ͘
    

    View Slide

16. View Slide

17. ಉ͡ΩʔΛࢦఆͯ͠΋ผσʔλ͕औΕΔ
    

    View Slide

18. Ωʔ΋҉߸Խ͞Ε͍ͯΔ4IBSFE1SFGFSFODFTͰ
    อଘͨ͠Ωʔͱಉ͡ΩʔͰσʔλ͕อଘ͞ΕΔ
    

    View Slide

19. յΕͨ
    

    View Slide

20. ແࢹ͚ͯͨ͠Ͳɺ͜Ε୭ʁʁʁ
    

    View Slide

21. &ODSZQUFE4IBSFE1SFGFSFODFTͷσʔλΛอଘ͍ͯ͠Δ෦෼
    ΛݟΔͱΩʔΛ֬ೝͯ͠UISPX͢ΔΑ͏ʹͳͬͯΔ
    

    View Slide

22. ָ͠Ίͦ͏
    

    View Slide

23. ·ͣ͸&ODSZQUFE4IBSFE1SFGFSFODFTͰ
    Ϋϥογϡ͢Δ͜ͱΛ֬ೝ
    

    View Slide

24. ͪΌΜͱΫϥογϡͨͧ͠ʙʂʂ
    

    View Slide

25. ͔͜͜Βຊ൪4IBSFE1SFGFSFODFTͰ
    Ͳ͏ͳΔ͔ࢼͯ͠ΈΑ͏
    

    View Slide

26. ແࣄ
    ॻ͖ࠐΊ·ͨ͠
    

    View Slide

27. Ӭԕʹ&ODSZQUFE4IBSFE1SFGFSFODFT
    Ͱ͸։͚ͳ͍ϑΝΠϧͱͳΓ·ͨ͠
    

    View Slide

28. ྫྷ੩ʹߟ͑Δ
    

    View Slide

29. wී௨ʹۀ຿Λ͍ͯͨ͠Βಛʹ໰୊͸ແ͍ͱࢥ͏
    wѱҙΛ࣋ͬͨਓ͕͍ͯόϨͣʹϦϦʔε·Ͱ͍͚࣋ͬͯͨ৔߹
    wѱҙΛ࣋ͬͨϥΠϒϥϦ։ൃऀ͕͍ͨ৔߹ ಋೖ࣌ʹະνΣοΫ
    
    σʔλ͕ӬԕʹࣦΘΕΔ
    

    View Slide

30. ୤ઢ͗ͨ͢͠
    

    View Slide

31. ݩσʔλ ҉߸ԽࡁΈσʔλ
    +FUQBDL
    4FDVSJUZ
    ҉߸Խ෮߸ʹ࢖͏伴͸ʁ
    

    View Slide

32. ,FZ4UPSFͰ؅ཧ͞Εͯͨ
    

    View Slide

33. ͝੩ௌ͋Γ͕ͱ͏͍͟͝·ͨ͠ɻ
    

    View Slide