rokujyouhitomaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ - ã¯ã¦ãªãƒ

rokujyouhitoma id:rokujyouhitoma

rokujyouhitomaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (39,430)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã€ŒCISO-PRACTSIEãƒ¯ãƒ¼ã‚¯ã‚·ãƒ§ãƒƒãƒ—ç”¨ãƒžãƒ†ãƒªã‚¢ãƒ«ã€NPOæ—¥æœ¬ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å”ä¼šï¼ˆJNSAï¼‰
ã€ŒCISO-PRACTSIEãƒ¯ãƒ¼ã‚¯ã‚·ãƒ§ãƒƒãƒ—ç”¨ãƒžãƒ†ãƒªã‚¢ãƒ«ã€ã«ã¤ã„ã¦ æœ¬è³‡æ–™ã¯ã€2023å¹´ï¼‘æœˆã«å‡ºç‰ˆã—ãŸã€ŒCISOã®ãŸã‚ã®æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æˆ¦ç•¥ã€*1ã§æŽ²è¼‰ã—ãŸã€æœºä¸Šæ¼”ç¿’ã‚’è¡Œã†ãŸã‚ã®ãƒžãƒ†ãƒªã‚¢ãƒ«ï¼ˆãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆãªã©ã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆç¾¤ï¼‰ã®è¦‹ç›´ã—ã‚’è¡Œã„ã€ãƒ¯ãƒ¼ã‚¯ã‚·ãƒ§ãƒƒãƒ—é€²è¡Œç”¨ã®è³‡æ–™ã‚’è¿½åŠ ã—ãŸã‚‚ã®ã§ã€ä»¥ä¸‹ã«è¨˜è¼‰ã™ã‚‹ã‚¯ãƒªã‚¨ã‚¤ãƒ†ã‚£ãƒ–ãƒ»ã‚³ãƒ¢ãƒ³ã‚ºï¼ˆè¡¨ç¤º-éžå–¶åˆ©-ç¶™æ‰¿ï¼‰*2ã®å…ƒã§å…¬é–‹ã„ãŸã—ã¾ã™ã€‚ ã€Œå–¶åˆ©ç›®çš„ã®åˆ©ç”¨ã€ã€Œè»¢è¼‰ãƒ»å¼•ç”¨ã€ã€Œè³‡æ–™å†…å®¹ã«é–¢ã™ã‚‹ãŠå•ã„åˆã‚ã›ã€ã«ã¤ã„ã¦ã¯ã€Œå ±å‘Šæ›¸ã®è»¢è¼‰ãƒ»å¼•ç”¨é€£çµ¡ï¼ˆJNSAï¼‰ã€ï¼ˆãƒªãƒ³ã‚¯ã¯ã“ã¡ã‚‰ï¼žï¼žï¼‰ã‹ã‚‰ã”é€£çµ¡ä¸‹ã•ã„ã€‚ã€Œå–¶åˆ©ç›®çš„ã®åˆ©ç”¨ã€ã§ã®ãŠå•åˆã›ã®å ´åˆã¯ã€ã€Œï¼˜ï¼Žå¼•ç”¨éƒ¨åˆ† ã€ã®è‡ªç”±è¨˜å…¥æ¬„ã«ã”è¦æœ›ã‚’ã”è¨˜å…¥ãã ã•ã„ã€‚ ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã®å†…å®¹ã¯ã€ã€Œ01 ãƒ¯ãƒ¼ã‚¯ã‚·ãƒ§ãƒƒãƒ—é€²è¡Œç”¨è³‡æ–™ã€ã«è¨˜è¼‰ã•ã‚Œã¦ã„ã¾ã™ã€‚2ãƒšãƒ¼ã‚¸ç›®ã®ã€Œè³‡æ–™ã€€ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆåã€ã¨ç…§ã‚‰ã—ã¦å‚ç…§ä¸‹ã•ã„ã€‚ ã”è‡ªèº«ã®ä¼æ¥ã«ã‚ã£ãŸå†…å®¹ã«ä¿®æ£ã—ã¦æ´»ç”¨ã„ãŸã
rokujyouhitoma 2025/01/05
CISO-PRACTSIEãƒ¯ãƒ¼ã‚¯ã‚·ãƒ§ãƒƒ

CISO-PRACTSIE

CISO

Security
ãƒªãƒ³ã‚¯
https://www.soumu.go.jp/main_content/000978472.pdf
rokujyouhitoma 2025/01/05
RakutenMobile

Security

ç·å‹™çœ
ãƒªãƒ³ã‚¯
ç§ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±åŽé›†æ³•ã‚’æ•´ç†ã—ã¦ã¿ãŸï¼ˆ2025å¹´ç‰ˆï¼‰ - Fox on Security
ï¼‘ï¼Žã¯ã˜ã‚ã« ï¼’ï¼Žã‚¤ãƒ³ãƒ—ãƒƒãƒˆã§å‚ç…§ã—ã¦ã„ã‚‹æƒ…å ±æºï¼ˆæµ·å¤–ï¼‰ ï¼“ï¼Žã‚¤ãƒ³ãƒ—ãƒƒãƒˆã§å‚ç…§ã—ã¦ã„ã‚‹æƒ…å ±æºï¼ˆå›½å†…ï¼‰ ï¼”ï¼Žèª¿æŸ»ã«ã‚ˆãä½¿ã£ã¦ã„ã‚‹ä¾¿åˆ©ãƒ„ãƒ¼ãƒ« ï¼•ï¼Žã‚¢ã‚¦ãƒˆãƒ—ãƒƒãƒˆã‚‚å¿˜ã‚Œã¦ã¯ã„ã‘ãªã„ å‰å¤§ãªå…ˆäººé”ã¸æ•¬æ„ã‚’è¡¨ã—ã¦ãƒ»ãƒ»ãƒ» æ–°å¹´ã‚ã‘ã¾ã—ã¦ãŠã‚ã§ã¨ã†ã”ã–ã„ã¾ã™ã€‚æ¯Žå¹´ã“ã®æ™‚æœŸã«æ›´æ–°ã—ã¦ã„ã‚‹ã€Œç§ã®æƒ…å ±åŽé›†æ³•(2025å¹´ç‰ˆï¼‰ã€ã‚’ä»Šå¹´ã‚‚å…¬é–‹ã—ã¾ã™ã€‚ ï¼‘ï¼Žã¯ã˜ã‚ã« ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã¯å›½å¢ƒã‚’è¶Šãˆã¦ç™ºç”Ÿã—ã¦ã„ã¾ã™ã€‚ãƒ©ãƒ³ã‚µãƒ ã‚¦ã‚§ã‚¢ã‚„ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ã€DDoSæ”»æ’ƒãªã©ã®æ‰‹æ³•ã‚’ç”¨ã„ã‚‹è„…å¨ã‚¢ã‚¯ã‚¿ãƒ¼ã®å¤šãã¯ã€æ—¥æœ¬ã§ã¯ãªãæµ·å¤–ã«æ‹ ç‚¹ã‚’ç½®ã„ã¦ã„ã¾ã™ã€‚ã“ã®ãŸã‚ã€æ—¥æœ¬ã®è¦å¯ŸãŒå›½å†…æ‹ ç‚¹ã‚„å”åŠ›è€…ã‚’æ‘˜ç™ºã™ã‚‹ã‚±ãƒ¼ã‚¹ã¯ä¸€éƒ¨ã‚ã‚‹ã‚‚ã®ã®ã€è„…å¨ã‚¢ã‚¯ã‚¿ãƒ¼ã®é¦–è¬€è€…ï¼ˆã‚³ã‚¢ãƒ¡ãƒ³ãƒãƒ¼ï¼‰ã‚’ã€ç‰¹ã«æ—¥æœ¬ã§é€®æ•ã¾ã§è‡³ã‚‹äº‹ã¯æ¥µã‚ã¦å°‘ãªã„ã®ãŒç¾çŠ¶ã§ã™ã€‚ ã“ã®ãŸã‚ä¸–ç•Œã®è„…å¨å‹•å‘ã‚’ã€å¯èƒ½ãªé™ã‚Šæ£ç¢ºã«æŠŠæ¡ã™ã‚‹ã“ã¨ã¯ã€æ—¥æœ¬çµ„ç¹”ã«ã¨ã£ã¦ã¾ã™ã¾ã™é‡è¦ã«ãªã£ã¦ãã¦ã„ã¾ã™ã€‚ ã—ã‹ã—ã€ãã®å½¹å‰²ã‚’æ‹…ã†ã¹
rokujyouhitoma 2025/01/04
Security
ãƒªãƒ³ã‚¯
ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ã€Œæœ‰äº‹ã€ã«ä½•ãŒå¿…è¦ãªã®ã‹ ï½žLocked Shields2024æ¼”ç¿’å‚åŠ ã‹ã‚‰ã®è€ƒå¯Ÿï½ž - JPCERT/CC Eyes | JPCERTã‚³ãƒ¼ãƒ‡ã‚£ãƒãƒ¼ã‚·ãƒ§ãƒ³ã‚»ãƒ³ã‚¿ãƒ¼å…¬å¼ãƒ–ãƒã‚°ï¼ èˆˆå‘³æ·±ã„ã€‚æŠ€è¡“ã ã‘ã˜ã‚ƒãªãéžæŠ€è¡“ã®æ¼”ç¿’ã‚‚å«ã¾ã‚Œã¦ã‚‹ã®ã‹ - ã¾ã£ã¡ã‚ƒã ã„ãµãã®æ—¥è¨˜
ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ã€Œæœ‰äº‹ã€ã«ä½•ãŒå¿…è¦ãªã®ã‹ ï½žLocked Shields2024æ¼”ç¿’å‚åŠ ã‹ã‚‰ã®è€ƒå¯Ÿï½ž - JPCERT/CC Eyes | JPCERTã‚³ãƒ¼ãƒ‡ã‚£ãƒãƒ¼ã‚·ãƒ§ãƒ³ã‚»ãƒ³ã‚¿ãƒ¼å…¬å¼ãƒ–ãƒã‚° 2024å¹´4æœˆ23æ—¥ï½ž26æ—¥ã€NATO CCDCOEä¸»å‚¬ã®å›½éš›ã‚µã‚¤ãƒãƒ¼æ¼”ç¿’ã€ŒLocked Shields 2024ã€ãŒé–‹å‚¬ã•ã‚Œã€JPCERT/CCã‹ã‚‰ç†è€…ã‚’å«ã‚€5åãŒå‚åŠ ã—ã¾ã—ãŸã€‚ä»Šå›žã¯ã“ã†ã—ãŸæ¼”ç¿’ã«å®˜æ°‘åŒæ–¹ãŒå‚åŠ ã™ã‚‹ã“ã¨ã®æ„ç¾©ã«ã¤ã„ã¦è€ƒãˆã¾ã™ã€‚ æ¼”ç¿’ã®æ¦‚è¦ç‰ã¯ã“ã‚Œã¾ã§ã«ã‚‚ã•ã¾ã–ã¾ãªå‚åŠ è€…ï¼çµ„ç¹”ã®æ–¹ã®è¨˜äº‹ãŒå‡ºã¦ã„ã¾ã™ã®ã§ã€ãã¡ã‚‰ã‚’ã”è¦§ã„ãŸã ã‘ã‚Œã°ã¨æ€ã„ã¾ã™ã€‚ ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ã€Œæœ‰äº‹ã€ã«ä½•ãŒå¿…è¦ãªã®ã‹ ï½žLocked Shields2024æ¼”ç¿’å‚åŠ ã‹ã‚‰ã®è€ƒå¯Ÿï½ž - JPCERT/CC Eyes | JPCERTã‚³ãƒ¼ãƒ‡ã‚£ãƒãƒ¼ã‚·ãƒ§ãƒ³ã‚»ãƒ³ã‚¿ãƒ¼å…¬å¼ãƒ–ãƒã‚° ã“ã®Locked Shieldsæ¼”ç¿’ã§ã¯æƒ…å‹¢åˆ†
rokujyouhitoma 2025/01/04
Security
ãƒªãƒ³ã‚¯
2025å¹´æ°—ã«ãªã‚‹é€šä¿¡æ¥ç•Œãƒˆãƒ¬ãƒ³ãƒ‰ï¼ˆå¾Œç·¨ï¼‰ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article? ã“ã‚“ã«ã¡ã¯ã€Assieã§ã™ã€‚ å…ˆæ—¥ã®å‰ç·¨(1~5)ã«ç¶šã„ã¦ã€ä»Šæ—¥ã¯å¾Œç·¨ã„ãã¾ã™ï¼ 6.æ—¥æœ¬ã®ã‚ªãƒšãƒ¬ãƒ¼ã‚¿ãƒ¼ã€ã‚¤ãƒ³ãƒ•ãƒ©ã§æµ·å¤–ã¸ åŽ»å¹´ã¯2æœˆã«ã‚ªãƒ¼ãƒ—ãƒ³RANã‚’ä¸–ç•Œã§æŽ¨é€²ã™ã‚‹NTT Docomoã¨NECã®åˆå¼ã€OREX SAIãŒç™ºè¡¨ã«ãªã‚Šã€Rakuten Symphonyã«åŠ ãˆã¦ã¤ã„ã«Docomoã‚‚ãƒ¢ãƒã‚¤ãƒ«ã‚¤ãƒ³ãƒ•ãƒ©ã§æµ·å¤–ã«å‹è² ã«å‡ºã¾ã—ãŸã!!ä»Šã®ã¨ã“ã‚ç™ºè¡¨ã•ã‚Œã¦ã„ã‚‹ã®ã¯ã‚«ãƒ³ãƒœã‚¸ã‚¢ã®5Gå‘ã‘ã§ã™ãŒã€ã‚«ãƒ³ãƒœã‚¸ã‚¢ã§ORANã¯ã„ã¤å§‹ã¾ã‚‹ã®ã‹æ¥½ã—ã¿ã§ã™ã€‚ã¡ãªã¿ã«ã‚«ãƒ³ãƒœã‚¸ã‚¢ã¯2023å¹´12æœˆæœ«ã«æ—¥æœ¬æ”¿åºœãŒã‚«ãƒ³ãƒœã‚¸ã‚¢å›½ç«‹ãƒ‡ãƒ¼ã‚¿ã‚»ãƒ³ã‚¿ãƒ¼ã«æœ€å¤§23å„„å††ç›¸å½“ã®ç„¡å„Ÿ
rokujyouhitoma 2025/01/04
Telecom
ãƒªãƒ³ã‚¯
Google Cybersecurity
New year. Big goals. Bigger savings. Unlock a year of unlimited access to learning with Coursera Plus for $199. Save now. Get on the fast track to a career in cybersecurity. In this certificate program, you'll learn in-demand skills, and get AI training from Google experts. Learn at your own pace, no degree or experience required.
rokujyouhitoma 2025/01/03
Google

Security
ãƒªãƒ³ã‚¯
SP 800-79-1, Guidelines for the Accreditation of Personal Identity Verification Card Issuers | CSRC
rokujyouhitoma 2025/01/03
SP800-79-1

NIST

Security
ãƒªãƒ³ã‚¯
FIPS 201-2, Personal Identity Verification (PIV) of Federal Employees and Contractors | CSRC
rokujyouhitoma 2025/01/03
FIPS201-2

Security
ãƒªãƒ³ã‚¯
FIPS 140-2 - Wikipedia
rokujyouhitoma 2025/01/02
FIPS

Security
ãƒªãƒ³ã‚¯
S3ã®ãƒ¡ã‚¿ãƒ‡ãƒ¼ã‚¿ã‚’ç”¨ã„ãŸæ”»æ’ƒ
ä¾‹ãˆã°ã€Content-Typeãƒ¡ã‚¿ãƒ‡ãƒ¼ã‚¿ã®å€¤ã‚’ç´°å·¥ã—ãŸã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã‚’å–å¾—ã•ã›ã‚‹ã“ã¨ã§XSSã‚’ç™ºç”Ÿã•ã›ãŸã‚Šã€Content-Dispositionãƒ¡ã‚¿ãƒ‡ãƒ¼ã‚¿ã‚’ç´°å·¥ã—ã¦RFD (Reflected File Download) ã‚’å¼•ãèµ·ã“ã—ãŸã‚Šã€ x-amz-storage-classãƒ¡ã‚¿ãƒ‡ãƒ¼ã‚¿ã‚’æ“ä½œã—ã¦æ„å›³ã›ã¬ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã‚¯ãƒ©ã‚¹ã‚’ä½¿ç”¨ã•ã›EDoS (Economical Deninal of Sustainability)ã‚’ç™ºç”Ÿã•ã›ãŸã‚Šã€ã¨ã„ã£ãŸæ”»æ’ƒãŒæˆç«‹ã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ä¸ã§ã‚‚Content-Typeã‚’æ‚ªç”¨ã—ãŸXSSã¯ã€S3ã®ä»•æ§˜ã‚„ä½¿ç”¨æ–¹æ³•ã ã‘ã§ãªãã€ãƒ–ãƒ©ã‚¦ã‚¶ã®æŒ™å‹•ã«ã‚‚æ³¨æ„ã‚’æ‰•ã†å¿…è¦ãŒã‚ã‚Šã€ã‚¢ãƒ—ãƒªé–‹ç™ºè€…ã¯æ”»æ’ƒã®åŽŸç†ã¨å¯¾å‡¦ã‚’ç†è§£ã—ã¦ãŠãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ 9/21ã«Azaraã•ã‚“ã¨Security-JAWSã®ã‚³ãƒ©ãƒœã§ã€ã“ã®å•é¡Œã«ãƒ•ã‚©ãƒ¼ã‚«ã‚¹ã—ãŸCTFã‚¤ãƒ™ãƒ³ãƒˆã€Œã¨ã‚ã‚‹æµ·è±¹ã¨Security-
rokujyouhitoma 2025/01/02
Security
ãƒªãƒ³ã‚¯
MSTICPyã®ç´¹ä»‹ã¨ã‚¯ã‚¤ãƒƒã‚¯ã‚¹ã‚¿ãƒ¼ãƒˆ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article? ä¼ãˆãŸã„ã“ã¨ Microsoftç¤¾ãŒä¸å¿ƒã¨ãªã£ã¦é–‹ç™ºã—ã¦ã„ã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ MSTICpyã«ã¤ã„ã¦æ›¸ã‹ã‚Œã¦ã„ã‚‹Qiitaã®è¨˜äº‹ãŒã»ã¨ã‚“ã©ãªã‹ã£ãŸãŸã‚ã€ ã¾ãšã¯MSTICpyã§ä½•ãŒã§ãã‚‹ã‹ã®æ©Ÿèƒ½ç´¹ä»‹ã‚’ã—ã€ã‚¯ã‚¤ãƒƒã‚¯ã‚¹ã‚¿ãƒ¼ãƒˆæ¦‚è¦(Quick Start Overview)ã®ãƒšãƒ¼ã‚¸ã§ç´¹ä»‹ã•ã‚Œã¦ã„ã‚‹æ©Ÿèƒ½ã«ã¤ã„ã¦ã€ãƒˆãƒ¬ãƒ¼ã‚¹å®Ÿè¡Œã—ãŸãƒˆãƒ©ã‚·ãƒ¥ãƒ¼ãƒã‚¤ãƒ³ãƒˆã‚’å…±æœ‰ã§ãã‚Œã°ã¨æ€ã„ã¾ã™ã€‚ â€» msticpyã®ã€Œãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4.0ã€ã‚’å¯¾è±¡ã«ãƒ†ã‚¹ãƒˆã—ãŸçµæžœã§ã™ã®ã§ã”æ³¨æ„ãã ã•ã„ã€‚ MSTICpy 101 MSTICPyã¨ã¯ã€ã€ŒMicrosoft Th
rokujyouhitoma 2024/12/31
MSTICPy

Security

Python
ãƒªãƒ³ã‚¯
å®Ÿè·µã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç›£è¦–åŸºç›¤æ§‹ç¯‰
æœ¬æ›¸ã§ã¯æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®ä¸€ç’°ã§ã‚ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç›£è¦–ã‚’å®Ÿç¾ã™ã‚‹ãŸã‚ã®æ–¹æ³•ã¨ã—ã¦ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç›£è¦–ã®åŸºç›¤ã‚’è‡ªåˆ†ã§æ§‹ç¯‰ã™ã‚‹ãŸã‚ã«å¿…è¦ã¨ãªã‚‹å®Ÿè·µçš„ãªè¨è¨ˆãƒ»å®Ÿè£…æ–¹æ³•ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã™ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç›£è¦–åŸºç›¤ã‚’å†…è£½ã™ã‚‹æ–¹ã ã‘ã§ãªãã€æ—¢è£½ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãƒ»ã‚µãƒ¼ãƒ“ã‚¹ã‚’åˆ©ç”¨ã—ã¦åŸºç›¤æ§‹ç¯‰ã—ã‚ˆã†ã¨ã—ã¦ã„ã‚‹æ–¹ã«ã‚‚å‚è€ƒã«ãªã‚Œã°å¹¸ã„ã§ã™ã€‚
rokujyouhitoma 2024/12/30
Security
ãƒªãƒ³ã‚¯
è©¦é¨“è¦é ˜å¤‰æ›´ã§é›£åŒ–
è©¦é¨“è¦é ˜ãŒå¤‰ã‚ã£ã¦ã‹ã‚‰é›£åŒ–ã—ãŸæ°—ãŒã—ã¾ã™ã€‚ åˆæ ¼çŽ‡ã§è¦‹ã¦ã‚‚è¦é ˜å¤‰ã‚ã£ã¦ã‹ã‚‰ã©ã‚“ã©ã‚“ä¸‹ãŒã£ã¦ã‚‹ã—â€¦ å›žç”ã‚‚è«–è¿°å¯„ã‚Šã«ãªã£ã¦ãã¦ã€è¡¨é¢ä¸Šã®çŸ¥è˜ã˜ã‚ƒå—ã‹ã‚‰ãªã„æ°—ãŒã—ã¾ã™ã€‚ çš†ã•ã‚“ã©ã†æ€ã„ã¾ã™ã‹ï¼Ÿ
rokujyouhitoma 2024/12/28
ãƒªãƒ³ã‚¯
SBOMå°Žå…¥ãƒ»é‹ç”¨ã®æ‰‹å¼•ã | ãƒ‡ã‚¸ã‚¿ãƒ«äººæã®è‚²æˆ | IPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
æƒ³å®šèªè€… æœ¬æ›¸ã§ã¯SBOMã®å°Žå…¥ãƒ»é‹ç”¨ã‚’ä¸»å°Žã™ã‚‹éƒ¨é–€ã‚’ä¸»ãªå¯¾è±¡èªè€…ã¨ã—ã¦æƒ³å®šã—ã¦ã„ã¾ã™ã€‚ã¾ãŸã€SBOMã‚’çŸ¥ã‚‰ãªã„çµ„ç¹”ã‚’ã¯ã˜ã‚ã€å°Žå…¥ã«èª²é¡Œã‚’æŠ±ãˆã¦ã„ã‚‹çµ„ç¹”ã€å°Žå…¥å¾Œã«æ´»ç”¨ã§ãã¦ã„ãªã„çµ„ç¹”ãªã©ã€å¹…åºƒã„çµ„ç¹”å±¤ã‚’å¯¾è±¡ã¨ã—ã¦ã„ã¾ã™ã€‚ æœ¬æ›¸ã®æ§‹æˆ ç¬¬1ç« èƒŒæ™¯ã¨ç›®çš„ ç¬¬2ç« SBOMã®æ¦‚è¦ ç¬¬3ç« SBOMå°Žå…¥ãƒ»é‹ç”¨ã«é–¢ã™ã‚‹åŸºæœ¬æŒ‡é‡ ç¬¬4ç« ç’°å¢ƒæ§‹ç¯‰ãƒ»ä½“åˆ¶æ•´å‚™ãƒ•ã‚§ãƒ¼ã‚ºã«ãŠã‘ã‚‹å®Ÿæ–½äº‹é … ç¬¬5ç« SBOMä½œæˆãƒ»å…±æœ‰ãƒ•ã‚§ãƒ¼ã‚ºã«ãŠã‘ã‚‹å®Ÿæ–½äº‹é … ç¬¬6ç« SBOMé‹ç”¨ãƒ»ç®¡ç†ãƒ•ã‚§ãƒ¼ã‚ºã«ãŠã‘ã‚‹å®Ÿæ–½äº‹é … ç¬¬7ç« ã¾ã¨ã‚ Appendix ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ SBOMå°Žå…¥ãƒ»é‹ç”¨ã®æ‰‹å¼•ã(PDF:3.0 MB) æ›´æ–°å±¥æ´ 2024å¹´12æœˆ20æ—¥
rokujyouhitoma 2024/12/23
SBOM

Security
ãƒªãƒ³ã‚¯
è¨€èªžSandboxç’°å¢ƒã®è„†å¼±æ€§ã¨ãã®çœŸå› ã®è€ƒå¯Ÿ - RestrictedPythonã‚’é¡Œæã«
rokujyouhitoma 2024/12/17
Python

RestrictedPython

Security
ãƒªãƒ³ã‚¯
mixi2
ä»Šã‚’å…±æœ‰ã§ãã€ã™ãé›†ãˆã‚‹
rokujyouhitoma 2024/12/16
ãƒªãƒ³ã‚¯
CVSSã‚’é€†ã‹ã‚‰èªã‚€ã¨ï¼Ÿè„†å¼±æ€§å¯¾å¿œã®æ„æ€æ±ºå®šã«ä½¿ãˆã‚‹SSVCã«ã¤ã„ã¦ - NTT Communications Engineers' Blog
ã“ã®è¨˜äº‹ã¯ã€ NTT Communications Advent Calendar 2024 14æ—¥ç›®ã®è¨˜äº‹ã§ã™ã€‚ è„†å¼±æ€§å¯¾å¿œã®åˆ†é‡Žã§æ³¨ç›®åº¦ãŒé«˜ã¾ã‚Šã¤ã¤ã‚ã‚‹SSVCã®æ¦‚è¦ã¨ã€ãã®é‹ç”¨æ–¹æ³•ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã™ã€‚ è„†å¼±æ€§å¯¾å¿œã®èª²é¡Œ å…¬é–‹ã•ã‚Œã‚‹è„†å¼±æ€§ã®å¢—åŠ å®Ÿéš›ã«æ‚ªç”¨ã•ã‚Œã‚‹è„†å¼±æ€§ã¯ä¸€éƒ¨ã«éŽãŽãªã„ è„†å¼±æ€§ã®æ‚ªç”¨ã¾ã§ãŒé«˜é€ŸåŒ– CVSSã«ã‚ˆã‚‹è„†å¼±æ€§ã®ãƒˆãƒªã‚¢ãƒ¼ã‚¸ SSVCã¨ã¯ SSVCã‚’æ§‹æˆã™ã‚‹è¦ç´ ã‚¹ãƒ†ãƒ¼ã‚¯ãƒ›ãƒ«ãƒ€ãƒ¼ã®ãƒãƒ¼ãƒ«ã®ç‰¹å®š æ±ºå®šã™ã¹ãå„ªå…ˆåº¦ï¼ˆDecisionï¼‰ã®ç‰¹å®š DecisionãŒå–ã‚Šã†ã‚‹å€¤ï¼ˆOutcomeï¼‰ã®å®šç¾© Outcomeã®ç®—å‡ºã«ä½¿ã†å…¥åŠ›ã®æ±ºå®šï¼ˆDecision Pointsï¼‰ Outcomeã®ç®—å‡ºæ–¹æ³•ã®æ±ºå®šï¼ˆPolicyï¼‰ è¦ç´ ã®ã¾ã¨ã‚ æ—¢å®šã®Decision Modelã®æ´»ç”¨ Deployer Decision Model SSVCã®æ´»ç”¨ çµ„ç¹”ã«åˆã‚ã›ãŸModelã®é¸æŠž SSVCé‹
rokujyouhitoma 2024/12/15
SSVC

Security
ãƒªãƒ³ã‚¯
æ”»æ’ƒè€…ãŒæŽ¡ç”¨ã—ãŸã€Œ.htaccessã€ã‚’æ”¹ã–ã‚“ã—ã¦ã€ä»»æ„ã®æ‹¡å¼µåã§PHPã‚’å®Ÿè¡Œã™ã‚‹æ–¹æ³•
ã¿ãªã•ã‚“ã€ã“ã‚“ã«ã¡ã¯ã€‚mï¼ˆ@the_art_of_nerdï¼‰ã§ã™ã€‚ ä»Šå›žã¯ç§ãŒWebã‚µãƒ¼ãƒãƒ¼ã‚’ãƒ•ã‚©ãƒ¬ãƒ³ã‚¸ãƒƒã‚¯èª¿æŸ»ã‚’æ‹…å½“ã—ãŸéš›ã«ç™ºè¦‹ã—ãŸã€ä»»æ„ã®æ‹¡å¼µåã‹ã‚‰PHPã‚’å®Ÿè¡Œã™ã‚‹æ–¹æ³•ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã™ã€‚ èƒŒæ™¯ Webã‚µãƒ¼ãƒãƒ¼ãŒæ”»æ’ƒè€…ã«ã‚ˆã£ã¦ä¾µå®³ã•ã‚ŒãŸã¨ã„ã†äº‹æ¡ˆã§ã€ãƒ•ã‚©ãƒ¬ãƒ³ã‚¸ãƒƒã‚¯èª¿æŸ»ã‚’å®Ÿæ–½ã—ãŸéš›ã«ç™ºè¦‹ã—ãŸãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ã§ã™ã€‚ï¼ˆæ£è¦ã®ä»•æ§˜ã‚’æ‚ªç”¨ï¼‰ Webã‚µãƒ¼ãƒãƒ¼ã®ä¾µå®³ã®ãŸã‚ã€WebShellã®è¨ç½®ã‚’ç–‘ã„ã€ã¾ãšæ‹¡å¼µåãƒ™ãƒ¼ã‚¹ã§ä¸å¯©ãªãƒ•ã‚¡ã‚¤ãƒ«ï¼ˆæ”¹ã–ã‚“ãƒ»ä½œæˆï¼‰ãŒå˜åœ¨ã—ãªã„ã‹èª¿æŸ»ã—ã¦ã„ãŸã¨ã“ã‚ã€ã„ãã¤ã‹ä¸å¯©ãªãƒ•ã‚¡ã‚¤ãƒ«ã¯ç™ºè¦‹ã•ã‚Œã¾ã—ãŸãŒã€ã©ã†ã—ã¦ã‚‚WebShellã®ã‚ˆã†ãªæ©Ÿèƒ½ã‚’æœ‰ã™ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã ã‘è¦‹ã¤ã‹ã‚Šã¾ã›ã‚“ã§ã—ãŸã€‚ ãã“ã§ã€æ‹¡å¼µåã§è¦‹ã¦ã„ãèª¿æŸ»ã‹ã‚‰å„ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã”ã¨ã«æ°—ã«ãªã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ãŒå˜åœ¨ã—ãªã„ã‹ã®èª¿æŸ»ã«åˆ‡ã‚Šæ›¿ãˆãŸã¨ã“ã‚ã€1ã¤ã ã‘æ˜Žã‚‰ã‹ã«Webã‚µãƒ¼ãƒãƒ¼ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã¨ã—ã¦é•å’Œæ„Ÿã®ã‚ã‚‹"ãƒ•ã‚¡ã‚¤ãƒ«å"ãŒä»˜ã‘ã‚‰ã‚ŒãŸCSSãƒ•ã‚¡
rokujyouhitoma 2024/12/12
Security
ãƒªãƒ³ã‚¯
è„…å¨ãƒ¢ãƒ‡ãƒªãƒ³ã‚° x MINI Hardening ã«å‚åŠ ã—ã¦å¾—ãŸã‚‚ã®
Cyber-sec+ã®ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ãƒªãƒ¼ãƒ€ã‚’ã‚„ã£ã¦ã„ã‚‹12banã§ã™ã€‚ æ˜¨æ—¥ã¯ã“ã¡ã‚‰ã®ã‚¤ãƒ™ãƒ³ãƒˆã«å‚åŠ ã—ã¾ã—ãŸã€‚ å‚åŠ ã®ç›®çš„ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ä¸–ç•Œã«å…¥ã£ã¦æ•°å¹´ã€‚ãƒãƒ¼ãƒ‰ãƒ‹ãƒ³ã‚°ã®å˜åœ¨ã¯çŸ¥ã£ã¦ã„ã¾ã—ãŸãŒã€æ•·å±…ã®é«˜ã•ã‹ã‚‰ãƒãƒ¼ãƒ‰ãƒ‹ãƒ³ã‚°ã«å‚åŠ ã—ãŸã“ã¨ã¯ã‚ã‚Šã¾ã›ã‚“ã§ã—ãŸã€‚ ãã‚“ãªä¸ã§å‹äººï¼ˆåŒã˜ãCyber-sec+é‹å–¶ã§ã‚ã‚‹hayapiã•ã‚“ï¼‰ãŒä¸»å‚¬ã™ã‚‹ã‚¤ãƒ™ãƒ³ãƒˆã¨ã„ã†ã“ã¨ã€ãã—ã¦ãƒãƒ¼ãƒ‰ãƒ‹ãƒ³ã‚°ã¸ã®èˆˆå‘³ã‹ã‚‰å‚åŠ ã—ã¾ã—ãŸã€‚ å¾—ã‚‰ã‚ŒãŸã‚‚ã® å½¹å‰²åˆ†æ‹…ã€ã‚³ãƒŸãƒ¥ãƒ‹ã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚„æˆ¦ç•¥ã®å¤§åˆ‡ã• ã™ãã«æ‰‹ãŒå‹•ããƒ¬ãƒ™ãƒ«ã§ã®ã‚·ã‚¹ãƒ†ãƒ æ§‹æˆã®ç†è§£ã®å¤§åˆ‡ã• SOCï¼ˆãƒã‚°ã®ç›£è¦–ã€åˆ†æžï¼‰ã®å¤§åˆ‡ã• å®Ÿéš›ã®ç¾å ´ã§ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ‹…å½“è€…ã¯ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã‚³ãƒžãƒ³ãƒ€ãƒ¼ï¼ˆã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã‚’è§£æ±ºã«å°ŽãæŒ‡æ®å®˜ï¼‰ã‹ã€SOCï¼ˆãƒã‚°ã®ç›£è¦–ã€åˆ†æžï¼‰ã®ã©ã¡ã‚‰ã‹ã®å½¹å‰²ã«ãªã‚‹ã“ã¨ãŒå¤šã„ã®ã§ã¯ãªã„ã‹ã¨æ€ã„ã¾ã™ã€‚ãã®æ„å‘³ã§ã¯2ã¯å®Ÿéš›ã«ã¯é–‹ç™ºï¼ˆã‚¢ãƒ—ãƒªã€ã‚¤ãƒ³ãƒ•ãƒ©ï¼‰ã«ãŠä»»ã›ã—ã¦ã€ãã®é–¢ä¿‚æ€§ã¥ãã‚Š
rokujyouhitoma 2024/12/09
Security

Hardening
ãƒªãƒ³ã‚¯
è„…å¨ãƒ¢ãƒ‡ãƒªãƒ³ã‚°ã‚³ãƒã‚¯ãƒˆæ±äº¬ (ç•¥ç§°:TMC Tokyo)ã®ãƒãƒ¼ãƒ³ãƒã‚¤ãƒ™ãƒ³ãƒˆã«å‚åŠ ã—ã¾ã—ãŸ
è„…å¨ãƒ¢ãƒ‡ãƒªãƒ³ã‚°ã‚ªãƒ¼ãƒ—ãƒ³ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ã•ã‚“ãŒã€12/7(åœŸ)ã‹ã‚‰ã€Œè„…å¨ãƒ¢ãƒ‡ãƒªãƒ³ã‚°ã‚³ãƒã‚¯ãƒˆæ±äº¬ / Threat Modeling Connect Tokyo Chapter (ç•¥ç§°:TMC Tokyo)ã€ã¨ãªã‚Šã€ã‚°ãƒãƒ¼ãƒãƒ«ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ã¨ã—ã¦æ´»å‹•ã™ã‚‹ã¨ã„ã†ã“ã¨ã§ã€ãã®ãƒãƒ¼ãƒ³ãƒã‚¤ãƒ™ãƒ³ãƒˆã«éŠã³ã«å‹‰å¼·ã—ã«è¡Œãã¾ã—ãŸã‚ˆ(Â´ãƒ»Ï‰ãƒ»ï½€) è„…å¨ãƒ¢ãƒ‡ãƒªãƒ³ã‚°ã‚³ãƒã‚¯ãƒˆæ±äº¬ã¨ã¯ä½•ã‹ è„…å¨ãƒ¢ãƒ‡ãƒªãƒ³ã‚°ã‚ªãƒ¼ãƒ—ãƒ³ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ã¨ã—ã¦è„…å¨ãƒ¢ãƒ‡ãƒªãƒ³ã‚°ã«é–¢ã™ã‚‹çŸ¥è¦‹ã‚’å…±æœ‰ã™ã‚‹ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ãŒä»Šå¹´ä½•åº¦ã‹å‹‰å¼·ä¼šã‚’é–‹å‚¬ã—ã¦ã„ã¦ä¸è©³ç§ã‚ã‚‚ä½•åº¦ã‹å‚åŠ ã•ã›ã¦ã„ãŸã ã„ã¦ã„ãŸã®ã§ã™ãŒã€ã“ã®åº¦æ£å¼ã«12/7(åœŸ)ã«ã‚°ãƒãƒ¼ãƒãƒ«ãªè„…å¨ãƒ¢ãƒ‡ãƒªãƒ³ã‚°ã®ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£Threat Modeling Connectã®Tokyo Chapterã¨ãªã£ã¦ã‚°ãƒãƒ¼ãƒãƒ«ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ã¨ã—ã¦æ´»å‹•ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã—ãŸã€‚ã‚¢ã‚¸ã‚¢ã§ã¯ã¾ã ã‚„ã£ã¦ã„ã‚‹ã¨ã“ã‚ãŒã¾ã ãªã„ã¨ã®ã“ã¨ã§ã€ã‚¢ã‚¸ã‚¢ã§ã¯æ±äº¬ãŒ
rokujyouhitoma 2024/12/09
Security
ãƒªãƒ³ã‚¯
1 2 3 4 5 6 7 8 9 10 æ¬¡ã®ãƒšãƒ¼ã‚¸