インシデントレスポンス演習 I / Incident Response Exercise I

早稲田大学大学院経営管理研究科「サイバーセキュリティ」2026 夏の第5-6回で使用したスライドです。

Transcript

1. Generated by Stable Image Core 2026 5-6 I (WBS) 2026 5-6 I — 2022-06-22 – p.1/24
2. https://speakerdeck.com/ks91/collections/cyber-security-2026-summer 2026 5-6 I — 2022-06-22 – p.2/24
3. ( ) 1 6 8 (1) • 2 6 8 (2) • 3 6 15 (1) • 4 6 15 (2) • 5 6 22 I (1) ( ) • 6 6 22 I (2) ( ) • 7 6 29 (1) ( ) 8 6 29 (2) ( ) 9 7 6 (1) 10 7 6 (2) 11 7 13 (1) 12 7 13 (2) 13 7 20 II (1) ( ) 14 7 20 II (2) ( ) W-IOI / ( ) 2026 5-6 I — 2022-06-22 – p.3/24
4. ( 20 ) 1 • 2 • 3 • 4 (TCP/IP ) • 5 • 6 • 7 • 8 • 9 • 10 World Wide Web • 11 Web API • 12 • 13 git GitHub • 14 • / / OK / 2026 5-6 I — 2022-06-22 – p.4/24
5. ( ) + — ( (1a), (1b), (2)) + ( (3)) 2026 5-6 I — 2022-06-22 – p.5/24
6. I 2026 5-6 I — 2022-06-22 – p.6/24
7. 2026 5-6 I — 2022-06-22 – p.7/24
8. 2. OK (1) (2) 2026 6 18 ( ) 23:59 JST Waseda Moodle (Q & A ) 2026 5-6 I — 2022-06-22 – p.8/24
9. . . . . . . 28 24 (6/19( ) ) ( ) 2026 5-6 I — 2022-06-22 – p.9/24
10. I 10 2026 5-6 I — 2022-06-22 – p.10/24
11. 4 Discord AI (GM) NPC ( ) 202X → @mentions 2026 6 22 ( ) ( ) ( ) 21:55 21:45 10 21:45 2026 5-6 I — 2022-06-22 – p.11/24
12. HarborLink Orchestrator (HLO) HarborLink P O R T O R C H E S T R AT I O N P L AT F O R M B2B SaaS HarborLink Orchestrator (HLO) CEO : : 16 : 800 : HLO ( ) 2026 5-6 I — 2022-06-22 – p.12/24
13. (NPC) AI (NPC : Non Player Character) @ ( ) @ceo : CEO ( ) : @cto : CTO ( ) : ( ) @eng : : , , @cr : : @pr : HLO : (CEO ) ( ) @ir : : ( ) @personnel : : @sns : W : @tv : TV : @police : ( ) : @meti : : @ppc : : @attacker : 2026 5-6 I — 2022-06-22 – p.13/24
14. (GM) NPC @gm : ( ) discord-agent-hub (WBS ) GM NPC agent-hub 1 1 agent-hub @ ( OK) GM NPC 2026 5-6 I — 2022-06-22 – p.14/24
15. (cto) (eng) – (1/3) egress SSH (Secure Shell) Tor (The Onion Routing) ( ) 2026 5-6 I — 2022-06-22 – p.15/24
16. (cto) (eng) – (2/3) ( ) 2026 5-6 I — 2022-06-22 – p.16/24
17. (cto) (eng) – (3/3) AI AI AI 2026 5-6 I — 2022-06-22 – p.17/24
18. → ∼ ∼ ( ) 2026 5-6 I — 2022-06-22 – p.18/24
19. 10 CEO CSIRT (Computer Security Incident Response Team) CSIRT Zoom (19:30 ∼) ( ) Dropbox 5 ( ) CTO ( ) CSIRT ( ) 2026 5-6 I — 2022-06-22 – p.19/24
20. 10 GM 20:30 10 21:45 21:55 Zoom Dropbox URL 2026 5-6 I — 2022-06-22 – p.20/24
21. 2026 5-6 I — 2022-06-22 – p.21/24
22. 3. (1) ( ) (2) 2024 6 25 ( ) 23:59 JST Waseda Moodle (Q & A ) 2026 5-6 I — 2022-06-22 – p.22/24
23. (1 ) 2026 5-6 I — 2022-06-22 – p.23/24
24. 2026 5-6 I — 2022-06-22 – p.24/24