Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
インシデントレスポンス演習 II / Incident Response Exercise II
Search
Kenji Saito
PRO
July 15, 2024
Technology
0
59
インシデントレスポンス演習 II / Incident Response Exercise II
早稲田大学大学院経営管理研究科「サイバーセキュリティ」2024 夏の第11-12回で使用したスライドです。
Kenji Saito
PRO
July 15, 2024
Tweet
Share
More Decks by Kenji Saito
See All by Kenji Saito
ゼミ紹介 : 公共の利益のためのデジタルトランスフォーメーション / Zemi Introduction : Digital Transformation for Public Good
ks91
PRO
0
10
最新 DX 推進論 / Latest DX Promotion Theory
ks91
PRO
0
170
そのデジタル製品パスポートでどこへ行く? / Where Are You Going with That Digital Product Passport?
ks91
PRO
0
12
コバヤシマルテスト ─ 勝ち目のないゲームに抗いながら旅する心の旅路 / Kobayashi Maru Test - a mental journey of defiance against a game that cannot be won
ks91
PRO
0
44
セキュリティ戦略・発表と総括 / Security Strategies, Presentation and Conclusions
ks91
PRO
1
55
暗号資産の経済学・イントロダクション / Economics of Cryptocurrencies (Introduction)
ks91
PRO
0
50
AI とデジタルトランスフォーメーション / AI and Digital Transformation
ks91
PRO
0
33
A思考の自動化とX 思考の行方 / Automation of A Thinking and the Future of X Thinking
ks91
PRO
0
44
サイバー戦の現在と未来 / Present and Future of Cyber Warfare
ks91
PRO
0
81
Other Decks in Technology
See All in Technology
夏休みの(最後の)宿題 for JuliaTokyo #12
antimon2
0
130
AWS IAM Identity Center議論会 〜 認証認可結合モデルと認証認可分離モデル / 20240827-jawsug-arch-iam_identity_center
opelab
3
320
目標設定と習慣化で今よりも一歩生産性を上げる
sansantech
PRO
7
2.3k
すぐに始めるAWSコスト削減。短期でできる改善策と長期的な運用負荷軽減への取り組み方を解説
ncdc
1
120
ことばをそろえる / Bridging the Terminology Gap
amaotone
5
1k
PlaywrightによるE2Eテスト入門 / Introduction to E2E Testing with Playwright
rhumie
3
910
脆弱星に導かれて
nishimunea
1
1.5k
マーケットプレイス版Oracle WebCenter Content For OCI
oracle4engineer
PRO
1
160
AWSを始めた頃に陥りがちなポイントをまとめてみた
oshanqq
1
1.7k
20分で分かるIAM全機能 (拡大版) / 20240903-jawsug-yokohama-iam
opelab
3
120
React Aria で実現する次世代のアクセシビリティ
ryo_manba
3
290
セキュリティ監視の内製化 効率とリスク
mixi_engineers
PRO
4
640
Featured
See All Featured
What’s in a name? Adding method to the madness
productmarketing
PRO
21
3k
Facilitating Awesome Meetings
lara
49
5.9k
The Psychology of Web Performance [Beyond Tellerrand 2023]
tammyeverts
34
1.9k
How to Ace a Technical Interview
jacobian
275
23k
Rails Girls Zürich Keynote
gr2m
93
13k
How STYLIGHT went responsive
nonsquared
93
5.1k
CoffeeScript is Beautiful & I Never Want to Write Plain JavaScript Again
sstephenson
157
15k
Documentation Writing (for coders)
carmenintech
65
4.3k
No one is an island. Learnings from fostering a developers community.
thoeni
18
2.9k
Navigating Team Friction
lara
183
13k
Designing Experiences People Love
moore
138
23k
JavaScript: Past, Present, and Future - NDC Porto 2020
reverentgeek
45
4.8k
Transcript
Hardening for cyber security — generated by Stable Diffusion XL
v1.0 2024 11-12 II (WBS) 2024 11-12 II — 2024-07-15 – p.1/33
https://speakerdeck.com/ks91/collections/cyber-security-2024-summer 2024 11-12 II — 2024-07-15 – p.2/33
( ) 1 6 10 (1) • 2 6 10
(2) • 3 6 17 • 4 6 17 • 5 6 24 I ( ) • 6 6 24 I ( ) • 7 7 1 • 8 7 1 • 9 7 8 • 10 7 8 • 11 7 15 II ( ) • 12 7 15 II ( ) • 13 7 22 14 7 22 W-IOI / ( ) 2024 11-12 II — 2024-07-15 – p.3/33
( 20 ) 1 • 2 • 3 • 4
(TCP/IP ) • 5 • 6 • 7 • 8 • 9 • 10 World Wide Web • 11 Web API • 12 • 13 git GitHub • 14 • SSH • (6/24 ) / (2 ) OK / 2024 11-12 II — 2024-07-15 – p.4/33
( ) + + 2024 11-12 II — 2024-07-15 –
p.5/33
II 10 2024 11-12 II — 2024-07-15 – p.6/33
2024 11-12 II — 2024-07-15 – p.7/33
5. (1) ( ) (2) I OvenAI CEO 2024 7
11 ( ) 23:59 JST Waseda Moodle (Q & A ) 2024 11-12 II — 2024-07-15 – p.8/33
. . . . . . 12 9 (7/14( )
) ( ) 2024 11-12 II — 2024-07-15 – p.9/33
I CEO CEO CEO ⇒ NPC CEO 2024 11-12 II
— 2024-07-15 – p.10/33
W M ⇒ 2024 11-12 II — 2024-07-15 – p.11/33
N ⇒ 2024 11-12 II — 2024-07-15 – p.12/33
A ( ) ( ) ( ) ( ) (
) AI ⇒ 2024 11-12 II — 2024-07-15 – p.13/33
T ⇒ 2024 11-12 II — 2024-07-15 – p.14/33
M OvenAI ⇒ 2024 11-12 II — 2024-07-15 – p.15/33
Y CSIRT ⇒ 2024 11-12 II — 2024-07-15 – p.16/33
W E2E ⇒ E2E (End-to-End) (end) (end) 2024 11-12 II
— 2024-07-15 – p.17/33
A ⇒ 2024 11-12 II — 2024-07-15 – p.18/33
L ⇒ 2024 11-12 II — 2024-07-15 – p.19/33
II 15 2024 11-12 II — 2024-07-15 – p.20/33
4 Discord ( ) ( ) AI AI AI 2024
10 14 ( ) ( ) ( ) 112 ^^; 21:55 21:45 10 21:45 2024 11-12 II — 2024-07-15 – p.21/33
112 (1/2) OvenAI CEO ( COO ) ^^; AI 2024
11-12 II — 2024-07-15 – p.22/33
112 (2/2) OvenAI 5. . . . CSIRT (?) AI
(← ) 2024 11-12 II — 2024-07-15 – p.23/33
A B B A B B 5 2024 11-12 II
— 2024-07-15 – p.24/33
AI (NPC : Non Player Character) @ / OvenAI @ceo
: CEO ( ) : @cto : CTO ( ) : @eng : : ( ), ( ), ( , ) @cr : : @pr : OvenAI : @br : ( ) : @personnel : : @sns : W : @tv : TV : @police : ( ) : @caa : : 2024 11-12 II — 2024-07-15 – p.25/33
(cto) (eng) – (1/n) APT (Advanced Persistent Threat; ) :
APT33 ( ), APT29 ( ), APT38 ( ), etc. AWS (Amazon Web Services; ) Amazon.com 2024 11-12 II — 2024-07-15 – p.26/33
→ 2024 11-12 II — 2024-07-15 – p.27/33
10 5 ( ) ( ) CSIRT (Computer Security Incident
Response Team) 1 CISO ( ) ← : 1 ( ) 1 ( Discord ) ( ^^;) ( ) CSIRT Zoom OvenAI CTO CSIRT CEO “ ” 2024 11-12 II — 2024-07-15 – p.28/33
10 21:45 21:55 2024 11-12 II — 2024-07-15 – p.29/33
2024 11-12 II — 2024-07-15 – p.30/33
6. II (1) ( ) (2) 2024 7 18 (
) 23:59 JST Waseda Moodle (Q & A ) 2024 11-12 II — 2024-07-15 – p.31/33
(1 ) 2024 11-12 II — 2024-07-15 – p.32/33
2024 11-12 II — 2024-07-15 – p.33/33