Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
サイバー戦の現在と未来 / Present and Future of Cyber Warfare
Search
Kenji Saito
PRO
July 07, 2024
Technology
0
81
サイバー戦の現在と未来 / Present and Future of Cyber Warfare
早稲田大学大学院経営管理研究科「サイバーセキュリティ」2024 夏の第9-10回で使用したスライドです。
Kenji Saito
PRO
July 07, 2024
Tweet
Share
More Decks by Kenji Saito
See All by Kenji Saito
ゼミ紹介 : 公共の利益のためのデジタルトランスフォーメーション / Zemi Introduction : Digital Transformation for Public Good
ks91
PRO
0
10
最新 DX 推進論 / Latest DX Promotion Theory
ks91
PRO
0
170
そのデジタル製品パスポートでどこへ行く? / Where Are You Going with That Digital Product Passport?
ks91
PRO
0
12
コバヤシマルテスト ─ 勝ち目のないゲームに抗いながら旅する心の旅路 / Kobayashi Maru Test - a mental journey of defiance against a game that cannot be won
ks91
PRO
0
44
セキュリティ戦略・発表と総括 / Security Strategies, Presentation and Conclusions
ks91
PRO
1
55
暗号資産の経済学・イントロダクション / Economics of Cryptocurrencies (Introduction)
ks91
PRO
0
50
AI とデジタルトランスフォーメーション / AI and Digital Transformation
ks91
PRO
0
33
インシデントレスポンス演習 II / Incident Response Exercise II
ks91
PRO
0
59
A思考の自動化とX 思考の行方 / Automation of A Thinking and the Future of X Thinking
ks91
PRO
0
44
Other Decks in Technology
See All in Technology
New Relicで実践する外形監視
aeonpeople
1
120
waitany と waitall を作った話
mrkn
0
110
「名前解決」から振り返るAmazon VPC
yuki_ink
0
320
SHIFTの課題と目指したい組織像 / 20240827 Rinto Ikenoue
shift_evolve
0
140
React Aria で実現する次世代のアクセシビリティ
ryo_manba
3
290
[RSJ24] Object Retrieval in Large-Scale Indoor Environments Using Dense Text with a Multi-Modal Large Language Model
keio_smilab
PRO
0
220
LLMに日本語テキストを学習させる意義
ksaito
13
3.4k
Envoy External AuthZとgRPC Extensionを利用した「頑張らない」Microservices認証認可基盤
andoshin11
0
140
標準ライブラリの奥深アップデートを掘り下げよう!
logica0419
2
390
すぐに始めるAWSコスト削減。短期でできる改善策と長期的な運用負荷軽減への取り組み方を解説
ncdc
1
120
RAGHack: Kickoff and RAG 101
pamelafox
0
200
[RSJ24] Task Success Prediction for Open-Vocabulary Manipulation Based on Multi-Level Aligned Representations
keio_smilab
PRO
0
220
Featured
See All Featured
Practical Orchestrator
shlominoach
185
10k
5 minutes of I Can Smell Your CMS
philhawksworth
201
19k
Testing 201, or: Great Expectations
jmmastey
35
6.9k
4 Signs Your Business is Dying
shpigford
179
21k
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
marcduiker
22
1.7k
Rebuilding a faster, lazier Slack
samanthasiow
78
8.5k
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
soudai
165
48k
Web development in the modern age
philhawksworth
204
10k
Making the Leap to Tech Lead
cromwellryan
128
8.8k
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
tammyeverts
42
2k
What's in a price? How to price your products and services
michaelherold
241
11k
Helping Users Find Their Own Way: Creating Modern Search Experiences
danielanewman
28
2.2k
Transcript
Hardening for cyber security — generated by Stable Diffusion XL
v1.0 2024 9-10 (WBS) 2024 9-10 — 2024-07-08 – p.1/29
https://speakerdeck.com/ks91/collections/cyber-security-2024-summer 2024 9-10 — 2024-07-08 – p.2/29
( ) 1 6 10 (1) • 2 6 10
(2) • 3 6 17 • 4 6 17 • 5 6 24 I ( ) • 6 6 24 I ( ) • 7 7 1 • 8 7 1 • 9 7 8 • 10 7 8 • 11 7 15 II ( ) 12 7 15 II ( ) 13 7 22 14 7 22 W-IOI / ( ) 2024 9-10 — 2024-07-08 – p.3/29
( 20 ) 1 • 2 • 3 • 4
(TCP/IP ) • 5 • 6 • 7 • 8 • 9 • 10 World Wide Web • 11 Web API • 12 • 13 git GitHub • 14 • SSH • (6/24 ) / (2 ) OK / 2024 9-10 — 2024-07-08 – p.4/29
( ) + I ( ) + 2024 9-10 —
2024-07-08 – p.5/29
7 6 2013 Winny P2P P2P 2024 9-10 — 2024-07-08
– p.6/29
(1) Winny 7 (2020) Winny WIDE ( ) 2024 9-10
— 2024-07-08 – p.7/29
+ + 2024 9-10 — 2024-07-08 – p.8/29
2024 9-10 — 2024-07-08 – p.9/29
4. (1) ( ) (2) 2024 7 4 ( )
23:59 JST Waseda Moodle (Q & A ) 2024 9-10 — 2024-07-08 – p.10/29
. . . . . . 12 9 (7/6( )
) ( ) ( ) National Treasure 2 / (zansin) / 2 / / ( ) / @Deep / ( . . . ) 4.0 ( Live Free or Die Hard) 2024 9-10 — 2024-07-08 – p.11/29
A tor john ⇒ Wireshark . . . ( (or
) ) LAN HTTPS VPN nmap . . . ( ) Hydra . . . sqlmap . . . SQL metasploit . . . nessus . . . . . . 2024 9-10 — 2024-07-08 – p.12/29
M ⇒ ( ) 2024 9-10 — 2024-07-08 – p.13/29
(1) : ( ) 3 (14 ) . . .
TV 2024 9-10 — 2024-07-08 – p.14/29
regreSSHion 2023 2024 9-10 — 2024-07-08 – p.15/29
regreSSHion CVE-2024-6387 (2024 7 1 ) ( X ← )
OpenSSH (<4.4p1, ≥8.5p1 <9.8p1) root CVE-2006-5051 2020 (regression) ^^; OK 2024 9-10 — 2024-07-08 – p.16/29
(2) IPA ( ) 10 2023 (2023) https://www.ipa.go.jp/security/10threats/10threats2023.html 1 2
3 4 5 6 ( ) 7 8 9 10 ( ) NEW! 2024 9-10 — 2024-07-08 – p.17/29
( bitcoin) ( ) ( ← ) ( ) ←
( ) ← ( ) DoS (Denial of Service; ) ( ) ← ( ) ← ↑ 2024 9-10 — 2024-07-08 – p.18/29
(3) (13) (2014) (warfare) 2024 9-10 — 2024-07-08 – p.19/29
(warfare) . . . . . . ⇒ ( )
2024 9-10 — 2024-07-08 – p.20/29
24 365 2024 9-10 — 2024-07-08 – p.21/29
. . . ( ) (sabotage) (espionage) (subversion) 3 .
. . 2024 9-10 — 2024-07-08 – p.22/29
– AI LLM( ) C&C 2024 9-10 — 2024-07-08 –
p.23/29
AI 2024 9-10 — 2024-07-08 – p.24/29
(2) : OvenAI OvenAI OvenAI 2024 9-10 — 2024-07-08 –
p.25/29
(3) : OvenAI OvenAI OvenAI 2024 9-10 — 2024-07-08 –
p.26/29
2024 9-10 — 2024-07-08 – p.27/29
5. (1) ( ) (2) I OvenAI CEO 2024 7
11 ( ) 23:59 JST Waseda Moodle (Q & A ) 2024 9-10 — 2024-07-08 – p.28/29
2024 9-10 — 2024-07-08 – p.29/29