Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Hardening 1010 CashFlow 大阪 振り返り会 (2017/7/13) #9...
Search
Jun Matsumoto
July 20, 2017
Technology
0
240
Hardening 1010 CashFlow 大阪 振り返り会 (2017/7/13) #9 NearMULL
2017/6/23,24 に開催された Hardening 1010 CashFlow (#h1010cf)
#9 NearMULL 大阪振り返り会(2017/7/13)
Jun Matsumoto
July 20, 2017
Tweet
Share
More Decks by Jun Matsumoto
See All by Jun Matsumoto
OWASP ZAP 簡単な使い方
jun_matsumoto
3
2.6k
Other Decks in Technology
See All in Technology
4年で17倍に成長したエンジニア組織を支えるアーキテクチャの過去と未来
sansantech
PRO
1
400
プロダクト活用度で見えた真実 ホリゾンタルSaaSでの顧客解像度の高め方
tadaken3
0
270
心が動くエンジニアリング ── 私が夢中になる理由
16bitidol
0
120
"とにかくやってみる"で始めるAWS Security Hub
maimyyym
2
120
【平成レトロ】へぇボタンハック👨🔧
vanchan2625
0
120
Mastering Quickfix
daisuzu
1
360
アプリエンジニアのためのGraphQL入門.pdf
spycwolf
0
130
リンクアンドモチベーション ソフトウェアエンジニア向け紹介資料 / Introduction to Link and Motivation for Software Engineers
lmi
4
300k
AI前提のサービス運用ってなんだろう?
ryuichi1208
8
1.5k
生成AIが変えるデータ分析の全体像
ishikawa_satoru
0
270
SREが投資するAIOps ~ペアーズにおけるLLM for Developerへの取り組み~
takumiogawa
4
1.2k
Chasing the White Whale of Open Source - ROI
mrbobbytables
0
120
Featured
See All Featured
Six Lessons from altMBA
skipperchong
27
3.5k
Imperfection Machines: The Place of Print at Facebook
scottboms
265
13k
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
soudai
169
50k
Helping Users Find Their Own Way: Creating Modern Search Experiences
danielanewman
29
2.3k
Speed Design
sergeychernyshev
25
620
Happy Clients
brianwarren
98
6.7k
Into the Great Unknown - MozCon
thekraken
33
1.5k
Site-Speed That Sticks
csswizardry
0
44
The Myth of the Modular Monolith - Day 2 Keynote - Rails World 2024
eileencodes
16
2.1k
Save Time (by Creating Custom Rails Generators)
garrettdimon
PRO
27
850
Optimizing for Happiness
mojombo
376
70k
Large-scale JavaScript Application Architecture
addyosmani
510
110k
Transcript
None
ࣗݾհ ∗ ·ͭͱ ͡ΎΜʢHardeningॳࢀՃʣ ∗ ։ൃʢϓϩάϥϚʣ→ωοτϫʔΫɾγ εςϜཧ→ใγεςϜ→։ൃʢηΩ ϡϦςΟؔ࿈ʣ 2
ڝٕ։͔࢝Β1࣌ؒऑ
WebαΠτվ͟Μ
∗ ݕ ∗ ޡݕ Barracuda WAF
None
ใڞ༗ͷαΠΫϧ
None
∗ ޕલதɺࡏݿΛΒͯ͠͠·ͬͨ… ࣦഊ 1 "! "8 $ ; I_500` I
3T^Z> I_500` I VKXPLPQ^Y� 2000 500 150000 300 125000 250 9+N^PR^� 100 700 210000 420 175000 350 @HFA� 500 30000 9000000 18000 7500000 15000 -2R\U� 100 3000 900000 1800 750000 1500 O^R^J]SM^� 1000 4000 1200000 2400 1000000 2000 PWZ05� 2000 5000 1500000 3000 1250000 2500 (.#CNP[� 100 10000 3000000 6000 2500000 5000 -C7� 600 15000 4500000 9000 3750000 7500 BEG*� 600 900 270000 540 225000 450
∗ ࡏݿՃͱೖΕͷᴥᴪ Ø ٗࢣ Patrick Hurley͞Μ ͷϚΠφεൃͰࡏݿ͕ ૿͍͑ͯͨʁ Ø ࡏݿใࠂͷλΠϛϯά (14:00, 17:00) Ͱൃ֮
∗ ࡏݿ͕૿͑ͨͷͰ ࠂΛग़ͯ͠ചΔͧʂ Λमਖ਼͢Δ ࣦഊ 2
είΞੳ 1 Team� 4:D8 � <� ='� 3'� '� /%'�
6'� 1 6906780 14 2400 2800 2600 2100 300 2 23380397 7 2600 2600 2600 2900 1000 3 54284400 1 3000 3000 2900 2835 0 4 7678260 13 2400 2500 2300 15375 0 5 26962776 5 2400 2700 2500 500 1700 6 14385551 11 3000 3300 3100 1775 0 7 32919260 3 2400 2700 2500 1925 1800 8 15927099 10 2400 2700 2500 1120 2000 9 19625350 8 2400 2700 2500 1075 6600 10 17194924 9 2600 2600 2500 1270 1800 11 25319470 6 2400 2700 2600 7020 1200 12 30367854 4 2600 2700 2600 190 2000 13 36963410 2 2400 2800 2600 11900 1800 14 10060614 12 2400 2600 2400 16000 1200 15 -17931510 15 2400 2600 2400 16740 1200
None
είΞੳ 2 Team� 4:D8 � <� ,PNJ� <� '/&'� &)�
1� 1 6906780 14 7674200 14 -767420 -0.10 ?� 2 23380397 7 51956437 2 -28576040 -0.55 ?� 3 54284400 1 60316000 1 -6031600 -0.10 ?� 4 7678260 13 17062800 11 -9384540 -0.55 ?� 5 26962776 5 29958640 7 -2995864 -0.10 ?� 6 14385551 11 16145400 12 -1759849 -0.11 ?� 7 32919260 3 29926600 8 2992660 0.10 36 � 8 15927099 10 33869430 4 -17942331 -0.53 ?� 9 19625350 8 39250700 3 -19625350 -0.50 ?� 10 17194924 9 17368610 10 -173686 -0.01 ?� 11 25319470 6 23017700 9 2301770 0.10 � 12 30367854 4 30674600 6 -306746 -0.01 ?� 13 36963410 2 33603100 5 3360310 0.10 a?� 14 10060614 12 11178460 13 -1117846 -0.10 ?� 15 -17931510 15 -19923900 15 1992390 -0.10 ?�
∗ ࡏݿ Ø ECཧαΠτΛਅͬઌʹ֬ೝ Ø ചΕے / ߴऩӹΛઈ͞ͳ͍ Ø ਖ਼֬ʹཧʢೖΕʣ ∗ ϚΠφεධՁ (-10%) Ø hardening ΞΧϯτ
Ø ࡞ۀใࠂॻ Ø ෆਖ਼ߦҝɺ΄͔ ∗ ϑΝΠϯϓϨΠ (+??%) Ø ʮڝٕഎܠʯʹࠐ·ΕͨωλΛಡΈղ͘ ·ͱΊ
͋Γ͕ͱ͏͍͟͝·ͨ͠ʂ