[B! è„†å¼±æ€§è¨ºæ–] ockeghemã®ãƒ

ockeghem id:ockeghem

è„†å¼±æ€§è¨ºæ–ã«é–¢ã™ã‚‹ockeghemã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (8)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

è‡ªåˆ†ã§ã§ãã‚‹Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è„†å¼±æ€§è¨ºæ– - ãƒ‡ãƒ–ã‚µãƒŸ2010
2. ãƒ—ãƒãƒ•ã‚£ãƒ¼ãƒ«ä¸Šé‡Ž å®£ï¼ˆã†ãˆã®ãƒ»ã›ã‚“ï¼‰äº¬éƒ½å¸‚ç”Ÿã¾ã‚Œã€å¹¼å°‘æœŸã¯å®Ÿå®¶ãŒãƒ‘ã‚½ã‚³ãƒ³ã‚·ãƒ§ãƒƒãƒ—ã€é«˜å°‚ã§ãƒãƒœã‚³ãƒ³ã«ç†±ä¸ã—ã€è±Šæ©‹æŠ€ç§‘å¤§ã§ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«ãƒãƒžã‚Šã€å¥ˆè‰¯å…ˆç«¯ç§‘å¦æŠ€è¡“å¤§å¦é™¢å¤§å¦ã«ã¦å±±å£è‹±æ•™æŽˆã®ä¸‹ã§æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å°‚æ”»ECé–‹ç™ºãƒ™ãƒ³ãƒãƒ£ãƒ¼ä¼æ¥ã§å‰µæ¥ãƒ¡ãƒ³ãƒãƒ¼ã€æ±è¨¼ãƒžã‚¶ãƒ¼ã‚ºä¸Šå ´ãªã©ã‚’çµŒé¨“ã‚’çµŒã¦ã€2006å¹´6æœˆã«æ ªå¼ä¼šç¤¾ãƒˆãƒ©ã‚¤ã‚³ãƒ¼ãƒ€ã‚’è¨ç«‹æ ªå¼ä¼šç¤¾ãƒˆãƒ©ã‚¤ã‚³ãƒ¼ãƒ€ ä»£è¡¨å–ç· å½¹æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ•™è‚²ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚·ã‚¹ãƒ†ãƒ ï¼Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è„†å¼±æ€§è¨ºæ–http://www.tricorder.jp/ ç‹¬ç«‹è¡Œæ”¿æ³•äººæƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹(IPA)ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒ³ã‚¿ãƒ¼ç ”ç©¶å“¡ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼†ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã‚ãƒ£ãƒ³ãƒ—è¬›å¸«æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å°‚é–€èªŒ ScanNet Securityç·¨é›†é•·CopyrightÂ©2010 Tricorder Co.Ltd. All rights reserved.2sen_u 3. è‘—æ›¸ã€é€£è¼‰ãªã©ä»Šå¤œã‚ã‹ã‚‹
ockeghem 2010/02/22
security

è„†å¼±æ€§è¨ºæ–

ã¾ãŸä¸Šé‡Žå®£ã‹
ãƒªãƒ³ã‚¯
http://japan.internet.com/webtech/20090723/4.html
ockeghem 2009/07/23
security

è„†å¼±æ€§è¨ºæ–
ãƒªãƒ³ã‚¯
Webã‚¢ã‚¿ãƒƒã‚¯ãƒ†ã‚¹ãƒˆ
ã‚¤ã‚¨ãƒãƒ¼ ãƒžã‚¼ãƒ³ã‚¿ ã‚·ã‚¢ãƒ³ ãƒ–ãƒ©ãƒƒã‚¯ FIP 2008/08 C M Y CM MY CY CMY K C M Y CM MY CY CMY K Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è„†å¼±æ€§è¨ºæ–ã‚µãƒ¼ãƒ“ã‚¹ Webã‚¢ã‚¿ãƒƒã‚¯ãƒ†ã‚¹ãƒˆ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«æ½œã‚€è„…å¨ã‚’å®šæœŸçš„ã«ãƒã‚§ãƒƒã‚¯ ï¼ è¿‘å¹´ã®Webã‚µã‚¤ ãƒˆæ”¹ã–ã‚“ã‚„æƒ…å ±æ¼ãˆã„ç‰ã®äº‹ä»¶ã¯ã€ ç‹¬è‡ªé–‹ç™ºã—ãŸWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã‚’ç‹™ã£ãŸæ”»æ’ƒ ã«ã‚ˆã‚‹ã‚‚ã®ãŒå¢—ãˆã¦ã„ã¾ã™ã€‚ ã“ã‚Œã«ã¯ã€ ã¾ãšWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«æ½œã‚€è„†å¼±æ€§ã®æœ‰ç„¡ã‚’ç¢ºèªã—ã€ å¿…è¦ãªå¯¾ç–ã‚’ è¬›ã˜ã‚‹ã“ã¨ãŒå¤§åˆ‡ã§ã™ã€‚ ã€ŒWebã‚¢ã‚¿ ãƒƒã‚¯ãƒ†ã‚¹ ãƒˆã€ ã¯ã€ Webã‚µãƒ¼ãƒã«ã¦å‹•ä½œã™ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚· ãƒ§ ãƒ³ã«å¯¾ã—ã€ è„†å¼±æ€§æ¤œæŸ»ãƒ„ãƒ¼ãƒ« ã€ŒWebInspectï¼Š ã€ ã‚’ ç”¨ã„ã¦æ¤œæŸ»ã—ã€ æ¤œå‡ºã•ã‚ŒãŸå•é¡Œç‚¹ã¨å¯¾ç–æ–¹æ³•ã«ã¤ã„ã¦ã®ãƒ¬ãƒãƒ¼ ãƒˆã‚’ã”æä¾›ã„ãŸã—ã¾ã™ã€‚ ï¼ŠWebInspect ï¼š ãƒ’ãƒ¥ãƒ¼ãƒ¬ãƒƒ ãƒˆ ãƒ» ãƒ‘ãƒƒã‚«ãƒ¼ãƒ‰ç¤¾æä¾›ã®
ockeghem 2008/06/24
ãƒ„ãƒ¼ãƒ«(WebInspect)ã®ã¿ã®æ¤œæŸ»ã§ãƒšãƒ¼ã‚¸å˜ä¾¡31,500å††ã€‚æ‰‹æ¤œæŸ»ã§ã“ã‚Œã«è¿‘ã„ä¾¡æ ¼ã§ã‚„ã£ã¦ã„ã‚‹ã¨ã“ã‚ã‚‚ã‚ã‚‹ã®ã§ã€ãƒ„ãƒ¼ãƒ«ã ã‹ã‚‰å®‰ã„ã¨ã‚‚ã„ãˆãªã„

security

was

è„†å¼±æ€§è¨ºæ–
ãƒªãƒ³ã‚¯
ã‚¨ãƒ©ãƒ¼ã€€Proactive Defense
ã‚µãƒ¼ãƒ“ã‚¹ã« é–¢ã™ã‚‹ ãŠå•ã„åˆã‚ã› ã”ä¸æ˜Žãªç‚¹ã‚„ãŠè¦‹ç©ã®ã”ç›¸è«‡ãªã©ã€ã¾ãšã¯æ°—è»½ã«ãŠå•ã„åˆã‚ã›ãã ã•ã„ã€‚
ockeghem 2008/06/24
ä¼æ¥ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã®ã€ŒãŠå•ã„åˆã‚ã›ã€ã¨ã€Œã‚µã‚¤ãƒˆå†…æ¤œç´¢ã€ã®2ç”»é¢ã§\735,000- é«˜ããªã„ã‹? å¼Šç¤¾ãªã‚‰3åˆ†ã®1ã§ã‚„ã‚‰ã›ã¦ã„ãŸã ãã¾ã™

security

was

è„†å¼±æ€§è¨ºæ–
ãƒªãƒ³ã‚¯
Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è¨ºæ–ã‚µãƒ¼ãƒ“ã‚¹ã€ã‚»ã‚³ãƒ ã€‘
Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è¨ºæ–ã‚µãƒ¼ãƒ“ã‚¹ã¯ã€ãŠå®¢æ§˜ãŒç‹¬è‡ªã«æ§‹ç¯‰ã—ãŸWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ï¼ˆCGIã€ASPãªã©ï¼‰ã«å¯¾ã—ã¦ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å°‚é–€å®¶ãŒæ—¢çŸ¥ã®è„†å¼±æ€§ã«å¯¾ã—ç¶²ç¾…çš„ã«è¨ºæ–ã‚’å®Ÿæ–½ã—ã€å®¢è¦³çš„ãªè©•ä¾¡ã¨å¯¾ç–æ¡ˆã‚’è¨ºæ–å ±å‘Šæ›¸ã¨ã—ã¦æä¾›ã—ã¾ã™ã€‚
ockeghem 2008/06/24
ã€Žç”»é¢å˜ä¾¡ï¼ˆï¼‘ç”»é¢ã‚ãŸã‚Šï¼‰126,000å††ï¼ˆç¨Žè¾¼ï¼‰ã€

security

è„†å¼±æ€§è¨ºæ–

was
ãƒªãƒ³ã‚¯
Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è¨ºæ– / ã‚µãƒ¼ãƒ“ã‚¹ãƒ»è£½å“ / æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®NRIã‚»ã‚ãƒ¥ã‚¢
Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®å®Ÿè£…æ–¹å¼ã€é–‹ç™ºè¨€èªžã€åˆ©ç”¨ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ãªã©ã‚’è€ƒæ…®ã—ã€ã•ã¾ã–ã¾ãªé …ç›®ã«ã¤ã„ã¦è¨ºæ–ã‚’è¡Œã„ã€ãŠå®¢æ§˜ã®ãƒ“ã‚¸ãƒã‚¹ã®å®‰å…¨æ€§ã‚’è„…ã‹ã™è¦å› ã¸ã®å¯¾ç–ãŒé©åˆ‡ã«è¡Œã‚ã‚Œã¦ã„ã‚‹ã‹ã‚’è¨ºæ–ã—ã¾ã™ã€‚Webãƒ–ãƒ©ã‚¦ã‚¶ã‚’åˆ©ç”¨ã™ã‚‹ä¸€èˆ¬çš„ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã ã‘ã§ãªãã€SOAPã‚’åˆ©ç”¨ã—ãŸWebã‚µãƒ¼ãƒ“ã‚¹ã¸ã®è¨ºæ–ã‚‚è¡Œã†ã“ã¨ãŒã§ãã¾ã™ã€‚ ä¸»è¦ãªéƒ¨åˆ†ã¯çµŒé¨“è±Šå¯Œãªå°‚é–€å®¶ãŒæ‰‹ä½œæ¥(ãƒžãƒ‹ãƒ¥ã‚¢ãƒ«)ã«ã‚ˆã‚‹è¨ºæ–ã‚’è¡Œã„ã€ä¸€éƒ¨è¨ºæ–ãƒ„ãƒ¼ãƒ«ã‚’è£œåŠ©çš„ã«åˆ©ç”¨ã—ã¾ã™ã€‚ã“ã‚Œã«ã‚ˆã‚Šã€ãŠå®¢æ§˜ãŒç‹¬è‡ªã«ä½œã‚Šè¾¼ã‚“ã ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã‚ã£ã¦ã‚‚ã€æ½œåœ¨ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•é¡Œã®ã»ã¨ã‚“ã©ã‚’ç™ºè¦‹ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã¾ãŸã€ç™ºè¦‹ã•ã‚ŒãŸå•é¡Œã«å¯¾ã—ã¦ã€å…·ä½“çš„ãªå¯¾ç–æ–¹æ³•ã‚’ã‚¢ãƒ‰ãƒã‚¤ã‚¹ã—ã€é©åˆ‡ãªå¯¾ç–ã®å®Ÿæ–½ã‚’æ”¯æ´ã—ã¾ã™ã€‚ ä¸»ãªè¨ºæ–é …ç›® ãƒ¦ãƒ¼ã‚¶èªè¨¼æ–¹å¼ã®ãƒã‚§ãƒƒã‚¯ ãƒ¦ãƒ¼ã‚¶èªè¨¼ã‚’å›žé¿ã—ã¦ãƒã‚°ã‚¤ãƒ³ã•ã‚Œã‚‹å±é™ºæ€§ãŒãªã„ã‹ã€ãƒã‚°ã‚¤ãƒ³IDã‚„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®æŽ¨æ¸¬ãƒ»ç·å½“ã‚Šæ”»æ’ƒã¸ã®å¼·åº¦ãŒååˆ†ã‹ãª
ockeghem 2008/06/24
security

è„†å¼±æ€§è¨ºæ–

was
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®ãƒ©ãƒƒã‚¯ï½œæƒ…å ±ã‚’å®ˆã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®ãƒ‘ã‚¤ã‚ªãƒ‹ã‚¢
æƒ…å ±ã‚’å®ˆã‚Šã€æœªæ¥ã‚’å‰µé€ ã™ã‚‹ãƒ‘ã‚¤ã‚ªãƒ‹ã‚¢ã¨ã—ã¦ã®ä¿¡é ¼ã¨è‡ªä¿¡ã§ã€ã‚‚ã£ã¨å…ˆã¸ æœ€é«˜å³°ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚µãƒ¼ãƒ“ã‚¹ã¨ã€ITãƒˆãƒ¼ã‚¿ãƒ«ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã‚’æä¾›ã—ã¾ã™ã€‚ ã‚‚ã£ã¨çŸ¥ã‚‹
ockeghem 2008/06/24
ã€Žã‚¹ã‚¿ãƒ³ãƒ€ãƒ¼ãƒ‰ :ã‚ªãƒ¼ãƒ€ãƒ¼ç”»é¢ã‚„ã‚¢ãƒ³ã‚±ãƒ¼ãƒˆç”»é¢ãªã©æƒ…å ±æ¼ãˆã„ã®æã‚Œã®ã‚ã‚‹ç”»é¢ã«å¯¾ã—ã¦é›†ä¸çš„ã«è¨ºæ–ã‚’è¡Œã„ã€å®‰å…¨æ€§ã‚’ãƒã‚§ãƒƒã‚¯ã—ã¾ã™ã€<XSSã‚„SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ã‚ˆã‚‹æ¼æ´©ã¯ç”»é¢ã®æƒ…å ±ã ã‘ã§ã¯ãªã„ã€‚èª¤è§£ã‚’ä¸Žãˆãªã„ã‹

security

lac

è„†å¼±æ€§è¨ºæ–
ãƒªãƒ³ã‚¯
Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è„†å¼±æ€§è¨ºæ–ã‚µãƒ¼ãƒ“ã‚¹ã€€Webã‚¢ã‚¿ãƒƒã‚¯ãƒ†ã‚¹ãƒˆ
ã“ã‚“ãªä¼æ¥æ§˜ã«ãŠã™ã™ã‚ç‰¹é•·ã‚µãƒ¼ãƒ“ã‚¹ã®ä½ç½®ä»˜ã‘ã‚µãƒ¼ãƒ“ã‚¹ä½“ç³»æ¦‚è¦å›³è©³ç´°æƒ…å ±é–¢é€£ãƒªãƒ³ã‚¯ãŠå•ã„åˆã‚ã›è¿‘å¹´ã®Webã‚µã‚¤ãƒˆæ”¹ã–ã‚“ã‚„æƒ…å ±æ¼ãˆã„ç‰ã®äº‹ä»¶ã¯ã€ç‹¬è‡ªé–‹ç™ºã—ãŸWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã‚’ç‹™ã£ãŸæ”»æ’ƒã«ã‚ˆã‚‹ã‚‚ã®ãŒå¢—ãˆã¦ã„ã¾ã™ã€‚ã“ã‚Œã«ã¯ã€ã¾ãšWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«æ½œã‚€è„†å¼±æ€§ã®æœ‰ç„¡ã‚’ç¢ºèªã—ã€å¿…è¦ãªå¯¾ç–ã‚’è¬›ã˜ã‚‹ã“ã¨ãŒå¤§åˆ‡ã§ã™ã€‚ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è„†å¼±æ€§è¨ºæ–ã‚µãƒ¼ãƒ“ã‚¹ã€ŒWebã‚¢ã‚¿ãƒƒã‚¯ãƒ†ã‚¹ãƒˆã€ã¯ã€Webã‚µãƒ¼ãƒã«ã¦å‹•ä½œã™ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã‚’è¨ºæ–ã—ã€å•é¡Œç‚¹ã¨å¯¾ç–æ–¹æ³•ã‚’ã”å ±å‘Šã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã§ã™ã€‚æ¯”è¼ƒçš„æ‰‹è»½ãªãƒ„ãƒ¼ãƒ«è¨ºæ–ã¨ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å°‚é–€ã‚¹ã‚¿ãƒƒãƒ•ã«ã‚ˆã‚‹æ‰‹å‹•è¨ºæ–ã®2ã‚¿ã‚¤ãƒ—ã‹ã‚‰é¸æŠžã„ãŸã ã‘ã¾ã™ã€‚ ã‚µã‚¤ãƒˆä¸Šã®ãƒ•ã‚©ãƒ¼ãƒ ã«ã¦é€šä¿¡è²©å£²ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ç™»éŒ²ã€å—ç™ºæ³¨ã€æ±‚äººã€æ‡¸è³žå¿œå‹Ÿç‰ã‚’è¡Œã£ã¦ã„ã‚‹ã‚µã‚¤ãƒˆä¸Šã«ã¦ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æ±ºæ¸ˆï¼ˆãƒãƒƒãƒˆé€šè²©ã€ãƒã‚±ãƒƒãƒˆè²©å£²ãªã©ï¼‰ã‚’è¡Œã£ã¦ã„ã‚‹PCI DSSï¼ˆæ³¨1ï¼‰æº–æ‹ ã®ãŸã‚ã«ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ†ã‚¹ãƒˆ
ockeghem 2008/06/19
WebInspectã§è¨ºæ–ã—ã¦ã„ã‚‹ã®ã§ã™ãã€‚ã‚ã‹ã‚Šã¾ã™ã€‚

security

was

è„†å¼±æ€§è¨ºæ–
ãƒªãƒ³ã‚¯
1