Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
カンムにおけるプロダクトセキュリティのこれまでとこれから
Search
Moto Ishizawa
September 30, 2022
Technology
1
2.8k
カンムにおけるプロダクトセキュリティのこれまでとこれから
Moto Ishizawa
September 30, 2022
Tweet
Share
More Decks by Moto Ishizawa
See All by Moto Ishizawa
LLM エージェントを使った実験
summerwind
0
1.2k
Sharing test cases of internet protocols with Go and OCI Artifacts
summerwind
0
1.1k
Using Thanos as a long-term storage for your Prometheus metrics
summerwind
1
12k
Using Kubernetes as a datastore for SPIRE
summerwind
1
1.1k
Whitebox Controller
summerwind
5
1.8k
Managing Kubernetes manifests with Spruce
summerwind
2
4.3k
Understanding HTTP/2 prioritization
summerwind
16
6.3k
HTTP/2 Deep Dive: Priority & Server Push
summerwind
17
3.5k
HTTP/2 Server Push Considered Harmful
summerwind
1
2.1k
Other Decks in Technology
See All in Technology
【LT会登壇資料】TROCCO新コネクタ「スマレジ」を活用した直営店データの分析
kazari0425
1
110
マルチプロダクト環境におけるSREの役割 / SRE NEXT 2025 lunch session
sugamasao
1
110
React開発にStorybookとCopilotを導入して、爆速でUIを編集・確認する方法
yu_kod
1
300
Rethinking Incident Response: Context-Aware AI in Practice
rrreeeyyy
1
140
United™️ Airlines®️ Customer®️ USA Contact Numbers: Complete 2025 Support Guide
flyunitedguide
0
430
成長し続けるアプリのためのテストと設計の関係、そして意思決定の記録。
sansantech
PRO
0
130
第4回Snowflake 金融ユーザー会 Snowflake summit recap
tamaoki
1
300
Sansanのデータプロダクトマネジメントのアプローチ
sansantech
PRO
0
200
クラウド開発の舞台裏とSRE文化の醸成 / SRE NEXT 2025 Lunch Session
kazeburo
1
310
CDK Vibe Coding Fes
tomoki10
0
290
2025-07-06 QGIS初級ハンズオン「はじめてのQGIS」
kou_kita
0
180
United Airlines Customer Service– Call 1-833-341-3142 Now!
airhelp
0
170
Featured
See All Featured
The Psychology of Web Performance [Beyond Tellerrand 2023]
tammyeverts
48
2.9k
Connecting the Dots Between Site Speed, User Experience & Your Business [WebExpo 2025]
tammyeverts
6
310
The Cult of Friendly URLs
andyhume
79
6.5k
KATA
mclloyd
30
14k
Rails Girls Zürich Keynote
gr2m
95
14k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
morganepeng
130
19k
A Tale of Four Properties
chriscoyier
160
23k
Docker and Python
trallard
44
3.5k
Writing Fast Ruby
sferik
628
62k
Navigating Team Friction
lara
187
15k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
chriscoyier
507
140k
Six Lessons from altMBA
skipperchong
28
3.9k
Transcript
ΧϯϜʹ͓͚Δ ϓϩμΫτηΩϡϦςΟͷ ͜Ε·Ͱͱ͜Ε͔Β -BZFS9ͱ,BONV'JO5FDIελʔτΞοϓηΩϡϦςΟࣄ
Moto Ishizawa Software Engineer, Kanmu, Inc.
None
ϓϩμΫτηΩϡϦςΟʜ 🤔 AWS API Go Python γεςϜߏ ੬ऑੑཧ WAF Logging
PCI DSS GitHub ݖݶཧ IAM VPC PKI TLS มߋཧ Monitoring σϓϩΠ ίϯςφ Linux Django
ϓϩμΫτηΩϡϦςΟʜ 🤔 AWS API Go Python γεςϜߏ ੬ऑੑཧ WAF Logging
PCI DSS GitHub ݖݶཧ IAM VPC PKI TLS มߋཧ Monitoring σϓϩΠ ίϯςφ Linux Django
ॳͷঢ়گ • ϓϩμΫτʮόϯυϧΧʔυʯͷΈ • ܾࡁͷΈΛఏڙ͍ͯ͠ΔͨΊɺηΩϡϦςΟ࠷ॏཁͳཁૉ • όοΫΤϯυΤϯδχΞ CTO ΛؚΊͯ4ਓ •
ϓϩμΫτηΩϡϦςΟͷྖҬओʹ CTO ͕୲ • ࠷ॳͷΠϯϑϥઐΤϯδχΞͱͯ͠ೖࣾ • AWS ԿΘ͔ΒΜϚϯ
ͻͱ·ͣͷઓུ • ϓϩμΫτ։ൃʹࢀՃͯ͠γεςϜͷมߋϑϩʔΛѲ͢Δ • AWS ͳͲͷΫϥυαʔϏεͷཧऀݖݶΛΒ͍ར༻ঢ়گΛѲ͢Δ • ։ൃӡ༻ʹؔΘΔ֤छαʔϏεͷݖݶཧͷঢ়گΛѲ͢Δ • ηΩϡϦςΟ໘Ͱͷ੍ΛѲ͢Δ
ݟ͖͑ͯͨ՝ϦεΫ • Վతͳ AWS ͷཧ • ͍͋·͍ͳݖݶཧมߋཧͷϓϩηε • ։ൃ࣌ظʹΑΓҟͳΔγεςϜߏ •
PCI DSS ʹΑΔ੍ͱଐਓతͳͦͷӡ༻ • Կ͔ى͖ͯؾ͚ͳ͍ɾௐࠪͰ͖ͳ͍ྖҬ͕͋Δ • ͳͲͳͲ…
1$*%44ͱ • Payment Card Industry (PCI) ͱ͍͏ΫϨδοτΧʔυͷۀքஂମ͕ࡦఆͯ͠ ͍Δ Data Security
Standard (DSS) ͱ͍͏ඪ४ͷ͜ͱ • ΧʔυใΛదʹཧ͢ΔͨΊͷηΩϡϦςΟج४͕ఆٛ͞Ε͍ͯΔ • ΧϯϜΫϨδοτΧʔυΛൃߦ͢Δཱͱͯ͠४ڌ͕ٻΊΒΕ͍ͯΔ • υΩϡϝϯτެࣜαΠτ͔Β୭ͰμϯϩʔυͰ͖Δ • https://www.pcisecuritystandards.org/document_library/
վળํʮϕʔεϥΠϯΛ͑Δʯ • ઃఆͷ౷ҰΨόφϯεͷڧԽ • ϚωʔδυαʔϏεΛ׆༻ͨ͠γεςϜߏͷཧ • Կ͔͕ى͖ͯͦΕʹؾ͖ͮɺௐࠪͰ͖ΔΑ͏ʹ͢Δ (ࠪੑͷ্) • ࠷খݖݶͷݪଇʹै͏
• CTO ʹλεΫ͕ूத͢Δঢ়ଶ͔Βͷ٫ • ։ൃऀͷମݧҰॹʹվળ͢Δ
"84ͷվળྫ • ϕετϓϥΫςΟεʹجͮ͘ઃఆͷಋೖ • AWS Organization ͱ AWS SSO (AWS
IAM Identity Center) ͷಋೖ • CloudTrail ͱ AWS Con fi g ͷ༗ޮԽͱϩάઐ༻ΞΧϯτͰͷҰݩཧ • GuardDuty ͱ Security Hub ͷಋೖ • վળޮՌ • ଟ͘ଘࡏ͍ͯͨ͠ IAM User Λશʹഇࢭ • SSO ʹΑΓෳͷ AWS ΞΧϯτͷϩάΠϯ͕༰қʹ • Կ͔ҟৗ͕͋ͬͯͦΕʹؾ͍ͮͯௐ͕ࠪͰ͖Δঢ়ଶʹ
(JU)VCͷվળྫ • ϕετϓϥΫςΟεʹجͮ͘ઃఆͷಋೖ • ݖݶͷ୨Է͠ͱ Team Permission ͷඋ •
CODEOWNERS Branch Protection ͷઃఆ • ࣗಈΞαΠϯ Slack ௨ͷ༗ޮԽ • վળޮՌ • ѱҙͷ͋Δมߋվ͟ΜΛ࠷ݶࢭ • มߋݖݶΛ࣋ͭਓͷ໌֬Խ • Slack ͰΓͱΓ͍ͯͨ͠ϨϏϡʔґཔͷࣗಈԽ
γεςϜߏͷվળྫ • ϚωʔδυαʔϏεͷஔ͖͑ΞΫηε੍ޚͷݟ͠Λ࣮ࢪ • Session Manager Λಋೖ͠ɺ2िؒʹ1ճ͙Β͍յΕΔ LDAP Λൃഁղମ •
Cloud One Λಋೖ͠ɺಠࣗӡ༻͍ͯͨ͠ OSSEC Λൃഁղମ • վળޮՌ • ӡ༻ෛՙͷܰݮ • ϞχλϦϯά͓Αͼࠪੑͷ্ • SSO ʹΑΓ EC2 ΠϯελϯεͷΞΫηε͕༰қʹ
1$*%44ؔ࿈ͷվળྫ • ཁ݅ͷཧղͱӡ༻໘ͷඋ • ࠪʹରԠ͢ΔϝϯόʔͰશ12ཁ݅ͷಡΈ߹ΘͤձΛ࣮ࢪ • ఆظతʹඞཁͳӡ༻λεΫΛચ͍ग़͠ͱͦͷλεΫͷ࣮ࢪ • ཁ݅ͱ࣮ࡍͷγεςϜʹ͋ΘͤͨࣾϙϦγʔͷݟ͠ •
վળޮՌ • CTO ͕ରԠ͍ͯͨ͠ӡ༻ΛνʔϜͰͰ͖ΔΑ͏ʹͳͬͨ • 3.5ਓఔͰ2ͭͷϓϩμΫτͷ PCI DSS ४ڌΛୡ
৽ϓϩμΫτ1PPMͷϦϦʔε • ϦϦʔεલʹϕʔεϥΠϯ͓͖͍͑ͯͨ • AWS γεςϜશମͷઃఆͷϨϏϡʔ • PCI DSS ཁ݅ͷ४ڌʹؔΘΔઃఆͳͲͷϨϏϡʔ
• όϯυϧΧʔυͰݟ͔ͭͬͨطͷ੬ऑੑͷରԠ • վળޮՌ • طͷ੬ऑੑʹ͍ͭͯϦϦʔεલʹରࡦͰ͖ͨ • ϦϦʔε࣌ͷߏͰ PCI DSS ͷ४ڌΛୡ
͜͜·Ͱͷঢ়گ • ϓϩμΫτηΩϡϦςΟͷϕʔεϥΠϯ͖ͬͯͨ • େ͖ͳ੍ͱͳΔ PCI DSS ͷӡ༻ࠪνʔϜͰରԠͰ͖͍ͯΔ • ࠓޙࣗಈԽͷਪਐ৽ٕज़ͷಋೖɺ͞ΒͳΔϦεΫܰݮࡦͷ࣮ΛਐΊΔ
• ηΩϡϦςΟΛιϑτΣΞͰ࣮͍ͯ͘͠ɺ৭ʑͱָ͘͠ͳΔϑΣʔζ
ࠓޙ͍͖͍ͬͯͨ͜ͱ • EC2 ΛՄೳͳݶΓഇࢭͯ͠ίϯςφҠߦ (ਐߦத) • ηΩϡΞͰͳ͍ Go ͳͲͷίʔυͷࣗಈݕ •
੬ऑੑ͓ΑͼαϓϥΠνΣʔϯؔ࿈ͷϞχλϦϯάͱͦͷରԠͷڧԽ • AWS GitHub ͳͲͷઃఆͷܧଓతͳݕূͱͦͷରԠͷࣗಈԽ • PCI DSS ͓ΑͼίϯϓϥΠΞϯεؔ࿈ӡ༻ͷࣗಈԽ • PCI DSS v4 ͷ४ڌ
ҰॹʹΓ·ͤΜ͔ʂ https://team.kanmu.co.jp/
Thanks!