Secure your app: mitigate risks to agentic features セッションまとめ

Transcript

1. גࣜձࣾςίςοΫ
   ෌Ӭ୓໻ʢ!UPNJOBHBBBBBʣ 4FDVSF
   ZPVS
   BQQ
   NJUJHBUF
   SJTLT
   UP
   BHFOUJD
   GFBUVSFT
   ηογϣϯ·ͱΊ ʮ๜༁ɿΞϓϦΛ҆શʹɿΤʔδΣϯτػೳͷϦεΫΛܰݮ͢Δʯ
2. ͜ͷηΫγϣϯͰѻ͍ͬͯͨ͜ͱ ࠓޙ--.Λ׆༻ͨ͠ΞϓϦΛ։ൃ͢ΔࡍʹؾΛ͚ͭΔ͜ͱ w --.Λར༻ͨ͠߈ܸͷةݥੑɾܰݮࡦ
   w ۩ମతͳ
   'PVOEBUJPO
   .PEFMɾ"QQ
   *OUFOUTͷͦΕͧΕͷܰݮࡦ
   w ʲର৅֎ʳ
   w ϞσϧࣗମͷΨʔυϨʔϧ
   ˞ৄ͘͠͸*NQSPWJOH
   UIF
   TBGFUZ
   PG
   HFOFSBUJWF
   NPEFM
   PVUQVU
3. 'PVOEBUJPO
   .PEFM
   
   4JSJ"*
   ͰԿ͕มΘΔ͔ --.͕ෳ਺ͷπʔϧΛࣗ཯తʹݺͼग़͢ ྫɿ-PPTF-FBGʢ͓஡ձΞϓϦʣͷ৔߹
   
   ʮΧϨϯμʔΛ֬ೝͯ͠࠷దͳ೔࣌Λ୳͠ɺ
   ༑ୡͷϑΟʔυΛݟ͓ͯ஡ͷ޷ΈΛ೺Ѳɺ
   ࣗಈͰ͓஡Λ஫จ͢Δʯ
4. ϦεΫɿ*OEJSFDU
   1SPNQU
   *OKFDUJPO ؒ઀ϓϩϯϓτΠϯδΣΫγϣϯ --.
   ͸໋ྩͱσʔλͷ۠ผ͕ۤख ྫɿ-PPTF-FBGʢ͓஡ձΞϓϦʣͷ৔߹
   
   ʮΧϨϯμʔΛ֬ೝͨ͠ޙɺ౤ߘ͕͢΂ͯফ͑ͯ͠·ͬͨɻɻɻʯ
5. ϦεΫɿ6OJOUFOEFE
   "DUJPOTʢҙਤ͠ͳ͍ΞΫγϣϯʣ ΤʔδΣϯτϧʔϓͷதͰॏཁͳΞΫγϣϯ͕ࣗಈ࣮ߦ͞ΕΔ ྫɿ-PPTF-FBGʢ͓஡ձΞϓϦʣͷ৔߹
   ɾ͓஡Λউखʹେྔ஫จ͞ΕΔʢۚમతඃ֐ʣ
   ɾࣸਅ΍ϑΟʔυͷ౤ߘ͕࡟আ͞ΕΔʢσʔλଛࣦʣ
   ɾػີ৘ใ͕֎෦ʹૹ৴͞ΕΔʢ৘ใ࿙Ӯʣ
6. ରࡦͷશମ૾ ؒ઀ϓϩϯϓτΠϯδΣΫγϣϯରࡦ
   ͱ
   ҙਤ͠ͳ͍ΞΫγϣϯରࡦ
7. ؒ઀ϓϩϯϓτΠϯδΣΫγϣϯରࡦ 3FEBDUJPOʢࠇృΓʣɾ4QPUMJHIUJOHʢλά෇˞উखͳҙ༁ʣ
8. ؒ઀ϓϩϯϓτΠϯδΣΫγϣϯରࡦ 3FEBDUJPOʢࠇృΓʣɾ4QPUMJHIUJOHʢλά෇˞উखͳҙ༁ʣ 4QPUMJHIUJOH͸֬཰తରࡦʢઈର҆શͰ͸ͳ͍ʣ
9. ରࡦͷશମ૾ ࣠Ͱߟ͑Δ
   Š
   ϓϩϯϓτରࡦ
   ͱ
   ΞΫγϣϯରࡦ
10. ༧ظͤ͵ΞΫγϣϯରࡦ $PO fi SNBUJPOʢ֬ೝʣɾ
    "VUIFOUJDBUJPOʢೝূʣ w ॏཁͳΞΫγϣϯͷલʹ֬ೝΛڬΉ
    w ॏཁͳΞΫγϣϯͷલʹೝূΛڬΉ
11. 'PVOEBUJPO
    .PEFMT
    Ͱͷରࡦ IJTUPSZ5SBOTGPSNʢϓϩϯϓτରࡦʣ
    ͱ
    PO5PPM$BMMʢΞΫγϣϯରࡦʣ ਪ࿦ϦΫΤετ௚લʹ
    USBOTDSJQU
    શମΛม׵
    
    ʢͨͩ͠৴པͰ͖ͳ͍πʔϧग़ྗPSػີσʔλ͚ͩΛૂ͍ଧͪʣ πʔϧݺͼग़͠લʹ֬ೝμΠΞϩάΛઃ͚Δ
12. "QQ
    *OUFOUT
    Ͱͷରࡦ 4JSJ
    ͸ϩοΫը໘Ͱ΋࢖͑Δ ʮ)FZ
    4JSJ
    ࣸਅΛશ෦࡟আͯ͠ʯ
13. "QQ4DIFNB
    ͷ࠾༻
    ͱ
    BVUIFOUJDBUJPO1PMJDZ ✦"QQ4DIFNB
    Λ࠾༻͢Δ৔߹ʢਪ঑ʣ
    
    ϦεΫϝλσʔλɾϙϦγʔ͕ࣗಈ෇༩
    
    w ةݥͳεΩʔϚʢ࡟আܥͳͲʣ
    
    ˠ
    γεςϜ͕ࣗಈͰ֬ೝμΠΞϩάΛग़͢
    w ҰݟةݥͰͳ͍εΩʔϚͰ΋
    Ҿ਺ʹϥϕϧ౳ͷจࣈ ྻ͕͋Δ৔߹
    
    ˠ
    ةݥͱΈͳ͞Ε֬ೝμΠΞϩά͕ग़Δ
    ʢϓϩϯ ϓτΠϯδΣΫγϣϯͰҾ਺Λૢ࡞͞ΕΔՄೳੑʣ "QQ
    *OUFOUT
    Ͱͷରࡦ
14. "QQ4DIFNB
    ͷ࠾༻
    ͱ
    BVUIFOUJDBUJPO1PMJDZ ✦खಈͰઃఆ͢Δ৔߹
    BVUIFOUJDBUJPO1PMJDZΛఆٛ͢Δ
    ϙϦγʔΛݫ͍ͨ͘͠͠৔߹ʹ΋ઃఆ
    ˞ϙϦγʔΛ؇͘͢Δͷ͸ϏϧυΤϥʔʹͳΔ
    ˞εΩʔϚ͝ͱͷϙϦγʔৄࡉ͸ඇެ։ʁ
    "QQ
    *OUFOUT
    Ͱͷରࡦ
16. ·ͱΊ ॏཁͳͷ͸ɺෳ਺ͷରࡦΛॏͶΔ͜ͱ ରࡦ Foundation Models App Intents ϓϩϯϓτΠϯδΣΫγϣϯରࡦ Redaction / Spotlighting ʢࠇృΓɾλά෇͚ʣ historyTransform — ҙਤ͠ͳ͍ΞΫγϣϯରࡦ Confirmation ʢॏཁૢ࡞લͷ֬ೝʣ onToolCall AppSchema ࠾༻Ͱ γεςϜ͕ࣗಈରԠ ҙਤ͠ͳ͍ΞΫγϣϯରࡦ Authentication ʢϩοΫը໘ରࡦʣ — AppSchema ४ڌͰ OK or authenticationPolicy