Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
FOLIOの情報戦略のこれから_-_情報システムを添えて.pdf
Search
Kengo Suzuki
December 07, 2018
Technology
3
1.4k
FOLIOの情報戦略のこれから_-_情報システムを添えて.pdf
https://folio.connpass.com/event/109213/
Kengo Suzuki
December 07, 2018
Tweet
Share
More Decks by Kengo Suzuki
See All by Kengo Suzuki
Eventual Detection Engineering
ken5scal
0
390
脆弱性対応をこの先生きのこるには
ken5scal
0
670
LayerXとMDMのリスク評価と年次対応の実例(公開版)
ken5scal
2
880
AWSだ! Google Cloudだ! Azureだ! 認証連携だ!
ken5scal
8
1.9k
適応し続けるプロダクトとセキュリティ
ken5scal
5
1.9k
同志諸君よ、ゼロトラストを撃て_CloudNativeDays2022
ken5scal
2
3.2k
なぜLayerXのセキュリティでSoftware指向が重視されているか
ken5scal
0
280
暇だしDevSecOpsやってみた - CodePipeline Now and Then
ken5scal
3
5.5k
やはりタグ。タグは全てを解決する
ken5scal
2
8.9k
Other Decks in Technology
See All in Technology
Datadog を使ったプロダクトとクラウドの セキュリティモニタリング
mrtc0
0
450
エンジニアリングマネージャーが紐解く、事業視点から組織文化まで、包括的アプローチの探求 / READYFOR
9ma3r
13
2.2k
Our Journey from in-House CD System to Open Source
ffjlabo
0
100
Chunk computing
matyo91
0
270
歴史と背景から改めて振り返るVPC
shotashiratori
2
220
分野に潜むツールの紹介
pojiro
1
330
技術ブログや登壇資料を秒で作るコツ伝授します
minorun365
PRO
16
4.4k
Evolving DevOps Teams and Flexible Organizational Culture
kakehashi
1
130
X-Correlation Injections (or How to break server-side contexts)
fransrosen
0
360
Staff Engineer / 20240827 Yuichiro Masui
shift_evolve
0
150
20分で分かるIAM全機能 (拡大版) / 20240903-jawsug-yokohama-iam
opelab
3
120
音声AIエージェントの世界とRetell AI入門 / Introduction to the World of Voice AI Agents and Retell AI
rkaga
3
470
Featured
See All Featured
Mobile First: as difficult as doing things right
swwweet
220
8.8k
XXLCSS - How to scale CSS and keep your sanity
sugarenia
246
1.3M
Optimising Largest Contentful Paint
csswizardry
28
2.7k
Web development in the modern age
philhawksworth
204
10k
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
marcduiker
22
1.7k
Rails Girls Zürich Keynote
gr2m
93
13k
Intergalactic Javascript Robots from Outer Space
tanoku
268
26k
It's Worth the Effort
3n
182
27k
Art, The Web, and Tiny UX
lynnandtonic
294
20k
Infographics Made Easy
chrislema
239
18k
Learning to Love Humans: Emotional Interface Design
aarron
270
40k
Building Flexible Design Systems
yeseniaperezcruz
324
37k
Transcript
FOLIOͷใઓུͷ͜Ε͔Β - ࣾγεςϜΛఴ͑ͯ 2018/11/4
1. FOLIO͕ࠓ·Ͱ͖ͬͯͨ͜ͱ 2. FOLIOͷηΩϡϦςΟཁ݅ 3. FOLIOͷ࣮ํ 4. Mic ࣍
݄ख͍ ݄ೖࣾ
࠾༻ ݄ख͍ ݄ೖࣾ "84(VBSE%VUZ ౿Έߏங "84*". ϖωτϨʔγϣϯςετ -*/&࿈ܞରԠ 8FC੬ऑੑஅ ֎෦ஂମ࿈ܞ
- ʮओཁߦ͚ͷ૯߹తͳಜࢦʯ - ”ಜ্ͷධՁ߲” > “III-3-7 ۀͷదੑ: γεςϜϦεΫ” - ϑΥʔΧε
- ڴҖ: γεςϜোɺαΠόʔηΩϡϦςΟ߈ܸ - ରࡦ: γεςϜ౷߹ϦεΫɾϓϩδΣΫτͷཧଶɺγε ςϜɾηΩϡϦςΟ ཁ݅:૯߹ಜࢦɺFISC҆ର… ઓ͕ରॲ͢ΔڴҖͱͦͷରࡦ
ઃܭ: Cybersecurity Framework(CSF) - NIST: ถࠃཱඪ४ٕज़ݚڀॴ - AESͳͲ҉߸ٕज़ͷબఆͱඪ४ԽͳͲ - CSF:
ΦόϚલେ౷ྖ͕ൃͨ͠ߦ໋ྩʢExecutive Order)ʹج͖ͮNIST͕࡞ͬͨFW - ओʹɺاۀʹ͓͚ΔαΠόʔηΩϡϦςΟϦεΫͷ ཧΛࢧԉ͢ΔͨΊͷɺۀքඪ४͓Αͼϕε τϓϥΫ ςΟεΛ·ͱΊͨࣗओࢀՃܕͷɺϦεΫϕʔεɾΞϓ ϩʔνʹجͮ͘FW
࣮: Zero Trust Model
- ෳͷσʔλ͔Βࢉग़͢ΔϦεΫධՁ - ैདྷ: risk (0 or 1) = f(network)
- Zero Trust: risk(0<y<1) = f(nw, id, device, edr…) - ੑѱઆΑΓʮධՁͰ͖ͳ͍ͷஅ͠ͳ͍ʯ - ϚΠφεͷελʔτͰͳ͘ɺθϩ͔Βͷελʔτ - ϝτϦΫεͱσʔλத৺ͷηΩϡϦςΟ Զ͜͏ࢥ͏Zero Trust
ࣾγεςϜͷ
ɹɹɹɹ ͷݞʹΔ
σʔλΛControl Planeͱͯ͠ͷAzureʹू People Services Devices Data
Data Plane
ิతͳผαʔϏε͔ΒσʔλΛߋʹ࿈ܞ
ΠϯϕϯτϦͷू
EDRͷू
ͦΕͧΕͷσʔλ͕ԣஅతʹ࿈ܞ People Services Devices Data
ྫ1: ۀ͔ΒͷΞΫηεͷΈڐՄ People Services Devices
ྫ: ۀ͔ΒͷΞΫηεͷΈڐՄ People Services Devices "DDFTT0L
ྫ: ۀ͔ΒͷΞΫηεͷΈڐՄ People Services Devices "DDFTT0L
ྫ2: ݸਓใ͔ΒಛఆαʔϏεͷΈ Services Devices QSJWBDZ Ұൠ
ྫ3: ϦεΫͷߴ͍ͷΞΫηεΛ੍ݶ
Not So Easy
- Ϧετ - Ϧετ - Ϧετ - Ϧετͷڧௐจࣈ - Ϧετ
ڍಈ͕ෆ҆ఆ
OSX LaunchCTL͋ΒͿΓਿ
- Ϧετ - Ϧετ - Ϧετ - Ϧετͷڧௐจࣈ - Ϧετ
ೖΕࢠͳάϧʔϓʹׂΓͯΒΕͳ͍ϥΠηϯε
IdPҾͬӽ͠ = ѱເʢઈରΓͨ͘ͳ͍ʣ
σʔλΛٻͨ͠ ηΩϡϦςΟͰ վֵ͍͖ͯ͠·͠ΐ͏
None