[B! NIST] rokujyouhitomaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

rokujyouhitoma id:rokujyouhitoma

NISTã«é–¢ã™ã‚‹rokujyouhitomaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (23)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

NISTã€LLMã®ãƒã‚¿ãƒãƒ¬åˆ¶å¾¡ãªã©3ã¤ã®ã‚·ãƒŠãƒªã‚ªã§AIã®ç¤¾ä¼šçš„ãƒªã‚¹ã‚¯ã¨å½±éŸ¿ã‚’è©•ä¾¡ã™ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã€ŒARIAã€ã‚’ç™ºè¡¨
ç±³å›½å›½ç«‹æ¨™æº–æŠ€è¡“ç ”ç©¶æ‰€ï¼ˆNISTï¼‰ã¯2024å¹´5æœˆ28æ—¥ï¼ˆç±³å›½æ™‚é–“ï¼‰ã€AIï¼ˆäººå·¥çŸ¥èƒ½ï¼‰ã®èƒ½åŠ›ã¨å½±éŸ¿ã®ç†è§£ã‚’æ·±ã‚ã‚‹ã“ã¨ã‚’ç›®çš„ã¨ã—ãŸãƒ†ã‚¹ãƒˆã€è©•ä¾¡ã€å¦¥å½“æ€§ç¢ºèªã€æ¤œè¨¼ï¼ˆTEVVï¼‰ãƒ—ãƒã‚°ãƒ©ãƒ ã€ŒAssessing Risks and Impacts of AIï¼ˆä»¥å¾Œã€ARIAï¼‰ã€ã‚’ç™ºè¡¨ã—ãŸã€‚ ARIAã¯ã€ã‚ã‚‹AI æŠ€è¡“ã‚’å±•é–‹ã™ã‚‹éš›ã«ãã®AI æŠ€è¡“ãŒæœ‰åŠ¹ã§ã€ä¿¡é ¼æ€§ãŒé«˜ãã€å®‰å…¨ã§ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¨ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ãŒç¢ºä¿ã•ã‚Œã€å…¬æ£ã§ã‚ã‚‹ã‹ã©ã†ã‹ã‚’ã€çµ„ç¹”ã‚„å€‹äººãŒåˆ¤æ–ã§ãã‚‹ã‚ˆã†ã«æ”¯æ´ã™ã‚‹ã“ã¨ã‚’ç›®çš„ã¨ã—ã¦ã„ã‚‹ã€‚ å•†å‹™çœæ¨™æº–æŠ€è¡“æ‹…å½“æ¬¡å®˜å…¼NISTæ‰€é•·ã®ãƒãƒ¼ãƒªãƒ¼ãƒ»Eãƒ»ãƒã‚«ã‚·ã‚ªæ°ã¯ã€ŒARIAã¯ã€AI æŠ€è¡“ã®åˆ©ç”¨ãŒæ‹¡å¤§ã™ã‚‹ä¸ã§ã€ç¾å®Ÿä¸–ç•Œã®ãƒ‹ãƒ¼ã‚ºã«å¿œãˆã‚‹ã‚ˆã†ã«è¨è¨ˆã•ã‚Œã¦ã„ã‚‹ã€‚ã“ã®æ–°ãŸãªå–ã‚Šçµ„ã¿ã¯ã€ç±³å›½AIå®‰å…¨ç ”ç©¶æ‰€ã‚’æ”¯æ´ã—ã€NISTã®ç ”ç©¶ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ãƒ¼ã¨ã®æ—¢ã«åºƒç¯„ãªé–¢ã‚ã‚Šã‚’ã•ã‚‰ã«æ‹¡å¤§ã—ã€ç¾å®Ÿä¸–ç•Œã«ãŠã‘ã‚‹AIã®æ©Ÿèƒ½æ€§ã‚’ãƒ†ã‚¹ãƒˆã€è©•ä¾¡ã™ã‚‹ãŸ
rokujyouhitoma 2024/06/22
ARIA

NIST
ãƒªãƒ³ã‚¯
NISTã®ãƒªã‚¹ã‚¯ãƒžãƒã‚¸ãƒ¡ãƒ³ãƒˆãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ï¼ˆRMFï¼‰ã¨ã¯ ï½žç¬¬1å›žã€€SP800-37 Rev2ã¨ãƒªã‚¹ã‚¯ãƒžãƒã‚¸ãƒ¡ãƒ³ãƒˆãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ï¼ˆRMFï¼‰ï½ž | NTTãƒ‡ãƒ¼ã‚¿å…ˆç«¯æŠ€è¡“æ ªå¼ä¼šç¤¾
NISTã®ãƒªã‚¹ã‚¯ãƒžãƒã‚¸ãƒ¡ãƒ³ãƒˆãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ï¼ˆRMFï¼‰ã¨ã¯ ï½žç¬¬1å›žã€€SP800-37 Rev2ã¨ãƒªã‚¹ã‚¯ãƒžãƒã‚¸ãƒ¡ãƒ³ãƒˆãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ï¼ˆRMFï¼‰ï½ž Tweet ã¯ã˜ã‚ã« 2018å¹´12æœˆã«NISTï¼ˆç±³å›½å›½ç«‹æ¨™æº–æŠ€è¡“ç ”ç©¶æ‰€ï¼‰ã‹ã‚‰ãƒªã‚¹ã‚¯ãƒžãƒã‚¸ãƒ¡ãƒ³ãƒˆã®ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã‚’å®šã‚ãŸæ–‡æ›¸SP800-37 Revision 2ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ å½“æ–‡æ›¸ã¯ã€2014å¹´ã«å…¬é–‹ã•ã‚ŒãŸSP800-37 Revision1ã®ä¿®æ£ç‰ˆã§ã‚ã‚Šã€4å¹´ã¶ã‚Šã®æ”¹è¨‚ã¨ãªã‚Šã¾ã™ã€‚ æœ¬ã‚³ãƒ©ãƒ ã§ã¯ã€ãƒªã‚¹ã‚¯ãƒžãƒã‚¸ãƒ¡ãƒ³ãƒˆãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã¨ã¯ä½•ã‹ã€ Revision 2ã¸ã®æ”¹è¨‚ã§ä½•ãŒå¤‰ã‚ã£ãŸã®ã‹ã‚’è¦‹ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ 1.SP800-37 Rev2ã®ãƒªã‚¹ã‚¯ãƒžãƒã‚¸ãƒ¡ãƒ³ãƒˆãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ï¼ˆRMFï¼‰ã¨ã¯ ãƒªã‚¹ã‚¯ãƒžãƒã‚¸ãƒ¡ãƒ³ãƒˆãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ï¼ˆRMFï¼šRisk Management Frameworkï¼‰ã¨ã¯ã€çµ„ç¹”ã‚„æƒ…å ±ã‚·ã‚¹ãƒ†ãƒ ã«ãŠã‘ã‚‹æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªã‚¹ã‚¯ï¼ˆãƒ—
rokujyouhitoma 2024/06/09
NIST

RMF

Security
ãƒªãƒ³ã‚¯
Red Team - Glossary | CSRC
rokujyouhitoma 2024/06/01
NIST

RedTeam

Security
ãƒªãƒ³ã‚¯
é˜²è¡›è£…å‚™åº : é˜²è¡›ç”£æ¥ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åŸºæº–ã®æ•´å‚™ã«ã¤ã„ã¦
é˜²è¡›ç”£æ¥ã«ãŠã‘ã‚‹ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä½“åˆ¶ã®å¼·åŒ–ã®ãŸã‚ã®æ–½ç–ã‚’ä¸€å±¤ä¿ƒé€²ã™ã‚‹ãŸã‚ã€å…ˆè¡Œã™ã‚‹ç±³å›½ã®å–çµ„ã‚’å‚è€ƒã«ã€ç¾è¡Œã‚ˆã‚ŠåŽ³æ ¼ãªç®¡ç†ç–ã‚’ç››ã‚Šè¾¼ã‚“ã æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åŸºæº–ã®æ”¹å®šç‰ã«ã‚ˆã‚‹ã€Œé˜²è¡›ç”£æ¥ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åŸºæº–ã€ã‚’æ•´å‚™ã„ãŸã—ã¾ã—ãŸã€‚ â€»CUIï¼ˆControlled Unclassified Informationï¼‰ï¼šç®¡ç†ã•ã‚ŒãŸéžæ ¼ä»˜ã‘ï¼ˆéžç§˜å¯†ï¼‰æƒ…å ± â€»NIST SP800-171ï¼ˆNational Institute of Standards and Techno logy Special Publicationï¼‰ï¼šé€£é‚¦æ”¿åºœå¤–ã®ã‚·ã‚¹ãƒ†ãƒ ã¨çµ„ç¹”ã«ãŠã‘ã‚‹ç®¡ç†ã•ã‚ŒãŸéžæ ¼ä»˜ã‘æƒ…å ±ã®ä¿è·ï¼ˆç™ºè¡Œï¼š2016å¹´ï¼‰ â€»ISO27001ï¼ˆInternational Organization for Standardizationï¼‰ï¼šæƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒžãƒã‚¸ãƒ¡ãƒ³ãƒˆã®å›½éš›æ¨™æº–è¦æ ¼ï¼ˆç™ºè¡Œï¼š2006å¹´ï¼‰
rokujyouhitoma 2024/06/01
é˜²è¡›è£…å‚™åº

Cybersecurity

Security

NIST
ãƒªãƒ³ã‚¯
NISTã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ãŒå¤§å¹…æ”¹è¨‚ã€ã€Œçµ±æ²»ã€ã®é‡è¦æ€§ã‚’å¼·èª¿
ç±³å›½ç«‹æ¨™æº–æŠ€è¡“ç ”ç©¶æ‰€ï¼ˆNISTï¼‰ã¯ã€ä¼æ¥ã‚„å›£ä½“ã®ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼å¯¾ç–ã«é–¢ã™ã‚‹ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã€Œã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ 2.0ï¼ˆCSF 2.0ï¼‰ã€ã‚’å…¬é–‹ã—ãŸã€‚åˆç‰ˆã®CSF 1.0ã¯ã€2013å¹´2æœˆã«ç±³å›½ã®ã‚ªãƒãƒžå¤§çµ±é ˜ï¼ˆå½“æ™‚ï¼‰ãŒç™ºå‡ºã—ãŸå¤§çµ±é ˜ä»¤ã‚’å—ã‘ã€NISTãŒ2014å¹´ã«å…¬é–‹ã—ãŸã€‚CSF 2.0ã¯åˆã‚ã¦ã®ãƒ¡ã‚¸ãƒ£ãƒ¼ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã«ãªã‚‹ã€‚ CSFã‚’ã¯ã˜ã‚ã¨ã—ãŸNISTãŒå…¬é–‹ã™ã‚‹ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼å¯¾ç–ã«é–¢ã™ã‚‹æ–‡æ›¸ã¯ã€ç±³å›½ä¼æ¥ã ã‘ã§ã¯ãªãæ—¥æœ¬ã§ã¯é˜²è¡›çœãŒèª¿é”è¦ä»¶ç–å®šã®å‚è€ƒã«ã—ã¦ã„ã‚‹ã€‚CSF 2.0ã«ãªã£ã¦ã©ã“ãŒå¤‰ã‚ã£ãŸã®ã‹ã‚’è§£èª¬ã—ã‚ˆã†ã€‚ å…¨ã¦ã®æ¥ç•ŒãŒå¯¾è±¡ã« 2024å¹´2æœˆæœ«ã«å…¬é–‹ã•ã‚ŒãŸCSF 2.0ã®å¤‰æ›´ç‚¹ã¯å¤§ãã3ã¤ã‚ã‚‹ã€‚ã¾ãšã€å¯¾è±¡ã¨ã™ã‚‹æ¥ç•ŒãŒå¤‰ã‚ã£ãŸã“ã¨ã ã€‚CSF 1.1ã¾ã§ã¯ã€ç±³å›½ã«ã¨ã£ã¦å¿…è¦ä¸å¯æ¬ ãªã‚·ã‚¹ãƒ†ãƒ ã‚„è³‡ç”£ã§ã‚ã‚‹ã€Œé‡è¦ã‚¤ãƒ³ãƒ•ãƒ©ã€ã«é–¢ã‚ã‚‹æ¥ç•Œã‚’å¯¾è±¡ã¨ã—ã¦ã„ãŸã€‚ã“ã‚Œ
rokujyouhitoma 2024/03/19
NIST

Cybersecurity

CSF
ãƒªãƒ³ã‚¯
NISCã«èžãã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ç¾åœ¨åœ°ã€€ä¼æ¥è¦æ¨¡åˆ¥ã«è€ƒãˆã‚‹ã€â€œæœºä¸Šã®ç©ºè«–â€ã«ãªã‚‰ãªã„å¯¾ç–ã¨ã¯
NISCã«èžãã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ç¾åœ¨åœ°ã€€ä¼æ¥è¦æ¨¡åˆ¥ã«è€ƒãˆã‚‹ã€â€œæœºä¸Šã®ç©ºè«–â€ã«ãªã‚‰ãªã„å¯¾ç–ã¨ã¯ï¼šã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æœˆé–“ ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°è©æ¬ºã‚„ãƒ©ãƒ³ã‚µãƒ ã‚¦ã‚§ã‚¢ãªã©ã®ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒãŒã€æ—¥å¸¸ç”Ÿæ´»ã‚„ä¼æ¥æ´»å‹•ã«æ·±åˆ»ãªå½±éŸ¿ã‚’åŠã¼ã—ã¦ã„ã‚‹ã€‚ä»Šã‚„ã€Œã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€ã¯ã‚ã‚‰ã‚†ã‚‹äººã‚„çµ„ç¹”ãŒçœŸå‰£ã«å‘ãåˆã†ã¹ãèª²é¡Œã ã€‚ æ”¿åºœã‚‚æœ¬è…°ã‚’å…¥ã‚Œã¦ãŠã‚Šã€ã€Œã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¯å…¨å“¡å‚åŠ ã€ã¨ã„ã†ãƒ†ãƒ¼ãƒžã‚’æŽ²ã’ã¦æ¯Žå¹´2æœˆ1æ—¥ã‹ã‚‰3æœˆ18æ—¥ã¾ã§ã®ã€Œã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æœˆé–“ã€ã«å•“ç™ºæ´»å‹•ã‚’å±•é–‹ã—ã¦ã„ã‚‹ã€‚ ã€Œã²ã¨ã”ã¨ã€ã§ã¯ãªãã€Œè‡ªåˆ†ã”ã¨ã€ã¨ã—ã¦ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«å‘ãåˆã†ã«ã¯ã©ã†ã™ã‚Œã°ã„ã„ã®ã‹ã€‚ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æœˆé–“ã‚’ä¸»å°Žã™ã‚‹å†…é–£ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒ³ã‚¿ãƒ¼ï¼ˆNISCï¼‰ã®æ‘ç”°å¥å¤ªéƒŽæ°ã¨ä¼æ¥ã®å¯¾ç–ã«è©³ã—ãã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ã§ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¨ãƒãƒ³ã‚¸ã‚§ãƒªã‚¹ãƒˆã¨ã—ã¦ã‚‚æ´»å‹•ã™ã‚‹æ¾¤å…¥ä¿Šå’Œæ°ã«ã€å…¨å“¡å‚åŠ ã§å¯¾ç–ã‚’æŽ¨é€²ã™ã‚‹ãƒã‚¤ãƒ³ãƒˆã‚’æ•™ãˆã¦ã‚‚ã‚‰ã†ã€‚ æ‘ç”°ã€€å€‹
rokujyouhitoma 2024/03/11
NIST

Cybersecurity

Security
ãƒªãƒ³ã‚¯
CSF 2.0 Profiles
rokujyouhitoma 2024/03/07
NIST

CSF

NISTCSF

CSF2.0

Security
ãƒªãƒ³ã‚¯
NISTã€ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ï¼ˆCSFï¼‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³2.0ã‚’ç™ºè¡¨
ç±³å›½å›½ç«‹æ¨™æº–æŠ€è¡“ç ”ç©¶æ‰€ï¼ˆNISTï¼‰ã¯2024å¹´2æœˆ26æ—¥ï¼ˆç±³å›½æ™‚é–“ï¼‰ã€ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ï¼ˆCSFï¼‰ã®æœ€æ–°ç‰ˆã¨ãªã‚‹ãƒãƒ¼ã‚¸ãƒ§ãƒ³2.0ï¼ˆä»¥ä¸‹ã€CSF 2.0ï¼‰ã‚’ç™ºè¡¨ã—ãŸã€‚ CSFã¯ã€ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ãƒªã‚¹ã‚¯ã‚’è»½æ¸›ã™ã‚‹ãŸã‚ã®ã‚¬ã‚¤ãƒ€ãƒ³ã‚¹æ–‡æ›¸ã§ã‚ã‚Šã€å›½éš›çš„ã«åºƒãä½¿ç”¨ã•ã‚Œã¦ã„ã‚‹ã€‚2014å¹´ã«ç™ºè¡¨ã•ã‚ŒãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³1.0ï¼ˆä»¥ä¸‹ã€CSF 1.0ï¼‰ã€2018å¹´ã«ç™ºè¡¨ã•ã‚ŒãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³1.1ï¼ˆä»¥ä¸‹ã€CSF 1.1ï¼‰ã¯ã€æ—¥æœ¬èªžã‚’å«ã‚€13ã®è¨€èªžã«ç¿»è¨³ã•ã‚Œã¦ã„ã‚‹ã€‚ CSFã¯ã€ç±³å›½ã®å›½å®¶ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æˆ¦ç•¥ï¼ˆNational Cybersecurity Strategyï¼‰ã‚’æ”¯æ´ã™ã‚‹ã‚‚ã®ã§ã‚ã‚Šã€CSF 1.0ï¼1.1ã¯ã€ç—…é™¢ã‚„ç™ºé›»æ‰€ã®ã‚ˆã†ãªã€Œé‡è¦ã‚¤ãƒ³ãƒ•ãƒ©ã€ã‚’æ‹…ã†çµ„ç¹”å‘ã‘ã«ç–å®šã•ã‚ŒãŸã€‚CSF 2.0ã¯ã€ã‚ã‚‰ã‚†ã‚‹æ¥ç¨®ã€è¦æ¨¡ã®çµ„ç¹”ãŒã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªã‚¹ã‚¯ã‚’ç®¡ç†ã€è»½æ¸›ã§ãã‚‹ã‚ˆã†æ”¯æ´ã™ã‚‹ã“ã¨ã‚’æ˜Žç¢ºãªç›®æ¨™ã¨ã—
rokujyouhitoma 2024/03/01
Security

NIST

CSF
ãƒªãƒ³ã‚¯
NIST Releases Version 2.0 of Landmark Cybersecurity Framework
NISTâ€™s cybersecurity framework (CSF) now explicitly aims to help all organizations â€” not just those in critical infrastructure, its original target audience â€” to manage and reduce risks. NIST has updated the CSFâ€™s core guidance and created a suite of resources to help all organizations achieve their cybersecurity goals, with added em phasis on governance as well as supply chains. This update is the
rokujyouhitoma 2024/03/01
NIST

NISTCSF

CSF

CSF2.0

Security
ãƒªãƒ³ã‚¯
The NIST Cybersecurity Framework (CSF) 2.0
rokujyouhitoma 2024/03/01
NIST

NISTCSF

CSF

CSF2.0

Security
ãƒªãƒ³ã‚¯
Cybersecurity Framework
Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( A locked padlock ) or https:// means youâ€™ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
rokujyouhitoma 2024/03/01
NIST

NISTCSF

CSF
ãƒªãƒ³ã‚¯
Cybersecurity Framework | CSRC
rokujyouhitoma 2024/02/29
NIST

CSF

NISTCSF

Security
ãƒªãƒ³ã‚¯
NIST ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ 2.0ã‚’è§£èª¬ï½œç´„10å¹´ã¶ã‚Šã®å¤§å¹…æ”¹è¨‚ã€æŠ¼ã•ãˆã‚‹ã¹ãè¦ç‚¹ã¨ã¯ï¼Ÿ
2024å¹´2æœˆ26æ—¥ã€NISTï¼ˆç±³å›½ç«‹æ¨™æº–æŠ€è¡“ç ”ç©¶æ‰€ï¼‰ã¯ã€ã€ŒNIST ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ï¼ˆNIST Cybersecurity Frameworkï¼šNIST CSFï¼‰ã€ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³2.0ã‚’æ£å¼ã«å…¬é–‹ã—ãŸã€‚2014å¹´4æœˆã«åˆç‰ˆã§ã‚ã‚‹NIST CSF 1.0ãŒå…¬è¡¨ã•ã‚Œã¦ä»¥æ¥ã€ç´„10å¹´ã¶ã‚Šã®å¤§å¹…æ”¹è¨‚ã§ã‚ã‚‹ã€‚ æœ¬è¨˜äº‹ã§ã¯ã€NIST CSF 2.0ã«ãŠã‘ã‚‹ä¸»ãªæ”¹è¨‚ã®ãƒã‚¤ãƒ³ãƒˆã¨ã€ç‰¹ã«ã‚¤ãƒ³ãƒ‘ã‚¯ãƒˆã®å¤§ãã„6ã¤ç›®ã®æ–°æ©Ÿèƒ½ã€ŒGVï¼ˆçµ±æ²»ï¼‰ã€ã«ã¤ã„ã¦è§£èª¬ã™ã‚‹ã€‚ ã¯ã˜ã‚ã« 2020å¹´ä»£ã«å…¥ã‚Šã€æ–°ãŸãªç”Ÿæ´»æ§˜å¼ã®å¤‰åŒ–ã«èµ·å› ã™ã‚‹è„…å¨ã®ç™ºç”Ÿã€ä¸–ç•Œå„å›½ã§ã®æ·±åˆ»ã‹ã¤å¤§è¦æ¨¡ãªã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã®æ€¥å¢—ã€ç”ŸæˆAIãªã©æ–°æŠ€è¡“ã®æ™®åŠã«ä¼´ã†ãƒªã‚¹ã‚¯å¢—åŠ ãªã©ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è„…å¨ãŒå¤šæ§˜åŒ–ãƒ»è¤‡é›‘åŒ–ã—ã¦ã„ã‚‹ã€‚ãã®ã‚ˆã†ãªçŠ¶æ³ã«åˆã‚ã›ã¦ã€å„å›½ã§ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹æ³•è¦åˆ¶ãƒ»å·ä»¤ã®ç™ºå‡ºã€ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ãªã©ãŒæ•´å‚™ã•ã‚Œã¦ããŸã€‚ ç›´è¿‘10å¹´é–“ã®è„…å¨
rokujyouhitoma 2024/02/29
NISTCSF

Security

NIST

CSF

CSF2.0
ãƒªãƒ³ã‚¯
OpenID BizDay #16 - NIST SP800-63-4 (Draft) (2023/03/16 19:00ã€œ)
æ–°æ©Ÿèƒ½ ã€ŒQRã‚³ãƒ¼ãƒ‰èªã¿å–ã‚Šã«ã‚ˆã‚‹å‡ºå¸æ©Ÿèƒ½ã€ã‚’ãƒªãƒªãƒ¼ã‚¹ã—ã¾ã—ãŸã€‚äº‹å‰ã«å…¥å ´å—ä»˜ãŒå¿…è¦ãªå ´åˆã‚„ã€å—ä»˜æ™‚ã«å‚åŠ æž ãªã©ã«ã‚ˆã£ã¦å€‹åˆ¥ã®èª˜å°ŽãŒå¿…è¦ãªå ´åˆã«ã”åˆ©ç”¨ãã ã•ã„ã€‚è©³ã—ãã¯ ã“ã¡ã‚‰ ã‚’ã”è¦§ãã ã•ã„ã€‚ æ–°æ©Ÿèƒ½ connpass APIã«æ–°ã—ãã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ—ãƒãƒ•ã‚£ãƒ¼ãƒ«ã‚’å–å¾—ã§ãã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼APIã‚’è¿½åŠ ã—ã¾ã—ãŸã€‚APIãƒªãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã¯ ã“ã¡ã‚‰ ã‚’ã€ã¾ãŸAPIåˆ©ç”¨å¸Œæœ›ã®æ–¹ã¯ ã“ã¡ã‚‰ ã‚’ã”è¦§ãã ã•ã„ã€‚ ãŠçŸ¥ã‚‰ã› 2024å¹´9æœˆ1æ—¥ã‚ˆã‚Šã€connpassã§ã¯ã‚¹ã‚¯ãƒ¬ã‚¤ãƒ”ãƒ³ã‚°ã‚’ç¦æ¢ã—ã€åˆ©ç”¨è¦ç´„ã«æ˜Žè¨˜ã—ã¾ã™ã€‚ä»¥é™ã®æƒ…å ±å–å¾—ã«ã¯connpass APIã‚’ã”åˆ©ç”¨ãã ã•ã„ã€‚APIã”åˆ©ç”¨ã«ã«ã¤ã„ã¦ã¯ãƒ˜ãƒ«ãƒ—ãƒšãƒ¼ã‚¸ã‚’ã”ç¢ºèªãã ã•ã„ã€‚ 3æœˆ 16 OpenID BizDay #16 - NIST SP800-63-4 (Draft) OIDF-J ç¿»è¨³WGã«ã‚ˆã‚‹ NIST SP800-630-4 (draft) ç¿»è¨³ç‰ˆå…¬é–‹è¨˜å¿µ
rokujyouhitoma 2023/02/08
NIST
ãƒªãƒ³ã‚¯
Secure Software Development Framework | CSRC
NIST has finalized SP 800-218A, Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile. This publication augments SP 800-218Â by adding practices, tasks, recommendations, considerations, notes, and informative references that are specific to AI model development throughout the software development life cycle. The Profile supports Executive
rokujyouhitoma 2022/12/02
NIST

Security

SSDF
ãƒªãƒ³ã‚¯
NIST SP-800-190 ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚³ãƒ³ãƒ†ãƒŠã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¬ã‚¤ãƒ‰
rokujyouhitoma 2021/12/03
NISTSP800-190

NIST

Security
ãƒªãƒ³ã‚¯
æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ï¼šã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒ³ã‚¿ãƒ¼ï¼šã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢é€£NISTæ–‡æ›¸
IPA/ISECï¼ˆç‹¬ç«‹è¡Œæ”¿æ³•äººæƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒ³ã‚¿ãƒ¼ï¼‰ã¯ã€ æ”¿åºœã‚„ä¼æ¥ã®çµŒå–¶è€…ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ‹…å½“è€…ãªã©ãŒã€è‡ªçµ„ç¹”ã®æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã‚’å‘ä¸Šã•ã›ã‚‹ã“ã¨ã«å½¹ç«‹ã¤è³‡æ–™ã¨ã—ã¦ã€ä¸–ç•Œçš„ã«è©•ä¾¡ã®é«˜ã„æµ·å¤–ã®æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢é€£æ–‡æ›¸ç‰ã®ç¿»è¨³ãƒ»èª¿æŸ»ç ”ç©¶ã‚’NRIã‚»ã‚ãƒ¥ã‚¢ãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼ã‚ºï¼ˆæ ªï¼‰ã¨å…±åŒã§è¡Œã„ã€ãã®æˆæžœã‚’ä¸€èˆ¬ã«å…¬é–‹ã—ã¦ã„ã¾ã™ã€‚ ç±³å›½å›½ç«‹æ¨™æº–æŠ€è¡“ç ”ç©¶æ‰€ï¼ˆNIST: National Institute of Standards and Techno logyï¼‰ã®ç™ºè¡Œã™ã‚‹SP800ã‚·ãƒªãƒ¼ã‚ºï¼ˆSP: Special Publicationsï¼‰ã¨FIPSï¼ˆFederal Information Processing Standardsï¼‰ã®ä¸ã‹ã‚‰ã€æ—¥æœ¬ã«ãŠã„ã¦å‚ç…§ã™ã‚‹ãƒ‹ãƒ¼ã‚ºãŒé«˜ã„ã¨æƒ³å®šã•ã‚Œã‚‹æ–‡æ›¸ã®ç¿»è¨³ãƒ»ç›£ä¿®ã‚’è¡Œã„ã€å…¬é–‹ã™ã‚‹ã¨ã¨ã‚‚ã«ã€NISTã®æ–‡æ›¸ä½“ç³»ã‚„å†…å®¹ã«ã¤ã„ã¦ã€æ—¥æœ¬ã®å®Ÿæƒ…ã«å³ã—ãŸè§£èª¬ã‚’è¡Œã†ã‚ˆ
rokujyouhitoma 2021/12/03
IPA

NIST
ãƒªãƒ³ã‚¯
NIST Special Publication 800-207 ã‚¼ãƒãƒˆãƒ©ã‚¹ãƒˆãƒ»ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£
NIST Special Publication 800-207 äŠä»ä–ä·ä‡ä–äž‰äœ°äžŠäœ»ä”äœ½ää± Scott Rose Oliver Borchert Stu Mitchell Sean Connelly á®á©ä›¿äš¸à¯¨à—äœ˜äœšâ†“á©±ä›·à¸¼âà¾â¬Ÿä›·ä›’äœ›ä – https://doi.org/10.6028/NIST.SP.800-207 C O M P U T E R S E C U R I T Y ã‘¥ãƒ‚ä –PwCääžäƒä¹ä”äœ±äžäœ¾à¾œà¾ à°â™« á®á©¥á©ä›¿äš¸à½Žà¶¾ä›»á¼¢ä›³ä›¶ä›·ä›äœ›ä›°ä›¡á›…á‡ä›»â©»ãƒ‚ä›©äœ›äœ˜ä›–àº”äœ‘ä›¶ä›”äœŽä›©ä›œäš¸á¶à¶²á›¶äš¸ á¹‡â˜œá›¶äœ¢à²–ãƒ‰ä›©äœ›äœ’ä›¾ä›·ä›¿ ä›’äœšäœŽä›«äœ£äš¹ â©»ãƒ‚â”˜à²Ÿàºà°¯ä›¿äš¸á®á©¥á©ä›»ã‚°ã•ä›¥äœœä›¶ä›”äœ›áŸáˆ—äœ˜äœšâ•ä›¨äœ›á¦†áŠ»äœŽä›¯ä›¿á¦†á–ä›»á‘ä›§ä›¶äš¸ä›”ä››ä›ºäœ›à¯‡ â‰€ä›’äœ›ä›”ä›¿á…‹à°¯ä›»ä›´ä›”ä›¶äœ’ãˆà¯µäœ¢ãˆ‡ä›–äœ’ä›¾ä›·ä›¿ä›’äœšäœŽä›«äœ£äš¹ NIST Special Publication 800-207 äŠä»ä–ä·ä‡ä–äž‰äœ°äžŠäœ»ä”äœ½ää± Scott Ros
rokujyouhitoma 2021/12/03
NIST

NISTSP800-207

Security
ãƒªãƒ³ã‚¯
NISTã®Cybersecurity Frameworkã€€ãƒšãƒ©ï¼“ã«ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸ
2020 0413 Ebisu Security Boys "Cloud Security for Beginner and Sauna"
rokujyouhitoma 2021/09/23
NIST

CSF
ãƒªãƒ³ã‚¯
é›»åèªè¨¼ã«é–¢ã™ã‚‹ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ ç±³å›½å›½ç«‹æ¨™æº–æŠ€è¡“ç ”ç©¶æ‰€ ã«ã‚ˆã‚‹æŽ¨å¥¨
NIST Special Publication 800-63 Version 1.0.2 é›»åèªè¨¼ã«é–¢ã™ã‚‹ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ ç±³å›½å›½ç«‹æ¨™æº–æŠ€è¡“ç ”ç©¶æ‰€ ã«ã‚ˆã‚‹æŽ¨å¥¨ William E. Burr Donna F. Dodson W. Timothy Polk æƒ… å ± ã‚» ã‚ ãƒ¥ ãƒª ãƒ† ã‚£ ç±³å›½å›½ç«‹æ¨™æº–æŠ€è¡“ç ”ç©¶æ‰€ æƒ…å ±æŠ€è¡“ãƒ©ãƒœãƒ©ãƒˆãƒª ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£éƒ¨é–€ Gaithersburg, MD 20899-8930 2006 å¹´ 4 æœˆ ç±³å›½å•†å‹™çœ é•·å®˜ Donald L. Evans æŠ€è¡“ç®¡ç†å±€ æŠ€è¡“æ‹…å½“å•†å‹™æ¬¡å®˜ Robert Cresanti ç±³å›½å›½ç«‹æ¨™æº–æŠ€è¡“ç ”ç©¶æ‰€ æ‰€é•· William Jeffrey ã“ã®æ–‡æ›¸ã¯ä¸‹è¨˜å›£ä½“ã«ã‚ˆã£ã¦ç¿»è¨³ç›£ä¿®ã•ã‚Œã¦ã„ã¾ã™ Special Publication 800-63 é›»åèªè¨¼ã«é–¢ã™ã‚‹ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚·ã‚¹ãƒ†ãƒ ã®æŠ€è¡“ã«é–¢ã™ã‚‹å ±å‘Šæ›¸ ç±³å›½å›½ç«‹æ¨™æº–æŠ€
rokujyouhitoma 2021/09/16
NIST

IPA
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸