[B! webAP][cyber security] tatsuhã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

tatsuh id:tatsuh

webAPã¨cyber securityã«é–¢ã™ã‚‹tatsuhã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ç±³HPã€ŒWebã‚¢ãƒ—ãƒªã®å“è³ªã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å•é¡Œã‚’â€œå…ƒã‹ã‚‰æ–ã¤â€ã€
ç±³HPã€ŒWebã‚¢ãƒ—ãƒªã®å“è³ªã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å•é¡Œã‚’â€œå…ƒã‹ã‚‰æ–ã¤â€ã€ï¼šç±³HPã«èžãã€â€œãƒ•ã‚©ãƒ¼ãƒ†ã‚£ãƒ•ã‚¡ã‚¤è²·åŽã®èƒŒæ™¯â€ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒãƒ“ã‚¸ãƒã‚¹ã«æ·±ãæµ¸é€ã—ã¦ã„ã‚‹è¿‘å¹´ã€ãã®å“è³ªã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒã‚ã‚‰ãŸã‚ã¦æ³¨ç›®ã•ã‚Œã¦ã„ã‚‹ã€‚å“è³ªã«å•é¡ŒãŒã‚ã‚Œã°ã€ãƒ“ã‚¸ãƒã‚¹ã‚’é…æ»žã•ã›ã¦æ©Ÿä¼šæå¤±ã‚’æ‹›ãã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«è„†å¼±æ€§ãŒã‚ã‚Œã°ã€é‡‘éŠã ã‘ã§ã¯è§£æ±ºã§ããªã„å‚·è·¡ã‚’ãã®ãƒ–ãƒ©ãƒ³ãƒ‰ã«æ®‹ã—ã¦ã—ã¾ã†ãŸã‚ã ã€‚ãã“ã§ã“ã®å•é¡Œã«å¯¾ã—ã€â€œéšœå®³ã‚’ã„ã¡æ—©ãè§£æ±ºã™ã‚‹â€â€œãƒãƒƒã‚ãƒ³ã‚°ã‹ã‚‰å®ˆã‚‹â€ã¨ã„ã£ãŸå¯¾ç—‡ç™‚æ³•çš„ãªã‚¢ãƒ—ãƒãƒ¼ãƒã§ã¯ãªãã€å•é¡ŒåŽŸå› ã‚’å…ƒã‹ã‚‰æ–ã¤ â€œåŽŸå› ç™‚æ³•â€ã®ã‚¢ãƒ—ãƒãƒ¼ãƒã§è‡¨ã‚“ã§ã„ã‚‹ã®ãŒç±³ãƒ’ãƒ¥ãƒ¼ãƒ¬ãƒƒãƒˆãƒ»ãƒ‘ãƒƒã‚«ãƒ¼ãƒ‰ã ã€‚ åŒç¤¾ã¯2007å¹´6æœˆã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è©•ä¾¡ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ï¼ã‚µãƒ¼ãƒ“ã‚¹ã‚’æŒã¤ç±³SPIãƒ€ã‚¤ãƒŠãƒŸã‚¯ã‚¹ã‚’è²·åŽã€‚ã€ŒBTOï¼ˆBusiness Techno logy Optimizationï¼‰â€•â€•â€œãƒ“ã‚¸ãƒã‚¹ã¨ITã¨ã®ã‚®ãƒ£ãƒƒãƒ—ã‚’
tatsuh 2010/11/05
webAP

cyber security
ãƒªãƒ³ã‚¯
ã‚¯ã‚¤ãƒƒã‚¯ãƒã‚°ã‚¤ãƒ³ã«â€œç©´â€ã€ãƒ¤ãƒžãƒˆé‹è¼¸ã®æºå¸¯Webã‚µã‚¤ãƒˆã«è„†å¼±æ€§ ï¼ ï¼ IT
2010/10/25 ãƒ¤ãƒžãƒˆé‹è¼¸ã¯10æœˆ25æ—¥ã€åŒç¤¾ãŒæä¾›ã—ã¦ã„ã‚‹ä¼šå“¡åˆ¶ã‚µãƒ¼ãƒ“ã‚¹ã€Œã‚¯ãƒãƒã‚³ãƒ¡ãƒ³ãƒãƒ¼ã‚ºã®Webã‚µãƒ¼ãƒ“ã‚¹ã€ã®æºå¸¯é›»è©±ç‰ˆã§ã€ç‰¹å®šã®ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‹ã‚‰ç‰¹å®šã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’åˆ©ç”¨ã—ã€ã€Œã‚¯ã‚¤ãƒƒã‚¯ãƒã‚°ã‚¤ãƒ³æ©Ÿèƒ½ã€ã‚’ä½¿ã£ãŸå ´åˆã«ã€æœ¬äººã¨åˆ¥ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒšãƒ¼ã‚¸ã«ãƒã‚°ã‚¤ãƒ³ãŒã§ãã¦ã—ã¾ã†å•é¡ŒãŒã‚ã£ãŸã¨ç™ºè¡¨ã—ãŸã€‚ç¾åœ¨ã¯ã€ã‚¯ã‚¤ãƒƒã‚¯ãƒã‚°ã‚¤ãƒ³æ©Ÿèƒ½ã‚’ä¿®æ£ã—ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å…¥åŠ›ãŒå¿…é ˆã¨ãªã£ã¦ã„ã‚‹ã€‚ åŒã‚µãƒ¼ãƒ“ã‚¹ã¯ã€è·ç‰©ã®é›†è·ä¾é ¼ã‚„å†é…é”ä¾é ¼ãªã©ãŒWebçµŒç”±ã§å¯èƒ½ã«ã™ã‚‹ã‚‚ã®ã€‚åŒç¤¾ãŒèª¿æŸ»ã—ãŸã¨ã“ã‚ã€1äººã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒšãƒ¼ã‚¸ã«ã€åˆ¥ã®2äººãŒãƒã‚°ã‚¤ãƒ³ã—ã¦ãŠã‚Šã€ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚„ä½æ‰€ã€é›»è©±ç•ªå·ãªã©ã‚’é–²è¦§ã§ãã‚‹çŠ¶æ…‹ã«ãªã£ã¦ã„ãŸã€‚è©²å½“ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ã¯å€‹åˆ¥ã«å¯¾å¿œã—ã¦ã„ã‚‹ã¨ã„ã†ã€‚ å•é¡Œã¨ãªã£ãŸã®ã¯ã€ãƒã‚°ã‚¤ãƒ³IDï¼ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¥åŠ›ã›ãšã«èªè¨¼ã‚’è¡Œã†ã€Œã‚¯ã‚¤ãƒƒã‚¯ãƒã‚°ã‚¤ãƒ³æ©Ÿèƒ½ã€ï¼ˆã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã¨è¡¨è¨˜ã™ã‚‹ã‚µã‚¤ãƒˆã‚‚ã‚ã‚‹ï¼‰ã€‚å¤šãã®æºå¸¯é›»è©±å‘ã‘ã‚µã‚¤ãƒˆã§å®Ÿ
tatsuh 2010/10/26
cyber security

webAP

vulnerability
ãƒªãƒ³ã‚¯
SNSã«ãŠã‘ã‚‹ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ä¿è·
ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚ãƒ³ã‚°ã‚µãƒ¼ãƒ“ã‚¹ï¼ˆSNSï¼‰ã¯ã€å…±é€šã®è¶£å‘³ã‚’æŒã£ã¦ã„ãŸã‚Šã€åŒã˜ã‚ˆã†ãªæƒ…å ±ã‚„æ´»å‹•ã«é–¢å¿ƒãŒã‚ã£ãŸã‚Šã™ã‚‹äººã€…ã‚’çµã³ã¤ã‘ã€äº¤æµã®å ´ã‚’è¨ã‘ã‚‹ã“ã¨ãŒä¸»ç›®çš„ã®ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã‚µãƒ¼ãƒ“ã‚¹ã§ã‚ã‚‹ã€‚ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°æ”»æ’ƒã‚’ä»•æŽ›ã‘ã‚‹é€£ä¸ã¯ã€ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°çš„ãªæ‰‹æ³•ã§ã“ã†ã—ãŸäººé–“é–¢ä¿‚ã«ã¤ã‘è¾¼ã‚“ã§ãã‚‹ã€‚å½“ç¤¾ï¼ˆç±³ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ï¼‰ãŒå…ˆã”ã‚ç™ºè¦‹ã—ãŸã ã¾ã—ã®æ‰‹å£ã¯ã€ã‚ã‚‹SNSã‚µã‚¤ãƒˆã®ã€Œã‚°ãƒ«ãƒ¼ãƒ—ã€æ©Ÿèƒ½ã‚’æ‚ªç”¨ã—ã‚ˆã†ã¨ã™ã‚‹ã‚‚ã®ã ã£ãŸï¼ˆå¯¾SNSã‚µã‚¤ãƒˆæ”»æ’ƒã®æœ€è¿‘ã®çŠ¶æ³ã«ã¤ã„ã¦ã¯ã€ã€ŒUsers of Social Networking Websites Face Malware and Phishing Attacksï¼ˆãƒžãƒ«ã‚¦ã‚¨ã‚¢ã¨ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°æ”»æ’ƒã«ã•ã‚‰ã•ã‚Œã‚‹SNSã‚µã‚¤ãƒˆã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ï¼‰ã€ã‚’å‚ç…§ã—ã¦ã»ã—ã„ï¼‰ã€‚ ã‚°ãƒ«ãƒ¼ãƒ—æ©Ÿèƒ½ã«ã¤ã„ã¦å•é¡Œãªã®ã¯ã€å‚åŠ è€…ã«å‹äººã‚’èª˜ã†ã‚ˆã†å¼·ã„ã‚‹ã‚°ãƒ«ãƒ¼ãƒ—ãŒå˜åœ¨ã™ã‚‹ã“ã¨ã ã€‚èˆˆå‘³ã®ãªã„ã‚°ãƒ«ãƒ¼ãƒ—ã¸ã®æ‹›å¾…ãƒ¡ãƒƒã‚»ãƒ¼
tatsuh 2010/07/15
cyber security

webAP
ãƒªãƒ³ã‚¯
æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ï¼šæƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼šè„†å¼±æ€§å¯¾ç–ï¼šå®‰å…¨ãªã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®ä½œã‚Šæ–¹
ã€Œå®‰å…¨ãªã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®ä½œã‚Šæ–¹ã€ã¯ã€IPAãŒå±Šå‡º(*1)ã‚’å—ã‘ãŸè„†å¼±æ€§é–¢é€£æƒ…å ±ã‚’åŸºã«ã€å±Šå‡ºä»¶æ•°ã®å¤šã‹ã£ãŸè„†å¼±æ€§ã‚„æ”»æ’ƒã«ã‚ˆã‚‹å½±éŸ¿åº¦ãŒå¤§ãã„è„†å¼±æ€§ã‚’å–ã‚Šä¸Šã’ã€ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆé–‹ç™ºè€…ã‚„é‹å–¶è€…ãŒé©åˆ‡ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’è€ƒæ…®ã—ãŸã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚’ä½œæˆã™ã‚‹ãŸã‚ã®è³‡æ–™ã§ã™ã€‚ ã€Œå®‰å…¨ãªã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®ä½œã‚Šæ–¹ã€æ”¹è¨‚ç¬¬7ç‰ˆã®å†…å®¹ ç¬¬1ç« ã§ã¯ã€ã€Œã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å®Ÿè£…ã€ã¨ã—ã¦ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ ã€OSã‚³ãƒžãƒ³ãƒ‰ãƒ»ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ ã‚„ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° ç‰11ç¨®é¡žã®è„†å¼±æ€§ã‚’å–ã‚Šä¸Šã’ã€ãã‚Œãžã‚Œã®è„†å¼±æ€§ã§ç™ºç”Ÿã—ã†ã‚‹è„…å¨ã‚„ç‰¹ã«æ³¨æ„ãŒå¿…è¦ãªã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®ç‰¹å¾´ç‰ã‚’è§£èª¬ã—ã€è„†å¼±æ€§ã®åŽŸå› ãã®ã‚‚ã®ã‚’ãªãã™æ ¹æœ¬çš„ãªè§£æ±ºç–ã€æ”»æ’ƒã«ã‚ˆã‚‹å½±éŸ¿ã®ä½Žæ¸›ã‚’æœŸå¾…ã§ãã‚‹å¯¾ç–ã‚’ç¤ºã—ã¦ã„ã¾ã™ã€‚ ç¬¬2ç« ã§ã¯ã€ã€Œã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®å®‰å…¨æ€§å‘ä¸Šã®ãŸã‚ã®å–ã‚Šçµ„ã¿ã€ã¨ã—ã¦ã€ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒã®é‹ç”¨ã«é–¢ã™ã‚‹å¯¾ç–ã‚„ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã«ãŠã‘ã‚‹ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å–æ‰±ã„ã«é–¢ã™
tatsuh 2010/07/12
webAP

cyber security

Learn
ãƒªãƒ³ã‚¯
ScanNetSecurity - ã‚»ã‚ãƒ¥ã‚¢ãªã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢é–‹ç™ºã‚’æ”¯æ´ã™ã‚‹OWASPãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã®æ—¥æœ¬èªžç‰ˆã‚’å…¬é–‹ï¼ˆJPCERT/CCï¼‰
ä¸€èˆ¬ç¤¾å›£æ³•äºº JPCERT ã‚³ãƒ¼ãƒ‡ã‚£ãƒãƒ¼ã‚·ãƒ§ãƒ³ã‚»ãƒ³ã‚¿ãƒ¼ï¼ˆJPCERT/CCï¼‰ã¯4æœˆ7æ—¥ã€OWASPã€Œã‚½ãƒ•ãƒˆã‚¦ã‚¨ã‚¢ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¿è¨¼æˆç†Ÿåº¦ãƒ¢ãƒ‡ãƒ«ï¼ˆSAMMï¼‰ã€ã‚’å…¬é–‹ã—ãŸã€‚ã“ã‚Œã¯ã€çµŒæ¸ˆç”£æ¥çœã®å§”è¨—äº‹æ¥ã¨ã—ã¦åŒã‚»ãƒ³ã‚¿ãƒ¼ãŒç¿»è¨³ã—ãŸã‚‚ã®ã€‚Open Web Application Security Projectï¼ˆOWASPï¼‰ã¯ã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‘ä¸Šã«é–¢ã™ã‚‹æ´»å‹•ã‚’å±•é–‹ã™ã‚‹ã€ãƒ•ãƒªãƒ¼ã§ã‚ªãƒ¼ãƒ—ãƒ³ãªä¸–ç•Œè¦æ¨¡ã®ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ã§ã‚ã‚Šã€ä¸€èˆ¬åˆ©ç”¨è€…ã‚„çµ„ç¹”ãŒã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªã‚¹ã‚¯ã«ã¤ã„ã¦ã®æ„æ€æ±ºå®šã‚’è¡Œã†éš›ã«ååˆ†ãªåˆ¤æ–ææ–™ãŒå¾—ã‚‰ã‚Œã‚‹ã‚ˆã†ã«ã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ã€Œå¯è¦–åŒ–ã€ã™ã‚‹ã“ã¨ã‚’ä½¿å‘½ã¨ã—ã¦ã„ã‚‹ã€‚ SAMMã¯ã€çµ„ç¹”ãŒç›´é¢ã™ã‚‹å›ºæœ‰ã®ãƒªã‚¹ã‚¯ã«å¿œã˜ãŸã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®ãŸã‚ã®æˆ¦ç•¥ã®ç–å®šãƒ»å®Ÿæ–½ã‚’æ”¯æ´ã™ã‚‹ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã¨ã—ã¦å…¬é–‹ã—ã¦ã„ã‚‹ã‚‚ã®ã§ã€çµ„ç¹”ã®æ—¢å˜ã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚»ã‚ãƒ¥
tatsuh 2010/04/12
cyber security

webAP
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®ãƒ©ãƒƒã‚¯ï½œæƒ…å ±ã‚’å®ˆã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®ãƒ‘ã‚¤ã‚ªãƒ‹ã‚¢
æƒ…å ±ã‚’å®ˆã‚Šã€æœªæ¥ã‚’å‰µé€ ã™ã‚‹ãƒ‘ã‚¤ã‚ªãƒ‹ã‚¢ã¨ã—ã¦ã®ä¿¡é ¼ã¨è‡ªä¿¡ã§ã€ã‚‚ã£ã¨å…ˆã¸ æœ€é«˜å³°ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚µãƒ¼ãƒ“ã‚¹ã¨ã€ITãƒˆãƒ¼ã‚¿ãƒ«ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã‚’æä¾›ã—ã¾ã™ã€‚ ã‚‚ã£ã¨çŸ¥ã‚‹
tatsuh 2008/09/18
Webã‚µã‚¤ãƒˆãƒã‚°ã‹ã‚‰ã‚¢ã‚¿ãƒƒã‚¯ãŒå˜åœ¨ã—ãŸã‹ã‚’ç¢ºèªã™ã‚‹ãƒ„ãƒ¼ãƒ«ã€‚IPAã«æä¾›ã—ãŸã‚‚ã®ã¨ã©ã®ç¨‹åº¦ã“ã¨ãªã‚‹ã®ã‹ã¯ä¸æ˜Ž

cyber security

webAP

ãƒ†ã‚¹ãƒˆ
ãƒªãƒ³ã‚¯
1