Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
既存のWebアプリをセキュアにするためにやったこと / Student-LT-WebSec
Search
Tomoyuki KOYAMA
May 05, 2018
Technology
0
180
既存のWebアプリをセキュアにするためにやったこと / Student-LT-WebSec
学生LT#11, @DMM
Tomoyuki KOYAMA
May 05, 2018
Tweet
Share
More Decks by Tomoyuki KOYAMA
See All by Tomoyuki KOYAMA
Reading HTTP Client Hints
tomoyk
0
85
Log message with JSON item count for root cause analysis in microservices
tomoyk
1
200
Distributed Log Search Based on Time Series Access and Service Relations
tomoyk
0
320
Webアプリを動かすまでのインフラ構築 / infra-build-for-web-app
tomoyk
0
420
コンピュータが大好きな私が大学院進学した理由 / Why I chose graduate school
tomoyk
2
910
この先生きのこるための学び方 / how-to-learn-tech
tomoyk
1
390
佐川急便のフィッシングサイトを調べてみた / Analysis of sagawa fishing site
tomoyk
1
180
パケットを覗いてみよう / Packet workshop for beginners
tomoyk
0
340
XSSの入力値を調べてみた / searching xss insertion value
tomoyk
3
1.5k
Other Decks in Technology
See All in Technology
ヒューリスティック評価を用いたゲームQA実践事例
gree_tech
PRO
0
360
攻撃と防御で実践するプロダクトセキュリティ演習~導入パート~
recruitengineers
PRO
3
1.6k
「AI2027」を紐解く ― AGI・ASI・シンギュラリティ
masayamoriofficial
0
150
モバイルアプリ研修
recruitengineers
PRO
5
1.6k
Grafana Meetup Japan Vol. 6
kaedemalu
1
180
トヨタ生産方式(TPS)入門
recruitengineers
PRO
5
1.3k
ヘブンバーンズレッドにおける、世界観を活かしたミニゲーム企画の作り方
gree_tech
PRO
0
360
Bye-Bye Query Spaghetti: Write Queries You'll Actually Understand Using Pipelined SQL Syntax
tobiaslampertlotum
0
110
Jaws-ug名古屋_LT資料_20250829
azoo2024
3
190
プロダクトの成長に合わせたアーキテクチャの段階的進化と成長痛、そして、ユニットエコノミクスの最適化
kakehashi
PRO
1
110
『FailNet~やらかし共有SNS~』エレベーターピッチ
yokomachi
1
190
生成AI時代のデータ基盤
shibuiwilliam
1
1.1k
Featured
See All Featured
Why Our Code Smells
bkeepers
PRO
339
57k
Done Done
chrislema
185
16k
[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails
eileencodes
36
2.5k
The Psychology of Web Performance [Beyond Tellerrand 2023]
tammyeverts
49
3k
Performance Is Good for Brains [We Love Speed 2024]
tammyeverts
11
1.1k
VelocityConf: Rendering Performance Case Studies
addyosmani
332
24k
Documentation Writing (for coders)
carmenintech
73
5k
How to Ace a Technical Interview
jacobian
279
23k
KATA
mclloyd
32
14k
Optimizing for Happiness
mojombo
379
70k
CSS Pre-Processors: Stylus, Less & Sass
bermonpainter
358
30k
Embracing the Ebb and Flow
colly
87
4.8k
Transcript
طଘͷ8FCΞϓϦΛ ηΩϡΞʹ͢ΔͨΊʹ ͬͨ͜ͱ 5PNPZVLJ,0:"." ֶੜ-5
ࣗݾհ w /BNFίϠϚτϞϢΩ w (SBEFཧܥେֶ# w 5XJUUFS!UNZL@LZN w #MPHIUUQTCMPHLPZBNBNF w
5BHT/FUXPSL8FC4FSWFS4FDVSJUZ
ҳൠͷޡՈఉ ϠϑΦΫͰதݹͷωοτϫʔΫػثΛߪೖ
ۙگ w ٕज़ॻయʹߦͬͨ w ొηΩεϖΛड͚ͨ w IBDLʹམͪͨ w ֶੜ-5ʹؒʹ߹ͬͨɹˡ/&8
8FCηΩϡϦςΟ ͷجૅ
944 w ΫϩεɾαΠτɾεΫϦϓςΟϯά w )5.-ʹεΫϦϓτ͕ૠೖ͞ΕΔ͜ͱͰɺ ҙͷॲཧ͕࣮ߦ͞ΕΔ w $8&*NQSPQFS/FVUSBMJ[BUJPOPG*OQVU %VSJOH8FC1BHF(FOFSBUJPO $SPTTTJUF
4DSJQUJOH
944 EPDUZQFIUNM NFUBDIBSTFUVUG UJUMF9444BNQMFUJUMF I QIQFDIP@(&5<NPEF> I EPDUZQFIUNM NFUBDIBSTFUVUG UJUMF9444BNQMFUJUMF
IIFMMPI ม@(&5<bNPEF`>ʹIFMMP͕ઃఆ͞Ε͍ͯΔͱʜ 4BGF
944 EPDUZQFIUNM NFUBDIBSTFUVUG UJUMF9444BNQMFUJUMF I QIQFDIP@(&5<NPEF> I EPDUZQFIUNM NFUBDIBSTFUVUG UJUMF9444BNQMFUJUMF
ITDSJQUBMFSU TDSJQUI ม@(&5<bNPEF`>ʹTDSJQUBMFSU TDSJQU͕ ઃఆ͞Ε͍ͯΔͱʜ VO4BGF
'SBNF8PSLʹཔΔͱʜ w 'SBNF8PSL͕ࣗಈͰΤεέʔϓͯ͘͠ΕΔ w ηΩϡϦςΟΛҙࣝͤͣʹ։ൃՄ w 3VCZPO3BJMT 'MBTL $BLF1)1 FUDʜ
طଘͷ8FCΞϓϦΛ ηΩϡΞʹ͢ΔͨΊʹ ͬͨ͜ͱ
ܦҢ w ͱ͋Δ8FCΞϓϦ ൿͷιʔε Λಈ͔͢ґཔΛ ड͚Δ w ѻ͏σʔλݸਓใ w ηΩϡϦςΟΛݟͯ͠Έͨ
ͬͨ͜ͱ
44-Խ w )551ˠ)5514 w 44-ূ໌ॻΛ-FU`T&ODSZQUͰऔಘ w ैདྷݸਓใΛฏจͰΓऔΓ
͓͠·͍
ͬͨ͜ͱ w ॳڃ w 44-Խ w தڃ w ্ڃ
ͬͨ͜ͱதڃ w $PPLJFIUUQPOMZଐੑ TFDVSFଐੑΛ༩ w ϨεϙϯεϔομҎԼΛ༩ w 99441SPUFDUJPONPEFCMPDL w 9'SBNF0QUJPOT4".&03*(*/
w 9$POUFOU5ZQF0QUJPOTOPTOJ⒎
$PPLJFIUUQPOMZଐੑ TFDVSFଐੑΛ༩
99441SPUFDUJPO NPEFCMPDL w 8FCϒϥβͷ944ϑΟϧλʔΛڧ੍0/ w 944Λݕ͢ΔͱϒϩοΫ͢Δ IUUQFYBNQMFDPNTFBSDI TDSJQUBMFSU TDSJQU
9'SBNF0QUJPOT 9$POUFOU5ZQF0QUJPOT w 9'SBNF0QUJPOT4".&03*(*/ w ΫϦοΫɾδϟοΩϯάରࡦ JGSBNFͰͷผαΠτ͔ΒຒΊࠐΈΛېࢭ w 9$POUFOU5ZQF0QUJPOTOPTOJ⒎
w FͷΞΠίϯͳϒϥβͰͷ944Λࢭ
ͬͨ͜ͱ্ڃ w ηογϣϯɾλΠϜΞτ w ϨεϙϯεϔομҎԼΛ༩ w $BDIF$POUSPMQSJWBUF OPTUPSF w 4USJDU5SBOTQPSU4FDVSJUZNBY
BHFJODMVEF4VCEPNBJOT
ηογϣϯɾλΠϜΞτ $PPLJFͷ&YQJSFଐੑͰ༗ޮظݶΛઃఆ
$BDIF$POUSPM QSJWBUF OPTUPSF w ϚΠϖʔδ ݸਓใ ͳͲΛ1SPYZ$%/ͰΩϟο γϡͰอ࣋͠ͳ͍ w ࢀߟʮϝϧΧϦɹݸਓใྲྀग़ʯ
4USJDU5SBOTQPSU4FDVSJUZNBY BHFJODMVEF4VCEPNBJOT w )454 )5514USJDU5SBOTQPSU4FDVSJUZ w IUUQˠIUUQTஔ͖͑ͯϦΫΤετΛૹ৴ w <T><EBZ>
·ͱΊ w 8FCΞϓϦΛެ։͢Δͱ͖44-Խ͠Α͏ w $PPLJFϨεϙϯεɾϔομʹҙ͠Α͏ w ແঈεΩϟφͷ08"41;"1Φεεϝ
݁Ռ
Γ͕͍(&5 ใु;&30
ࡉ͔͍͜ͱ࠙ձͰ ั·͑ͯฉ͍ͯω 5IBOLT