404 | Secureworks
The page you requested does not existLets get you back to safety Visit Secureworks Home Page Regional Emergency Hotline NumbersSecureworks Emergency Incident Response team can provide you immediate assistance responding to and remediating a possible cyber incident or data breach. Call now for 24/7 Incident Response:
「HP‑UX ã®ã‚»ã‚ュリティ強化è¨å®š 第１回 （インストール編）ã€
リスクを見ã¤ã‘ã‚‹ サイãƒãƒ¼æ”»æ’ƒã‚’防ã最大ã®å¯¾ç–ã¯ã€è‡ªç¤¾ã®ã‚·ã‚¹ãƒ†ãƒ ã®è„†å¼±æ€§ã‚’ãªãã™ã“ã¨ã§ã™ã€‚ã—ã‹ã—ã€ã‚ˆã‚Šè¤‡é›‘化・高度化ã™ã‚‹æƒ…å ±æŠ€è¡“ã‚’ã€å®Œç’§ãªçŠ¶æ…‹ã«ä¿ã¤ã“ã¨ã¯å›°é›£ã§ã™ã€‚ GSXã¯1997å¹´ã‹ã‚‰ãƒšãƒãƒˆãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ãƒ†ã‚¹ãƒˆã‚’ã¯ã˜ã‚ã¨ã—ãŸè„†å¼±æ€§è¨ºæ–ã‚’æä¾›ã€è±Šå¯Œãªå®Ÿç¸¾ã¨ãƒŽã‚¦ãƒã‚¦ã‚’è“„ç©ã—ã¦ã„ã¾ã™ã€‚ã¾ãŸã€ã‚»ã‚ュリティ人æ教育を行ã„ã€å¸¸ã«æœ€æ–°ã®ã‚µã‚¤ãƒãƒ¼ãƒªã‚¹ã‚¯ã‚‚ã‚ャッãƒã‚¢ãƒƒãƒ—ã—ã¦ã„ã¾ã™ã€‚ 豊富ãªçµŒé¨“ã¨é«˜åº¦ãªã‚»ã‚ュリティ技術をæŒã£ãŸå°‚門家ãŒã€è¨ºæ–ツールã¨æ‰‹å‹•ã‚ªãƒšãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ã‚’併用ã—ã€ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã®èµ·å› ã¨ãªã‚‹ã‚»ã‚ュリティã®æ¬ 陥を発見ã—ã¾ã™ã€‚発見ã—ãŸæ¬ 陥（脆弱性）ã«ã¤ã„ã¦ã€æŠ€è¡“çš„ã‹ã¤äººçš„教育ã®ç‚¹ã‹ã‚‰æœ€é©ãªå„種ソリューションをã”æ案ã—ã¾ã™ã€‚ サイãƒãƒ¼æ”»æ’ƒã‚’防ã最大ã®å¯¾ç–ã¯ã€è‡ªç¤¾ã®ã‚·ã‚¹ãƒ†ãƒ ã®è„†å¼±æ€§ã‚’ãªãã™ã“ã¨ã§ã™ã€‚ã—ã‹ã—ã€ã‚ˆã‚Šè¤‡é›‘化・高度化ã™ã‚‹æƒ…å ±æŠ€è¡“ã‚’ã€å®Œç’§ãªçŠ¶æ…‹ã«ä¿ã¤ã“ã¨ã¯å›°é›£ã§ã™ã€‚ GSXã¯1997å¹´ã‹ã‚‰ãƒšãƒãƒˆãƒ¬ãƒ¼ã‚·ãƒ§
é–“é•ã„ã らã‘ã®ã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€å®Ÿè£…法
今回ã¯ã€ãã®ã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã®å•é¡Œç‚¹ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ 「契約者固有IDã€ã‚’用ã„ã‚‹ã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ ã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã¨ã¯ã€æºå¸¯é›»è©±ã®ã€Œå¥‘約者固有IDã€ã‚’用ã„ãŸãƒã‚°ã‚¤ãƒ³æ‰‹æ³•ã§ã™ã€‚ 第1回ã§èª¬æ˜Žã—ãŸã‚ˆã†ã«ã€æºå¸¯é›»è©±ã®ãƒ–ラウザã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ˜ãƒƒãƒ€ã«ã¯å¥‘約者固有IDã¨å‘¼ã°ã‚Œã‚‹IDを付ã‘ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚契約者固有IDã¯ã€æºå¸¯é›»è©±äº‹æ¥è€…ã«ã‚ˆã£ã¦è©³ç´°ã¯ç•°ãªã‚Šã¾ã™ãŒã€ã™ã¹ã¦ã®æºå¸¯é›»è©±äº‹æ¥è€…ãŒå¯¾å¿œã—ã¦ã„ã¾ã™ã€‚ 図1ã¯ã€NTTドコモã®æºå¸¯é›»è©±ãŒã‚µãƒãƒ¼ãƒˆã—ã¦ã„る契約者固有IDã§ã‚る「iモードIDã€ãŒã‚µãƒ¼ãƒã«é€ä¿¡ã•ã‚Œã‚‹æ§˜åã§ã™ã€‚ã“ã®æƒ…å ±ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒãã‚Œã¨æ„è˜ã™ã‚‹ã“ã¨ãªãé€ä¿¡ã•ã‚Œã¾ã™ã€‚æºå¸¯é›»è©±ã®ã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã¨ã¯ã€å¥‘約者固有IDã®ã¿ã‚’用ã„ã¦èªè¨¼ã‚’è¡Œã„ã€ãƒã‚°ã‚¤ãƒ³æ©Ÿèƒ½ã‚’実ç¾ã™ã‚‹ã“ã¨ã§ã™ã€‚ ã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã¯ã€ãƒ™ãƒ¼ã‚·ãƒƒã‚¯èªè¨¼ã®ã‚ˆã†ã«IDã¨ãƒ‘スワードを管ç†ã™ã‚‹å¿…è¦ã‚‚ãªãã€Cookieã®ã‚ˆã†ã«å¯¾å¿œã™ã‚‹ç«¯æœ«ã‚’考慮ã™ã‚‹æ‰‹é–“
WASForum Conference 2010: ã©ã†ã™ã‚‹ã‚±ãƒ¼ã‚¿ã‚¤èªè¨¼ | 水無月ã°ã‘らã®ãˆã³æ—¥è¨˜
公開: 2010å¹´5月31æ—¥0時45åˆ†é ƒ WASForum Conference 2010ã€ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ã®è„†å¼±æ€§ã®è©±ã«ç¶šãã€ç”£ç·ç ”ã®é«˜æœ¨æµ©å…‰ã•ã‚“ã«ã‚ˆã‚‹ã€Œã©ã†ã™ã‚‹ã‚±ãƒ¼ã‚¿ã‚¤èªè¨¼ã€ã€‚ ケータイWebã®ä¸–界従æ¥ã€WASForumã§ã¯ã‚ã¾ã‚Šæ‰±ã£ã¦ã“ãªã‹ã£ãŸåˆ†é‡Žã€‚ãã®ç†ç”±ã¯â€¦â€¦ 独自方å¼ã€ä»•æ§˜ãŒæ˜Žç¢ºã§ãªã„NDAã®å£ (特ã«å…¬å¼ã‚µã‚¤ãƒˆ)契約ã§ç¸›ã£ãŸç‹¬è‡ªä¸–ç•Œãªã‚‰ã€ã‚ャリアãŒè²¬ä»»ã‚’æŒã¤ã¹ã。部外者ã¯ä½•ã‹ã‚’言ã†ã¹ãç«‹å ´ã«ãªã„ã—ã‹ã—ã€æ˜¨ä»Šã§ã¯â€¦â€¦ ケータイ独自方å¼ãŒä¸€èˆ¬ã‚µã‚¤ãƒˆã«ã¾ã§ä¾µå‡º2008.3 iモードIDãŒã‚¹ã‚¿ãƒ¼ãƒˆã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³å¯¾å¿œã®æ´»ç™ºåŒ– ãƒã‚°ã‚¤ãƒ³èªè¨¼ã®æ¬ 陥ID (契約者固有ID) ã«ã‚ˆã‚‹èªè¨¼ã‚’ JavaScript + DNS Rebinding ã§çªç ´ã•ã‚Œã‚‹å•é¡Œæµ·å¤–ã§ã¯ã‚ã¾ã‚Šå•é¡Œã«ãªã‚‰ãªã„DNS Rebindingã¨ã„ã†æ‰‹æ³•ã¯å¤ãã‹ã‚‰çŸ¥ã‚‰ã‚Œã¦ã„ãŸã®ã ãŒã€ãã‚“ãªèªè¨¼ã¯æ—¥æœ¬ã§ã—ã‹ä½¿ã‚ã‚Œã¦ã„ãªã„ãŸã‚ã€æµ·å¤–
OpenIDã§æºå¸¯ã‚‚PCもシームレスã«ã€å®Ÿè¨¼å®Ÿé¨“çµæžœã‚’å ±å‘Š ï¼ ï¼ IT
2010/03/26 èªè¨¼åŸºç›¤é€£æºãƒ•ã‚©ãƒ¼ãƒ©ãƒ 実証実験ワーã‚ンググループã¯3月26æ—¥ã€OpenIDを用ã„ã€æºå¸¯é›»è©±ã¨PCã‚’ã¾ãŸã„ã シームレスãªèªè¨¼ã‚„属性連æºã«é–¢ã™ã‚‹å®Ÿé¨“ã€ã€Œèªè¨¼åŸºç›¤é€£æºã«ã‚ˆã‚‹èªåŸºç›¤é–“ã®ç›¸äº’é‹ç”¨æ€§ç¢ºä¿ã®å®Ÿè¨¼ã€ã®çµæžœã‚’明らã‹ã«ã—ãŸã€‚Artifact Bindingã¨å‘¼ã°ã‚Œã‚‹æ‰‹æ³•ã‚’用ã„ã‚‹ã“ã¨ã§ã€æºå¸¯é›»è©±ã‹ã‚‰ã‚‚å•é¡ŒãªãOpenIDã«åŸºã¥ãèªè¨¼ã‚’è¡Œãˆã‚‹ã“ã¨ãŒå®Ÿè¨¼ã•ã‚ŒãŸã¨ã„ã†ã€‚ OpenIDã¯ã€1ã¤ã®IDã§è¤‡æ•°ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚µãƒ¼ãƒ“スを利用ã§ãるよã†ã«ã™ã‚‹ãŸã‚ã®ä»•æ§˜ã 。ã„ã£ãŸã‚“èªè¨¼ã‚’済ã¾ã›ã‚‹ã ã‘ã§ã€ã»ã‹ã®ã‚µãƒ¼ãƒ“スã¸ã®ã‚·ãƒ³ã‚°ãƒ«ã‚µã‚¤ãƒ³ã‚ªãƒ³ãŒå¯èƒ½ã«ãªã‚‹ã»ã‹ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®æ‰¿èªã«å¿œã˜ã¦æ°åã‚„ä½æ‰€ã€ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ç•ªå·ã¨ã„ã£ãŸå±žæ€§æƒ…å ±ã‚’å—ã‘渡ã—ã€åˆ©ä¾¿æ€§ã®é«˜ã„サービスをå—ã‘られるよã†ã«ã™ã‚‹ã€‚ユーザーã‹ã‚‰è¦‹ã‚Œã°ã€ã‚µãƒ¼ãƒ“スã”ã¨ã«å€‹åˆ¥ã«èªè¨¼ã‚’è¡Œã†æ‰‹é–“ã‚’çœã‘ã‚‹ã†ãˆã€è‡ªåˆ†ã®æƒ…å ±ã‚’ã©ã‚“ãªäº‹æ¥è€…ã«é–‹ç¤ºã™ã‚‹ã‹ã‚’コント
Top 25 Nginx Web Server Best Security Practices
Nginx is a lightweight, high-performance web server/reverse proxy and e-mail (IMAP/POP3) proxy. It runs on UNIX, GNU/Linux, BSD variants, Mac OS X, Solaris, and Microsoft Windows. According to Netcraft, 13.50% of all domains on the Internet use nginx web server. Nginx is one of a handful of servers written to address the C10K problem. Unlike traditional servers, Nginx doesn’t rely on threads to ha
Please Rob Me
Raising awareness about over-sharing Check out our guest blog post on the CDT website. Online privacy Hi there, all we can say is wow. The amount of attention we're getting is amazing. It's great to see that the website has been picked up by so many awesome blogs, news providers and people out there, who got our point perfectly: Mashable The Next Web TechCrunch Slashdot On Locational Privacy, and
Darik’s Boot and Nuke – DBAN
Free Open-Source Data Wiping Software for Personal Use Delete information stored on hard disk drives (HDDs, not SSDs) in PC laptops, desktops, or servers. Plus, remove viruses and spyware from Microsoft Windows installations. Which Download is Best for You? DBAN is intended for individuals or home use to support data removal needs. For a comprehensive certified data erasure solution in companies a
ç¾è¡Œç‰ˆã®PHPã«ä»»æ„メモリå‚ç…§ãƒã‚° – 攻撃コード付ã
(Last Updated On: )éšåˆ†å‰ã‹ã‚‰å…±æœ‰åž‹Webホスティングサービスã§ã¯å®‰å…¨æ€§ã‚’確ä¿ã§ããªã„ã®ã§ã€å®‰å…¨æ€§ã‚’é‡è¦–ã™ã‚‹ã‚µã‚¤ãƒˆ(ECãªã©)ã¯æœ€ä½Žé™ã§ã‚‚仮想ホスト型ã®å…±æœ‰ã‚µãƒ¼ãƒ“スを利用ã™ã¹ãã§ã‚ã‚‹ã€ã¨è¨€ã£ã¦ã„ã¾ã™ã€‚ 今回ã®ã‚¨ãƒ³ãƒˆãƒªã¯PHPã‚’Apacheモジュールã§å…±æœ‰åž‹ãƒ›ã‚¹ãƒ†ã‚£ãƒ³ã‚°ã‚µãƒ¼ãƒ“スを利用ã—ã¦ã„るユーザã«å½±éŸ¿ã—ã¾ã™ã€‚SSLを利用ã—ã¦ã„ã‚‹å ´åˆã¯ç§˜å¯†éµã‚’ç›—ã¾ã‚Œã¾ã™ã€‚ã“ã®ãƒã‚°ã¯PHP 5.2.8ã§ã‚‚ä¿®æ£ã•ã‚Œã¦ã„ã¾ã›ã‚“。当然ã§ã™ãŒPHP 4.4.9ã§ã‚‚ä¿®æ£ã•ã‚Œã¦ã„ã¾ã›ã‚“。 Milw0rmã®ã‚¢ãƒ‰ãƒã‚¤ã‚¶ãƒª http://www.milw0rm.com/exploits/7646 ã«ã¯ã€ãã®ã¾ã¾ä½¿ãˆã‚‹ã€ä»»æ„ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã®ãƒ‡ãƒ¼ã‚¿ã‚’å‚ç…§ã™ã‚‹ã‚³ãƒ¼ãƒ‰ã¾ã§ä»˜ã„ã¦ã„ã¾ã™ã€‚秘密éµã‚’ç›—ã‚€ã“ã¨ã¯ç°¡å˜ã§ã™ã€‚ 誤解ã—ã¦ã¯ãªã‚‰ãªã„事ã§ã™ãŒã€ã“ã‚Œã¯PHPã«é™ã£ãŸå•é¡Œã§ã¯ã‚ã‚Šã¾ã›ã‚“。PHPã§ã¯åº¦ã€…ã“ã®ã‚ˆã†ãªãƒã‚°ãŒã‚»ã‚ュリテ
porttest.dns-oarc.net -- Check your resolver's source port behavior | DNS-OARC
2023-06-01: This service has been deprecated in favor of Check My DNS. The announcement in Jul 2008 of CERT VU#800113 made it clear that resolvers should use random source source ports when sending queries. Here at OARC, we crafted a special DNS name and server that you can query to learn whether or not your own resolver is using random ports. Use a DNS query tool such as dig to ask for the TXT re
DNSã‚ャッシュãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°ã®è„†å¼±æ€§ã«é–¢ã™ã‚‹æ³¨æ„喚起：IPA 独立行政法人 æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
ï¼æ”¾ç½®ã™ã‚Œã°æƒ…å ±æ¼ãˆã„～信用失墜ã«è‡³ã‚‹å¯èƒ½æ€§ã‚‚。 ウェブサイトé‹å–¶è€…ã¯æ—©æ€¥ã«DNSサーãƒã®ãƒ‘ッãƒé©ç”¨ã‚„è¨å®šå¤‰æ›´ã‚’ï¼ï¼ 最終更新日　2009å¹´2月6æ—¥ 掲載日　2008å¹´9月18æ—¥ >> ENGLISH ç‹¬ç«‹è¡Œæ”¿æ³•äººæƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ï¼ˆç•¥ç§°ï¼šIPAã€ç†äº‹é•·ï¼šè¥¿åž£ 浩å¸ï¼‰ã¯ã€ã€ŒDNSサーãƒã«å¯¾ã™ã‚‹DNSã‚ャッシュãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°ã®è„†å¼±æ€§ã€ã®å±Šå‡ºãŒæ¿€å¢—ã—ã¦ã„ã‚‹ã“ã¨ã‹ã‚‰ã€ã‚¦ã‚§ãƒ–サイトé‹å–¶è€…ã¸æ³¨æ„ã‚’å–šèµ·ã™ã‚‹ã¨ã¨ã‚‚ã«ã€DNSサーãƒã®ãƒ‘ッãƒé©ç”¨ã‚„è¨å®šå¤‰æ›´ã‚’呼ã³ã‹ã‘ã¾ã™ã€‚ DNS(Domain Name System)(*1) ã‚ャッシュãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°ï¼ˆæ±šæŸ“）ã®è„†å¼±æ€§ã«é–¢ã—ã¦ã€2008å¹´7月ã«è¤‡æ•°ã®DNS サーãƒè£½å“ã®é–‹ç™ºãƒ™ãƒ³ãƒ€ãƒ¼ã‹ã‚‰å¯¾ç–æƒ…å ±ãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã™(*2)。ã¾ãŸã€ã“ã®è„†å¼±æ€§ã‚’悪用ã—ãŸæ”»æ’ƒã‚³ãƒ¼ãƒ‰ãŒæ—¢ã«å…¬é–‹ã•ã‚Œã¦ã„ãŸãŸã‚ã€2008å¹´ 7月24æ—¥ã€IPAã¯ã‚¦ã‚§ãƒ–サイトé‹å–¶è€…ã¸å‘ã‘ã¦ç·Šæ€¥å¯¾ç–æƒ…å ±ã‚’ç™ºè¡Œã—ã¾ã—ãŸ
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
WizSec
Common WordPress Malware Infections — Smashing Magazine
PHP5.4.8ã¾ã§ã«hashdos攻撃ã®å±é™ºæ€§?
æ ªå¼ä¼šç¤¾VOYAGE GROUP
大手広告代ç†åº—ãŒã‚¬ãƒ³ãƒ–ラー対ç–ã§ã‚µãƒ¼ãƒãƒ¼ã‚’引ã£è¶Šã— - 安心ã§ãるレンタルサーãƒãƒ¼ã®ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆ | Web担当者Forum
Google Code Archive - Long-term storage for Google Code Project Hosting.
http://www.typemiss.net/blog/kounoike/20061019-100
{{#tags}}- {{label}}
{{/tags}}