Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Amazon inspector で自動セキュリティ診断 / Automatic secur...

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Ryo Shibayama Ryo Shibayama
November 20, 2016
Technology
82
0

Amazon inspector で自動セキュリティ診断 / Automatic security diagnostics with Amazon inspector

Avatar for Ryo Shibayama

Ryo Shibayama

November 20, 2016

More Decks by Ryo Shibayama

See All by Ryo Shibayama
技術広報の集い #3 Lightning Talk - LayerX
Avatar for Ryo Shibayama serima
0
430
採用は全員で | Chuo TECH #1
Avatar for Ryo Shibayama serima
4
1.5k
高専 5 年時に 7 泊 8 日の合宿型ビジコンに参加したら人生が変わった
Avatar for Ryo Shibayama serima
0
440
カジュアル面談を通して “自社”のことを知る
Avatar for Ryo Shibayama serima
0
270
倒れても進捗 / Progress even if I fall
Avatar for Ryo Shibayama serima
1
870
CircleCI 導入への入門 / Introduction to CircleCI
Avatar for Ryo Shibayama serima
0
130
GameWithを支えるインフラ基盤 - スケールイン・アウト戦略編 / GameWith infrastructure - Scale in and out strategy
Avatar for Ryo Shibayama serima
0
94
エンジニア採用と PHP / Engineer Recruitment and PHP
Avatar for Ryo Shibayama serima
0
120
できることから始める OSS Contribution / Start OSS Contribution With What You Know
Avatar for Ryo Shibayama serima
1
260

Other Decks in Technology

See All in Technology
Agent の「自由」と「安全」〜未来に向けて今できること〜
Avatar for katayan katayan
0
250
変化の激しい時代をゴキゲンに生き抜くために 〜ストレスマネジメントのススメ〜
Avatar for KAKEHASHI kakehashi
PRO
4
830
20260428_Product Management Summit_tadokoroyoshiro
Avatar for tadokoro_yoshiro tadokoro_yoshiro
15
18k
（きっとたぶん）人材育成や教育のような何かの話
Avatar for Takanori Sejima sejima
0
450
M5Stack CoreS3とZephyr(RTOS)で Edge AIっぽいことしてみた
Avatar for misoji engineer iotengineer22
0
420
Building Production-Ready Agents Microsoft Agent Framework
Avatar for Mert Metin _mertmetin
0
140
FessのAI検索モード：検索システムとLLMへの取り組み
Avatar for Shinsuke Sugaya marevol
0
220
[Oracle TechNight#99] 生成AI時代のAI/ML入門 ~ AIとオラクルデータベースの関係 (前半)
Avatar for oracle4engineer oracle4engineer
PRO
2
210
巨大プラットフォームを進化させる「第3のROI」
Avatar for Recruit recruitengineers
PRO
2
2.3k
ボトムアップの改善の火を灯し続けろ！〜支援現場で学んだ、消えないための3つの打ち手〜 / 20260509 Kazuki Mori
Avatar for SHIFT EVOLVE shift_evolve
PRO
2
400
もっとコンテンツをよく構造化して理解したいので、LLM 時代こそ Taxonomy の設計品質に目を向けたい〜！
Avatar for MasatoMasaMasa morinota
0
160
AI와 협업하는 조직으로의 여정
Avatar for Arawn Park arawn
0
580

Featured

See All Featured
Breaking role norms: Why Content Design is so much more than writing copy - Taylor Woolridge
Avatar for UX Y'all uxyall
0
270
Leading Effective Engineering Teams in the AI Era
Avatar for Addy Osmani addyosmani
9
1.9k
Designing for Timeless Needs
Avatar for Cassini Nazir cassininazir
0
210
Designing for Performance
Avatar for Lara Hogan lara
611
70k
Navigating the Design Leadership Dip - Product Design Week Design Leaders+ Conference 2024
Avatar for Andy Polaine apolaine
0
300
KATA
Avatar for Megan Lloyd mclloyd
PRO
35
15k
Fight the Zombie Pattern Library - RWD Summit 2016
Avatar for Marcelo Somers marcelosomers
234
17k
The Limits of Empathy - UXLibs8
Avatar for Cassini Nazir cassininazir
1
320
Agile Actions for Facilitating Distributed Teams - ADO2019
Avatar for Mark Kilby mkilby
0
180
How to Ace a Technical Interview
Avatar for Jacob Kaplan-Moss jacobian
281
24k
Measuring Dark Social's Impact On Conversion and Attribution
Avatar for Stephen Akadiri stephenakadiri
2
190
Exploring the relationship between traditional SERPs and Gen AI search
Avatar for Ray Grieselhuber raygrieselhuber
PRO
2
3.9k

Transcript

  1. Amazon Inspector Ͱ ࣗಈηΩϡϦςΟ਍அ גࣜձࣾβούϥε @serima / ࣲࢁ ྮ

  2. ࣗݾ঺հ • ىۀˠ·͙·͙ˠάϦʔˠβούϥε • βούϥεೖࣾ 1 ೥ܦͬͨ • αʔόαΠυΤϯδχΞ •

    Πϯϑϥ΋΍͍ͬͯ·͢

  3. Rint

  4. AWS ࢖ͬͯ·͢ • βούϥεͰ͸ɺҰ෦αʔϏεͰ AWS Λར༻ • EC2/ELB/Route 53/S3/RDS/ElastiCache ౳

    • ελϯμʔυͳߏ੒

  5. ੬ऑੑ ಡΊͳ͍

  6. ੬ऑੑ • γεςϜͷ҆શ্ͷܽؕ • ηΩϡϦςΟϗʔϧ • ์͓ͬͯ͘ͱɺ͜ΕΛಥ͔Εͯඃ֐Λड͚Δ Մೳੑ͕͋Δ

  7. ຖिͷΑ͏ʹݟ͔ͭΔ੬ऑੑ

  8. ৘ใݯ • JPCERT • IPA • Wordpress ެࣜαΠτ • PHP

    ެࣜαΠτ • ଞʹ΋͍Ζ͍Ζ…
  9. None

  10. CVE • Common Vulnerabilities and Exposures • ڞ௨੬ऑੑࣝผࢠ • ถࠃͷMITRE͕ࣾఏڙ͍ͯ͠Δ੬ऑੑ৘ใ

    σʔλϕʔε • CVE-ID ͸ҰҙʹৼΒΕɺੈքڞ௨

  11. ηΩϡϦςΟνΣοΫɺ ͯ͠·͔͢ʁ

  12. Amazon Inspector • 2016೥5݄ʹҰൠར༻։࢝ • EC2 Πϯελϯεͷ੬ऑੑΛݕ஌ͯ͘͠ΕΔ αʔϏε

  13. None
  14. None

  15. ԿͷνΣοΫ͕Ͱ͖Δͷ͔ • Common Vulnerabilities and Exposures • CIS Operating System

    Security Configuration Benchmarks • Security Best Practices • Runtime Behavior Analysis

  16. खॱ • Inspector ༻ͷϩʔϧΛ࡞੒͢Δ • ର৅ͱ͢Δ EC2 ΠϯελϯεʹλάΛઃఆ • σʔϞϯΛΠϯετʔϧ

    • ධՁςϯϓϨʔτͷ࡞੒ • Ͳͷλά͕͍ͭͨΠϯελϯεʹ͍࣮ͭͯߦ͢Δͷ͔ • ԿͷηΩϡϦςΟνΣοΫΛߦ͏ͷ͔ • ࣮ߦ
  17. None

  18. $ curl -O https:// d1wk0tztpsntt1.cloudfront. net/linux/latest/install $ sudo bash install

  19. None

  20. ࢼݧ༻ʹ OpenSSL ͷ όʔδϣϯ͕গ͠ݹ͍ ΠϯελϯεΛ༻ҙ

  21. None

  22. ݁Ռ

  23. ͦΕͧΕʹ͍ͭͯৄࡉઆ໌ͱରॲ๏͕ࢀরͰ͖Δ

  24. Ϧϕϯδ ͱΓ͋͑ͣॏཁ౓ High ͷ΋ͷ͸ͳ͘ͳͬͨ

  25. ֦͕Γͱͯ͠͸ • Amazon SNS ରԠ͍ͯ͠ΔͷͰɺ׬ྃ࣌ʹ Slack ͳͲʹ௨஌ • ΋ͪΖΜ SDK

    ΋ެ։͞Ε͍ͯΔͷͰɺఆظత ʹࣗಈ࣮ߦͤ͞Δ͜ͱ΋Մೳ
 ʢࠓͷͱ͜Ζίϯιʔϧ͔ΒͰ͖Δػೳ͸ͳ ͛͞ʣ

  26. ҆৺ɾ҆શͳ։ൃΛ • ͱ͸͍͑ɺ͜Ε͚ͩͰ͸ෆे෼ • ੬ऑੑʹରͯ͠ɺҰఆͷอݥΛ͔͚Δ • χϡʔεΛνΣοΫͯ͠ɺద੾ͳରԠΛʂ