Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
NPO 要知道的資訊安全
Search
Allen Own
June 29, 2015
1
260
NPO 要知道的資訊安全
20150629 NetTuesday
Allen Own
June 29, 2015
Tweet
Share
More Decks by Allen Own
See All by Allen Own
20140714 SITCON Camp 揭開駭客的神祕面紗
allenown
2
620
PHPConf 2013 - 矛盾大對決
allenown
32
24k
PHPConf 2013 - 我的密碼沒加密,你的呢?
allenown
6
820
BoT2013 海量資料時代的網路分析
allenown
4
560
The Internet is (NOT) safe - WebConf Taiwan 2013
allenown
58
11k
Featured
See All Featured
Building Better People: How to give real-time feedback that sticks.
wjessup
368
19k
The Illustrated Children's Guide to Kubernetes
chrisshort
48
50k
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
marcduiker
30
2.1k
Building a Scalable Design System with Sketch
lauravandoore
462
33k
Fashionably flexible responsive web design (full day workshop)
malarkey
407
66k
Automating Front-end Workflow
addyosmani
1370
200k
[RailsConf 2023 Opening Keynote] The Magic of Rails
eileencodes
29
9.5k
Docker and Python
trallard
44
3.4k
The Straight Up "How To Draw Better" Workshop
denniskardys
233
140k
No one is an island. Learnings from fostering a developers community.
thoeni
21
3.3k
What’s in a name? Adding method to the madness
productmarketing
PRO
22
3.5k
RailsConf 2023
tenderlove
30
1.1k
Transcript
/10⯁ΆỉⶳⰖయ֞ Ⓕᡳᜇ Allen Own
[email protected]
Ⴍચᯍ═ϫᐊ㏗֡ܦ
ⳝ⓱≼ύ ␃ុᙏ "MMFO0XO ৢடᬕ%&7$03&घ⨭㉅ BMMFOPXO!EFWDPSF ٪᧫㓲ஆൖፎ)*5$0/ᐥܓ ொ㉅㡩㓲ஆሟᇌစՁᎵơᣑ⼈ᡄ⮜
Hacks In Taiwan Conference Community 2015/8/28 ~ 29 தԝݚڀӃ
None
None
http://www.flickr.com/photos/42514833@N07/5246970893/ Cyberwar
http://en.wikipedia.org/wiki/Liebig's_law_of_the_minimum
ⶳయΦϨ⥝ᴑ Φأ㔑㏄ ΦϨể᷒ᎇ ΦⲐᒩ ᣑ⼆ᡄ⮚ ሲ⒣⭥⌕ ྭⱻ⭝ᵍ ⳻୷⼎ृ ˰̲ᣬ⌕ ⋸ྭⱻ
˰̲⢥᱙ ቆͥ㈠ⱙ สغずය
Πⵠ㦖
☱ٳڠධ֧ᷔ᷒৺ݥ 10
ٜⷍỉᦉ⾾ⱒ Ø ٤Βᴟ╹ֽתӲრᄚԺृگ Ø ृگ⯉ՓᰃṞᵑ㕸 Ø Җᐩ㋳θơͧҖ٩ါჽơʬᘟ⼟⨭য়ぞ*1 Ø ឧⱶᴚ㡢Ӭ̛㡮㡣՚ஆ⻇Ӭஈ⼟⨭ፖׁ
ฎฯᦡᡂ⍮Ⱅ 29.9% 6.4% 9.6% 13.1% 15.1% 25.9% Cross-Site Scripting SQL
Injection Business Logic Flaw Cross-Site Request Forgery Information Leakage Others
⯁Άኄ⓱ỉ༰⎖ɗ⯫㣟ɗႽ Ⴞ▏ฤӛ㏄⃥
㘓ాУểᆩᦡᡂ㦖
㘓ాУểᆩᦡᡂ㦖 Ø %BZ Ø ㆢஂሟᇌṕᕵἤ₳ơᣑ⼈㡦 ဪԺ㌬ዏො㞾 Ø %BZ Ø ἤ₳≕⊶ፄቭ⁰㡦்ဪϙ
⪒ḑ⾠Ձٓჿො㞾
%BZ"UUBDL ㊝ Ἅ ᘭ ể ᆩ ᦡ ᡂ ቴ
ኄ ℨ ગ ⯋ ᘳ ᆘ ᇒ И ⑻ ㍫
%BZ"UUBDL ㊝ Ἅ ᘭ ዓ ؐ ᏼ ጥ ℨ
ᑭ ᝒ ಇ ᏼ ጥ ቴ ኄ ℨ ગ ⯋ ᘳ ᆘ ᇒ И ⑻ ㍫
ⅫࠎㄐװҎ⭈ℨ Ø ℻ฐඦݘずԺፄቭ⁰ Ø ἤ₳ፄቭ⁰ϙ⪒ḑ⾠̶ Ø ߲⮜⼈⼱ϙ⪒⁰ဪԺխᬝᣩដ Ø ᆼ░ᬝᣩដሟᇌ⁰ Ø
ሟᇌௗ፫ፄቭḑ░ᬝΒᴟ
None
None
None
Big Data ગ⯋ᘳ֞⎛⹜ᆘᇒ
ᴊόỉⶳయጥ㕚㐖 Ø #JH%BUBዏ̧㡦㓲ஆ˥٩̩ᴟ㌪℀ơয়⬕ᕻˏᖤ℻Ҽ㡦 ቂϫ̹ᓹơ*1Wơᴖ╾өʼᴺḑ⋣ⶦ⼟⨭რᄚ㡦ဪԺөʼ ᴺፒˏᖤږፒᣩដƢ Ø 4IPEBOIUUQXXXTIPEBOIRDPN Ø ;PPN&ZFIUUQXXX[PPNFZFPSH Ø
*OUFSOFU$FOTVTIUUQJOUFSOFUDFOTVTCJUCVDLFUPSH
None
None
None
None
None
ⶳయΦϨᆲⰘ
ሟᇌ ⳽୷⭶ё ⋣ ⳽ቛൻ #PUOFU #PUOFUሯᇜ
ሟᇌ ⳽୷⭶ё ⋣ ⳽ቛൻ #PUOFU #PUOFUሯᇜ
None
None
None
None
ጥମ▕㦖〔♉ᶲ⭉ጥコ㦖 Ø ⋣ⶦ⭶ёơ⳽୷⭶ё˥ፒ୷ө㐹㋵㡦ᴖ╾٩ⓗࡻ᨟⭶ ёௐ╿ӧβ╾Ө⋣Ƣ Ø *P5ḑዏ̧㡦ஔ㌱ơ₺⪓⏀⨴٩⼙⋣㡦˥ፒ⩰ӧ βḑ㐹㋵Ƣ Ø ̹ᓹơஔˆᠮḑ⭶ё㡦₳ዅʵዅᮚӧஈ㡮
Ўᐎࣞ ㏄᪪ᯓ ⶳጓำ Ϯᖱ Ўᐎࣞ Ўᐎࣞ ኄ⓱
Ўᐎࣞ ㏄᪪ᯓ ⶳጓำ Ϯᖱ Ўᐎࣞ Ўᐎࣞ ኄ⓱
Ўᐎࣞ ㏄᪪ᯓ ⶳጓำ Ϯᖱ Ўᐎࣞ Ўᐎࣞ ኄ⓱
5BLFBXBZT Ø כୖ҆ϵཌྷ㡦୷өፄቭׁ฿ұ⼕୷⪓ Ø ٵ⭶ёḒፒ٩ⓗ᨟ሟᇌṕᕵ㡦ӧ˘խӔᏱ㉬ ⋣ⶦʲ୷өἤ₳ृگ㡦ዅ╹⨭㋥㌡ᡄ⮜ทӻʲ⌀ Ø ̹ᓹ฿㏪՟ஂ⳽୷˱̳⢦᱙401㡦˂ʺ⬕֒˱խơ ˱ˆơ˱ทḑٵ㏧⢦᱙㏧ṕ㡦Νਗᣑ⼈ᡄ⮜ơ୷ө ᣬ␑ơቆͦ㈢ⱛ℻Ƣ
2"
⭈ֆⲄ፧㦑44-య֞
None