[B! CISSP] misomicoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

misomico id:misomico

CISSPã«é–¢ã™ã‚‹misomicoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (15)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

éšŽå±¤åž‹ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ï¼ˆãƒ¢ãƒ‡ãƒ«ï¼‰ã¨ã¯ï¼ŸåŸºæœ¬æ§‹é€ ã¨ä½¿ç”¨ä¾‹ | ã‚¢ãƒŠãƒªãƒ†ã‚£ã‚¯ã‚¹æ²–ç¸„â”‚DataAnalytics
ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã®è¨è¨ˆã¯ã€æƒ…å ±ã®æ•´ç†ã¨ã‚¢ã‚¯ã‚»ã‚¹æ€§ã‚’æœ€é©åŒ–ã™ã‚‹ãŸã‚ã®é‡è¦ãªè¦ç´ ã§ã™ã€‚ éšŽå±¤åž‹ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãƒ¢ãƒ‡ãƒ«ã¯ã€ãã®åã®é€šã‚Šã€ãƒ‡ãƒ¼ã‚¿ã‚’éšŽå±¤æ§‹é€ ã§è¡¨ç¾ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ã“ã®è¨˜äº‹ã§ã¯ã€éšŽå±¤åž‹ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã®å®šç¾©ã€åŸºæœ¬æ§‹é€ ã€ä¸»ãªç”¨é€”ã‚„ãƒ¡ãƒªãƒƒãƒˆã‚’è§£èª¬ã—ã¾ã™ã€‚ã¾ãŸã€å…·ä½“çš„ãªä½¿ç”¨ä¾‹ã¨ã—ã¦ãƒ•ã‚¡ã‚¤ãƒ«ã‚·ã‚¹ãƒ†ãƒ ã‚„éƒ¨å“ãƒªã‚¹ãƒˆï¼ˆBOM: Bill of Materialsï¼‰ã«ã¤ã„ã¦ã‚‚ç´¹ä»‹ã—ã¾ã™ã€‚ éšŽå±¤åž‹ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã®èƒŒæ™¯ã¨æ´å² éšŽå±¤åž‹ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã®èµ·æºã¯ã€1960å¹´ä»£ã«IBMãŒé–‹ç™ºã—ãŸã€Œæƒ…å ±ç®¡ç†ã‚·ã‚¹ãƒ†ãƒ ï¼ˆIMSï¼‰ã€ã«ã¾ã§ã•ã‹ã®ã¼ã‚Šã¾ã™ã€‚ å½“æ™‚ã®ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚·ã‚¹ãƒ†ãƒ ã¯ã€ãƒ‡ãƒ¼ã‚¿ã®å‡¦ç†èƒ½åŠ›ãŒç¾åœ¨ã¨æ¯”ã¹ã¦é™ã‚‰ã‚Œã¦ã„ãŸãŸã‚ã€ãƒ‡ãƒ¼ã‚¿ã®ç®¡ç†ã¨æ¤œç´¢ã‚’æœ€é©åŒ–ã™ã‚‹ãŸã‚ã«éšŽå±¤æ§‹é€ ãŒæŽ¡ç”¨ã•ã‚Œã¾ã—ãŸã€‚ãã®å¾Œã€éšŽå±¤åž‹ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã¯ãƒ•ã‚¡ã‚¤ãƒ«ã‚·ã‚¹ãƒ†ãƒ ã‚„éƒ¨å“ãƒªã‚¹ãƒˆï¼ˆBOMï¼‰ã®ç®¡ç†ãªã©ã€ç‰¹å®šã®ãƒ‹ãƒ¼ã‚ºã«å¯¾å¿œã™ã‚‹å½¢ã§åºƒãä½¿ç”¨ã•ã‚Œã¦ãã¾ã—ãŸã€‚ ã—ã‹ã—ã€ãã®æŸ”è»Ÿæ€§ã®
misomico 2024/04/09
éšŽå±¤åž‹ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹

CISSP
ãƒªãƒ³ã‚¯
å›½é˜²ç·çœãƒˆãƒ©ã‚¹ãƒ†ãƒƒãƒ‰ãƒ»ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ ãƒ»ã‚·ã‚¹ãƒ†ãƒ è©•ä¾¡åŸºæº–
misomico 2024/04/09
CISSP
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šå…±é€šåŒ–æ‰‹é †SCAPæ¦‚èª¬ | æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ | IPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
SCAP(Security Content Automation Protocol) ï½žæƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®è‡ªå‹•åŒ–ã¨æ¨™æº–åŒ–ã‚’å®Ÿç¾ã™ã‚‹æŠ€è¡“ä»•æ§˜ï½ž ç±³å›½ã§ã¯ã€Œè„†å¼±æ€§ç™ºç”Ÿä»¶æ•°ã®å¢—åŠ (*1)ã€ãªã©ã€ç¤¾ä¼šã«ãŠã‘ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¸ã®é–¢å¿ƒãŒé«˜ã¾ã‚‹ãªã‹ã€æ”¿åºœçœåºã®æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã¸ã®è¦æ±‚ã¨ã—ã¦ã€æƒ…å ±ã‚·ã‚¹ãƒ†ãƒ ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å¼·åŒ–ã™ã‚‹ã“ã¨ã‚’ç¾©å‹™ä»˜ã‘ãŸæ³•å¾‹FISMAï¼ˆFederal Information Security Management Actï¼šé€£é‚¦æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒžãƒã‚¸ãƒ¡ãƒ³ãƒˆæ³•ï¼‰ãŒ2002å¹´ã«æ–½è¡Œã•ã‚Œã¾ã—ãŸã€‚ ã“ã‚Œã«ä¼´ã„æ”¿åºœçœåºã§ã¯ã€æ§˜ã€…ãªæ³•å¾‹ï¼ˆFISMAã€SOXæ³•ãªã©ï¼‰ã‚„é€£é‚¦æ”¿åºœæƒ…å ±å‡¦ç†è¦æ ¼ï¼ˆFederal Information Processing Standardsï¼šFIPSï¼‰ã€ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ï¼ˆNIST SP800ã‚·ãƒªãƒ¼ã‚ºï¼‰ãªã©ã‹ã‚‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¦æ±‚äº‹é …ã‚’æ´—ã„å‡ºã—ã€ã‚ã‚‰ã‚†ã‚‹æƒ…å ±ã‚·ã‚¹ãƒ†ãƒ ï¼ˆãƒ¢ãƒã‚¤
misomico 2024/04/09
SCAP

CISSP
ãƒªãƒ³ã‚¯
ãƒ†ã‚¹ãƒˆã‚«ãƒãƒ¬ãƒƒã‚¸ï¼ˆã¦ã™ã¨ã‹ã°ã‚Œã£ã˜ï¼‰
ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãƒ†ã‚¹ãƒˆï¼ˆæ³¨1ï¼‰ã«ãŠã„ã¦ã€ãƒ†ã‚¹ãƒˆå¯¾è±¡ã¨ãªã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢å…¨ä½“ã®ã†ã¡ã€ãƒ†ã‚¹ãƒˆã—ãŸéƒ¨åˆ†ï¼ã—ã‚ˆã†ã¨ã—ã¦ã„ã‚‹éƒ¨åˆ†ãŒå ã‚ã‚‹å‰²åˆã®ã“ã¨ã€‚ä¸€èˆ¬ã«ãƒ‘ãƒ¼ã‚»ãƒ³ãƒ†ãƒ¼ã‚¸ã§è¡¨ç¾ã•ã‚Œã‚‹ã€‚ ã‚«ãƒãƒ¬ãƒƒã‚¸ã¯ãƒ†ã‚¹ãƒˆç¨®é¡žã‚„ãƒ†ã‚¹ãƒˆå¯¾è±¡ã”ã¨ã«ã•ã¾ã–ã¾ãªã‚‚ã®ãŒè€ƒãˆã‚‰ã‚Œã‚‹ã€‚æœ€ã‚‚æœ‰åãªã‚‚ã®ã¨ã—ã¦ã€ãƒ—ãƒã‚°ãƒ©ãƒ ã‚³ãƒ¼ãƒ‰ï¼ˆãƒã‚¸ãƒƒã‚¯ï¼‰ã‚’ã©ã‚Œã ã‘ãƒ†ã‚¹ãƒˆã—ãŸã‹ã‚’ç¤ºã™ã‚³ãƒ¼ãƒ‰ã‚«ãƒãƒ¬ãƒƒã‚¸ï¼ˆæ§‹é€ ã‚«ãƒãƒ¬ãƒƒã‚¸ï¼‰ï¼ˆæ³¨2ï¼‰ãŒã‚ã‚‹ã€‚ãã®ã»ã‹ã€ä»•æ§˜æ›¸ï¼ˆè¦ä»¶ï¼‰ã«å¯¾ã™ã‚‹ãƒ†ã‚¹ãƒˆæ¯”ã‚’è¡¨ã™ä»•æ§˜ã‚«ãƒãƒ¬ãƒƒã‚¸ï¼ˆè¦ä»¶ã‚«ãƒãƒ¬ãƒƒã‚¸ï¼‰ã€ãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ï¼ˆæ³¨3ï¼‰ã«å¯¾ã™ã‚‹ãƒ†ã‚¹ãƒˆæ¯”ã‚’ç¤ºã™ãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ã‚«ãƒãƒ¬ãƒƒã‚¸ã€æ©Ÿèƒ½ã®çµ„ã¿åˆã‚ã›ã«å¯¾ã™ã‚‹ãƒ†ã‚¹ãƒˆæ¯”ã¯æ©Ÿèƒ½çµ„ã¿åˆã‚ã›ã‚«ãƒãƒ¬ãƒƒã‚¸ãªã©ã‚’è€ƒãˆã‚‹ã“ã¨ãŒã§ãã‚‹ã€‚ ä¸Šè¨˜ã®ã‚ˆã†ã«ãƒ†ã‚¹ãƒˆé …ç›®ãŒå®Ÿéš›ã«ã©ã‚Œã ã‘è¡Œã‚ã‚ŒãŸã‹ã‚’ç¤ºã™å®Ÿè¡Œã‚«ãƒãƒ¬ãƒƒã‚¸ã«åŠ ãˆã¦ã€è¡Œã†ã¹ããƒ†ã‚¹ãƒˆé …ç›®ãŒãƒ†ã‚¹ãƒˆè¨è¨ˆã«ã©ã‚Œã ã‘åæ˜ ã•ã‚Œã¦ã„ã‚‹ã‹ã‚’è©•ä¾¡ã™ã‚‹è¨è¨ˆã‚«ãƒãƒ¬ãƒƒã‚¸ã‚’è€ƒãˆã‚‹ã“ã¨ã‚‚ã§ãã‚‹ã€‚ã“ã‚Œã¯ãƒ†ã‚¹ãƒˆè¨è¨ˆã®å“è³ªã‚’
misomico 2024/04/09
ã‚«ãƒãƒ¬ãƒƒã‚¸

CISSP
ãƒªãƒ³ã‚¯
Guidelines for Media Sanitization
misomico 2024/04/09
ã‚µãƒ‹ã‚¿ã‚¤ã‚ºã€ãƒ‘ãƒ¼ã‚¸ã€ã‚¯ãƒªã‚¢

CISSP
ãƒªãƒ³ã‚¯
Security in Computing
misomico 2024/04/09
ã‚°ãƒ©ãƒãƒ ãƒ‡ãƒ‹ãƒ³ã‚°ãƒ¢ãƒ‡ãƒ«ã®èª¬æ˜Ž

CISSP
ãƒªãƒ³ã‚¯
èªè¨¼æ–¹å¼ã®æ•´ç†ã¨NIST SP800-63ã§ã®èªè¨¼æ–¹æ³•æ±ºå®š
NECã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æˆ¦ç•¥æœ¬éƒ¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æŠ€è¡“ã‚»ãƒ³ã‚¿ãƒ¼ã®å±±ç”°ã§ã™ã€‚ç¾åœ¨ã€ã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒ¬ã‚¹æ±ºæ¸ˆã®ã‚ˆã†ã«å€‹äººã®è³‡ç”£ã«é–¢ã‚ã‚‹æƒ…å ±ã‚’ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã§æ‰±ã†ã“ã¨ãŒä¸€èˆ¬çš„ã«ãªã‚Šã¤ã¤ã‚ã‚Šã¾ã™ã€‚ãƒ†ãƒ¬ãƒ¯ãƒ¼ã‚¯ã®æ™®åŠã€ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“ã‚¹ã®æ´»ç”¨ãªã©æ¥å‹™ã‚’è¡Œã†éš›ã«ã‚‚ã€å¾“æ¥ã®ã‚ˆã†ã«çµ„ç¹”ã®ç®¡ç†ã™ã‚‹ã‚¤ãƒ³ãƒˆãƒ©ãƒãƒƒãƒˆå¤–ã‹ã‚‰æ©Ÿå¯†æƒ…å ±ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒå¿…è¦ãªå ´é¢ã‚‚å¢—ãˆã¦ã„ã¾ã™ã€‚ ãã‚Œã«ä¼´ã„ã€ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã«ã‚ˆã‚‹ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ã®ä¸æ£åˆ©ç”¨ã‚„ã€æƒ…å ±æ¼æ´©ãªã©ã®ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã‚‚å ±å‘Šã•ã‚Œã¦ã„ã¾ã™ã€‚ ä»Šå›žã¯ã€ã“ã†ã„ã£ãŸã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã‚’é˜²ããŸã‚ã®ç¬¬ä¸€æ©ã§ã‚ã‚Šã€é‡è¦ãªè¦ç´ ã§ã‚ã‚‹èªè¨¼æ–¹å¼ã«ã¤ã„ã¦ãƒ¡ãƒªãƒƒãƒˆãƒ»ãƒ‡ãƒ¡ãƒªãƒƒãƒˆã®æ•´ç†ã‚’ã—ã¾ã™ã€‚ã“ã®è¨˜äº‹ã§ã¯ã€èªè¨¼ã«ã¤ã„ã¦ã®ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã§ã‚ã‚‹NIST SP800-63ã‚’å‚è€ƒã«ã€ãƒ¢ãƒ‡ãƒ«ã‚±ãƒ¼ã‚¹ã«ã¦å¿…è¦ãªèªè¨¼è¦ç´ ã‚’è€ƒãˆã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ã¾ãšåˆã‚ã«ã€3ã¤ã®èªè¨¼è¦ç´ ã«ã¤ã„ã¦ã”ç´¹ä»‹ã—ã¾ã™ã€‚NISTï¼ˆç±³å›½å›½ç«‹æ¨™æº–æŠ€è¡“ç ”ç©¶æ‰€ï¼‰ã‚ˆã‚Šç™ºè¡Œ
misomico 2024/04/09
CISSP
ãƒªãƒ³ã‚¯
Mandatory access control - Wikipedia
This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. Find sources:Â "Mandatory access control"Â â€“Â newsÂ Â· newspapersÂ Â· booksÂ Â· scholarÂ Â· JSTOR (January 2018) (Learn how and when to remove this message) In computer security, mandatory access control (MAC) refers to a type of
misomico 2024/04/09
CISSP
ãƒªãƒ³ã‚¯
Kerberosèªè¨¼ã¨ã¯
Kerberosï¼ˆã‚±ãƒãƒ™ãƒã‚¹ï¼‰èªè¨¼ã¨ã¯ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯èªè¨¼æ–¹å¼ã®1ã¤ã§ã€ã‚µãƒ¼ãƒã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆé–“ã®èº«å…ƒç¢ºèªã®ãŸã‚ã«ä½¿ç”¨ã™ã‚‹ãƒ—ãƒãƒˆã‚³ãƒ«ã€‚
misomico 2024/04/09
CISSP
ãƒªãƒ³ã‚¯
æŠ€è¡“ãƒ¬ãƒãƒ¼ãƒˆã€Œã‚±ãƒ«ãƒ™ãƒã‚¹èªè¨¼ã®ä»•çµ„ã¿ã€ï½œã‚½ãƒ•ãƒ†ãƒƒã‚¯ã ã‚ˆã‚Šï½œæ ªå¼ä¼šç¤¾ã‚½ãƒ•ãƒ†ãƒƒã‚¯
ç§ã¯ä¸»ã«Windowsã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºã‚’æ‹…å½“ã—ã¦ã„ã‚‹ç¤¾å“¡ã§ã™ã€‚ä»Šå›žã€ã¨ã‚ã‚‹æ¡ˆä»¶ã§Kerberosèªè¨¼ã«ã¤ã„ã¦èª¿ã¹ã‚‹æ©Ÿä¼šãŒã‚ã‚Šã¾ã—ãŸã®ã§ã€ãã®ä¸€éƒ¨ã‚’æŠ€è¡“ãƒ¬ãƒãƒ¼ãƒˆã¨ã—ã¦ã”å ±å‘Šã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ Kerberosèªè¨¼ã¯1980å¹´ä»£åˆæœŸã«ã¯ã˜ã¾ã£ãŸãƒžã‚µãƒãƒ¥ãƒ¼ã‚»ãƒƒãƒ„å·¥ç§‘å¤§å¦ã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã«ç”±æ¥ã—ã¦ã„ã¾ã™ã€‚ãã‚Œã ã‘å¤ãã‹ã‚‰å˜åœ¨ã™ã‚‹æ´å²ã‚ã‚‹èªè¨¼æ–¹æ³•ã§ã™ãŒã€ç¾åœ¨ã§ã‚‚å¹…åºƒãåˆ©ç”¨ã•ã‚Œã¦ã„ã¾ã™ã€‚ãã®ç‰¹å¾´ã¯ã€èªè¨¼ã‚’ä¸€åº¦ã ã‘ã«ã™ã‚‹ã¨ã„ã†åˆ©ä¾¿æ€§ã¨ã€ç¢ºã‹ãªå®‰å…¨æ€§ã‚’å‚™ãˆãŸç”»æœŸçš„ãªæ–¹æ³•ã§ã‚ã‚‹ã¨è¨€ãˆã¾ã™ã€‚ä»¥ä¸‹ã«ãã®ç‰¹å¾´ã®æ¦‚è¦ã«ã¤ã„ã¦ã”ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã«è¤‡æ•°ã®æ©Ÿå™¨ã‚„ã‚µãƒ¼ãƒ“ã‚¹ãŒå˜åœ¨ã™ã‚‹ç’°å¢ƒã«ãŠã„ã¦ã€åˆ¥ã®ã‚µãƒ¼ãƒ“ã‚¹ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ãŸã³ã«èªè¨¼ã®æ‰‹é †ã‚’è¸ã¾ãªã‘ã‚Œã°ãªã‚‰ãªã„ã®ã¯åŠ¹çŽ‡ãŒã„ã„ã¨ã„ãˆã¾ã›ã‚“ã€‚ãã“ã§ã€ç‰¹å®šã®ç¯„å›²å†…ã®ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãƒ¼ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹éš›ã®èªè¨¼ã‚’ä¸€åº¦ã§è¡Œãˆã‚‹ã‚ˆã†ã«ã—ãŸã‚‚ã®ãŒKerberosèªè¨¼ã§ã™ã€‚
misomico 2024/04/09
CISSP
ãƒªãƒ³ã‚¯
æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ï¼šã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒ³ã‚¿ãƒ¼ï¼šã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢é€£NISTæ–‡æ›¸
IPA/ISECï¼ˆç‹¬ç«‹è¡Œæ”¿æ³•äººæƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒ³ã‚¿ãƒ¼ï¼‰ã¯ã€ æ”¿åºœã‚„ä¼æ¥ã®çµŒå–¶è€…ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ‹…å½“è€…ãªã©ãŒã€è‡ªçµ„ç¹”ã®æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã‚’å‘ä¸Šã•ã›ã‚‹ã“ã¨ã«å½¹ç«‹ã¤è³‡æ–™ã¨ã—ã¦ã€ä¸–ç•Œçš„ã«è©•ä¾¡ã®é«˜ã„æµ·å¤–ã®æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢é€£æ–‡æ›¸ç‰ã®ç¿»è¨³ãƒ»èª¿æŸ»ç ”ç©¶ã‚’NRIã‚»ã‚ãƒ¥ã‚¢ãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼ã‚ºï¼ˆæ ªï¼‰ã¨å…±åŒã§è¡Œã„ã€ãã®æˆæžœã‚’ä¸€èˆ¬ã«å…¬é–‹ã—ã¦ã„ã¾ã™ã€‚ ç±³å›½å›½ç«‹æ¨™æº–æŠ€è¡“ç ”ç©¶æ‰€ï¼ˆNIST: National Institute of Standards and Techno logyï¼‰ã®ç™ºè¡Œã™ã‚‹SP800ã‚·ãƒªãƒ¼ã‚ºï¼ˆSP: Special Publicationsï¼‰ã¨FIPSï¼ˆFederal Information Processing Standardsï¼‰ã®ä¸ã‹ã‚‰ã€æ—¥æœ¬ã«ãŠã„ã¦å‚ç…§ã™ã‚‹ãƒ‹ãƒ¼ã‚ºãŒé«˜ã„ã¨æƒ³å®šã•ã‚Œã‚‹æ–‡æ›¸ã®ç¿»è¨³ãƒ»ç›£ä¿®ã‚’è¡Œã„ã€å…¬é–‹ã™ã‚‹ã¨ã¨ã‚‚ã«ã€NISTã®æ–‡æ›¸ä½“ç³»ã‚„å†…å®¹ã«ã¤ã„ã¦ã€æ—¥æœ¬ã®å®Ÿæƒ…ã«å³ã—ãŸè§£èª¬ã‚’è¡Œã†ã‚ˆ
misomico 2024/04/09
CISSP
ãƒªãƒ³ã‚¯
çŠ¶æ…‹é·ç§»å›³ï¼ˆã‚¹ãƒ†ãƒ¼ãƒˆãƒžã‚·ãƒ³å›³ï¼‰ã¨ã¯ï¼Ÿæ¥å‹™ã®æµã‚Œã‚’æŠŠæ¡ã—åŠ¹çŽ‡åŒ–ã™ã‚‹ãŸã‚ã®ãƒã‚¤ãƒ³ãƒˆã‚’è§£èª¬ | Cacooãƒ–ãƒã‚°
çŠ¶æ…‹é·ç§»å›³ï¼ˆã‚¹ãƒ†ãƒ¼ãƒˆãƒžã‚·ãƒ³å›³ï¼‰ã¯ã‚ã‚‹çŠ¶æ…‹ãŒã©ã†ç§»ã‚Šå¤‰ã‚ã‚‹ã‹ï¼ˆé·ç§»ï¼‰ã¨ã„ã†ã“ã¨ã‚’å›³é¢åŒ–ã—ã¦ä¸€è¦§æ€§ã‚’é«˜ã‚ãŸã‚‚ã®ã§ã™ã€‚ ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®è¨è¨ˆã®éš›ã«çŠ¶æ…‹é·ç§»å›³ã‚’ä½œæˆã™ã‚Œã°ã€ãƒ†ã‚¹ãƒˆé …ç›®ã®æ¼ã‚Œã‚„æŠœã‘ã‚’é˜²ã’ã¾ã™ã€‚ ã—ã‹ã—ã€ã©ã®ã‚ˆã†ã«çŠ¶æ…‹é·ç§»å›³ã‚’ä½œæˆã™ã‚Œã°ã‚ˆã„ã‹åˆ†ã‹ã‚‰ãªã„ã¨ã„ã†æ–¹ã‚‚ã„ã‚‹ã“ã¨ã§ã—ã‚‡ã†ã€‚ã“ã®è¨˜äº‹ã§ã¯çŠ¶æ…‹é·ç§»å›³ã¨ã¯ä½•ã‹ã€ã©ã®ã‚ˆã†ãªåˆ©ç‚¹ãŒã‚ã‚‹ã®ã‹ã€ã©ã®ã‚ˆã†ã«ä½œæˆã™ã‚Œã°æœ‰åŠ¹ã«ä½¿ãˆã‚‹ã‹ã”ç´¹ä»‹ã—ã¾ã™ã€‚çŠ¶æ…‹é·ç§»å›³ã‚’ä½œæˆã™ã‚‹éš›ã«ã¯ãœã²å‚è€ƒã«ã—ã¦ã¿ã¦ãã ã•ã„ã€‚ çŠ¶æ…‹é·ç§»å›³ã«ã¤ã„ã¦çŸ¥ã‚ã† ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®é–‹ç™ºã‚’è¡Œã†ã«å½“ãŸã£ã¦ã€ã‚„ã¿ãã‚‚ã«åŒã˜ãƒ†ã‚¹ãƒˆã‚’ç¹°ã‚Šè¿”ã—ã¦ã—ã¾ã£ãŸã‚Šã€ãƒ†ã‚¹ãƒˆã®å†…å®¹ã«æŠœã‘ãŒã‚ã‚Šé–‹ç™ºãŒæ¢ã¾ã£ã¦ã—ã¾ã£ãŸã‚Šãªã©ã®äº‹æ…‹ãŒç™ºç”Ÿã—ã¦ã—ã¾ã†ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ ç„¡é§„ãªæ™‚é–“ã‚„åŠ´åŠ›ã‚’å°‘ã—ã§ã‚‚ã‚«ãƒƒãƒˆã™ã‚‹ãŸã‚ã«è¨è¨ˆæ®µéšŽã§çŠ¶æ…‹é·ç§»å›³ã‚’ä½œæˆã—ã€æ´»ç”¨ã—ã¾ã—ã‚‡ã†ã€‚ çŠ¶æ…‹é·ç§»å›³ã¨ã¯ãªã«ã‹ çŠ¶æ…‹é·ç§»å›³ã¨ã¯çŠ¶æ…‹ãŒé·ç§»ã™ã‚‹æ§˜åã‚’å›³ã«æ›¸ã„ã¦å›³
misomico 2024/04/09
CISSP
ãƒªãƒ³ã‚¯
DRAFT Special Publication 800-154, Guide to Data-Centric System Threat Modeling
misomico 2024/04/09
CISSP
ãƒªãƒ³ã‚¯
ã‚¤ãƒ¼ã‚µãƒãƒƒãƒˆã¯ã©ã†ã¤ãªãŒã£ã¦ã„ã‚‹ã‹ã€€ç¬¬1å›ž
æ°´é‡Žã€€å¿ å‰‡ã€€é™å²¡å¤§å¦æƒ…å ±å¦éƒ¨æƒ…å ±ç§‘å¦ç§‘æ•™æŽˆ çŸ³åŽŸã€€é€²ã€€é™å²¡å¤§å¦æƒ…å ±å¦éƒ¨æƒ…å ±ç§‘å¦ç§‘åŠ©æ‰‹ ä»Šå›žã¯ï¼Œã‚¤ãƒ¼ã‚µãƒãƒƒãƒˆã®é…ç·šã«ã¤ã„ã¦è¦‹ã¦ã¿ã¾ã—ã‚‡ã†ã€‚ã‚¤ãƒ¼ã‚µãƒãƒƒãƒˆã§ã¯ï¼Œã©ã®ã‚ˆã†ã«ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚’ä¼é€ã‚±ãƒ¼ãƒ–ãƒ«ã«ã¤ãªã’ã¦ã„ã‚‹ã®ã§ã—ã‚‡ã†ã‹ã€‚ 1æœ¬ã®åŒè»¸ã‚±ãƒ¼ãƒ–ãƒ«ã«ãƒã‚¹æŽ¥ç¶šã™ã‚‹ å‰å›žã§å¦ã‚“ã ã‚ˆã†ã«ï¼Œã‚¤ãƒ¼ã‚µãƒãƒƒãƒˆã¯CSMAã‚·ãƒ¼ã‚¨ã‚¹ã‚¨ãƒ ã‚¨ãƒ¼/CDã‚·ãƒ¼ãƒ‡ã‚£ãƒ¼ï¼ˆcarrier sense multiple access with collision detectionï¼‰ã¨ã„ã†åˆ¶å¾¡æ–¹å¼ã‚’æŽ¡ç”¨ã—ã¦ã„ã¾ã™ã€‚ã“ã‚Œã¯ä¸€ã¤ã®ä¼é€è·¯ã‚’å¤šæ•°ã®ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã§äº¤äº’ã«åˆ©ç”¨ã™ã‚‹é€šä¿¡æ–¹å¼ã®ä¸€ã¤ã§ï¼ŒåŽŸå‰‡ã¨ã—ã¦é€šä¿¡ã®é †ç•ªã‚’æ—©ã„è€…å‹ã¡ã§æ±ºã‚ã¦ã„ã¾ã™ã€‚ã“ã“ã§ã„ã†ä¸€ã¤ã®ä¼é€è·¯ã¨ã¯1æœ¬ã®åŒè»¸ã‚±ãƒ¼ãƒ–ãƒ«ã®ã“ã¨ã§ã™ã€‚åŒè»¸ã‚±ãƒ¼ãƒ–ãƒ«ã¯ï¼ŒéŠ…ç·šã«çµ¶ç¸ç‰©è³ªã‚’å·»ãã¤ã‘ãŸã‚±ãƒ¼ãƒ–ãƒ«ã§ï¼Œå¤–å´ã®éƒ¨åˆ†ã¯ãƒ—ãƒ©ã‚¹ãƒãƒƒã‚¯ã§è¦†ã‚ã‚Œã¦ã„ã¾ã™ã€‚ ã‚¤ãƒ¼ã‚µãƒãƒƒãƒˆã§ã¯ï¼Œè¤‡æ•°ã®ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã®é€šä¿¡å›žè·¯ã‚’åŒè»¸ã‚±
misomico 2024/04/09
CISSP
ãƒªãƒ³ã‚¯
CISSP å‹‰å¼·ãƒŽãƒ¼ãƒˆ
ç›®æ¬¡ã®è¡¨ç¤º 1. æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç’°å¢ƒ 1-1. è·æ¥å€«ç†ã®ç†è§£ã€éµå®ˆã€æŽ¨é€² è·æ¥å€«ç† (ISC)2 å€«ç†è¦ç´„ çµ„ç¹”ã®å€«ç†è¦ç´„ ã‚¨ãƒ³ãƒãƒ³äº‹ä»¶ã¨SOXæ³•ã®ç–å®š SOC (System and Organization Controls) ãƒ¬ãƒãƒ¼ãƒˆ 1-2. ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ¦‚å¿µã®ç†è§£ã¨é©ç”¨ æ©Ÿå¯†æ€§ã€å®Œå…¨æ€§ã€å¯ç”¨æ€§ çœŸæ£æ€§ã€å¦èªé˜²æ¢ã€ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ã€å®‰å…¨æ€§ ãƒ‡ãƒ¥ãƒ¼ã‚±ã‚¢ã¨ãƒ‡ãƒ¥ãƒ¼ãƒ‡ãƒªã‚¸ã‚§ãƒ³ã‚¹ 1-3. ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¬ãƒãƒŠãƒ³ã‚¹åŽŸå‰‡ã®è©•ä¾¡ã¨é©ç”¨ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ©Ÿèƒ½ã®ãƒ“ã‚¸ãƒã‚¹æˆ¦ç•¥ã€ç›®æ¨™ã€ä½¿å‘½ã€ç›®çš„ã¨ã®é€£æº çµ„ç¹”ã®ã‚¬ãƒãƒŠãƒ³ã‚¹ãƒ—ãƒã‚»ã‚¹ çµ„ç¹”ã®å½¹å‰²ã¨è²¬ä»» 1-4. æ³•çš„ç’°å¢ƒ æ³•çš„ç’°å¢ƒ å¥‘ç´„ä¸Šã®è¦ä»¶ã€æ³•çš„è¦ç´ ã€æ¥ç•Œæ¨™æº–ãŠã‚ˆã³è¦åˆ¶è¦ä»¶ ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ä¿è· ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ã‚·ãƒ¼ãƒ«ãƒ‰ å¿˜ã‚Œã‚‰ã‚Œã‚‹æ¨©åˆ© ãƒ‡ãƒ¼ã‚¿ãƒãƒ¼ã‚¿ãƒ“ãƒªãƒ†ã‚£ ãƒ‡ãƒ¼ã‚¿ã®ãƒãƒ¼ã‚«ãƒªã‚¼ãƒ¼ã‚·ãƒ§ãƒ³ å›½ã¨åœ°åŸŸã®ä¾‹ ç±³å›½ã®æ³•å¾‹ [è¿½åŠ ] ã‚µã‚¤ãƒãƒ¼çŠ¯ç½ªã¨ãƒ‡ãƒ¼ã‚¿ä¾µå®³ çŸ¥çš„è²¡ç”£ä¿è· è¼¸å…¥ã¨
misomico 2022/08/28
ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
1