Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
既存のWebアプリをセキュアにするためにやったこと / Student-LT-WebSec
Search
Tomoyuki KOYAMA
May 05, 2018
Technology
0
170
既存のWebアプリをセキュアにするためにやったこと / Student-LT-WebSec
学生LT#11, @DMM
Tomoyuki KOYAMA
May 05, 2018
Tweet
Share
More Decks by Tomoyuki KOYAMA
See All by Tomoyuki KOYAMA
Reading HTTP Client Hints
tomoyk
0
71
Log message with JSON item count for root cause analysis in microservices
tomoyk
0
180
Distributed Log Search Based on Time Series Access and Service Relations
tomoyk
0
300
Webアプリを動かすまでのインフラ構築 / infra-build-for-web-app
tomoyk
0
390
コンピュータが大好きな私が大学院進学した理由 / Why I chose graduate school
tomoyk
2
850
この先生きのこるための学び方 / how-to-learn-tech
tomoyk
1
360
佐川急便のフィッシングサイトを調べてみた / Analysis of sagawa fishing site
tomoyk
1
160
パケットを覗いてみよう / Packet workshop for beginners
tomoyk
0
310
XSSの入力値を調べてみた / searching xss insertion value
tomoyk
3
1.4k
Other Decks in Technology
See All in Technology
ワールドカフェI /チューターを改良する / World Café I and Improving the Tutors
ks91
PRO
0
120
SREからゼロイチプロダクト開発へ ー越境する打席の立ち方と期待への応え方ー / Product Engineering Night #8
itkq
2
810
AWSのマルチアカウント管理 ベストプラクティス最新版 2025 / Multi-Account management on AWS best practice 2025
ohmura
4
290
AWS全冠芸人が見た世界 ~資格取得より大切なこと~
masakiokuda
5
6k
AI AgentOps LT大会(2025/04/16) Algomatic伊藤発表資料
kosukeito
0
140
DETR手法の変遷と最新動向(CVPR2025)
tenten0727
2
1.4k
はじめてのSDET / My first challenge as a SDET
bun913
1
250
プロダクト開発におけるAI時代の開発生産性
shnjtk
2
240
PicoRabbit: a Tiny Presentation Device Powered by Ruby
harukasan
PRO
2
210
コスト最適重視でAurora PostgreSQLのログ分析基盤を作ってみた #jawsug_tokyo
non97
0
110
更新系と状態
uhyo
7
1.5k
Porting PicoRuby to Another Microcontroller: ESP32
yuuu
4
410
Featured
See All Featured
VelocityConf: Rendering Performance Case Studies
addyosmani
328
24k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
danielanewman
227
22k
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
rmw
34
2.9k
No one is an island. Learnings from fostering a developers community.
thoeni
21
3.2k
The Cost Of JavaScript in 2023
addyosmani
49
7.7k
Learning to Love Humans: Emotional Interface Design
aarron
273
40k
Unsuck your backbone
ammeep
670
57k
Large-scale JavaScript Application Architecture
addyosmani
512
110k
Navigating Team Friction
lara
184
15k
Facilitating Awesome Meetings
lara
54
6.3k
jQuery: Nuts, Bolts and Bling
dougneiner
63
7.7k
How STYLIGHT went responsive
nonsquared
99
5.5k
Transcript
طଘͷ8FCΞϓϦΛ ηΩϡΞʹ͢ΔͨΊʹ ͬͨ͜ͱ 5PNPZVLJ,0:"." ֶੜ-5
ࣗݾհ w /BNFίϠϚτϞϢΩ w (SBEFཧܥେֶ# w 5XJUUFS!UNZL@LZN w #MPHIUUQTCMPHLPZBNBNF w
5BHT/FUXPSL8FC4FSWFS4FDVSJUZ
ҳൠͷޡՈఉ ϠϑΦΫͰதݹͷωοτϫʔΫػثΛߪೖ
ۙگ w ٕज़ॻయʹߦͬͨ w ొηΩεϖΛड͚ͨ w IBDLʹམͪͨ w ֶੜ-5ʹؒʹ߹ͬͨɹˡ/&8
8FCηΩϡϦςΟ ͷجૅ
944 w ΫϩεɾαΠτɾεΫϦϓςΟϯά w )5.-ʹεΫϦϓτ͕ૠೖ͞ΕΔ͜ͱͰɺ ҙͷॲཧ͕࣮ߦ͞ΕΔ w $8&*NQSPQFS/FVUSBMJ[BUJPOPG*OQVU %VSJOH8FC1BHF(FOFSBUJPO $SPTTTJUF
4DSJQUJOH
944 EPDUZQFIUNM NFUBDIBSTFUVUG UJUMF9444BNQMFUJUMF I QIQFDIP@(&5<NPEF> I EPDUZQFIUNM NFUBDIBSTFUVUG UJUMF9444BNQMFUJUMF
IIFMMPI ม@(&5<bNPEF`>ʹIFMMP͕ઃఆ͞Ε͍ͯΔͱʜ 4BGF
944 EPDUZQFIUNM NFUBDIBSTFUVUG UJUMF9444BNQMFUJUMF I QIQFDIP@(&5<NPEF> I EPDUZQFIUNM NFUBDIBSTFUVUG UJUMF9444BNQMFUJUMF
ITDSJQUBMFSU TDSJQUI ม@(&5<bNPEF`>ʹTDSJQUBMFSU TDSJQU͕ ઃఆ͞Ε͍ͯΔͱʜ VO4BGF
'SBNF8PSLʹཔΔͱʜ w 'SBNF8PSL͕ࣗಈͰΤεέʔϓͯ͘͠ΕΔ w ηΩϡϦςΟΛҙࣝͤͣʹ։ൃՄ w 3VCZPO3BJMT 'MBTL $BLF1)1 FUDʜ
طଘͷ8FCΞϓϦΛ ηΩϡΞʹ͢ΔͨΊʹ ͬͨ͜ͱ
ܦҢ w ͱ͋Δ8FCΞϓϦ ൿͷιʔε Λಈ͔͢ґཔΛ ड͚Δ w ѻ͏σʔλݸਓใ w ηΩϡϦςΟΛݟͯ͠Έͨ
ͬͨ͜ͱ
44-Խ w )551ˠ)5514 w 44-ূ໌ॻΛ-FU`T&ODSZQUͰऔಘ w ैདྷݸਓใΛฏจͰΓऔΓ
͓͠·͍
ͬͨ͜ͱ w ॳڃ w 44-Խ w தڃ w ্ڃ
ͬͨ͜ͱதڃ w $PPLJFIUUQPOMZଐੑ TFDVSFଐੑΛ༩ w ϨεϙϯεϔομҎԼΛ༩ w 99441SPUFDUJPONPEFCMPDL w 9'SBNF0QUJPOT4".&03*(*/
w 9$POUFOU5ZQF0QUJPOTOPTOJ⒎
$PPLJFIUUQPOMZଐੑ TFDVSFଐੑΛ༩
99441SPUFDUJPO NPEFCMPDL w 8FCϒϥβͷ944ϑΟϧλʔΛڧ੍0/ w 944Λݕ͢ΔͱϒϩοΫ͢Δ IUUQFYBNQMFDPNTFBSDI TDSJQUBMFSU TDSJQU
9'SBNF0QUJPOT 9$POUFOU5ZQF0QUJPOT w 9'SBNF0QUJPOT4".&03*(*/ w ΫϦοΫɾδϟοΩϯάରࡦ JGSBNFͰͷผαΠτ͔ΒຒΊࠐΈΛېࢭ w 9$POUFOU5ZQF0QUJPOTOPTOJ⒎
w FͷΞΠίϯͳϒϥβͰͷ944Λࢭ
ͬͨ͜ͱ্ڃ w ηογϣϯɾλΠϜΞτ w ϨεϙϯεϔομҎԼΛ༩ w $BDIF$POUSPMQSJWBUF OPTUPSF w 4USJDU5SBOTQPSU4FDVSJUZNBY
BHFJODMVEF4VCEPNBJOT
ηογϣϯɾλΠϜΞτ $PPLJFͷ&YQJSFଐੑͰ༗ޮظݶΛઃఆ
$BDIF$POUSPM QSJWBUF OPTUPSF w ϚΠϖʔδ ݸਓใ ͳͲΛ1SPYZ$%/ͰΩϟο γϡͰอ࣋͠ͳ͍ w ࢀߟʮϝϧΧϦɹݸਓใྲྀग़ʯ
4USJDU5SBOTQPSU4FDVSJUZNBY BHFJODMVEF4VCEPNBJOT w )454 )5514USJDU5SBOTQPSU4FDVSJUZ w IUUQˠIUUQTஔ͖͑ͯϦΫΤετΛૹ৴ w <T><EBZ>
·ͱΊ w 8FCΞϓϦΛެ։͢Δͱ͖44-Խ͠Α͏ w $PPLJFϨεϙϯεɾϔομʹҙ͠Α͏ w ແঈεΩϟφͷ08"41;"1Φεεϝ
݁Ռ
Γ͕͍(&5 ใु;&30
ࡉ͔͍͜ͱ࠙ձͰ ั·͑ͯฉ͍ͯω 5IBOLT