èªèšŒã«é¢ãããã¹ããã©ã¯ãã£ã¹ã«é¢ããå æ¬çãªã¬ã€ãã§ããŠã§ãã¢ããªã±ãŒã·ã§ã³ãä¿è·ããŸããããå€èŠçŽ èªèšŒããã¹ã¯ãŒãããªã·ãŒãå®å šãªã¹ãã¬ãŒãžãªã©ã«ã€ããŠåŠã³ãŸãã
ãŠã§ãã¢ããªã®èªèšŒã«é¢ãããã¹ããã©ã¯ãã£ã¹ïŒå æ¬çãªã¬ã€ã
仿¥ã®ããžã¿ã«ç°å¢ã§ã¯ããŠã§ãã¢ããªã±ãŒã·ã§ã³ã¯ãŸããŸãã»ãã¥ãªãã£ã®è åšã«ãããããŠããŸããèªèšŒãšã¯ããŠãŒã¶ãŒã®èº«å ã確èªããããã»ã¹ã§ãããäžæ£ã¢ã¯ã»ã¹ã«å¯Ÿããæåã®é²è¡ç·ã§ããæ©å¯ããŒã¿ãä¿è·ãããŠãŒã¶ãŒã®ä¿¡é Œãç¶æããããã«ã¯ãå ç¢ãªèªèšŒã¡ã«ããºã ãå®è£ ããããšãéèŠã§ãããã®ã¬ã€ãã§ã¯ããã¹ã¯ãŒã管çããå€èŠçŽ èªèšŒããããŠãã以éãŸã§ãããŸããŸãªåŽé¢ãç¶²çŸ ãããèªèšŒã®ãã¹ããã©ã¯ãã£ã¹ã®å æ¬çãªæŠèŠãæäŸããŸãã
èªèšŒãéèŠãªçç±
èªèšŒã¯ããŠã§ãã¢ããªã±ãŒã·ã§ã³ã®ã»ãã¥ãªãã£ã®åºç€ã§ããé©åãªèªèšŒããªããã°ãæ»æè ã¯æ£åœãªãŠãŒã¶ãŒã«ãªãããŸããæ©å¯ããŒã¿ã«ã¢ã¯ã»ã¹ããã·ã¹ãã å šäœãå±éºã«ãããå¯èœæ§ããããŸããèªèšŒãæãéèŠã§ããçç±ã¯æ¬¡ã®ãšããã§ãã
- ããŒã¿ä¿è·ïŒãŠãŒã¶ãŒããŒã¿ãè²¡åæ å ±ããã®ä»ã®æ©å¯è³ç£ãžã®äžæ£ã¢ã¯ã»ã¹ã鲿¢ããŸãã
- ã³ã³ãã©ã€ã¢ã³ã¹ïŒGDPRãHIPAAãPCI DSSãªã©ã®èŠå¶èŠä»¶ãæºããã®ã«åœ¹ç«ã¡ãŸãããããã®èŠå¶ã§ã¯ã匷åãªèªèšŒå¶åŸ¡ã矩åä»ããããŠããŸãã
- è©å€ç®¡çïŒããŒã¿äŸµå®³ãã»ãã¥ãªãã£ã€ã³ã·ãã³ãã鲿¢ããããšã§ããã©ã³ãã®è©å€ãä¿è·ããŸãã
- ãŠãŒã¶ãŒã®ä¿¡é ŒïŒã¢ã«ãŠã³ãã®ã»ãã¥ãªãã£ã確ä¿ããããšã§ããŠãŒã¶ãŒã®ä¿¡é Œãšãã€ã€ã«ãã£ãæ§ç¯ããŸãã
ãã¹ã¯ãŒã管çã®ãã¹ããã©ã¯ãã£ã¹
ãã¹ã¯ãŒãã¯äŸç¶ãšããŠæãäžè¬çãªèªèšŒæ¹æ³ã§ãããã ããè匱ãªãã¹ã¯ãŒãã䟵害ããããã¹ã¯ãŒãã¯ã倧ããªã»ãã¥ãªãã£ãªã¹ã¯ãšãªããŸãã匷åãªãã¹ã¯ãŒã管çãã©ã¯ãã£ã¹ãå®è£ ããããšãäžå¯æ¬ ã§ãã
ãã¹ã¯ãŒãã®è€éãã®èŠä»¶
ãã¹ã¯ãŒããããè§£èªãã«ããããããã«ã匷åãªãã¹ã¯ãŒãã®è€éãã®èŠä»¶ãé©çšããŸãã以äžãæ€èšããŠãã ããã
- æå°é·ïŒå°ãªããšã12æåã®ãã¹ã¯ãŒãã®æå°é·ãèŠæ±ããŸããå€ãã®çµç¹ã§ã¯çŸåšã16æå以äžãæšå¥šããŠããŸãã
- æåã®å€æ§æ§ïŒå€§æåãå°æåãæ°åãèšå·ã®çµã¿åããã䜿çšããããšã矩åä»ããŸãã
- äžè¬çãªåèªã®åé¿ïŒäžè¬çãªåèªãèŸæžã®åèªãããã³æšæž¬ãããããã¿ãŒã³ã䜿çšããããšãçŠæ¢ããŸãã
- ãã¹ã¯ãŒã匷床ã¡ãŒã¿ãŒïŒãã¹ã¯ãŒã匷床ã¡ãŒã¿ãŒãçµ±åããŠããã¹ã¯ãŒãã®åŒ·åºŠã«é¢ãããªã¢ã«ã¿ã€ã ã®ãã£ãŒãããã¯ããŠãŒã¶ãŒã«æäŸããŸãã
äŸïŒåŒ·åãªãã¹ã¯ãŒãã¯ããp@55W0rd!sStr0ngãã®ããã§ããå¿ èŠããããŸããããã¯ããpassword123ããããã¯ããã«è§£èªãå°é£ã§ãã
ãã¹ã¯ãŒãã®ä¿å
ãã¹ã¯ãŒãããã¬ãŒã³ããã¹ãã§ä¿åããªãã§ãã ãããããŒã¿äŸµå®³ãçºçããå Žåã«ãã¹ã¯ãŒãã䟵害ãããã®ãé²ãããã«ããœã«ãã䜿çšãã匷åãªããã·ã¥ã¢ã«ãŽãªãºã ã䜿çšããŸãã
- ããã·ã¥ã¢ã«ãŽãªãºã ïŒArgon2ãbcryptãscryptãªã©ã®ææ°ã®ããã·ã¥ã¢ã«ãŽãªãºã ã䜿çšããŸãããããã®ã¢ã«ãŽãªãºã ã¯èšç®ã³ã¹ããé«ããªãããã«èšèšãããŠãããæ»æè ããã¹ã¯ãŒããè§£èªããã®ãå°é£ã«ãªã£ãŠããŸãã
- ãœã«ãã£ã³ã°ïŒããã·ã¥ããåã«ãäžæã®ã©ã³ãã ã«çæããããœã«ããåãã¹ã¯ãŒãã«è¿œå ããŸããããã«ãããæ»æè ãäºåã«èšç®ãããã¬ã€ã³ããŒããŒãã«ã䜿çšããŠãã¹ã¯ãŒããè§£èªããã®ãé²ããŸãã
- ããŒã¹ãã¬ããã³ã°ïŒããã·ã¥ã¢ã«ãŽãªãºã ãè€æ°åå埩å®è¡ããŠãããã·ã¥ã®èšç®ã³ã¹ããå¢ãããŸããããã«ãããæ»æè ããã¹ã¯ãŒãããã·ã¥ã«ã¢ã¯ã»ã¹ã§ãããšããŠãããã¹ã¯ãŒããè§£èªããã®ãããå°é£ã«ãªããŸãã
äŸïŒãpassword123ããçŽæ¥ä¿åãã代ããã«ãäžæã®ãœã«ãã䜿çšããããã·ã¥é¢æ°ã®çµæãä¿åããŸããäŸïŒ`bcrypt("password123", "unique_salt")`ã
ãã¹ã¯ãŒããªã»ããã¡ã«ããºã
æ»æè ããŠãŒã¶ãŒã¢ã«ãŠã³ãããã€ãžã£ãã¯ããã®ãé²ããå®å šãªãã¹ã¯ãŒããªã»ããã¡ã«ããºã ãå®è£ ããŸãã以äžãæ€èšããŠãã ããã
- ã¡ãŒã«èªèšŒïŒãã¹ã¯ãŒããªã»ãããªã³ã¯ããŠãŒã¶ãŒã®ç»é²æžã¿ã¡ãŒã«ã¢ãã¬ã¹ã«éä¿¡ããŸãããªã³ã¯ã¯ãéãããæéã®ã¿æå¹ã§ããå¿ èŠããããŸãã
- ã»ãã¥ãªãã£è³ªåïŒã»ãã¥ãªãã£è³ªåãã»ã«ã³ããªæ€èšŒæ¹æ³ãšããŠäœ¿çšããŸãããã ããã»ãã¥ãªãã£è³ªåã¯ãœãŒã·ã£ã«ãšã³ãžãã¢ãªã³ã°æ»æã«å¯ŸããŠè匱ã§ããããšãå€ãããæ³šæããŠãã ãããã»ãã¥ãªãã£è³ªåããé¢ãã代ããã«MFAãªãã·ã§ã³ã«ç§»è¡ããããšãæ€èšããŠãã ããã
- ç¥èããŒã¹èªèšŒïŒKBAïŒïŒãŠãŒã¶ãŒã«èªåã®å人履æŽãŸãã¯ã¢ã«ãŠã³ãã¢ã¯ãã£ããã£ã«é¢ãã質åã«çããããã«äŸé ŒããŸããããã¯ããŠãŒã¶ãŒã®èº«å ã確èªããäžæ£ãªãã¹ã¯ãŒããªã»ãããé²ãã®ã«åœ¹ç«ã¡ãŸãã
ãã¹ã¯ãŒãã®æå¹æéããªã·ãŒ
ãã¹ã¯ãŒãã®æå¹æéããªã·ãŒã¯ãã€ãŠãã¹ããã©ã¯ãã£ã¹ãšèããããŠããŸãããããŠãŒã¶ãŒã匱ããèŠãããããã¹ã¯ãŒããéžæããé »ç¹ã«æŽæ°ããããšããããããŸããNISTã®ãããªçµç¹ããã®çŸåšã®ã¬ã€ãã³ã¹ã§ã¯ã䟵害ã®èšŒæ ããªãéããå¿ é ã®ãã¹ã¯ãŒãã®æå¹æéåãã«ã¯*å察*ããŠããŸãã代ããã«ã匷åãªãã¹ã¯ãŒãã®äœæãšå€èŠçŽ èªèšŒã®å®è£ ã«ã€ããŠãŠãŒã¶ãŒãæè²ããããšã«çŠç¹ãåœãŠãŠãã ããã
å€èŠçŽ èªèšŒïŒMFAïŒ
å€èŠçŽ èªèšŒïŒMFAïŒã¯ããŠãŒã¶ãŒãè€æ°ã®èªèšŒèŠçŽ ãæäŸããããšãèŠæ±ããããšã«ãããã»ãã¥ãªãã£ã®è¿œå ã¬ã€ã€ãŒã远å ããŸããããã«ãããæ»æè ããŠãŒã¶ãŒã®ãã¹ã¯ãŒããçãã å Žåã§ãããŠãŒã¶ãŒã¢ã«ãŠã³ããžã®ã¢ã¯ã»ã¹ãã¯ããã«å°é£ã«ãªããŸããMFAã§ã¯ããŠãŒã¶ãŒã¯æ¬¡ã®èŠçŽ ã®ãã¡2ã€ä»¥äžãæäŸããå¿ èŠããããŸãã
- ç¥ã£ãŠããããšïŒãã¹ã¯ãŒããPINããŸãã¯ã»ãã¥ãªãã£è³ªåã
- æã£ãŠãããã®ïŒã¢ãã€ã«ã¢ããªãã»ãã¥ãªãã£ããŒã¯ã³ããŸãã¯ããŒããŠã§ã¢ããŒã«ãã£ãŠçæãããã¯ã³ã¿ã€ã ãã¹ã¯ãŒãïŒOTPïŒã
- èªåèªèº«ïŒæçŽã¹ãã£ã³ãé¡èªèãªã©ã®çäœèªèšŒã
MFAã®çš®é¡
- æéããŒã¹ã®ã¯ã³ã¿ã€ã ãã¹ã¯ãŒãïŒTOTPïŒïŒGoogle AuthenticatorãAuthyãMicrosoft Authenticatorãªã©ã®ã¢ãã€ã«ã¢ããªã䜿çšããŠãäžæã®æéäŸåã³ãŒããçæããŸãã
- SMSããŒã¹ã®OTPïŒSMSãä»ããŠã¯ã³ã¿ã€ã ãã¹ã¯ãŒãããŠãŒã¶ãŒã®æºåž¯é»è©±ã«éä¿¡ããŸãããã®æ¹æ³ã¯ãSIMã¹ã¯ããæ»æã®ãªã¹ã¯ããããããTOTPãããå®å šã§ã¯ãããŸããã
- ããã·ã¥éç¥ïŒãã°ã€ã³è©Šè¡ãæ¿èªãŸãã¯æåŠããããã«æ±ããããã·ã¥éç¥ããŠãŒã¶ãŒã®ã¢ãã€ã«ããã€ã¹ã«éä¿¡ããŸãã
- ããŒããŠã§ã¢ã»ãã¥ãªãã£ããŒïŒYubiKeyãTitan Security Keyãªã©ã®ç©çã»ãã¥ãªãã£ããŒã䜿çšããŠããŠãŒã¶ãŒã®èº«å ã確èªããŸãããããã®ããŒã¯ããã£ãã·ã³ã°æ»æã«å¯ŸããŠæé«ã¬ãã«ã®ã»ãã¥ãªãã£ãæäŸããŸãã
MFAã®å®è£
ç¹ã«ç¹æš©ã¢ã¯ã»ã¹ãæã€ãã¹ãŠã®ãŠãŒã¶ãŒã«å¯ŸããŠMFAãæå¹ã«ããŸãããŠãŒã¶ãŒãéžæã§ããããŸããŸãªMFAãªãã·ã§ã³ããŠãŒã¶ãŒã«æäŸããŸããMFAã®å©ç¹ãšå¹æçãªäœ¿ç𿹿³ã«ã€ããŠãŠãŒã¶ãŒãæè²ããŸãã
äŸïŒå€ãã®ãªã³ã©ã€ã³ãã³ãã³ã°ãã©ãããã©ãŒã ã§ã¯ãã¢ã«ãŠã³ãã«ã¢ã¯ã»ã¹ããããã«MFAãå¿ èŠã§ãããŠãŒã¶ãŒã¯ãã¹ã¯ãŒããå ¥åããæºåž¯é»è©±ã«éä¿¡ãããã¯ã³ã¿ã€ã ã³ãŒããå ¥åããå¿ èŠãããå ŽåããããŸãã
èªèšŒãããã³ã«
ãŠã§ãã¢ããªã±ãŒã·ã§ã³ã«ã¯ãããã€ãã®èªèšŒãããã³ã«ã䜿çšã§ããŸããé©åãªãããã³ã«ã®éžæã¯ãç¹å®ã®ããŒãºãšã»ãã¥ãªãã£èŠä»¶ã«ãã£ãŠç°ãªããŸãã
OAuth 2.0
OAuth 2.0ã¯ããŠãŒã¶ãŒãèªåã®è³æ Œæ å ±ãå ±æããã«ããµãŒãããŒãã£ã¢ããªã±ãŒã·ã§ã³ã«èªåã®ãªãœãŒã¹ãžã®å¶éä»ãã¢ã¯ã»ã¹ãèš±å¯ã§ããããã«ããèªèšŒãã¬ãŒã ã¯ãŒã¯ã§ãããœãŒã·ã£ã«ãã°ã€ã³ãAPIèªèšŒã«ãã䜿çšãããŸãã
äŸïŒãŠãŒã¶ãŒãGoogleãŸãã¯Facebookã¢ã«ãŠã³ãã䜿çšããŠã¢ããªã±ãŒã·ã§ã³ã«ãã°ã€ã³ã§ããããã«ããŸãã
OpenID ConnectïŒOIDCïŒ
OpenID ConnectïŒOIDCïŒã¯ãOAuth 2.0ã®äžã«æ§ç¯ãããèªèšŒã¬ã€ã€ãŒã§ããã¢ããªã±ãŒã·ã§ã³ããŠãŒã¶ãŒã®èº«å ã確èªããåºæ¬çãªãããã¡ã€ã«æ å ±ãååŸããããã®æšæºåãããæ¹æ³ãæäŸããŸããOIDCã¯ãè€æ°ã®ã¢ããªã±ãŒã·ã§ã³ã§ã®ã·ã³ã°ã«ãµã€ã³ãªã³ïŒSSOïŒã«ãã䜿çšãããŸãã
SAML
Security Assertion Markup LanguageïŒSAMLïŒã¯ãã»ãã¥ãªãã£ãã¡ã€ã³éã§èªèšŒããã³èªå¯ããŒã¿ã亀æããããã®XMLããŒã¹ã®æšæºã§ãããšã³ã¿ãŒãã©ã€ãºç°å¢ã§ã®SSOã«ãã䜿çšãããŸãã
ã»ãã·ã§ã³ç®¡ç
é©åãªã»ãã·ã§ã³ç®¡çã¯ããŠãŒã¶ãŒèªèšŒãç¶æãããŠãŒã¶ãŒã¢ã«ãŠã³ããžã®äžæ£ã¢ã¯ã»ã¹ãé²ãããã«éèŠã§ãã
ã»ãã·ã§ã³IDã®çæ
æ»æè ããŠãŒã¶ãŒã»ãã·ã§ã³ãæšæž¬ãŸãã¯ãã€ãžã£ãã¯ããã®ãé²ãããã«ã匷åã§äºæž¬äžå¯èœãªã»ãã·ã§ã³IDãçæããŸããæå·è«çã«å®å šãªä¹±æ°ãžã§ãã¬ãŒã¿ãŒã䜿çšããŠã»ãã·ã§ã³IDãçæããŸãã
ã»ãã·ã§ã³ã¹ãã¬ãŒãž
ã»ãã·ã§ã³IDããµãŒããŒåŽã§å®å šã«ä¿åããŸããCookieã¯æ»æè ã«ãã£ãŠååãããå¯èœæ§ããããããCookieã«æ©å¯ããŒã¿ãä¿åããªãã§ãã ãããHTTPOnly Cookieã䜿çšããŠãã¯ã©ã€ã¢ã³ãåŽã®ã¹ã¯ãªãããã»ãã·ã§ã³IDã«ã¢ã¯ã»ã¹ããã®ãé²ããŸãã
ã»ãã·ã§ã³ã¿ã€ã ã¢ãŠã
éã¢ã¯ãã£ãæéãçµéãããšããŠãŒã¶ãŒã»ãã·ã§ã³ãèªåçã«çµäºããã»ãã·ã§ã³ã¿ã€ã ã¢ãŠãã¡ã«ããºã ãå®è£ ããŸããããã¯ãæ»æè ãã¢ã€ãã«ç¶æ ã®ã»ãã·ã§ã³ãæªçšããã®ãé²ãã®ã«åœ¹ç«ã¡ãŸãã
ã»ãã·ã§ã³ã®åãæ¶ã
ãŠãŒã¶ãŒãã»ãã·ã§ã³ãæåã§åãæ¶ãæ¹æ³ããŠãŒã¶ãŒã«æäŸããŸããããã«ããããŠãŒã¶ãŒã¯ã¢ã«ãŠã³ããããã°ã¢ãŠãããäžæ£ã¢ã¯ã»ã¹ãé²ãããšãã§ããŸãã
å®å šãªéä¿¡
HTTPSïŒHypertext Transfer Protocol SecureïŒã䜿çšããŠãã¯ã©ã€ã¢ã³ããšãµãŒããŒéã§éä¿¡ãããæ©å¯ããŒã¿ãä¿è·ããŸãã
HTTPS
HTTPSã¯ãã¯ã©ã€ã¢ã³ããšãµãŒããŒéã®ãã¹ãŠã®éä¿¡ãæå·åããæ»æè ãæ©å¯ããŒã¿ãçèŽããã®ãé²ããŸããä¿¡é Œã§ããèªèšŒå±ããSSL/TLSèšŒææžãååŸããHTTPSã䜿çšããããã«WebãµãŒããŒãæ§æããŸãã
èšŒææžç®¡ç
SSL/TLSèšŒææžãææ°ã®ç¶æ ã«ä¿ã¡ãé©åã«æ§æããŸãã匷åãªæå·ã¹ã€ãŒãã䜿çšããSSLv3ãªã©ã®å€ãå®å šã§ãªããããã³ã«ã®ãµããŒããç¡å¹ã«ããŸãã
äžè¬çãªèªèšŒã®è匱æ§
äžè¬çãªèªèšŒã®è匱æ§ã«æ³šæãããããã鲿¢ããããã®å¯Ÿçãè¬ããŠãã ããã
ãã«ãŒããã©ãŒã¹æ»æ
ãã«ãŒããã©ãŒã¹æ»æãšã¯ãå¯èœãªçµã¿åããã倿°è©Šè¡ããŠããŠãŒã¶ãŒã®ãã¹ã¯ãŒããæšæž¬ããããšããããšã§ããæ»æè ããã¹ã¯ãŒããç¹°ãè¿ãæšæž¬ããããšããã®ãé²ãããã«ãã¢ã«ãŠã³ãããã¯ã¢ãŠãã¡ã«ããºã ãå®è£ ããŸããèªååãããæ»æãé²ãããã«CAPTCHAã䜿çšããŸãã
ã¯ã¬ãã³ã·ã£ã«ã¹ã¿ããã£ã³ã°
ã¯ã¬ãã³ã·ã£ã«ã¹ã¿ããã£ã³ã°æ»æãšã¯ãä»ã®Webãµã€ãããçãŸãããŠãŒã¶ãŒåãšãã¹ã¯ãŒãã䜿çšããŠãã¢ããªã±ãŒã·ã§ã³ã«ãã°ã€ã³ããããšããããšã§ããæ»æè ãçæéã«å€æ°ã®ãã°ã€ã³è©Šè¡ãè¡ãã®ãé²ãããã«ãã¬ãŒãå¶éãå®è£ ããŸããäžå¯©ãªãã°ã€ã³ã¢ã¯ãã£ããã£ãç£èŠããŸãã
ãã£ãã·ã³ã°æ»æ
ãã£ãã·ã³ã°æ»æãšã¯ãæ£åœãªWebãµã€ããŸãã¯ãµãŒãã¹ã«ãªãããŸããŠããŠãŒã¶ãŒãã ãŸããŠèªåã®è³æ Œæ å ±ãæããã«ãããããšã§ãããã£ãã·ã³ã°æ»æãšãããããç¹å®ããæ¹æ³ã«ã€ããŠãŠãŒã¶ãŒãæè²ããŸããSender Policy FrameworkïŒSPFïŒãDomainKeys Identified MailïŒDKIMïŒãããã³Domain-based Message Authentication, Reporting & ConformanceïŒDMARCïŒãªã©ã®ãã£ãã·ã³ã°å¯Ÿçãå®è£ ããŸãã
ã»ãã·ã§ã³ãã€ãžã£ãã¯
ã»ãã·ã§ã³ãã€ãžã£ãã¯æ»æãšã¯ããŠãŒã¶ãŒã®ã»ãã·ã§ã³IDãçã¿ãããã䜿çšããŠãŠãŒã¶ãŒã«ãªãããŸãããšã§ãã匷åãªã»ãã·ã§ã³IDã®çæããã³ã¹ãã¬ãŒãžã¡ã«ããºã ã䜿çšããŸããã»ãã·ã§ã³IDãååãããªãããã«HTTPSãå®è£ ããŸããã¯ã©ã€ã¢ã³ãåŽã®ã¹ã¯ãªãããã»ãã·ã§ã³IDã«ã¢ã¯ã»ã¹ããã®ãé²ãããã«HTTPOnly Cookieã䜿çšããŸãã
宿çãªã»ãã¥ãªãã£ç£æ»
èªèšŒã·ã¹ãã ã®æœåšçãªè匱æ§ãç¹å®ããŠå¯ŸåŠããããã«ã宿çãªã»ãã¥ãªãã£ç£æ»ã宿œããŸãããµãŒãããŒãã£ã®ã»ãã¥ãªãã£äŒç€Ÿã«äŸé ŒããŠãäŸµå ¥ãã¹ããšè匱æ§è©äŸ¡ã宿œããŸãã
åœéåãšããŒã«ãªãŒãŒã·ã§ã³ã®èæ ®äºé
ã°ããŒãã«ãªãŠãŒã¶ãŒã察象ãšããèªèšŒã·ã¹ãã ãèšèšããå Žåã¯ã以äžãæ€èšããŠãã ããã
- èšèªãµããŒãïŒãã¹ãŠã®èªèšŒã¡ãã»ãŒãžãšã€ã³ã¿ãŒãã§ã€ã¹ãè€æ°ã®èšèªã§å©çšå¯èœã§ããããšã確èªããŸãã
- æ¥ä»ãšæå»ã®åœ¢åŒïŒãã±ãŒã«åºæã®æ¥ä»ãšæå»ã®åœ¢åŒã䜿çšããŸãã
- æåãšã³ã³ãŒãïŒããŸããŸãªèšèªã«å¯Ÿå¿ããããã«ãå¹ åºãæåãšã³ã³ãŒãããµããŒãããŸãã
- å°åã®èŠå¶ïŒãšãŒãããã®GDPRãã«ãªãã©ã«ãã¢ã®CCPAãªã©ãå°åã®ããŒã¿ãã©ã€ãã·ãŒèŠå¶ãéµå®ããŸãã
- æ¯æãæ¹æ³ïŒããŸããŸãªå°åã§äººæ°ã®ããããŸããŸãªæ¯æãæ¹æ³ãæäŸããããšãæ€èšããŠãã ããã
äŸïŒæ¥æ¬ã®ãŠãŒã¶ãŒãã¿ãŒã²ãããšããWebã¢ããªã±ãŒã·ã§ã³ã¯ãæ¥æ¬èªããµããŒãããæ¥æ¬ã®æ¥ä»ãšæå»ã®åœ¢åŒã䜿çšããæ¥æ¬ã®ããŒã¿ãã©ã€ãã·ãŒæ³ãéµå®ããå¿ èŠããããŸãã
ææ°æ å ±ã®å ¥æ
ã»ãã¥ãªãã£ã®ç¶æ³ã¯åžžã«å€åããŠããŸããèªèšŒã«é¢ããææ°ã®ãã¹ããã©ã¯ãã£ã¹ãšã»ãã¥ãªãã£ã®è åšã«é¢ããææ°æ å ±ãå ¥æããŠãã ãããã»ãã¥ãªãã£ã¡ãŒãªã³ã°ãªã¹ãã«ç»é²ããã»ãã¥ãªãã£äŒè°ã«åå ãããœãŒã·ã£ã«ã¡ãã£ã¢ã§ã»ãã¥ãªãã£ã®å°éå®¶ããã©ããŒããŸãã
çµè«
å ç¢ãªèªèšŒã¡ã«ããºã ãå®è£ ããããšã¯ãWebã¢ããªã±ãŒã·ã§ã³ãã»ãã¥ãªãã£ã®è åšããä¿è·ããããã«éèŠã§ãããã®ã¬ã€ãã§æŠèª¬ãããŠãããã¹ããã©ã¯ãã£ã¹ã«åŸãããšã§ãWebã¢ããªã±ãŒã·ã§ã³ã®ã»ãã¥ãªãã£ãå€§å¹ ã«åäžããããŠãŒã¶ãŒã®ããŒã¿ãä¿è·ã§ããŸããé²åããè åšã«é ããåããªãããã«ãèªèšŒãã©ã¯ãã£ã¹ã宿çã«èŠçŽããæŽæ°ããããšãå¿ããªãã§ãã ããã