Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Hardening 1010 CashFlow 大阪 振り返り会 (2017/7/13) #9...
Search
Jun Matsumoto
July 20, 2017
Technology
0
280
Hardening 1010 CashFlow 大阪 振り返り会 (2017/7/13) #9 NearMULL
2017/6/23,24 に開催された Hardening 1010 CashFlow (#h1010cf)
#9 NearMULL 大阪振り返り会(2017/7/13)
Jun Matsumoto
July 20, 2017
Tweet
Share
More Decks by Jun Matsumoto
See All by Jun Matsumoto
OWASP ZAP 簡単な使い方
jun_matsumoto
3
2.7k
Other Decks in Technology
See All in Technology
神回のメカニズムと再現方法/Mechanisms and Playbook for Kamikai scrumat2025
moriyuya
4
520
AIAgentの限界を超え、 現場を動かすWorkflowAgentの設計と実践
miyatakoji
0
130
Pure Goで体験するWasmの未来
askua
1
180
後進育成のしくじり〜任せるスキルとリーダーシップの両立〜
matsu0228
6
2.3k
DataOpsNight#8_Terragruntを用いたスケーラブルなSnowflakeインフラ管理
roki18d
1
340
組織観点からIAM Identity CenterとIAMの設計を考える
nrinetcom
PRO
1
170
Oracle Base Database Service 技術詳細
oracle4engineer
PRO
11
77k
GC25 Recap+: Advancing Go Garbage Collection with Green Tea
logica0419
1
400
Flaky Testへの現実解をGoのプロポーザルから考える | Go Conference 2025
upamune
1
420
いま注目しているデータエンジニアリングの論点
ikkimiyazaki
0
590
SOC2取得の全体像
shonansurvivors
1
370
Optuna DashboardにおけるPLaMo2連携機能の紹介 / PFN LLM セミナー
pfn
PRO
1
880
Featured
See All Featured
The Art of Programming - Codeland 2020
erikaheidi
56
14k
The Language of Interfaces
destraynor
162
25k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
morganepeng
132
19k
How to train your dragon (web standard)
notwaldorf
96
6.3k
Building Better People: How to give real-time feedback that sticks.
wjessup
368
20k
The Myth of the Modular Monolith - Day 2 Keynote - Rails World 2024
eileencodes
26
3.1k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
chriscoyier
507
140k
Become a Pro
speakerdeck
PRO
29
5.5k
GraphQLとの向き合い方2022年版
quramy
49
14k
VelocityConf: Rendering Performance Case Studies
addyosmani
332
24k
Being A Developer After 40
akosma
91
590k
Connecting the Dots Between Site Speed, User Experience & Your Business [WebExpo 2025]
tammyeverts
9
580
Transcript
None
ࣗݾհ ∗ ·ͭͱ ͡ΎΜʢHardeningॳࢀՃʣ ∗ ։ൃʢϓϩάϥϚʣ→ωοτϫʔΫɾγ εςϜཧ→ใγεςϜ→։ൃʢηΩ ϡϦςΟؔ࿈ʣ 2
ڝٕ։͔࢝Β1࣌ؒऑ
WebαΠτվ͟Μ
∗ ݕ ∗ ޡݕ Barracuda WAF
None
ใڞ༗ͷαΠΫϧ
None
∗ ޕલதɺࡏݿΛΒͯ͠͠·ͬͨ… ࣦഊ 1 "! "8 $ ; I_500` I
3T^Z> I_500` I VKXPLPQ^Y� 2000 500 150000 300 125000 250 9+N^PR^� 100 700 210000 420 175000 350 @HFA� 500 30000 9000000 18000 7500000 15000 -2R\U� 100 3000 900000 1800 750000 1500 O^R^J]SM^� 1000 4000 1200000 2400 1000000 2000 PWZ05� 2000 5000 1500000 3000 1250000 2500 (.#CNP[� 100 10000 3000000 6000 2500000 5000 -C7� 600 15000 4500000 9000 3750000 7500 BEG*� 600 900 270000 540 225000 450
∗ ࡏݿՃͱೖΕͷᴥᴪ Ø ٗࢣ Patrick Hurley͞Μ ͷϚΠφεൃͰࡏݿ͕ ૿͍͑ͯͨʁ Ø ࡏݿใࠂͷλΠϛϯά (14:00, 17:00) Ͱൃ֮
∗ ࡏݿ͕૿͑ͨͷͰ ࠂΛग़ͯ͠ചΔͧʂ Λमਖ਼͢Δ ࣦഊ 2
είΞੳ 1 Team� 4:D8 � <� ='� 3'� '� /%'�
6'� 1 6906780 14 2400 2800 2600 2100 300 2 23380397 7 2600 2600 2600 2900 1000 3 54284400 1 3000 3000 2900 2835 0 4 7678260 13 2400 2500 2300 15375 0 5 26962776 5 2400 2700 2500 500 1700 6 14385551 11 3000 3300 3100 1775 0 7 32919260 3 2400 2700 2500 1925 1800 8 15927099 10 2400 2700 2500 1120 2000 9 19625350 8 2400 2700 2500 1075 6600 10 17194924 9 2600 2600 2500 1270 1800 11 25319470 6 2400 2700 2600 7020 1200 12 30367854 4 2600 2700 2600 190 2000 13 36963410 2 2400 2800 2600 11900 1800 14 10060614 12 2400 2600 2400 16000 1200 15 -17931510 15 2400 2600 2400 16740 1200
None
είΞੳ 2 Team� 4:D8 � <� ,PNJ� <� '/&'� &)�
1� 1 6906780 14 7674200 14 -767420 -0.10 ?� 2 23380397 7 51956437 2 -28576040 -0.55 ?� 3 54284400 1 60316000 1 -6031600 -0.10 ?� 4 7678260 13 17062800 11 -9384540 -0.55 ?� 5 26962776 5 29958640 7 -2995864 -0.10 ?� 6 14385551 11 16145400 12 -1759849 -0.11 ?� 7 32919260 3 29926600 8 2992660 0.10 36 � 8 15927099 10 33869430 4 -17942331 -0.53 ?� 9 19625350 8 39250700 3 -19625350 -0.50 ?� 10 17194924 9 17368610 10 -173686 -0.01 ?� 11 25319470 6 23017700 9 2301770 0.10 � 12 30367854 4 30674600 6 -306746 -0.01 ?� 13 36963410 2 33603100 5 3360310 0.10 a?� 14 10060614 12 11178460 13 -1117846 -0.10 ?� 15 -17931510 15 -19923900 15 1992390 -0.10 ?�
∗ ࡏݿ Ø ECཧαΠτΛਅͬઌʹ֬ೝ Ø ചΕے / ߴऩӹΛઈ͞ͳ͍ Ø ਖ਼֬ʹཧʢೖΕʣ ∗ ϚΠφεධՁ (-10%) Ø hardening ΞΧϯτ
Ø ࡞ۀใࠂॻ Ø ෆਖ਼ߦҝɺ΄͔ ∗ ϑΝΠϯϓϨΠ (+??%) Ø ʮڝٕഎܠʯʹࠐ·ΕͨωλΛಡΈղ͘ ·ͱΊ
͋Γ͕ͱ͏͍͟͝·ͨ͠ʂ