[B! PCI DSS] mi1kmanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

mi1kman id:mi1kman

PCI DSSã«é–¢ã™ã‚‹mi1kmanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (19)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã€Œãƒã‚¤ãƒ‘ãƒ¼ãƒã‚¤ã‚¶ãƒ¼ç®¡ç†è€…ã®æ¨©é™ãŒå¼·ã™ãŽã‚‹ã€ã€ãƒãƒƒãƒˆãƒ¯ãƒ³å±±å´Žæ°ãŒä»®æƒ³åŒ–ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’è§£èª¬
ã€Œã‚µãƒ¼ãƒãƒ¼ä»®æƒ³åŒ–ç’°å¢ƒã§ã¯ã€ãƒã‚¤ãƒ‘ãƒ¼ãƒã‚¤ã‚¶ãƒ¼ã«ã‚·ã‚¹ãƒ†ãƒ ã‚„ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«é–¢ã™ã‚‹é«˜ã„æ¨©é™ãŒé›†ä¸ã™ã‚‹ã€‚ãƒã‚¤ãƒ‘ãƒ¼ãƒã‚¤ã‚¶ãƒ¼ã®ç®¡ç†è€…ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¯æ…Žé‡ã«åˆ¶å¾¡ã™ã¹ãã ã€ã€‚ãƒãƒƒãƒˆãƒ¯ãƒ³ã‚·ã‚¹ãƒ†ãƒ ã‚ºã¯2011å¹´12æœˆ5æ—¥ã€ã€ŒPCI DSSã«é–¢ã™ã‚‹æœ€æ–°æƒ…å ±ã¨æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æœ€æ–°å‹•å‘ã€ã¨ã™ã‚‹èª¬æ˜Žä¼šã‚’é–‹å‚¬ã€‚åŒç¤¾ã‚µãƒ¼ãƒ“ã‚¹äº‹æ¥ã‚°ãƒ«ãƒ¼ãƒ—ãƒ—ãƒãƒ•ã‚§ãƒƒã‚·ãƒ§ãƒŠãƒ«ã‚µãƒ¼ãƒ“ã‚¹æœ¬éƒ¨ãƒ•ã‚§ãƒãƒ¼ã®å±±å´Žæ–‡æ˜Žæ°ãŒã‚µãƒ¼ãƒãƒ¼ä»®æƒ³åŒ–ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦ã€ä»Šå¹´6æœˆã«ç™ºè¡Œã•ã‚ŒãŸPCI DSSã®ä»®æƒ³åŒ–ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã«åŸºã¥ã„ã¦è§£èª¬ã—ãŸï¼ˆå†™çœŸ1ï¼‰ã€‚ ã€Œä»®æƒ³åŒ–ç’°å¢ƒã§ã¯ä»Šã¾ã§å˜åœ¨ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªã‚¹ã‚¯ã¯ãã®ã¾ã¾æ®‹ã‚Šã€æ–°ãŸã«ç‰¹æœ‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªã‚¹ã‚¯ãŒè¿½åŠ ã•ã‚Œã‚‹ã€ï¼ˆå±±å´Žãƒ•ã‚§ãƒãƒ¼ï¼‰ã€‚ä¸€ã¤ã®ç‰©ç†çä½“ã«è¤‡æ•°ã®ä»®æƒ³ãƒžã‚·ãƒ³ãŒæè¼‰ã•ã‚Œã‚‹ã“ã¨ã‚„ã€ãƒã‚¤ãƒ‘ãƒ¼ãƒã‚¤ã‚¶ãƒ¼å±¤ãŒè¿½åŠ ã•ã‚Œã‚‹ã“ã¨ã«ä¼´ã†å•é¡ŒãŒå¤§ãã„ï¼ˆå†™çœŸ2ï¼‰ã€‚é‹ç”¨ç®¡ç†ãŒè¤‡é›‘ã«ãªã‚‹ã¨ã„ã†ç‚¹ã‚‚èª²é¡Œã ã€‚PCI DSSã®ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã§ã¯ã“ã‚Œã‚‰ã®ãƒªã‚¹
mi1kman 2011/12/06
ä»®æƒ³åŒ–

PCI DSS
ãƒªãƒ³ã‚¯
McAfeeãŒãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ç”Ÿã§æŒã£ã¦ã„ã‚‹ä»¶ - kogawamã®æ—¥è¨˜
é«˜æœ¨æµ©å…‰æ°ãŒã€docomo IDã‚’ä½œã‚‹ã¨ç”Ÿã§ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä¿ç®¡ã•ã‚Œã¦ã—ã¾ã†ï¼ˆ http://takagi-hiromitsu.jp/diary/20100314.html#p01 ï¼‰ã¨ã„ã†è¨˜äº‹ã‚’æ›¸ã„ã¦ã„ã‚‹ã€‚docomoã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹ã‚¹ã‚¸ã®æ‚ªã•ã¯ä½•ãªã‚“ã§ã—ã‚‡ã†ãâ€¦ã€‚ ã•ã¦ã€æœ€è¿‘ä¼¼ãŸã‚ˆã†ãªã“ã¨ã«å‡ºãã‚ã—ãŸã®ã§ã€è¨˜éŒ²ã€‚ ä¸–ç•Œçš„ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼šç¤¾ã¨ã—ã¦æœ‰åãªãƒžã‚«ãƒ•ã‚£ãƒ¼ã§ã™ãŒã€ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯ç”Ÿï¼ˆéžå¯é€†å¤‰æ›ã§ã¯ãªã„å½¢å¼ï¼‰ã§æŒã£ã¦ã„ã‚‹ã‚ˆã†ã ã€‚ ç¢ºèªã—ãŸã®ã¯ã€ãƒžã‚«ãƒ•ã‚£ãƒ¼æ—¥æœ¬èªžã‚µã‚¤ãƒˆã®å€‹äººé¡§å®¢ã®ãŸã‚ã®ã‚µã‚¤ãƒˆã€‚ç¢ºã‹ã€ã‚µãƒãƒ¼ãƒˆã¨ã‹ãŠè²·ã„ç‰©ã¨ã‹ã€ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ã§è‡ªå‹•æ›´æ–°ã®ãŸã‚ã«ã€ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒç™ºè¡Œã•ã‚Œã¦ã‚‹ã‚“ã ã£ãŸã¨æ€ã†ã€‚ ç¢ºèªæ‰‹é †ã¯ä»¥ä¸‹ã®ã¨ãŠã‚Šã€‚ ãƒã‚°ã‚¤ãƒ³ãƒšãƒ¼ã‚¸ï¼ˆ https://home.mcafee.com/Secure/Protected/Login.aspx ï¼‰ã§ã€Œãƒ‘ã‚¹ãƒ¯ãƒ¼
mi1kman 2010/03/15
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼šç¤¾ã§ã‚ã£ã¦ã‚‚ãã‚“ãªã‚‚ã‚“/PCI DSSã«ã¯æº–æ‹ ã—ã¦ãŸã‚Šã—ãªã„ã‚“ã ã‚ã†ã‹

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰

McAfee

ã“ã‚Œã¯ã²ã©ã„

PCI DSS
ãƒªãƒ³ã‚¯
ã€ŒPCI DSSã¯æœ‰åŠ¹ãªã®ã‹ï¼Ÿã€ç±³å›½ã§å·»ãèµ·ã“ã£ãŸè°è«–ã¨ã¯ ï¼ ï¼ IT
2010/01/29 ãƒãƒƒãƒˆãƒ¯ãƒ³ã‚·ã‚¹ãƒ†ãƒ ã‚ºã®åä¼šç¤¾ã§ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è©•ä¾¡ãƒ»ç›£æŸ»ã‚µãƒ¼ãƒ“ã‚¹ã‚’æä¾›ã™ã‚‹ãƒ“ã‚¸ãƒã‚¹ã‚¢ã‚·ãƒ¥ã‚¢ãƒ©ãƒ³ã‚¹ã¯1æœˆ29æ—¥ã€ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æ¥ç•ŒãŒã‚«ãƒ¼ãƒ‰ä¼šå“¡æƒ…å ±ãªã©ã‚’ä¿è·ã™ã‚‹ãŸã‚ã«ç–å®šã—ãŸæ¥ç•Œæ¨™æº–ã€PCI DSSï¼ˆPayment Card Industry Data Security Standardï¼‰ã«é–¢ã™ã‚‹èª¬æ˜Žä¼šã‚’é–‹å‚¬ã—ãŸã€‚ æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ã‚ãã£ã¦ã¯ã€ISMSãªã©ã»ã‹ã®æ¨™æº–ãŒã™ã§ã«å˜åœ¨ã™ã‚‹ã€‚åŒç¤¾ä»£è¡¨å–ç· å½¹ã®å±±å´Žæ–‡æ˜Žæ°ã¯ã€PCI DSSã¯ISMSã‚’è£œå®Œã—ã€ã‚ˆã‚Šæ˜Žç¢ºåŒ–ã™ã‚‹ã‚‚ã®ã§ã‚ã‚‹ã¨æŒ‡æ‘˜ã€‚ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰é•·ã‚„æœ‰åŠ¹æœŸé–“ã¨ã„ã£ãŸãƒ¬ãƒ™ãƒ«ã«ã¾ã§è¸ã¿è¾¼ã‚“ã§å…·ä½“çš„ãªå®Ÿè£…ã‚’ç¤ºã—ã€ã©ã®ä¼æ¥ãŒæŽ¡ç”¨ã—ã¦ã‚‚åŒã˜ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¬ãƒ™ãƒ«ã‚’å®Ÿç¾ã™ã‚‹ã“ã¨ã‚’ç›®æŒ‡ã™ã‚‚ã®ã§ã‚ã‚‹ã¨ã„ã†æ„å‘³ã§é‡è¦ã ã¨è¿°ã¹ãŸã€‚ ã€Œã„ã‚ã„ã‚ãªä¼æ¥ã«è©±ã‚’èžãã¨ã€ã€ŽISMSã®å ´åˆã€çµå±€ã®ã¨ã“ã‚ä½•ã‚’ã©ã“ã¾ã§ã‚„ã‚Œã°ã„ã„ã®ã‹åˆ†ã‹ã‚‰ãªã„ã€ã¨ã„ã†å£°ãŒèžã“ãˆã¦ãã‚‹
mi1kman 2010/02/05
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

PCI DSS

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
JIPDEC ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆåŠ ç›Ÿåº—å‘ã‘â€œæƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ãŸã‚ã®ã‚¬ã‚¤ãƒ‰â€ï¼ˆPCI DSSï¼ISMSæº–æ‹ ã®ãŸã‚ã®ã‚¬ã‚¤ãƒ‰ï¼‰ã‚’å…¬é–‹ - ã¾ã‚‹ã¡ã‚ƒã‚“ã®æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ°—ã¾ãã‚Œæ—¥è¨˜
å›½æ°‘ã«ã€Œãƒžã‚¤ãƒŠãƒ³ãƒãƒ¼ã€ã®å…±é€šç•ªå·æ³•æ¡ˆã‚’é–£è°æ±ºå®šã€ï¼’ï¼ï¼‘ï¼•å¹´ã‹ã‚‰åˆ©ç”¨é–‹å§‹ç›®æŒ‡ã™ (shimarnyã®ãƒ–ãƒã‚°) å†…é–£å®˜æˆ¿æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒ³ã‚¿ãƒ¼ï¼NISC (Wiki (PukiWiki/TrackBack 0.3)) Twitter Trackbacks () å›ã¯ç”Ÿãæ®‹ã‚‹ã“ã¨ãŒã§ãã‚‹ã‹ï¼Ÿ (æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ—ãƒãƒ•ã‚§ãƒƒã‚·ãƒ§ãƒŠãƒ«ã‚’ã‚ã–ãã†ï¼(Sec. Pro. Hacks)) å…¬èªä¼šè¨ˆå£«è©¦é¨“ã®æœ€æ–°æƒ…å ±ã«ã¤ã„ã¦ (å…¬èªä¼šè¨ˆå£«è©¦é¨“ã‚¬ã‚¤ãƒ‰â˜…è¬›åº§ å¯¾ç– å—é¨“ æ±‚äºº äº‹å‹™æ‰€ å•é¡Œé›† åˆæ ¼ è³‡æ ¼ å¦æ ¡) çŸç”å¼åˆæ ¼çŽ‡4.6%ã«ï¼ (â– ï¼£ï¼¦ï¼¯ã®ãŸã‚ã®æœ€æ–°æƒ…å ±â– ) ä¸–é–“ãŒåå¯¾ã™ã‚‹DPIåºƒå‘Šã‚’æ“è·ã™ã‚‹ (ã‚“ãŒãºã®ã¡ã‚‡ã£ã¨ã—ãŸæ”¿æ²»ãƒ»çµŒæ¸ˆã®è©±) ç±³å›½é˜²ç·çœã€ç±³è»ã‚µã‚¤ãƒãƒ¼å¯¾ç–ã‚’çµ±æ‹¬ã™ã‚‹å¸ä»¤éƒ¨ã‚’è¨ç«‹ (æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ—ãƒãƒ•ã‚§ãƒƒã‚·ãƒ§ãƒŠãƒ«ã‚’ã‚ã–ãã†ï¼(Sec. Pro. Hacks)) ç·å‹™çœ (æ™‚ã®æµã‚Œ) ã‚¯ãƒ©ã‚¦ãƒ‰ãƒ»ã‚³
mi1kman 2009/10/15
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ISMS

PCI DSS

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
ã‚¢ã‚«ãƒžã‚¤ãŒâ€œã‚¯ãƒ©ã‚¦ãƒ‰ãƒ™ãƒ¼ã‚¹ã®WAFâ€ã‚’å®Ÿç¾ã€PCIDSSæº–æ‹ ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã¨ã—ã¦æä¾›
ã‚¢ã‚«ãƒžã‚¤æ ªå¼ä¼šç¤¾ã¯5æœˆ20æ—¥ã€ã‚¯ãƒ©ã‚¦ãƒ‰ãƒ™ãƒ¼ã‚¹ã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ï¼ˆä»¥ä¸‹ã€WAFãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ï¼‰ã‚’ç™ºè¡¨ã—ãŸã€‚ã‚¢ã‚«ãƒžã‚¤ã®ã‚µãƒ¼ãƒãƒ¼ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã€ŒEdgePlatformã€ä¸Šã«å®Ÿè£…ã•ã‚Œã‚‹WAFã§ã€æ”»æ’ƒãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ãŒãƒ‡ãƒ¼ã‚¿ã‚»ãƒ³ã‚¿ãƒ¼ã«å±Šãå‰ã«é˜²å¾¡ã§ãã‚‹ã®ãŒç‰¹é•·ã€‚ã“ã‚Œã‚’åˆ©ç”¨ã—ã¦ã€ã‚¯ãƒ©ã‚¦ãƒ‰ä¸Šã§å®‰å…¨ãªã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æ±ºæ¸ˆç”¨ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’æä¾›ã™ã‚‹ã€ŒPCIDSSå®Œå…¨æº–æ‹ ã‚µãƒ¼ãƒ“ã‚¹ã€ã‚‚ã€åŒæ—¥ã‹ã‚‰ã‚¹ã‚¿ãƒ¼ãƒˆã™ã‚‹ã€‚ WAFãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚„ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ãªã©ã®HTTPæ”»æ’ƒã‹ã‚‰ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’é˜²ããŸã‚ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã€‚ä¸–ç•Œä¸ã®ã‚¢ã‚«ãƒžã‚¤ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã«4ä¸‡å°åˆ†æ•£ã•ã‚ŒãŸã‚µãƒ¼ãƒãƒ¼ç¾¤ãƒ»EdgePlatformä¸Šã«å®Ÿè£…ã•ã‚Œã‚‹ã€‚ãƒ‡ãƒ¼ã‚¿ã‚»ãƒ³ã‚¿ãƒ¼å´ã«å°‚ç”¨ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ã‚’è¨ç½®ã—ãªãã¦æ¸ˆã‚€ã»ã‹ã€ä¿å®ˆãƒ»é‹ç”¨ã‚‚ã‚¢ã‚«ãƒžã‚¤ãŒè¡Œã†ãŸã‚ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯WAFã®é‹ç”¨ã‚³ã‚¹ãƒˆã‚’å‰Šæ¸›ã§ãã‚‹ã€‚
mi1kman 2009/05/20
Akamai

WAF

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚¯ãƒ©ã‚¦ãƒ‰

PCI DSS
ãƒªãƒ³ã‚¯
ã€Œãƒ‡ãƒ¼ã‚¿æ¼ãˆã„ã®å¤§åŠã¯ã€PCI DSSã®ã‚ˆã†ãªåŸºæœ¬çš„å¯¾ç–ã§å›žé¿ã§ãã‚‹ã€ï¼Verizon Business
ã€Œãƒ‡ãƒ¼ã‚¿æ¼ãˆã„ã®å¤§åŠã¯ã€PCI DSSã®ã‚ˆã†ãªåŸºæœ¬çš„å¯¾ç–ã§å›žé¿ã§ãã‚‹ã€ï¼Verizon Business Verizon Businessã¯4æœˆ23æ—¥ã€ãƒ‡ãƒ¼ã‚¿æ¼ãˆã„/ä¾µå®³èª¿æŸ»å ±å‘Šæ›¸ã«é–¢ã™ã‚‹è¨˜è€…èª¬æ˜Žä¼šã‚’é–‹å‚¬ã€‚ã‚°ãƒãƒ¼ãƒãƒ«ã‚µãƒ¼ãƒ“ã‚¹æœ¬éƒ¨é•·ã®ãƒ´ã‚§ãƒ‹ãƒ¥ãƒ»ã‚µãƒ†ã‚£ãƒ©ã‚¸ãƒ¥æ°ãŒã€ã€Œ2008å¹´ã«æ¼ãˆã„ã—ãŸãƒ‡ãƒ¼ã‚¿ã¯éŽåŽ»4å¹´é–“ã®åˆè¨ˆã‚ˆã‚Šã‚‚å¤šãã€æ¼ãˆã„ã®90ï¼…ã«ä½•ã‚‰ã‹ã®çŠ¯ç½ªçµ„ç¹”/ã‚°ãƒ«ãƒ¼ãƒ—ãŒé–¢ä¸Žã—ã¦ã„ã‚‹ã€ãªã©ä¸»ãªåˆ†æžçµæžœã‚’è§£èª¬ã—ãŸã€‚ 2008å¹´ã«Verizon BusinessãŒå–ã‚Šæ‰±ã£ãŸ90ä»¶ã®ãƒ‡ãƒ¼ã‚¿æ¼ãˆã„/ä¾µå®³äº‹ä»¶ã€ãŠã‚ˆã³2å„„8500ä¸‡ä»¶ã«ä¸Šã‚‹è¢«å®³ãƒ‡ãƒ¼ã‚¿ã‚’åˆ†æžã—ãŸã‚‚ã®ã€‚æ¼ãˆã„ãƒ‡ãƒ¼ã‚¿ã®æ•°ã¯ã€2004å¹´ã‹ã‚‰2007å¹´ã¾ã§ã«èª¿æŸ»ã—ãŸ2å„„3000ä¸‡ä»¶ã‚’å¤§ããä¸Šå›žã‚‹ã‚‚ã®ã§ã€ä¾µå®³ã®å¢—åŠ ã‚’ç¤ºã•ã‚ŒãŸã€‚ æ¥ç¨®ã¨ã—ã¦ã¯å°å£²ã‚Šæ¥ï¼ˆ31ï¼…ï¼‰ã€é‡‘èžæ¥ï¼ˆ30ï¼…ï¼‰ã«è¢«å®³ãŒå¤šãã€ç‰¹ã«é‡‘èžæ¥ã¯ã“ã‚Œã¾ã§ã®2å€ã¨ã€æœ€ã‚‚å¢—åŠ ãŒè‘—ã—ã‹ã£ãŸã€‚è¢«å®³ãƒ‡ãƒ¼ã‚¿æ•°ãŒæ€¥
mi1kman 2009/04/24
PCI DSS
ãƒªãƒ³ã‚¯
ã€ŒPCI DSSã®å¯©æŸ»åŸºæº–ã‚’é«˜ã‚ã‚‹ã¹ãã€ï¼è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒ³ãƒ™ãƒ³ãƒ€ãƒ¼ã®ç±³nCircleãŒèªžã‚‹
PCI DSSæº–æ‹ ã®èªå®šã‚’å—ã‘ã‚‹ã«ã¯ã€ã‚«ãƒ¼ãƒ‰æƒ…å ±å–æ‰±ä»¶æ•°ã«å¿œã˜ã¦ã€è¨ªå•å¯©æŸ»æ©Ÿé–¢ï¼ˆQSAï¼‰ã€è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒ‹ãƒ³ã‚°ãƒ™ãƒ³ãƒ€ãƒ¼ï¼ˆASVï¼‰ã€ã‚ã‚‹ã„ã¯è‡ªå·±å•è¨ºãªã©ã®ãƒã‚§ãƒƒã‚¯ã‚’ãƒ‘ã‚¹ã—ãªã‘ã‚Œã°ãªã‚‰ãªã„ã€‚ä¼æ¥ãŒå®Ÿæ–½ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ãŒååˆ†ãªã®ã‹ã€ä¸è¶³ã—ã¦ã„ã‚‹ç‚¹ã¯ãªã„ã‹ã€‚ã“ã†ã—ãŸå¯©æŸ»ã‚’è¡Œã†æ©Ÿé–¢ã«ã‚ˆã£ã¦ã€PCI DSSã®æœ‰åŠ¹æ€§ã¯ä¿ãŸã‚Œã¦ã„ã‚‹ã€‚ä»Šå›žã¯ã€2007å¹´ä»¥æ¥ã€ASVèªå®šã‚’å—ã‘ã‚‹ç±³nCircleã®Vice President of Product Managementã€ãƒžãƒ¼ã‚¯ãƒ»ã‚¦ãƒƒãƒ‰æ°ã«è©±ã‚’èžãã€å¯©æŸ»æ©Ÿé–¢ã®è¦–ç‚¹ã‹ã‚‰PCI DSSã®ç¾çŠ¶ã‚’æŽ¢ã£ã¦ã¿ãŸã€‚ â– æ´»ç™ºåŒ–ã™ã‚‹PCI DSSæº–æ‹ ã¸ã®å‹•ã nCircleç¤¾ã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚³ãƒ³ãƒ—ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹ç›£æŸ»ãƒ„ãƒ¼ãƒ«ã€ŒnCircle Suite360ã€ã‚’æä¾›ã™ã‚‹ãƒ™ãƒ³ãƒ€ãƒ¼ã ã€‚ã„ãã¤ã‹ãƒ©ã‚¤ãƒ³ã‚¢ãƒƒãƒ—ã¯ã‚ã‚‹ãŒã€ãã®ã†ã¡ã®è„†å¼±æ€§ç®¡ç†ã‚·ã‚¹ãƒ†ãƒ ã€ŒnCircle IP360ã€ã§ã€2007å¹´
mi1kman 2009/04/18
PCI DSS
ãƒªãƒ³ã‚¯
Yahoo!ãƒ•ã‚¡ã‚¤ãƒŠãƒ³ã‚¹ - æ ªä¾¡ãƒ»æœ€æ–°ãƒ‹ãƒ¥ãƒ¼ã‚¹
æ—¥çµŒå¹³å‡39,829.56+903.93NYãƒ€ã‚¦42,313.00+137.89TOPIX2,740.94+19.82ç±³å›½ãƒ‰ãƒ«142.19
mi1kman 2009/03/12
PCI DSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æ¥ç•Œã®æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å¦ã¶
ä¸Šè¨˜ã¯ã™ã¹ã¦ã€æµ·å¤–ã®Webã‚µã‚¤ãƒˆã‚’çµŒç”±ã—ãŸã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã«ã‚ˆã‚Šæƒ…å ±ãŒæµå‡ºã—ãŸã€‚å…·ä½“çš„ã«ã¯Webã‚µã‚¤ãƒˆã®SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®è„†å¼±ï¼ˆãœã„ã˜ã‚ƒãï¼‰æ€§ã‚’åˆ©ç”¨ã—ã€å¤–éƒ¨ã‹ã‚‰ä¸æ£ãªã‚³ãƒžãƒ³ãƒ‰ã‚’ç™ºè¡Œã—ã€ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æƒ…å ±ã‚’å«ã‚ãŸå€‹äººæƒ…å ±ã‚’æŠœãå–ã‚‹æ‰‹æ³•ã«ã‚ˆã£ãŸã€‚ ä¸Šè¨˜ã®ä¸ã§ã€ç‰¹ã«ã‚µã‚¦ãƒ³ãƒ‰ãƒã‚¦ã‚¹ã«é–¢ã™ã‚‹äº‹æ•…ã¯è±¡å¾´çš„ã§ã‚ã£ãŸã€‚äº‹æ•…ã®æ•™è¨“ã‚’åºƒãçŸ¥ã£ã¦ã‚‚ã‚‰ã„ã€åŒæ§˜ã®äº‹æ•…ã®å†ç™ºã‚’æŠ‘æ¢ã™ã‚‹ã“ã¨ã‚’ç›®çš„ã«ã€ç™ºè¦šã‹ã‚‰ã®å¯¾å¿œçµŒç·¯ã«ã¤ã„ã¦åŒç¤¾ã¯ã¤ã¶ã•ã«å…¬è¡¨ã—ãŸã€‚ è¿‘å¹´ã®ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰çŠ¯ç½ªã®å‚¾å‘ ã“ã“ã§æ•´ç†ã—ã¦ãŠããŸã„ã®ã¯ã€ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æƒ…å ±ãŒå«ã¾ã‚ŒãŸå€‹äººæƒ…å ±ãŒæ¼ãˆã„ã™ã‚‹äº‹ä»¶ï¼äº‹æ•…ã®ç‰¹å¾´ã§ã‚ã‚‹ã€‚ ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ã‚’ECã‚µã‚¤ãƒˆãªã©éžå¯¾é¢ã§ä½¿ç”¨ã™ã‚‹éš›ã¯ã€ã»ã¨ã‚“ã©ãŒ16æ¡ï¼ˆã‘ãŸï¼‰ã®ã‚«ãƒ¼ãƒ‰ç•ªå·ã¨æœ‰åŠ¹æœŸé™ã«ã‚ˆã‚Šæ‰¿èªå‡¦ç†ã•ã‚Œã¦ã„ã‚‹ã€‚ã™ãªã‚ã¡ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ã¯ã€ã‚«ãƒ¼ãƒ‰ã®å®Ÿç‰©ãŒãªãã¨ã‚‚ã€ãã®æƒ…å ±ã ã‘ã§ç›—ã‚€ã“ã¨ãŒã§ãã‚‹ã¨ã„ã†ç‰¹å¾´ãŒã‚ã‚‹ã€‚ ã‚¯ãƒ¬
mi1kman 2009/03/11
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

PCI DSS
ãƒªãƒ³ã‚¯
ã€Œæ—¥æœ¬ã‚«ãƒ¼ãƒ‰æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å”è°ä¼šã€è¨ç«‹æº–å‚™ä¼šãŒç™ºè¶³
Windows SQL Server 2005ã‚µãƒãƒ¼ãƒˆçµ‚äº†ã®4æœˆ12æ—¥ãŒè¿«ã‚‹ã€å ±å‘Šæ¸ˆã¿è„†å¼±æ€§ã®æ·±åˆ»åº¦ã‚‚é«˜ãã€æ—©æ€¥ãªç§»è¡Œã‚’
mi1kman 2009/03/09
åç§°ãŒã€Œã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ã€ã§ã¯ãªãã€Œã‚«ãƒ¼ãƒ‰ã€ã ã£ãŸã‚Šã€ã‚«ãƒ¼ãƒ‰ãƒ–ãƒ©ãƒ³ãƒ‰ãŒã©ã“ã‚‚å…¥ã£ã¦ãªã‹ã£ãŸã‚Š...(ãƒ—ãƒ¬ã‚¹ãƒªãƒªãƒ¼ã‚¹è¦‹ã‚‹ã¨å‚åŠ äºˆå®šã‚‰ã—ã„ãŒ)http://www.nttdata-sec.co.jp/headline/2009/090305.html

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

å›£ä½“

PCI DSS
ãƒªãƒ³ã‚¯
PCI SSC PO Japan é€£çµ¡ä¼š
mi1kman 2009/02/21
PCI DSS
ãƒªãƒ³ã‚¯
ç±³ã‚«ãƒ¼ãƒ‰å‡¦ç†ä¼šç¤¾ã®ã‚·ã‚¹ãƒ†ãƒ ã«ä¸æ£ä¾µå…¥ - æƒ…å ±æµå‡ºã§ã¯éŽåŽ»æœ€å¤§è¦æ¨¡ã‹ | ãƒãƒƒãƒˆ | ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ«
ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰å‡¦ç†ä¼šç¤¾ã®ç±³Heartland Payment Systemsã¯1æœˆ20æ—¥(ç¾åœ°æ™‚é–“)ã€åŒç¤¾ã®ã‚·ã‚¹ãƒ†ãƒ ã«ä¸æ£ä¾µå…¥ãŒã‚ã£ãŸã“ã¨ã‚’å ±å‘Šã—ãŸã€‚ç±³Wall Street Journalã«ã‚ˆã‚Œã°ã€åŒç¤¾ã®ã‚·ã‚¹ãƒ†ãƒ ã¯æœˆé–“1å„„ä»¶è¦æ¨¡ã®ãƒˆãƒ©ãƒ³ã‚¶ã‚¯ã‚·ãƒ§ãƒ³ã‚’å‡¦ç†ã—ã¦ãŠã‚Šã€å°è¦æ¨¡ãªãƒ¬ã‚¹ãƒˆãƒ©ãƒ³ã‚„å°å£²åº—ã‚’å«ã‚ã¦25ä¸‡ã®äº‹æ¥è€…ãŒåˆ©ç”¨ã—ã¦ã„ã‚‹ã€‚ã¾ãŸGartnerã®ã‚¢ãƒŠãƒªã‚¹ãƒˆã®ã‚³ãƒ¡ãƒ³ãƒˆã‚’å¼•ç”¨ã—ã¦ã€éŽåŽ»æœ€å¤§ç´šã®ã‚«ãƒ¼ãƒ‰æƒ…å ±æ¼æ´©äº‹ä»¶ã«ç™ºå±•ã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã¨æŒ‡æ‘˜ã™ã‚‹ã€‚ Heartlandã¯20æ—¥ã«å‡ºã—ãŸå£°æ˜Žã®ä¸ã§ã€Visaã¨MasterCardã‹ã‚‰ã‚«ãƒ¼ãƒ‰å‡¦ç†ã‚·ã‚¹ãƒ†ãƒ ã¾ã‚ã‚Šã®æ€ªã—ã„å‹•ä½œã«ã¤ã„ã¦è¦å‘Šã‚’å—ã‘ã¦ã®èª¿æŸ»ã§ã€å…ˆé€±ã«ãªã‚Šã‚·ã‚¹ãƒ†ãƒ å†…ã«æ‚ªæ„ã®ã‚ã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚’ç™ºè¦‹ã—ãŸã¨å ±å‘Šã—ã¦ã„ã‚‹ã€‚åŒç¤¾ã«ã‚ˆã‚Œã°ã€å•†åº—ä¸»ã®æƒ…å ±ã‚„ã‚«ãƒ¼ãƒ‰ä¿æŒè€…ã®ç¤¾ä¼šä¿éšœç•ªå·(SSN)ã€æš—å·åŒ–ã•ã‚Œã¦ã„ãªã„PINã€é›»è©±ç•ªå·ã€ä½æ‰€ã¨ã„ã£ãŸæƒ…å ±ã¯æ¼æ´©ãƒ‡ãƒ¼ã‚¿ã«å«ã¾
mi1kman 2009/01/24
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

PCI DSS
ãƒªãƒ³ã‚¯
ç±³ã‚«ãƒ¼ãƒ‰æ±ºæ¸ˆä¼šç¤¾ãŒä¸æ£ä¾µå…¥ã®è¢«å®³ã«ï¼ŒéŽåŽ»æœ€å¤§è¦æ¨¡ã®ã‚«ãƒ¼ãƒ‰æƒ…å ±ãŒæµå‡ºã‹
ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ã‚„ãƒ‡ãƒ“ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ãªã©ã®æ±ºæ¸ˆå‡¦ç†ã‚’æ‰‹ãŒã‘ã‚‹ç±³Heartland Payment Systemsã¯ç±³å›½æ™‚é–“2009å¹´1æœˆ20æ—¥ï¼ŒåŒç¤¾ã®å‡¦ç†ã‚·ã‚¹ãƒ†ãƒ ãŒä¸æ£ä¾µå…¥ã®è¢«å®³ã«éã„ï¼Œã‚«ãƒ¼ãƒ‰æƒ…å ±ãŒæµå‡ºã—ãŸã¨ç™ºè¡¨ã—ãŸã€‚ç±³ãƒ¡ãƒ‡ã‚£ã‚¢ã®å ±é“ã«ã‚ˆã‚‹ã¨ï¼Œç±³å›½ã§éŽåŽ»æœ€å¤§è¦æ¨¡ã®æƒ…å ±æµå‡ºã¨ãªã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã¨ã„ã†ã€‚ ä¸å¯©ãªã‚«ãƒ¼ãƒ‰æ±ºæ¸ˆã«é–¢ã—ã¦ç±³VisaãŠã‚ˆã³ç±³MasterCardã‹ã‚‰é€šå ±ã‚’å—ã‘ï¼ŒåŒç¤¾ãŒèª¿æŸ»ã‚’é€²ã‚ãŸã¨ã“ã‚ï¼Œå‡¦ç†ã‚·ã‚¹ãƒ†ãƒ ã«ä¸æ£ãªã‚½ãƒ•ãƒˆã‚¦ã‚¨ã‚¢ãŒçµ„ã¿è¾¼ã¾ã‚Œã¦ã„ãŸã“ã¨ãŒå‰é€±åˆ¤æ˜Žã€‚åŒç¤¾ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã§å‡¦ç†ã—ãŸã‚«ãƒ¼ãƒ‰æƒ…å ±ãŒæµå‡ºã—ã¦ã„ãŸã¨ã„ã†ã€‚ã“ã‚Œã‚’å—ã‘ã¦åŒç¤¾ã¯ï¼Œé€£é‚¦æœæŸ»æ©Ÿé–¢ã¨ã‚«ãƒ¼ãƒ‰ä¼šç¤¾å„ç¤¾ã«å ±å‘Šã—ãŸã€‚ä¸–ç•Œçš„ã«åºƒãŒã‚‹ã‚µã‚¤ãƒãƒ¼çŠ¯ç½ªã«ã‚ˆã‚‹çŠ¯è¡Œã®å¯èƒ½æ€§ãŒã‚ã‚‹ã¨ã¿ã¦ï¼Œç±³è²¡å‹™çœæ¤œå¯Ÿå±€ã‚„å¸æ³•çœã¨å¯†æŽ¥ã«é€£æºã‚’é€²ã‚ã¦ã„ã‚‹ã¨ã„ã†ã€‚ æµå‡ºã—ãŸãƒ‡ãƒ¼ã‚¿ã®å†…å®¹ã«ã¤ã„ã¦ï¼ŒåŒç¤¾ã®å…¬å¼ç™ºè¡¨ã§ã¯ï¼Œã€Œè²·ã„ç‰©ã®æƒ…å ±ï¼Œã‚«ãƒ¼ãƒ‰æ‰€æœ‰è€…ã®ç¤¾ä¼šä¿éšœç•ªå·ï¼Œæš—å·åŒ–
mi1kman 2009/01/24
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

æƒ…å ±æ¼æ´©

ç±³å›½

èˆˆå‘³æ·±ã„

PCI DSS
ãƒªãƒ³ã‚¯
,97äººä¼¦å½±é™¢Açº§æ¯›ç‰‡,å›½äº§Aâ…¤æ¿€æƒ…æ— ç ä¹…ä¹…ç”·ç”·å‰§,äºšæ´²ä¸æ–‡å—å¹•æ— ç æ—¥éŸ©
,97äººä¼¦å½±é™¢Açº§æ¯›ç‰‡,å›½äº§Aâ…¤æ¿€æƒ…æ— ç ä¹…ä¹…ç”·ç”·å‰§,äºšæ´²ä¸æ–‡å—å¹•æ— ç æ—¥éŸ©,ç²¾å“æ— ç AVä¸€åŒºäºŒåŒºä¸‰åŒºä¸å¡,ä¸æ–‡å—å¹•ä¹±è§†é¢‘åœ¨çº¿è§‚çœ‹,99ä¹…ä¹…å›½äº§ç»¼åˆç²¾å“æˆäººå½±é™¢,76å°‘å¦‡ç²¾å“å¯¼èˆª,å›½äº§AVæ— ç ä¸“åŒºäºšæ´²AV,å›½äº§æ—¥äº§äºšæ´²ç³»åˆ—æœ€æ–°,æ—¥æœ¬å…è´¹ä¸€åŒºäºŒåŒºä¸‰åŒºæ¿€æƒ…è§†é¢‘
mi1kman 2008/10/30
PCI DSS
ãƒªãƒ³ã‚¯
ã‚ã®æ‰‹ã“ã®æ‰‹ã§å®ˆã‚‹ã¹ãã‚«ãƒ¼ãƒ‰æƒ…å ±ã€ãã®ä¸èº«ã¨ã¯ï¼Ÿ â€• ï¼ IT
ç¬¬2å›ž ã‚ã®æ‰‹ã“ã®æ‰‹ã§å®ˆã‚‹ã¹ãã‚«ãƒ¼ãƒ‰æƒ…å ±ã€ãã®ä¸èº«ã¨ã¯ï¼Ÿ å·å³¶ã€€ç¥æ¨¹ NTTãƒ‡ãƒ¼ã‚¿ãƒ»ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ ªå¼ä¼šç¤¾ ã‚³ãƒ³ã‚µãƒ«ãƒ†ã‚£ãƒ³ã‚°æœ¬éƒ¨ã€€PCIæŽ¨é€²å®¤ CISSP 2008/10/7 PCI DSSã§ã¯ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ã€ãƒ‡ãƒ“ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ãªã©ã€Œãƒšã‚¤ãƒ¡ãƒ³ãƒˆã‚«ãƒ¼ãƒ‰ã€ã®æƒ…å ±ä¿è·æŒ‡é‡ã‚’å®šã‚ã¦ã„ã¾ã™ã€‚æ—¥æœ¬ã§ã‚‚èº«è¿‘ã«ãªã£ãŸã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ã§ã™ãŒã€ã©ã®ã‚ˆã†ãªæƒ…å ±ãŒå«ã¾ã‚Œã‚‹ã®ã§ã—ã‚‡ã†ã‹ã€‚ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æƒ…å ±ã®ä¿è·ã‹ã‚‰ã€åŸºæœ¬çš„ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è€ƒãˆæ–¹ã‚’å†åº¦ç¢ºèªã—ã¦ã¿ã¾ã—ã‚‡ã†ï¼ˆç·¨é›†éƒ¨ï¼‰ ç¬¬1å›žã€Œã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã‚‚ç´å¾—ã§ãã‚‹â€œPCI DSSâ€ã¨ã¯ã€ã§ã¯ã€PCI DSSã®æ¦‚ç•¥ã‚’è§£èª¬ã—ã¾ã—ãŸã€‚ç¬¬2å›žã§ã¯PCI DSSã§å®ˆã‚‹ã¹ãã€Œã‚«ãƒ¼ãƒ‰æƒ…å ±ã€ã«ã¤ã„ã¦ã€ãã‚‚ãã‚‚ã‚«ãƒ¼ãƒ‰æƒ…å ±ã¨å‘¼ã¶ã‚‚ã®ã«ä½•ãŒå«ã¾ã‚Œã‚‹ã®ã‹ã€ãã—ã¦ã©ã®ã‚ˆã†ã«ã‚«ãƒ¼ãƒ‰æƒ…å ±ã‚’å®ˆã‚‹ã¹ãã‹ã‚’è§£èª¬ã—ã¾ã™ã€‚ ã€Œã‚«ãƒ¼ãƒ‰ä¼šå“¡æƒ…å ±ã€ã£ã¦16ã‘ãŸã®ç•ªå·ã ã‘ã˜ã‚ƒãªã„ã®ï¼Ÿ ä¸€è¨€ã§ã‚«ãƒ¼ãƒ‰ä¼šå“¡æƒ…å ±ã¨ã„ã£ã¦ã‚‚ã€ã
mi1kman 2008/10/09
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

PCI DSS
ãƒªãƒ³ã‚¯
5åˆ†ã§çµ¶å¯¾ã«åˆ†ã‹ã‚‹PCI DSS âˆ’ ï¼ IT
PCI DSSã¨ã¯ï¼Ÿ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®åŸºæº–ã¨ã—ã¦æœ€è¿‘è€³ã«ã™ã‚‹ã€ŒPCI DSSã€ã¨ã¯ã„ã£ãŸã„ä½•ã§ã—ã‚‡ã†ã‹ã€‚ ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ä¼šç¤¾ã®ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã‚’è¦‹ã‚‹ã¨PCI DSSï¼ˆPayment Card Industry Data Security Standardï¼‰ã¨ã¯ã€ åŠ ç›Ÿåº—ãƒ»æ±ºæ¸ˆä»£è¡Œäº‹æ¥è€…ãŒå–ã‚Šæ‰±ã†ã‚«ãƒ¼ãƒ‰ä¼šå“¡æ§˜ã®ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æƒ…å ±ãƒ»å–å¼•æƒ…å ±ã‚’å®‰å…¨ã«å®ˆã‚‹ãŸã‚ã«ã€JCBã€ã‚¢ãƒ¡ãƒªã‚«ãƒ³ã‚¨ã‚ã‚¹ãƒ—ãƒ¬ã‚¹ã€Discoverã€ãƒžã‚¹ã‚¿ãƒ¼ã‚«ãƒ¼ãƒ‰ã€VISAã®å›½éš›ãƒšã‚¤ãƒ¡ãƒ³ãƒˆãƒ–ãƒ©ãƒ³ãƒ‰5ç¤¾ãŒå…±åŒã§ç–å®šã—ãŸã€ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆæ¥ç•Œã«ãŠã‘ã‚‹ã‚°ãƒãƒ¼ãƒãƒ«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åŸºæº–ã§ã™â€¦â€¦ ã€ŒJCBã‚°ãƒãƒ¼ãƒãƒ«ã‚µã‚¤ãƒˆ PCIãƒ‡ãƒ¼ã‚¿ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¹ã‚¿ãƒ³ãƒ€ãƒ¼ãƒ‰ã€ŽPCIDSSã€ã¨ã¯ã€ã‚ˆã‚Š ã¨ã‚ã‚Šã¾ã™ã€‚ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ä¼šç¤¾ã®åŸºæº–ã ã‹ã‚‰ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æƒ…å ±ã‚’å–ã‚Šæ‰±ã†å±€é¢ã«ç‰¹åŒ–ã—ãŸã‚‚ã®ã§ã€ã†ã¡ã®çµ„ç¹”ã«ã¯é–¢ä¿‚ãªã„ã‚“ã˜ã‚ƒãªã„ã‹ã¨æ€ã‚ã‚Œã¦ã„ã‚‹æ–¹ã‚‚å¤šã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚
mi1kman 2008/08/08
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

PCI DSS
ãƒªãƒ³ã‚¯
å…·ä½“æ€§ã®é«˜ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼åŸºæº–ã€Œï¼°ï¼£ï¼©ï¼¤ï¼³ï¼³ã€ã¨ã¯ä½•ã‹ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼-æœ€æ–°ãƒ‹ãƒ¥ãƒ¼ã‚¹:IT-PLUS
é›»é€šã€ä¸‰è±UFJä¿¡è¨—éŠ€è¡Œãªã©å¤§æ‰‹ä¼æ¥ãŒç›¸æ¬¡ãŽå‚å…¥ã‚’è¡¨æ˜Žã™ã‚‹ã€Œæƒ…å ±éŠ€è¡Œã€ã€‚ã“ã“ã«æŒ‘ã‚€ãƒ™ãƒ³ãƒãƒ£ãƒ¼ä¼æ¥ãŒDataSignï¼ˆæ±äº¬ãƒ»æ¸‹è°·ï¼‰ã ã€‚åŒç¤¾ã®å¤ªç”°ç¥ä¸€ç¤¾é•·ã¯æƒ…å ±éŠ€è¡Œã¨ã„ã†è¨€è‘‰ãŒç”Ÿã¾ã‚Œã‚‹â€¦ç¶šã ä¸éƒ¨é›»åŠ›ãŒã€Œæƒ…å ±éŠ€è¡Œã€å‚å…¥ã¸ã€€é›»åŠ›ãƒ‡ãƒ¼ã‚¿ã‚’æ´»ç”¨ ï¼»æœ‰æ–™ä¼šå“¡é™å®šï¼½ ã€Œæƒ…å ±éŠ€è¡Œã€èª¬æ˜Žä¼šã«ï¼’ï¼ï¼ç¤¾ã€€ãƒ‡ãƒ¼ã‚¿æµé€šã®æž çµ„ã¿å§‹å‹•
mi1kman 2008/07/05
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

PCI DSS

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
ã€Œã©ã“ã¾ã§æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã‚’ã™ã‚Œã°ã‚ˆã„ã®ã‹ã‚ã‹ã‚‰ãªã„ã€ã¨ã„ã†ä¸æº€ã«ã¤ã„ã¦ - ã¾ã‚‹ã¡ã‚ƒã‚“ã®æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ°—ã¾ãã‚Œæ—¥è¨˜
å›½æ°‘ã«ã€Œãƒžã‚¤ãƒŠãƒ³ãƒãƒ¼ã€ã®å…±é€šç•ªå·æ³•æ¡ˆã‚’é–£è°æ±ºå®šã€ï¼’ï¼ï¼‘ï¼•å¹´ã‹ã‚‰åˆ©ç”¨é–‹å§‹ç›®æŒ‡ã™ (shimarnyã®ãƒ–ãƒã‚°) å†…é–£å®˜æˆ¿æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒ³ã‚¿ãƒ¼ï¼NISC (Wiki (PukiWiki/TrackBack 0.3)) Twitter Trackbacks () å›ã¯ç”Ÿãæ®‹ã‚‹ã“ã¨ãŒã§ãã‚‹ã‹ï¼Ÿ (æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ—ãƒãƒ•ã‚§ãƒƒã‚·ãƒ§ãƒŠãƒ«ã‚’ã‚ã–ãã†ï¼(Sec. Pro. Hacks)) å…¬èªä¼šè¨ˆå£«è©¦é¨“ã®æœ€æ–°æƒ…å ±ã«ã¤ã„ã¦ (å…¬èªä¼šè¨ˆå£«è©¦é¨“ã‚¬ã‚¤ãƒ‰â˜…è¬›åº§ å¯¾ç– å—é¨“ æ±‚äºº äº‹å‹™æ‰€ å•é¡Œé›† åˆæ ¼ è³‡æ ¼ å¦æ ¡) çŸç”å¼åˆæ ¼çŽ‡4.6%ã«ï¼ (â– ï¼£ï¼¦ï¼¯ã®ãŸã‚ã®æœ€æ–°æƒ…å ±â– ) ä¸–é–“ãŒåå¯¾ã™ã‚‹DPIåºƒå‘Šã‚’æ“è·ã™ã‚‹ (ã‚“ãŒãºã®ã¡ã‚‡ã£ã¨ã—ãŸæ”¿æ²»ãƒ»çµŒæ¸ˆã®è©±) ç±³å›½é˜²ç·çœã€ç±³è»ã‚µã‚¤ãƒãƒ¼å¯¾ç–ã‚’çµ±æ‹¬ã™ã‚‹å¸ä»¤éƒ¨ã‚’è¨ç«‹ (æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ—ãƒãƒ•ã‚§ãƒƒã‚·ãƒ§ãƒŠãƒ«ã‚’ã‚ã–ãã†ï¼(Sec. Pro. Hacks)) ç·å‹™çœ (æ™‚ã®æµã‚Œ) ã‚¯ãƒ©ã‚¦ãƒ‰ãƒ»ã‚³
mi1kman 2008/06/10
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

PCI DSS

çµŒå–¶

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
ã€ŒPCI DSSå¯¾ç–ã«ã¯WAFã®å°Žå…¥ãŒå¿…é ˆã ã€---Webé«˜é€ŸåŒ–è£…ç½®å¤§æ‰‹ã®F5ãŒã‚¢ãƒ”ãƒ¼ãƒ«
ã€Œå®‰å…¨ãªã‚¯ãƒ¬ã‚¸ãƒƒãƒˆãƒ»ã‚«ãƒ¼ãƒ‰æ±ºæ¸ˆã®ãŸã‚ï¼ŒWAFï¼ˆWeb Application Firewallï¼‰ã®é‡è¦æ€§ãŒå¢—ã—ã¦ã„ã‚‹ã€‚ä¼æ¥ã«ã¨ã£ã¦WAFã¯ã‚‚ã¯ã‚„å¿…é ˆã ã€---ã€‚ã“ã†WAFã®é‡è¦æ€§ã‚’ã‚¢ãƒ”ãƒ¼ãƒ«ã™ã‚‹ã®ã¯ï¼ŒWAFæ©Ÿèƒ½ã‚’æŒã¤Webé«˜é€ŸåŒ–è£…ç½®ã‚’å‡ºè·ã™ã‚‹F5ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¹ã‚¸ãƒ£ãƒ‘ãƒ³ã§ã‚ã‚‹ã€‚åŒç¤¾ã§ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°ãƒžãƒãƒ¼ã‚¸ãƒ£ã‚’å‹™ã‚ã‚‹Joe Poehlsæ°ã¯2008å¹´5æœˆ28æ—¥ï¼ŒWAFãŒå¿…é ˆã¨ãªã‚‹æ ¹æ‹ ã‚’ç¤ºã™ã¨ã¨ã‚‚ã«ï¼ŒåŒç¤¾è£½å“ãŒå‚™ãˆã‚‹WAFæ©Ÿèƒ½ã‚’ã‚¢ãƒ”ãƒ¼ãƒ«ã—ãŸã€‚ WAFã®é‡è¦æ€§ãŒå¢—ã™èƒŒæ™¯ã¯ï¼ŒSOXæ³•ã®æ¬¡ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ãƒˆãƒ¬ãƒ³ãƒ‰ã¨ã—ã¦ã€ŒPCI DSSã€ï¼ˆPayment Card Industry Data Security Standardï¼‰ãŒç«‹ã¡ä¸ŠãŒã£ã¦ã„ã‚‹ã¨ã„ã†çŠ¶æ³ãŒã‚ã‚‹ï¼ˆé–¢é€£è¨˜äº‹ï¼šã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åŸºæº–ã€ŒPCI DSSã€ï¼‰ã€‚PCI DSSã¨ã¯ï¼Œå¤§æ‰‹ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ä¼šç¤¾ãŒç–å®šã—ãŸï¼Œã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æƒ…å ±ã‚’å–ã‚Šæ‰±ã†äº‹æ¥è€…ã«
mi1kman 2008/05/28
F5 Networksã¯ãã‚ãã‚æœ¬æ°—ã§disã‚‰ã‚ŒãŸã»ã†ãŒã„ã„/ã€ŒWvasion Attackã€/å‚è€ƒ http://b.hatena.ne.jp/mi1kman/20080513#bookmark-8574746

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

PCI DSS

WAF

F5 Networks

ã“ã‚Œã¯ã²ã©ã„
ãƒªãƒ³ã‚¯
1