Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
セキュリティの基礎とインシデントレスポンス / Security Fundamentals a...
Search
Kenji Saito
PRO
June 15, 2024
Technology
0
74
セキュリティの基礎とインシデントレスポンス / Security Fundamentals and Incident Response
早稲田大学大学院経営管理研究科「サイバーセキュリティ」2024 夏の第3-4回で使用したスライドです。
Kenji Saito
PRO
June 15, 2024
Tweet
Share
More Decks by Kenji Saito
See All by Kenji Saito
ゼミ紹介 : 公共の利益のためのデジタルトランスフォーメーション / Zemi Introduction : Digital Transformation for Public Good
ks91
PRO
0
10
最新 DX 推進論 / Latest DX Promotion Theory
ks91
PRO
0
170
そのデジタル製品パスポートでどこへ行く? / Where Are You Going with That Digital Product Passport?
ks91
PRO
0
12
コバヤシマルテスト ─ 勝ち目のないゲームに抗いながら旅する心の旅路 / Kobayashi Maru Test - a mental journey of defiance against a game that cannot be won
ks91
PRO
0
44
セキュリティ戦略・発表と総括 / Security Strategies, Presentation and Conclusions
ks91
PRO
1
55
暗号資産の経済学・イントロダクション / Economics of Cryptocurrencies (Introduction)
ks91
PRO
0
50
AI とデジタルトランスフォーメーション / AI and Digital Transformation
ks91
PRO
0
33
インシデントレスポンス演習 II / Incident Response Exercise II
ks91
PRO
0
59
A思考の自動化とX 思考の行方 / Automation of A Thinking and the Future of X Thinking
ks91
PRO
0
44
Other Decks in Technology
See All in Technology
contenteditableと向き合う
kikuchikakeru
2
140
Azure Cosmos DB での時系列ログの運用と改善
sansantech
PRO
0
190
AWSを始めた頃に陥りがちなポイントをまとめてみた
oshanqq
1
1.7k
Oracle Database 23ai 新機能 #3 Oracle Globally Distributed Database(GDD)
oracle4engineer
PRO
1
160
実践ジオフェンス 効率的に開発するために
navitimejapan
PRO
2
130
エンジニアリングマネージャーが紐解く、事業視点から組織文化まで、包括的アプローチの探求 / READYFOR
9ma3r
13
2.2k
20分で分かるIAM全機能 (拡大版) / 20240903-jawsug-yokohama-iam
opelab
3
120
PlaywrightによるE2Eテスト入門 / Introduction to E2E Testing with Playwright
rhumie
3
910
Azure SQL Database Hyperscale HA レプリカの監視
sansantech
PRO
0
190
エンジニア向け会社紹介資料
caddi_eng
15
250k
Hyperledger Fabricの成長、成熟を振り返る / Looking back history of Hyperledger Fabric
gakumura
0
180
Discover Your Tailored Platform Strategy with Real-World Practice
hhiroshell
1
130
Featured
See All Featured
Designing on Purpose - Digital PM Summit 2013
jponch
113
6.8k
Build The Right Thing And Hit Your Dates
maggiecrowley
29
2.2k
Sharpening the Axe: The Primacy of Toolmaking
bcantrill
33
1.7k
Music & Morning Musume
bryan
46
6k
Building a Modern Day E-commerce SEO Strategy
aleyda
35
6.8k
Rebuilding a faster, lazier Slack
samanthasiow
78
8.5k
Building an army of robots
kneath
302
42k
A better future with KSS
kneath
235
17k
Infographics Made Easy
chrislema
239
18k
Faster Mobile Websites
deanohume
304
30k
How STYLIGHT went responsive
nonsquared
93
5.1k
Writing Fast Ruby
sferik
623
60k
Transcript
Hardening for cyber security — generated by Stable Diffusion XL
v1.0 2024 3-4 (WBS) 2024 3-4 — 2024-06-17 – p.1/34
https://speakerdeck.com/ks91/collections/cyber-security-2024-summer 2024 3-4 — 2024-06-17 – p.2/34
( ) 1 6 10 (1) • 2 6 10
(2) • 3 6 17 • 4 6 17 • 5 6 24 I ( ) 6 6 24 I ( ) 7 7 1 8 7 1 9 7 8 10 7 8 11 7 15 II ( ) 12 7 15 II ( ) 13 7 22 14 7 22 W-IOI / ( ) 2024 3-4 — 2024-06-17 – p.3/34
( 20 ) 1 • 2 • 3 • 4
(TCP/IP ) • 5 • 6 • 7 • 8 • 9 • 10 World Wide Web • 11 Web API • 12 • 13 git GitHub • 14 • (6/24 ) / (2 ) OK / 2024 3-4 — 2024-06-17 – p.4/34
( ) ( ) 2024 3-4 — 2024-06-17 – p.5/34
+ — ( (1), (2)) + ( (3)) 2024 3-4
— 2024-06-17 – p.6/34
2024 3-4 — 2024-06-17 – p.7/34
1. (1) (2) 2024 6 13 ( ) 23:59 JST
Waseda Moodle (Q & A ) 2024 3-4 — 2024-06-17 – p.8/34
. . . . . . 13 9 (14 (
) ) ( ) 2024 3-4 — 2024-06-17 – p.9/34
A ⇒ ( ) ⇒ ( ) 2024 3-4 —
2024-06-17 – p.10/34
I ( ) ⇒ . . . . . .
( ) ( : ) . . . ( : ) ( ) (anachronism) ^^; 2024 3-4 — 2024-06-17 – p.11/34
L ⇒ IPA NISC NICT 7.5 2024 3-4 — 2024-06-17
– p.12/34
N 5 ⇒ https://www.datacenterdynamics.com/en/analysis/how-to-break-into-a-data-center-pen-testers-reveal-their-secrets/ ( ) 2024 3-4 — 2024-06-17
– p.13/34
M ⇒ . . . 2024 3-4 — 2024-06-17 –
p.14/34
Y = = ⇒ 2024 3-4 — 2024-06-17 – p.15/34
“ ” 3 ( ) ( ) ( ) 2024
3-4 — 2024-06-17 – p.16/34
( ) : Wi-Fi etc. (Confidentiality) (Integrity) (Availability) 2024 3-4
— 2024-06-17 – p.17/34
( +α) : . . . ( ) . .
. ( . . . ) ( ( ^^;)) . . . . . . ( ) × → 2024 3-4 — 2024-06-17 – p.18/34
(Gold Standard of Security) (Authentication) ( ) ID / ,
, , , , , etc. (Authorization) ( ) , , sudoers, etc. (Audit) , , , etc. 2024 3-4 — 2024-06-17 – p.19/34
(1) : ( ) (a) USB (b) URL X 1.
2. ( ) 3. 2024 3-4 — 2024-06-17 – p.20/34
(2) : PPAP PPAP Password ( ) Passowrd ( )
A ( ) Protocol ( ) PPAP PPAP 2024 3-4 — 2024-06-17 – p.21/34
NICT CYDER https://cyder.nict.go.jp (3) : 2024 3-4 — 2024-06-17 –
p.22/34
Πϯγσϯτͷ༧ஹͳͲ ॳಈରԠ ෮چાஔ ఆରԠ ࠶ൃࢭࡦ ߃ٱରԠ ݕ౼ ࣄޙରԠ τϦΞʔδ ใ
ࠂ ɾ ެ ද Π ϯ γ σ ϯ τ ϋ ϯ υ Ϧ ϯ ά Π ϯ γ σ ϯ τ Ϩ ε ϙ ϯ ε ސ ٬ ɾ ެ ڞ ݕɾड ରԠํݕ౼ 1PJOUPG$POUBDU ূڌอશ ෧͡ࠐΊ ࠜઈ , , DoS , , etc. 2024 3-4 — 2024-06-17 – p.23/34
Point of Contact (PoC) 1 2024 3-4 — 2024-06-17 –
p.24/34
2024 3-4 — 2024-06-17 – p.25/34
HDD ( ) 2024 3-4 — 2024-06-17 – p.26/34
2024 3-4 — 2024-06-17 – p.27/34
( ) 2024 3-4 — 2024-06-17 – p.28/34
( ) JPCERT/CC, NISC, ( ) ( ) 2024 3-4
— 2024-06-17 – p.29/34
(1 ) 2024 3-4 — 2024-06-17 – p.30/34
(3) : 70 1,000 X 3 1. 2. 3. 3
2024 3-4 — 2024-06-17 – p.31/34
2024 3-4 — 2024-06-17 – p.32/34
2. OK (1) (2) 2024 6 20 ( ) 23:59
JST Waseda Moodle (Q & A ) 2024 3-4 — 2024-06-17 – p.33/34
I 2024 3-4 — 2024-06-17 – p.34/34