[B! ãƒã‚§ãƒƒã‚¯] ionisã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ionis id:ionis

ãƒã‚§ãƒƒã‚¯ã«é–¢ã™ã‚‹ionisã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (8)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

AWSã‚’ä½¿ã†ã¨ãã«ç¢ºèªã™ã¹ã52ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯é …ç›®ã¨15åˆ†ã§ã§ãã‚‹ç°¡å˜ãªãƒã‚§ãƒƒã‚¯ã®æ–¹æ³•ï½œDevelopersIO
ã¯ã˜ã‚ã« è‡ªåˆ†ãŒä½¿ã£ã¦ã„ã‚‹AWSç’°å¢ƒã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«å•é¡ŒãŒãªã„ã‹ã¨å¿ƒé…ã«ãªã‚‹ã“ã¨ã¯ãªã„ã§ã—ã‚‡ã†ã‹ï¼Ÿç§ã¯ã‚ˆãã‚ã‚Šã¾ã™ã€‚ãã“ã§CIS Amazon Web Service Foundations Benchmark ã¨ã„ã†AWSã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã«æ²¿ã£ã¦ä½¿ã£ã¦ã„ã‚‹AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®çŠ¶æ³ã‚’ãƒã‚§ãƒƒã‚¯ã—ã¦ã¿ã¾ã—ãŸã€‚ãƒã‚§ãƒƒã‚¯é …ç›®ã¯å…¨éƒ¨ã§52ã‚ã‚Šã¾ã™ã€‚å†…å®¹ã‚’ä¸€é€šã‚Šç¢ºèªã—ãŸã¨ã“ã‚çŸ¥ã‚‰ãªã‹ã£ãŸAWSã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®æ©Ÿèƒ½ã‚„ãƒŽã‚¦ãƒã‚¦ã‚’çŸ¥ã‚‹ã“ã¨ãŒã§ãã€è¦‹ãŸã ã‘ã§ã‚‚ã¨ã¦ã‚‚å‹‰å¼·ã«ãªã‚Šã¾ã—ãŸã€‚ç°¡å˜ã«ãƒã‚§ãƒƒã‚¯ã™ã‚‹æ–¹æ³•ã‚‚ä½µã›ã¦ç´¹ä»‹ã—ã¾ã™ã®ã§ãœã²ä½¿ã£ã¦ã„ã‚‹AWSç’°å¢ƒã§ãƒã‚§ãƒƒã‚¯ã—ã¦ã¿ã¦ãã ã•ã„ã€‚ 1 IAM 1.1 rootã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’åˆ©ç”¨ã—ãªã„ rootã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¯å¼·åŠ›ãªæ¨©é™ã‚’æŒã¤ãŸã‚ã€rootã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’åˆ©ç”¨ã›ãšIAMãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’åˆ©ç”¨ã—ã¦ãã ã•ã„ã€‚é€šå¸¸é‹ç”¨ã§rootã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒåˆ©ç”¨ã•ã‚Œã¦ã„ãªã„ã‹ç¢ºèªã—
ionis 2018/11/07
â€œCIS Amazon Web Service Foundations Benchmarkâ€

aws

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒã‚§ãƒƒã‚¯

CIS
ãƒªãƒ³ã‚¯
æƒ…ã‚·ã‚¹ã«AWSã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç›£æŸ»å¯¾å¿œã®ç§˜è¨£ã‚’èžã„ã¦ããŸã€œã‚¤ãƒ³ã‚µã‚¤ãƒˆã‚¦ã‚©ãƒƒãƒã‚¤ãƒ³ã‚¿ãƒ“ãƒ¥ãƒ¼ã‚·ãƒªãƒ¼ã‚ºç¬¬2å¼¾ã€œ
ã„ã¾ãŠä½¿ã„ã®AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–çŠ¶æ³ã‚’ç„¡æ–™ã§ãƒã‚§ãƒƒã‚¯ã§ãã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã€Œã‚¤ãƒ³ã‚µã‚¤ãƒˆã‚¦ã‚©ãƒƒãƒã€ã‚’ã”å˜çŸ¥ã§ã™ã‹ï¼Ÿ å‰å›žã«ç¶šã„ã¦å¼Šç¤¾ã®æƒ…ã‚·ã‚¹æ‹…å½“ã§ã‚ã‚‹æ¤æœ¨ã«ã‚¤ãƒ³ã‚¿ãƒ“ãƒ¥ãƒ¼ã—ã¦ã„ãã¾ã™ã€‚AWSã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¯ã€ç¶²ç¾…çš„ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ã®ä½“åˆ¶ã‚’ä½œã‚‹ã“ã¨ãŒå¤§äº‹ã ã‘ã‚Œã©ã‚‚ã€ãªã‹ãªã‹å–ã‚Šå…¥ã‚Œã‚‹ã®ãŒé›£ã—ã„ã¨ã„ã†è©±ã‚’èžã„ã¦ãã¾ã—ãŸã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã—ãªãã‚ƒãªã¨æ€ã£ã¦ã‚‚ã€å¿™ã—ã„ã—ã€ã¤ã„å¾Œå›žã—ã«ã—ã¦ã—ã¾ã†ã“ã¨ã‚‚ã‚ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ ä»Šå›žã¯ã€ãã‚“ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€Œå¾Œæ‚”å…ˆã«ç«‹ãŸãšã€çŠ¶æ…‹ã‚’å›žé¿ã—ãŸã‚Šã€ä¼šç¤¾ã®ä¿¡é ¼æ€§è‡ªä½“ã‚’é«˜ã‚ã‚‹ãŸã‚ã«å–å¾—ã™ã‚‹SECãªã©ã€ç¬¬ä¸‰è€…æ©Ÿé–¢ã¸ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç›£æŸ»å¯¾å¿œãŒãƒ†ãƒ¼ãƒžã«ãªã‚Šã¾ã™ã€‚ ç›£æŸ»ã§ã¯ã€æ§˜ã€…ãªé …ç›®ã‚’ã‚«ãƒãƒ¼ã—ãŸãƒã‚§ãƒƒã‚¯ã®å®Ÿæ–½ã«åŠ ãˆã¦ã€å¯¾å¿œçŠ¶æ³ã‚„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é‹ç”¨ä½“åˆ¶ã‚’æ£ã—ãä¼ãˆã‚‹ã“ã¨ãŒæ±‚ã‚ã‚‰ã‚Œã¾ã™ã€‚ã‚¢ã‚«ã‚¦ãƒ³ãƒˆæ•°ãŒä¸€ã¤ã§ã€é‹ç”¨è€…ã‚‚æ•°äººã§ã‚ã‚Œã°ã€ã‚ã‚‹ç¨‹åº¦æ‰‹ä½œæ¥ã§ã‚‚ã¾ã‹ãªãˆã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›
ionis 2018/08/23
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒã‚§ãƒƒã‚¯

aws
ãƒªãƒ³ã‚¯
node ã® security checkã‚’ã™ã‚‹ãªã‚‰ nsp ãŒä¾¿åˆ© - from scratch
nspã¨ã¯ å…ˆæ—¥ãŸã¾ãŸã¾ä¼šç¤¾ã§ Vulnerability ã®è©±ã«ãªã£ã¦è‰²ã€…ã¨ Node.js ã ã¨ã“ã†ã„ã†ã®ã‚ã‚‹ã‚“ã§ã™ã‚ˆã£ã¦è¨€ã£ãŸã‚‰çŸ¥ã‚‰ãªã‹ã£ãŸæ–¹ã‚‚å¤šã‹ã£ãŸã®ã§ç´¹ä»‹ã€‚ nsp ã¯ node security platform ã®é æ–‡å—ã‚’å–ã£ãŸãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã§ã‚ã‚‹ã€‚ Node Security Platform ã¯ã‚µã‚¤ãƒˆä¸Šã§è„†å¼±æ€§ã‚’å…¬é–‹ã—ã¦ã„ã‚‹ã€‚ Node.js ã®ã‚³ã‚¢ã®è„†å¼±æ€§ã¨ã„ã†ã‚ˆã‚Šã‚‚ npm ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãªã©ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®è„†å¼±æ€§ã ã€‚ nsp ã«æŒ™ã’ã‚‰ã‚Œã¦ã‚‹è„†å¼±æ€§ã®ä¸€ä¾‹ ä¾‹ãˆã°ã“ã®è„†å¼±æ€§ãªã‚“ã‹ã¯2017å¹´2æœˆ11æ—¥ã«å…¬é–‹ã•ã‚ŒãŸè„†å¼±æ€§ã§ã‚ã‚‹ã€‚ https://nodesecurity.io/advisories/313 github.com ã©ã†ã„ã†è„†å¼±æ€§ã‹ã¨ã„ã†ã¨ã€ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯JavaScript Objectã‚’ã‚·ãƒªã‚¢ãƒ©ã‚¤ã‚ºã™ã‚‹ãŸã‚ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã ãŒã€ãã®serializeã™ã‚‹æ™‚ã«é–¢æ•°ã¾
ionis 2017/02/14
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒã‚§ãƒƒã‚¯

node.js
ãƒªãƒ³ã‚¯
Node.jsã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆ | POSTD
(è¨³æ³¨ï¼š2016/1/5ã€ã„ãŸã ã„ãŸç¿»è¨³ãƒ•ã‚£ãƒ¼ãƒ‰ãƒãƒƒã‚¯ã‚’å…ƒã«è¨˜äº‹ã‚’ä¿®æ£ã„ãŸã—ã¾ã—ãŸã€‚) ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ â€“ èª°ã‚‚ãŒè¦‹ã¦è¦‹ã¬ãµã‚Šã‚’ã™ã‚‹å•é¡Œ ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒé‡è¦ã ã¨ã„ã†ã“ã¨ã¯ã€èª°ã‚‚ãŒèªè˜ã—ã¦ã„ã‚‹ã¨æ€ã„ã¾ã™ãŒã€çœŸå‰£ã«ã¨ã‚‰ãˆã¦ã„ã‚‹äººã¯å°‘æ•°ã ã¨æ€ã„ã¾ã™ã€‚æˆ‘ã€…ã€RisingStackã¯ã€çš†ã•ã‚“ã«æ£ã—ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ã‚’è¡Œã£ã¦ã„ãŸã ããŸã„ã¨è€ƒãˆã€ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆã‚’ç”¨æ„ã—ã¾ã—ãŸã€‚çš†ã•ã‚“ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒä½•åƒäººã¨ã„ã†ãƒ¦ãƒ¼ã‚¶ã‚„ãŠå®¢æ§˜ã«ä½¿ç”¨ã•ã‚Œã‚‹å‰ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ã‚’è¡Œã£ã¦ãã ã•ã„ã€‚ ã“ã“ã«æŒ™ã’ãŸãƒªã‚¹ãƒˆã®ã»ã¨ã‚“ã©ã¯æ¦‚ç•¥çš„ãªã‚‚ã®ã§ã€Node.jsã«é™ã‚‰ãšã€å…¨ã¦ã®è¨€èªžã‚„ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã«é©ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ãŸã ã—ã€ã„ãã¤ã®ãƒ„ãƒ¼ãƒ«ã¯ã€Node.jså›ºæœ‰ã®ã‚‚ã®ã¨ãªã‚Šã¾ã™ã®ã§ã€ã”äº†æ‰¿ãã ã•ã„ã€‚ Node.jsã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ã«é–¢ã™ã‚‹ãƒ–ãƒã‚°è¨˜äº‹ã‚‚æŠ•ç¨¿ã—ã¦ã‚ã‚Šã¾ã™ã®ã§ã€ã“ã¡ã‚‰ã‚‚æ˜¯éžèªã‚“ã§ã¿ã¦ãã ã•ã„ã€‚ æ§‹æˆç®¡ç† HT
ionis 2015/11/25
node.js

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒã‚§ãƒƒã‚¯
ãƒªãƒ³ã‚¯
æ ªå¼ä¼šç¤¾ãƒ‡ã‚£ã‚¢ã‚¤ãƒ†ã‚£ã®ãƒ‹ãƒ¥ãƒ¼ã‚¹ã€ãƒˆãƒ”ãƒƒã‚¯ã‚¹
ionis 2015/11/18
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

æƒ…å ±

ãƒ„ãƒ¼ãƒ«

ãƒã‚§ãƒƒã‚¯
ãƒªãƒ³ã‚¯
WebSocket Echo Server
WebSocket Echo Server We run a free very simple endpoint server with support for websockets and server-sent events (SSE) so that you can test your websocket and SSE clients easily. The server is designed for testing HTTP proxies and clients. It echoes information about HTTP request headers and bodies back to the client. The endpoint is https://echo.websocket.org/ Behavior Any messages sent from a
ionis 2015/09/14
WebSocket

ãƒã‚§ãƒƒã‚¯
ãƒªãƒ³ã‚¯
Qualys SSL Labs
HOW WELL DO YOU KNOW SSL? If you want to learn more about the techno logy that protects the Internet, youâ€™ve come to the right place. Books Bulletproof SSL and TLS is a complete guide to deploying secure servers and web applications. This book, which provides comprehensive coverage of the ever-changing field of SSL/TLS and Web PKI, is intended for IT security professionals, system administrators, a
ionis 2015/03/04
SSLã«é–¢é€£ã™ã‚‹ã‚µãƒ¼ãƒãƒ¼ã®è¨å®šã«é–¢ã—ã¦ã‚¢ãƒ‰ãƒã‚¤ã‚¹ã‚’ã—ã¦ãã‚ŒãŸã‚Šã™ã‚‹

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Webã‚µãƒ¼ãƒ“ã‚¹

ssl

ãƒã‚§ãƒƒã‚¯
ãƒªãƒ³ã‚¯
aguse.jp: ã‚¦ã‚§ãƒ–èª¿æŸ»
ã‚ã‚„ã—ã„ã‚µã‚¤ãƒˆã‚„çŸ¥ã‚‰ãªã„ã‚µã‚¤ãƒˆã‚’è¨ªã‚Œã‚‹å‰ã«ã€URLã‚’å…¥åŠ›ã™ã‚‹ã ã‘ã§ã‚µã‚¤ãƒˆèƒŒæ™¯æƒ…å ±ã‚’èª¿æŸ»ã—ãŸã‚Šã€è¿·æƒ‘ãƒ¡ãƒ¼ãƒ«ã®é€ä»˜çµŒè·¯ã‚’è¡¨ç¤ºã—ãŸã‚Šã™ã‚‹ã“ã¨ãŒå‡ºæ¥ã¾ã™ã€‚
ionis 2013/05/08
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Webã‚µãƒ¼ãƒ“ã‚¹

tool

ãƒ‰ãƒ¡ã‚¤ãƒ³

ãƒã‚§ãƒƒã‚¯
ãƒªãƒ³ã‚¯
1