Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
脅威モデリングにおける失敗とは
Search
Maakkie
March 19, 2025
1
300
脅威モデリングにおける失敗とは
2025/3/18 脅威モデリングナイト#7 発表資料
Maakkie
March 19, 2025
Tweet
Share
Featured
See All Featured
Adopting Sorbet at Scale
ufuk
76
9.3k
Code Reviewing Like a Champion
maltzj
522
40k
Principles of Awesome APIs and How to Build Them.
keavy
126
17k
CSS Pre-Processors: Stylus, Less & Sass
bermonpainter
356
30k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
chriscoyier
507
140k
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
eileencodes
135
33k
XXLCSS - How to scale CSS and keep your sanity
sugarenia
248
1.3M
Speed Design
sergeychernyshev
29
900
Being A Developer After 40
akosma
91
590k
Docker and Python
trallard
44
3.3k
Raft: Consensus for Rubyists
vanstee
137
6.9k
How To Stay Up To Date on Web Technology
chriscoyier
790
250k
Transcript
!.BBLLJF ڴҖϞσϦϯάʹ͓͚Δࣦഊͱ ڴҖϞσϦϯάφΠτJO5PLZP
ຊͷΞδΣϯμ ڴҖϞσϦϯάʹ͓͚Δࣦഊͱ ࣗݾհ ڴҖϞσϦϯά֓ཁ ڴҖϞσϦϯάͷཧܥ ڴҖϞσϦϯάʹ͓͚Δࣦഊͱ
w ࣦഊʹܨ͕Δཁૉ ·ͱΊ
ࣗݾհ w ηΩϡϦςΟϕϯμʔͰηΩϡϦςΟίϯαϧλϯτ w ސ٬ͷʮηΩϡϦςΟࠔͬͨʯΛղܾ͢Δ෦ॺ w 8FCܥ։ൃʴηΩϡϦςΟϕϯμʔ w झຯɿϨίʔυऩूɺΠεΩʔɾϫΠϯɺಡॻʢٕज़ॻɾ4'FUDʣ
ࣗݾհ w ηΩϡϦςΟϕϯμʔͰηΩϡϦςΟίϯαϧλϯτ w ސ٬ͷʮηΩϡϦςΟࠔͬͨʯΛղܾ͢Δ෦ॺ w μϯαʔ׆ಈʴ8FCܥ։ൃʴηΩϡϦςΟϕϯμʔ w झຯɿϨίʔυऩूɺΠεΩʔɾϫΠϯɺಡॻʢٕज़ॻɾ4'FUDʣ
ڴҖϞσϦϯάྺ w ڴҖϞσϦϯάϫʔΫγϣοϓJO5PLZPʢʣ w 5.$5PLZP.FFUVQY;"/4*/ʢʣ w 5ISFBU.PEFMJOH/JHIU4QFDJBM4FTTJPOʢʣ w ۀʹ͓͚Δઃܭੳ
ڴҖϞσϦϯά֓ཁ ڴҖϞσϦϯάରબఆ తɾείʔϓ໌֬Խ Ϟσϧߏங w %'%ʢ%BUB'MPX %JBHSBNʣ࡞
w ৴པڥքఆٛ w ڴҖੳϞσϧͷબఆ ڴҖϞσϦϯά࣮ࢪ w ڴҖΛϦετΞοϓ w ڴҖͷϦεΫධՁ w ڴҖʹର͢Δରࡦݕ౼ ʹର͢ΔৼΓฦΓɾϑΟ ʔυόοΫ w ্ख࣮͘ߦͰ͖͍͔ͯͨʁ w ࣍ճʹ͚ͯͷվળ
ڴҖϞσϦϯάʹ͓͚Δࣦഊͱʁ wࣦഊΛఆٛ͢ΔͨΊʹ·ͣతΛ໌֬Խ͢Δඞཁ wˠత͕ୡͰ͖ͳ͔ͬͨʹࣦഊͱఆٛՄೳ wڴҖϞσϦϯάͷతʁ wγεςϜʹର͢ΔڴҖͷಛఆɺηΩϡΞԽ wηΩϡϦςΟจԽͷৢ wνʔϜϏϧσΟϯά ˞తʹਖ਼ղͳ͘ɺ՝ɾഎܠʹΑͬͯҟͳΔ
ڴҖϞσϦϯάͷཧܥɿ॥ ڴҖϞσϦϯά ৼฦΓ ੳ ධՁ ରࡦ ࣮
ڴҖϞσϦϯάͷཧܥɿ॥ ਓࡐɾεΩϧ ͷ॥ ϓϩηεͷ ॥ ڴҖ ϞσϦϯά ܧଓతվળ ࣝͷ॥ ࢿ࢈ͷ॥
Ձͷ॥ w ࣝڞ༗ w ଟ༷ͳࢹ w ೳྗ։ൃ w ܧଓత࣮ࢪ w ϑΟʔυόοΫ w ϓϩηεվળ w ϏδωεՁ w ϦεΫݮ w ސ٬৴པ w ࢿ࢈࠶ར༻ w πʔϧਐԽ w ίʔυࢿ࢈ w φϨοδϕʔε w ڴҖใ w ϕεϓϥ ʢ΅͘ͷ͔Μ͕͍͖͑ͨ͞ΐ͏ͷʣڴҖϞσϦϯά
ڴҖϞσϦϯάʹ͓͚Δࣦഊ w ڴҖϞσϦϯάͷ݁Ռ͕໌จԽ͞Εͳ͍ɺಛఆͷνʔϜʹཹ·Δ w ৫શମͷφϨοδͱͳΒͳ͍ w ಉ͡ڴҖ͕ݟ͔ͭͬͯաڈͷڭ܇͕׆͔͞Εͳ͍ʢԿʮ࠶ൃݟʯ͢Δʣ w ڴҖಈϕετϓϥΫςΟεΛ৽ͨʹऔΓೖΕͳ͍ w
ڴҖϞσϦϯάޙʹڴҖϞσϧΛอଘͤͣɺকདྷతͳࢀরෆՄ ࣝ໘ ڴҖ ϞσϦϯά ܧଓతվળ ࣝͷ॥
ڴҖϞσϦϯάʹ͓͚Δࣦഊ w ಛఆͷʮηΩϡϦςΟઐՈʯͷҙݟʹϞσϦϯά͕ࠨӈ͞Εͯ͠·͏ w φϨοδҠసɺτϨʔχϯάෆʹΑΓڴҖϞσϦϯά͕Ͱ͖Δਓࡐ͕ҭͨͳ͍ w ։ൃνʔϜͱηΩϡϦςΟνʔϜͷڠྗෆͰޓ͍ͷྖҬͷཧղ͕ਂ·Βͳ͍ w ಉ࣭తͳνʔϜʹΑΔ׆ಈͰಛఆλΠϓͷڴҖʹͷΈϑΥʔΧε͞Εͯ͠·͏ ਓࡐɾεΩϧ໘
ਓࡐɾεΩϧ ͷ॥ ڴҖ ϞσϦϯά ܧଓతվળ
ڴҖϞσϦϯάʹ͓͚Δࣦഊ w ڴҖϞσϦϯάΛ௨ͯ͡ಛఆ͞ΕͨڴҖ͕ίʔυϕʔεʹө͞Εͳ͍ w ڴҖϞσϦϯάπʔϧʹґଘ͠ίϯςΩετཧղυϝΠϯࣝɺϏδωεՁʹجͮ͘அͷܽ w ڞ௨ͷηΩϡϦςΟύλʔϯ͕࠶ར༻͞Εͣɺॏෳͨ͠ରࡦͷ࣮ w ٕज़తෛ࠴ͷແࢹ
w ϨΨγʔγεςϜαʔυύʔςΟιϑτɺݟෆͷྖҬ͕ର͔Βআ֎͞Εଓ͚Δ πʔϧɾࢿ࢈໘ ڴҖ ϞσϦϯά ܧଓతվળ ࢿ࢈ͷ॥
ڴҖϞσϦϯάʹ͓͚Δࣦഊ w ࣮ࢪλΠϛϯάͷ w ઃܭྃޙϦϦʔεલʹڴҖϞσϦϯάΛߦ͍ɺରࡦ͕࣮࣭తʹࠔͳ߹ w ίϯϓϥཁ݅Λຬ͚ͨͩ͢ͷʮνΣοΫϘοΫεʯతͳ࣮ࢪͰɺ࣮࣭తͳՁΛੜ·ͳ ͍ w ڴҖϞσϧͷϑΟʔυόοΫɺվળ͕ߦΘΕͳ͍
w ࣮͞Εͨରࡦͷ༗ޮੑݕূ͕ߦΘΕͣڴҖϞσϧͷਫ਼্͕ͳ͍ w ׆ಈ͕ܧଓతʹߦΘΕͣɺಛఆ࣌ͷΈͷݶఆతͳ׆ಈʹཹ·Δ ϓϩηε໘ ϓϩηεͷ ॥ ڴҖ ϞσϦϯά ܧଓతվળ
ڴҖϞσϦϯάʹ͓͚Δࣦഊ w ڴҖϞσϦϯάͷՁ͕ܦӦͷ্Ґʹཧղ͞Εͳ͍ w ٕज़తϦεΫͱϏδωεϦεΫͷదͳ݁ͼ͖͕ͭͳ͘ɺ༏ઌॱҐΛݟޡΔ w ڴҖϞσϦϯά͕ʮίετʯͱͯ͠ͷΈೝࣝ͞ΕɺޮՌɾՁ͕ධՁ͞Εͳ͍ w ڴҖϞσϦϯάͷ݁Ռͱͯ͠ಋೖ͞Εͨରࡦ͕ސ٬Ձࢢ༏Ґੑʹ݁ͼ͔ͭͳ ͍
w ʮՁͷ॥ʯ͕ͳ͞Εͳ͍͜ͱʹΑͬͯͦͷଞશͯͷ॥ʹର͢ΔѱӨڹΛٴ ΅͢Մೳੑ Ձ໘ ڴҖ ϞσϦϯά ܧଓతվળ Ձͷ॥
ڴҖϞσϦϯάʹ͓͚Δࣦഊ w ʮखஈʯ͕ʮతʯͱͳͬͯ͠·͏ w త͕໌֬Խ͞Εͳ͍··ڴҖϞσϦϯάΛߦͳͬͯ͠·͏ w Ϟσϧߏஙʹ͓͚Δཧղෆɾ࿅ෆ w վળͷϧʔϓ͕ճΒͳ͍ ڴҖϞσϦϯάࣗମ
ڴҖϞσϦϯά ৼฦΓ ੳ ධՁ ରࡦ ࣮
·ͱΊ γεςϜηΩϡΞԽͱڴҖϞσϧվળͷೋॏཐટ γεςϜηΩϡΞԽ ڴҖϞσϧվળ
·ͱΊ γεςϜηΩϡΞԽͱڴҖϞσϧվળͷೋॏཐટ γεςϜηΩϡΞԽ ڴҖϞσϧվળ ͓͚֮͑ͯʂ ͜ͷυϦϧϞσϧɺ͜ͷӉڴҖʹ෩݀Λ։͚Δɻ ͦͷ݀ޙ͔Βଓ͘ऀͷಓͱͳΔɻ ʢڴҖʹʣΕ͍ͯͬͨऀͷئ͍ͱޙ͔Βଓ͘ऀͷرʂ ೋͭͷ͍Λೋॏཐટʹ৫ΓࠐΜͰʂ ໌ͱଓ͘ಓΛ۷Δʂ
ͦΕ͕ఱݩಥഁڴҖʂ ͦΕ͕άϨϯϥΨϯϞσϦϯάʂ ԶͷυϦϧϞσϦϯάʂఱ҆શΛ࡞ΔυϦϧϞσϦϯάͩʂʂ
͝ਗ਼ௌ͋Γ͕ͱ͏͍͟͝·ͨ͠ʂ