ãããã¬ãŒã·ã§ã³ãã¹ãèªååã®çŸç¶ããã®å©ç¹ã課é¡ããããŠã°ããŒãã«ãªã·ã¹ãã ãšã¢ããªã±ãŒã·ã§ã³ãä¿è·ããããã®ãã¹ããã©ã¯ãã£ã¹ãæ¢ããŸãã
ã»ãã¥ãªãã£ãã¹ãïŒã°ããŒãã«ç°å¢ã«ããããããã¬ãŒã·ã§ã³ãã¹ãã®èªåå
仿¥ã®çžäºæ¥ç¶ãããäžçã«ãããŠãçµç¹ã¯çµ¶ããé²åãããµã€ããŒè åšã®ç¶æ³ã«çŽé¢ããŠããŸããã»ãã¥ãªãã£ãã¹ããç¹ã«ãããã¬ãŒã·ã§ã³ãã¹ãïŒãã³ãã¹ãïŒã¯ãæªæã®ããæ»æè ãè匱æ§ãæªçšããåã«ç¹å®ããç·©åããããã«äžå¯æ¬ ã§ããæ»æå¯Ÿè±¡é åãæ¡å€§ãããŸããŸãè€éã«ãªãã«ã€ããŠãæåã®ãã³ãã¹ãææ³ã ãã§ã¯äžååãªããšãå€ããªã£ãŠããŸããããã§ãããã¬ãŒã·ã§ã³ãã¹ãã®èªååãéèŠãªåœ¹å²ãæããã倿§ãªã°ããŒãã«ç°å¢å šäœã§ã»ãã¥ãªãã£å¯Ÿçãæ¡åŒµããè匱æ§è©äŸ¡ã®å¹çãåäžãããæ¹æ³ãæäŸããŸãã
ãããã¬ãŒã·ã§ã³ãã¹ãã®èªååãšã¯ïŒ
ãããã¬ãŒã·ã§ã³ãã¹ãã®èªååãšã¯ããã³ãã¹ãããã»ã¹ã®ããŸããŸãªåŽé¢ãèªååããããã«ãœãããŠã§ã¢ããŒã«ãã¹ã¯ãªããã䜿çšããããšã§ããããã«ã¯ãããŒãã¹ãã£ã³ãè匱æ§ã¹ãã£ã³ã®ãããªåºæ¬çãªã¿ã¹ã¯ããããšã¯ã¹ããã€ãçæããšã¯ã¹ããã€ãåŸã®åæãšãã£ãããé«åºŠãªæè¡ãŸã§å«ãŸããŸããéèŠãªã®ã¯ããããã¬ãŒã·ã§ã³ãã¹ãã®èªååã人éã®ãã³ãã¹ã¿ãŒãå®å šã«çœ®ãæããããšãç®çãšããŠããªããšããç¹ã§ããããããå埩çãªã¿ã¹ã¯ãåŠçãã容æã«çºèŠã§ããè匱æ§ïŒlow-hanging fruitïŒãç¹å®ããããè©³çŽ°ãªæååæã®ããã®åºç€ãæäŸããããšã§ã圌ãã®èœåãå¢åŒ·ããããã«èšèšãããŠããŸããèªååã«ããã人éã®ãã¹ã¿ãŒã¯å°éçãªå€æåãšåµé æ§ãå¿ èŠãšãããããè€éã§é倧ãªè匱æ§ã«éäžã§ããããã«ãªããŸãã
ãããã¬ãŒã·ã§ã³ãã¹ãèªååã®å©ç¹
ãããã¬ãŒã·ã§ã³ãã¹ãã®èªååãå°å ¥ããããšã¯ãããããèŠæš¡ã®çµç¹ãç¹ã«ã°ããŒãã«ã«å±éããŠããçµç¹ã«ãšã£ãŠæ°å€ãã®å©ç¹ããããããŸãïŒ
- å¹çã®åäžïŒ èªååã«ãããç¹å®ã®ãã³ãã¹ãã¿ã¹ã¯ã«å¿ èŠãªæéãå€§å¹ ã«ççž®ãããã»ãã¥ãªãã£ããŒã ã¯ã·ã¹ãã ãã¢ããªã±ãŒã·ã§ã³ãããé »ç¹ãã€å¹ççã«è©äŸ¡ã§ããããã«ãªããŸããäžè¬çãªè匱æ§ãæåã§ã¹ãã£ã³ããã®ã«æ°æ¥ãŸãã¯æ°é±éè²»ãã代ããã«ãèªååããŒã«ã¯ãããæ°æéã§å®äºã§ããŸãã
- ã¹ã±ãŒã©ããªãã£ã®åäžïŒ çµç¹ãæé·ããITã€ã³ãã©ãè€éåããã«ã€ããŠãæåã®æ¹æ³ã ãã§ã»ãã¥ãªãã£ãã¹ãã®åãçµã¿ãæ¡åŒµããããšã¯ãŸããŸãå°é£ã«ãªããŸããèªååã«ãããçµç¹ã¯ã»ãã¥ãªãã£ããŒã ã®èŠæš¡ãå€§å¹ ã«å¢ããããšãªããããå€§èŠæš¡ã§è€éãªç°å¢ã«å¯Ÿå¿ã§ããŸããè€æ°ã®å€§éžã«ãŸãããæ°çŸã®ãŠã§ãã¢ããªã±ãŒã·ã§ã³ãšãµãŒããŒãæã€å€åœç±äŒæ¥ãèããŠã¿ãŠãã ãããåæã®è匱æ§ã¹ãã£ã³ããã»ã¹ãèªååããããšã§ãã»ãã¥ãªãã£ããŒã ã¯ãã®åºå€§ãªæ»æå¯Ÿè±¡é åå šäœã§æœåšçãªãªã¹ã¯ãå¹ççã«ç¹å®ããåªå é äœãä»ããããšãã§ããŸãã
- ã³ã¹ãã®åæžïŒ å埩çãªã¿ã¹ã¯ãèªååãããã³ãã¹ãããã»ã¹ã®å¹çãåäžãããããšã§ãçµç¹ã¯ã»ãã¥ãªãã£ãã¹ãã®ç·ã³ã¹ããåæžã§ããŸããããã¯ãäºç®ãéãããŠããçµç¹ããé »ç¹ãªãã³ãã¹ãã宿œããå¿ èŠãããçµç¹ã«ãšã£ãŠç¹ã«æçã§ãã
- äžè²«æ§ã®åŒ·åïŒ æåã®ãã³ãã¹ãã¯äž»èгçã§ããããã¥ãŒãã³ãšã©ãŒãçºçããããã§ããèªååã¯ãäºåã«å®çŸ©ãããã«ãŒã«ãšã¹ã¯ãªããã䜿çšããããšã§ããã¹ãããã»ã¹ã®äžè²«æ§ã確ä¿ããããä¿¡é Œæ§ãé«ãåçŸæ§ã®ããçµæã«ã€ãªãããŸãããã®äžè²«æ§ã¯ãé·æã«ããã£ãŠåŒ·åãªã»ãã¥ãªãã£äœå¶ãç¶æããããã«äžå¯æ¬ ã§ãã
- è¿ éãªä¿®æ£ïŒ è匱æ§ãããè¿ éãã€å¹ççã«ç¹å®ããããšã§ãèªååã¯çµç¹ãåé¡ãããéãä¿®æ£ããå šäœçãªãªã¹ã¯ãšã¯ã¹ããŒãžã£ãŒãæžããããšãå¯èœã«ããŸããããã¯ãæ»æè ãåžžã«æ°ããè匱æ§ãæªçšããããšæ¢ããŠãã仿¥ã®ããŒã¹ã®éãè åšç°å¢ã«ãããŠç¹ã«éèŠã§ãã
- ã¬ããŒãäœæã®æ¹åïŒ å€ãã®ãããã¬ãŒã·ã§ã³ãã¹ãèªååããŒã«ã¯ãçºèŠãããè匱æ§ã«é¢ãã詳现ãªã¬ããŒããæäŸããŸããããã«ã¯ããã®æ·±å»åºŠã圱é¿ãæšå¥šãããä¿®æ£æé ãå«ãŸããŸããããã¯ãã»ãã¥ãªãã£ããŒã ãä¿®æ£äœæ¥ã®åªå é äœãä»ããã¹ããŒã¯ãã«ããŒã«ãªã¹ã¯ããã广çã«äŒããã®ã«åœ¹ç«ã¡ãŸãã
ãããã¬ãŒã·ã§ã³ãã¹ãèªååã®èª²é¡
ãããã¬ãŒã·ã§ã³ãã¹ãã®èªååã¯å€ãã®å©ç¹ãæäŸããŸãããããã«é¢é£ãã課é¡ãšå¶éãèªèããããšãéèŠã§ãïŒ
- 誀æ€ç¥ïŒãã©ãŒã«ã¹ããžãã£ãïŒïŒ èªååããŒã«ã¯ãååšãããšå ±åãããªããå®éã«ã¯æªçšäžå¯èœãªè匱æ§ã§ãã誀æ€ç¥ãçæããããšããããŸããããã«ãããã»ãã¥ãªãã£ããŒã ããããã®èª€ã£ãèŠåã調æ»ããéã«è²ŽéãªæéãšãªãœãŒã¹ã浪費ãããå¯èœæ§ããããŸãã誀æ€ç¥ã®æ°ãæå°éã«æããããã«ãèªååããŒã«ãæ éã«èšå®ããã³èª¿æŽããããšãäžå¯æ¬ ã§ãã
- èŠéãïŒãã©ãŒã«ã¹ãã¬ãã£ãïŒïŒ éã«ãèªååããŒã«ã¯ã·ã¹ãã ã«ååšããè匱æ§ãèŠéãããšããããŸããããã¯ãããŒã«ãé©åã«èšå®ãããŠããªãå Žåãææ°ã®è匱æ§ã·ã°ããã£ãæã£ãŠããªãå ŽåããŸãã¯è匱æ§ãè€éã§ç¹å®ã«æååæãå¿ èŠãªå Žåã«çºçããå¯èœæ§ããããŸããèªååããŒã«ã®ã¿ã«äŸåããããšã¯ãªã¹ã¯ãçã¿åºããé¿ããã¹ãã§ãã
- éå®çãªã³ã³ããã¹ãèªèïŒ èªååããŒã«ã¯éåžžã人éã®ãã³ãã¹ã¿ãŒãæã€ãããªã³ã³ããã¹ãèªèèœåãæ¬ ããŠããŸããã¢ããªã±ãŒã·ã§ã³ã®ããžãã¹ããžãã¯ãç°ãªãã·ã¹ãã éã®é¢ä¿ãçè§£ã§ããªãå Žåããããããã«ããè€éãªè匱æ§ãé£éçãªè匱æ§ãç¹å®ããèœåãå¶éãããå¯èœæ§ããããŸãã
- ããŒã«ã®èšå®ãšã¡ã³ããã³ã¹ïŒ ãããã¬ãŒã·ã§ã³ãã¹ãèªååããŒã«ã广çã§ããããã«ã¯ãæ éãªèšå®ãšç¶ç¶çãªã¡ã³ããã³ã¹ãå¿ èŠã§ããããã¯ãç¹ã«ã»ãã¥ãªãã£ã®å°éç¥èãéãããŠããçµç¹ã«ãšã£ãŠã¯ãæéãšãªãœãŒã¹ã倧éã«æ¶è²»ããã¿ã¹ã¯ã«ãªãå¯èœæ§ããããŸãã
- çµ±åã®èª²é¡ïŒ ãããã¬ãŒã·ã§ã³ãã¹ãèªååããŒã«ãæ¢åã®éçºããã³ã»ãã¥ãªãã£ã¯ãŒã¯ãããŒã«çµ±åããããšã¯å°é£ãªå ŽåããããŸããçµç¹ã¯ãæ°ããæè¡ã«å¯Ÿå¿ããããã«ãããã»ã¹ãããŒã«ãä¿®æ£ããå¿ èŠããããããããŸããã
- ã³ã³ãã©ã€ã¢ã³ã¹èŠä»¶ïŒ äžéšã®ã³ã³ãã©ã€ã¢ã³ã¹èŠå¶ã§ã¯ããããã¬ãŒã·ã§ã³ãã¹ãèªååã®äœ¿çšã«é¢ããŠç¹å®ã®èŠä»¶ãå®ããããŠããå ŽåããããŸããçµç¹ã¯ãèªç€Ÿã®èªååããŒã«ãšããã»ã¹ããããã®èŠä»¶ãæºãããŠããããšã確èªããå¿ èŠããããŸããäŸãã°ããšãŒãããã§GDPRïŒäžè¬ããŒã¿ä¿è·èŠåïŒã®å¯Ÿè±¡ãšãªãçµç¹ã¯ããã³ãã¹ãã®å®è·µãããŒã¿ãã©ã€ãã·ãŒãšã»ãã¥ãªãã£ã®ååãå°éããŠããããšãä¿èšŒããªããã°ãªããŸãããåæ§ã«ãPCI DSSïŒãã€ã¡ã³ãã«ãŒãæ¥çããŒã¿ã»ãã¥ãªãã£åºæºïŒã«ã¯ããããã¬ãŒã·ã§ã³ãã¹ãã®é »åºŠãšç¯å²ã«é¢ããç¹å®ã®èŠä»¶ããããŸãã
ãããã¬ãŒã·ã§ã³ãã¹ãèªååããŒã«ã®çš®é¡
åžå Žã«ã¯ããªãŒãã³ãœãŒã¹ããŒã«ããåçšãœãªã¥ãŒã·ã§ã³ãŸã§ãå€çš®å€æ§ãªãããã¬ãŒã·ã§ã³ãã¹ãèªååããŒã«ãååšããŸããæãäžè¬çãªããŒã«ã®çš®é¡ã«ã¯ã以äžã®ãããªãã®ããããŸãïŒ
- è匱æ§ã¹ãã£ããŒïŒ ãããã®ããŒã«ã¯ãè匱æ§ã·ã°ããã£ã®ããŒã¿ããŒã¹ã«åºã¥ããŠãã·ã¹ãã ãã¢ããªã±ãŒã·ã§ã³ã®æ¢ç¥ã®è匱æ§ãã¹ãã£ã³ããŸããäŸãšããŠã¯ãNessusãOpenVASãQualysãªã©ããããŸãã
- ãŠã§ãã¢ããªã±ãŒã·ã§ã³ã¹ãã£ããŒïŒ ãããã®ããŒã«ã¯ãSQLã€ã³ãžã§ã¯ã·ã§ã³ãã¯ãã¹ãµã€ãã¹ã¯ãªããã£ã³ã°ïŒXSSïŒãã¯ãã¹ãµã€ããªã¯ãšã¹ããã©ãŒãžã§ãªïŒCSRFïŒãªã©ã®è匱æ§ã«ã€ããŠãŠã§ãã¢ããªã±ãŒã·ã§ã³ãã¹ãã£ã³ããããšã«ç¹åããŠããŸããäŸãšããŠã¯ãOWASP ZAPãBurp SuiteãAcunetixãªã©ããããŸãã
- ãããã¯ãŒã¯ã¹ãã£ããŒïŒ ãããã®ããŒã«ã¯ããªãŒãã³ããŒããå®è¡äžã®ãµãŒãã¹ããã®ä»æœåšçãªè匱æ§ãç¹å®ããããã«äœ¿çšã§ããæ å ±ãæ±ããŠãããã¯ãŒã¯ãã¹ãã£ã³ããŸããäŸãšããŠã¯ãNmapãMasscanãªã©ããããŸãã
- ãã¡ã¶ãŒïŒ ãããã®ããŒã«ã¯ãã¢ããªã±ãŒã·ã§ã³ã«äžæ£ãªåœ¢åŒã®ããŒã¿ãæ³šå ¥ããŠãã¯ã©ãã·ã¥ãè匱æ§ã瀺ãå¯èœæ§ã®ãããã®ä»ã®äºæããªãåäœãåŒãèµ·ããããšããŸããäŸãšããŠã¯ãAFLãRadamsaãªã©ããããŸãã
- ãšã¯ã¹ããã€ããã¬ãŒã ã¯ãŒã¯ïŒ ãããã®ããŒã«ã¯ãæ¢ç¥ã®è匱æ§ã«å¯Ÿãããšã¯ã¹ããã€ããéçºããã³å®è¡ããããã®ãã¬ãŒã ã¯ãŒã¯ãæäŸããŸããæã人æ°ã®ããäŸã¯Metasploitã§ãã
ãããã¬ãŒã·ã§ã³ãã¹ãèªååã®å®è£ ïŒãã¹ããã©ã¯ãã£ã¹
ãããã¬ãŒã·ã§ã³ãã¹ãèªååã®å©ç¹ãæå€§åãããªã¹ã¯ãæå°éã«æããããã«ãçµç¹ã¯ä»¥äžã®ãã¹ããã©ã¯ãã£ã¹ã«åŸãã¹ãã§ãïŒ
- æç¢ºãªãŽãŒã«ãšç®çãå®çŸ©ããïŒ ãããã¬ãŒã·ã§ã³ãã¹ãã®èªååãå®è£ ããåã«ãæç¢ºãªãŽãŒã«ãšç®çãå®çŸ©ããããšãéèŠã§ããèªååã§äœãéæããããšããŠããŸããïŒã©ã®çš®é¡ã®è匱æ§ãæãæžå¿µããŠããŸããïŒã³ã³ãã©ã€ã¢ã³ã¹èŠä»¶ã¯äœã§ããïŒæç¢ºãªãŽãŒã«ãå®çŸ©ããããšã§ãé©åãªããŒã«ãéžæããæ£ããèšå®ããã®ã«åœ¹ç«ã¡ãŸãã
- é©åãªããŒã«ãéžæããïŒ ãã¹ãŠã®ãããã¬ãŒã·ã§ã³ãã¹ãèªååããŒã«ãåãããã«äœãããŠããããã§ã¯ãããŸãããããŸããŸãªããŒã«ãæ éã«è©äŸ¡ããçµç¹ã®ç¹å®ã®ããŒãºãšèŠä»¶ã«æãé©ãããã®ãéžæããããšãéèŠã§ãããã¹ããããè匱æ§ã®çš®é¡ãç°å¢ã®èŠæš¡ãšè€éããäºç®ãªã©ã®èŠçŽ ãèæ ®ããŠãã ããã
- ããŒã«ãé©åã«èšå®ããïŒ ããŒã«ãéžæããããããããé©åã«èšå®ããããšãéèŠã§ããããã«ã¯ãé©åãªã¹ãã£ã³ãã©ã¡ãŒã¿ã®èšå®ããã¹ãç¯å²ã®å®çŸ©ãå¿ èŠãªèªèšŒèšå®ã®æ§æãªã©ãå«ãŸããŸããäžé©åã«èšå®ãããããŒã«ã¯ã誀æ€ç¥ãçæããããéèŠãªè匱æ§ãèŠéãããããå¯èœæ§ããããŸãã
- èªååãSDLCã«çµ±åããïŒ ãããã¬ãŒã·ã§ã³ãã¹ãèªååãæã广çã«äœ¿çšããæ¹æ³ã¯ããœãããŠã§ã¢éçºã©ã€ããµã€ã¯ã«ïŒSDLCïŒã«çµ±åããããšã§ããããã«ãããè匱æ§ãæ¬çªç°å¢ã«å ¥ãåã«ãéçºããã»ã¹ã®æ©ã段éã§ç¹å®ããä¿®æ£ããããšãã§ããŸããéçºã©ã€ããµã€ã¯ã«ã®æ©ã段éã§ã»ãã¥ãªãã£ãã¹ããå®è£ ããããšã¯ããã·ããã¬ããããšããŠãç¥ãããŠããŸãã
- èªååãšæåãã¹ããçµã¿åãããïŒ ãããã¬ãŒã·ã§ã³ãã¹ãã®èªååã¯ãæåãã¹ãã®ä»£æ¿ãšèŠãªãããã¹ãã§ã¯ãããŸããããããã人éã®ãã³ãã¹ã¿ãŒã®èœåãå¢åŒ·ããããã«äœ¿çšãããã¹ãã§ããèªååã䜿çšããŠå®¹æã«çºèŠã§ããè匱æ§ãç¹å®ããå埩çãªã¿ã¹ã¯ãåŠçãããã®åŸãããè€éã§é倧ãªè匱æ§ã調æ»ããããã«æåãã¹ãã䜿çšããŸããäŸãã°ãã°ããŒãã«ãªeã³ããŒã¹ãã©ãããã©ãŒã ã§ã¯ãèªååã䜿çšããŠååããŒãžã®äžè¬çãªXSSè匱æ§ãã¹ãã£ã³ã§ããŸãããã®åŸã人éã®ãã¹ã¿ãŒã¯ãã¢ããªã±ãŒã·ã§ã³ã®æ©èœã®ããæ·±ãçè§£ãå¿ èŠãšãããæ¯æãåŠçããžãã¯ã«é¢é£ããè匱æ§ãªã©ãããè€éãªè匱æ§ã«éäžã§ããŸãã
- ä¿®æ£äœæ¥ã®åªå é äœä»ãïŒ ãããã¬ãŒã·ã§ã³ãã¹ãã®èªååã¯ã倿°ã®è匱æ§ã¬ããŒããçæããå¯èœæ§ããããŸããè匱æ§ã®æ·±å»åºŠããã®æœåšçãªåœ±é¿ãããã³æªçšã®å¯èœæ§ã«åºã¥ããŠä¿®æ£äœæ¥ã®åªå é äœãä»ããããšãéèŠã§ãããªã¹ã¯ããŒã¹ã®ã¢ãããŒãã䜿çšããŠãã©ã®è匱æ§ãæåã«å¯ŸåŠãã¹ãããæ±ºå®ããŸãã
- ããã»ã¹ãç¶ç¶çã«æ¹åããïŒ ãããã¬ãŒã·ã§ã³ãã¹ãã®èªååã¯ç¶ç¶çãªããã»ã¹ã§ããèªååããŒã«ãšããã»ã¹ã®æå¹æ§ãç¶ç¶çã«ç£èŠããå¿ èŠã«å¿ããŠèª¿æŽããããšãéèŠã§ãã宿çã«ãŽãŒã«ãšç®çãèŠçŽããæ°ããããŒã«ãè©äŸ¡ããèšå®ãæŽç·ŽãããŸãã
- ææ°ã®è åšã«é¢ããæ å ±ãåžžã«ææ¡ããïŒ è åšã®ç¶æ³ã¯çµ¶ããé²åããŠãããããææ°ã®è åšãšè匱æ§ã«é¢ããæ å ±ãåžžã«ææ¡ããŠããããšãéèŠã§ããã»ãã¥ãªãã£ãã¥ãŒã¹ã¬ã¿ãŒã賌èªããã»ãã¥ãªãã£ã«ã³ãã¡ã¬ã³ã¹ã«åå ãããœãŒã·ã£ã«ã¡ãã£ã¢ã§ã»ãã¥ãªãã£å°éå®¶ããã©ããŒããŠãã ãããããã«ãããæ°ããè匱æ§ãç¹å®ããããã«å¿ããŠèªååããŒã«ãæŽæ°ããã®ã«åœ¹ç«ã¡ãŸãã
- ããŒã¿ãã©ã€ãã·ãŒã®æžå¿µã«å¯ŸåŠããïŒ ãã³ãã¹ãã宿œããéã¯ãç¹ã«GDPRã®ãããªèŠå¶ãããå ŽåãããŒã¿ãã©ã€ãã·ãŒãžã®åœ±é¿ãèæ ®ããããšãéèŠã§ãããã³ãã¹ã掻åãããŒã¿ãã©ã€ãã·ãŒæ³ã«æºæ ããŠããããšã確èªããŠãã ããã絶察ã«å¿ èŠãªå Žåãé€ããæ©å¯æ§ã®é«ãå人ããŒã¿ãžã®ã¢ã¯ã»ã¹ãä¿åãé¿ããå¯èœãªéãããŒã¿ãå¿ååãŸãã¯ä»®ååããŠãã ãããå¿ èŠãªå Žåã¯ãåæãåŸãŠãã ããã
ãããã¬ãŒã·ã§ã³ãã¹ãèªååã®æªæ¥
ãããã¬ãŒã·ã§ã³ãã¹ãã®èªååã¯çµ¶ããé²åããŠãããåžžã«æ°ããããŒã«ãæè¡ãç»å ŽããŠããŸãããããã¬ãŒã·ã§ã³ãã¹ãèªååã®æªæ¥ã圢äœãäž»èŠãªãã¬ã³ãã«ã¯ã以äžã®ãããªãã®ããããŸãïŒ
- 人工ç¥èœïŒAIïŒã𿩿¢°åŠç¿ïŒMLïŒïŒ AIãšMLã¯ããããã¬ãŒã·ã§ã³ãã¹ãèªååããŒã«ã®ç²ŸåºŠãšå¹çãåäžãããããã«äœ¿çšãããŠããŸããäŸãã°ãAIã¯èª€æ€ç¥ãããæ£ç¢ºã«ç¹å®ããããã«äœ¿çšã§ããMLã¯éå»ã®ãã³ãã¹ãçµæããåŠç¿ããå°æ¥ã®è匱æ§ãäºæž¬ããããã«äœ¿çšã§ããŸãã
- ã¯ã©ãŠãããŒã¹ã®ãã³ãã¹ãïŒ ã¯ã©ãŠãããŒã¹ã®ãã³ãã¹ããµãŒãã¹ã¯ãã¯ã©ãŠãç°å¢ã§ãããã¬ãŒã·ã§ã³ãã¹ãã宿œããããã®äŸ¿å©ã§è²»çšå¯Ÿå¹æã®é«ãæ¹æ³ãæäŸããããããŸããŸã人æ°ãé«ãŸã£ãŠããŸãããããã®ãµãŒãã¹ã¯éåžžãããŸããŸãªèªååããŒã«ãšãçµç¹ãã¯ã©ãŠãã€ã³ãã©ãä¿è·ããã®ãå©ããããšãã§ããå°éã®ãã³ãã¹ã¿ãŒãæäŸããŸãã
- DevSecOpsçµ±åïŒ DevSecOpsã¯ãéçºã©ã€ããµã€ã¯ã«å šäœã«ã»ãã¥ãªãã£ãçµ±åãããœãããŠã§ã¢éçºã¢ãããŒãã§ãããããã¬ãŒã·ã§ã³ãã¹ãã®èªååã¯ãã»ãã¥ãªãã£ããŒã ãéçºããã»ã¹ã®æ©ã段éã§è匱æ§ãç¹å®ããä¿®æ£ã§ããããã«ãããããDevSecOpsã®éèŠãªæ§æèŠçŽ ã§ãã
- APIã»ãã¥ãªãã£ãã¹ãïŒ APIïŒã¢ããªã±ãŒã·ã§ã³ããã°ã©ãã³ã°ã€ã³ã¿ãŒãã§ãŒã¹ïŒã¯ãçŸä»£ã®ãœãããŠã§ã¢ã¢ãŒããã¯ãã£ã«ãããŠãŸããŸãéèŠã«ãªã£ãŠããŸããAPIã®ã»ãã¥ãªãã£ãå°éã«ãã¹ãããããã«ããããã¬ãŒã·ã§ã³ãã¹ãèªååããŒã«ãéçºãããŠããŸãã
çµè«
ãããã¬ãŒã·ã§ã³ãã¹ãã®èªååã¯ãçµç¹ãã»ãã¥ãªãã£äœå¶ãæ¹åãããªã¹ã¯ãšã¯ã¹ããŒãžã£ãŒãåæžããã®ã«åœ¹ç«ã€åŒ·åãªããŒã«ã§ããå埩çãªã¿ã¹ã¯ãèªååããã¹ã±ãŒã©ããªãã£ãåäžãããããè¿ éãªä¿®æ£ãæäŸããããšã§ãèªååã¯ã»ãã¥ãªãã£ãã¹ãã®åãçµã¿ã®å¹çãšæå¹æ§ãå€§å¹ ã«åäžãããããšãã§ããŸããããããèªååã«é¢é£ãã課é¡ãšå¶éãèªèããæè¯ã®çµæãåŸãããã«æåãã¹ããšçµã¿åãããŠäœ¿çšããããšãéèŠã§ãããã®ã¬ã€ãã§æŠèª¬ãããã¹ããã©ã¯ãã£ã¹ã«åŸãããšã§ãçµç¹ã¯ãããã¬ãŒã·ã§ã³ãã¹ãã®èªååãæåè£ã«å®è£ ããããå®å šãªã°ããŒãã«ç°å¢ãæ§ç¯ã§ããŸãã
è åšã®ç¶æ³ãé²åãç¶ããäžãäžçäžã®çµç¹ã¯ç©æ¥µçãªã»ãã¥ãªãã£å¯Ÿçãæ¡çšããå¿ èŠãããããããã¬ãŒã·ã§ã³ãã¹ãã®èªååã¯ãã®ç¶ç¶çãªåãçµã¿ã«ãããŠéèŠãªåœ¹å²ãæãããŸããèªååãåãå ¥ããããšã§ãçµç¹ã¯æ»æè ã®å ãè¡ãã貎éãªè³ç£ãä¿è·ããããšãã§ããŸãã