è åšã€ã³ããªãžã§ã³ã¹ãšãªã¹ã¯ã¢ã»ã¹ã¡ã³ããçµ±åããããã¢ã¯ãã£ãã§ã¬ãžãªãšã³ããªã»ãã¥ãªãã£äœå¶ãæ§ç¯ããããã®å æ¬çãªã¬ã€ããçµç¹åºæã®ãªã¹ã¯ãããã¡ã€ã«ã«åãããè åšã®ç¹å®ãåæãç·©åæ¹æ³ãåŠã³ãŸãã
è åšã€ã³ããªãžã§ã³ã¹ïŒãªã¹ã¯ã¢ã»ã¹ã¡ã³ããæŽ»çšããããã¢ã¯ãã£ããªã»ãã¥ãªãã£
仿¥ã®ãã€ãããã¯ãªè åšã©ã³ãã¹ã±ãŒãã«ãããŠãçµç¹ã¯ãŸããŸãé«åºŠåãããµã€ããŒæ»æã®çåšã«ãããããŠããŸãããªã¢ã¯ãã£ããªã»ãã¥ãªãã£å¯Ÿçã¯ãã¯ãååã§ã¯ãããŸãããè åšã€ã³ããªãžã§ã³ã¹ãšãªã¹ã¯ã¢ã»ã¹ã¡ã³ãã«ãã£ãŠæšé²ãããããã¢ã¯ãã£ããªã¢ãããŒãããã¬ãžãªãšã³ããªã»ãã¥ãªãã£äœå¶ãæ§ç¯ããããã«äžå¯æ¬ ã§ãããã®ã¬ã€ãã§ã¯ãè åšã€ã³ããªãžã§ã³ã¹ããªã¹ã¯ã¢ã»ã¹ã¡ã³ãããã»ã¹ã«å¹æçã«çµ±åããçµç¹åºæã®ããŒãºã«åãããè åšãç¹å®ãåæãç·©åããæ¹æ³ãæ¢ããŸãã
è åšã€ã³ããªãžã§ã³ã¹ãšãªã¹ã¯ã¢ã»ã¹ã¡ã³ãã®çè§£
è åšã€ã³ããªãžã§ã³ã¹ãšã¯ïŒ
è åšã€ã³ããªãžã§ã³ã¹ãšã¯ãæ¢åãŸãã¯æ°ããªè åšãè åšã¢ã¯ã¿ãŒã«é¢ããæ å ±ãåéãåæãé ä¿¡ããããã»ã¹ã§ãããµã€ããŒè åšã®èª°ãïŒwhoïŒãäœãïŒwhatïŒãã©ãã§ïŒwhereïŒããã€ïŒwhenïŒããªãïŒwhyïŒãã©ã®ããã«ïŒhowïŒãšãã£ã貎éãªã³ã³ããã¹ããšæŽå¯ãæäŸããŸãããã®æ å ±ã«ãããçµç¹ã¯ã»ãã¥ãªãã£æŠç¥ã«é¢ããæ å ±ã«åºã¥ããæææ±ºå®ãè¡ããæœåšçãªæ»æããé²åŸ¡ããããã®ããã¢ã¯ãã£ããªå¯Ÿçãè¬ããããšãã§ããŸãã
è åšã€ã³ããªãžã§ã³ã¹ã¯ã倧ãã以äžã®ã¿ã€ãã«åé¡ã§ããŸãã
- æŠç¥çè åšã€ã³ããªãžã§ã³ã¹ïŒå°æ¿åŠçãªãã¬ã³ããæ¥çç¹æã®è åšãè åšã¢ã¯ã¿ãŒã®åæ©ãªã©ãè åšã©ã³ãã¹ã±ãŒãã«é¢ããé«ã¬ãã«ã®æ å ±ããã®çš®ã®ã€ã³ããªãžã§ã³ã¹ã¯ãçµå¶å±€ã¬ãã«ã§ã®æŠç¥çãªæææ±ºå®ã«å©çšãããŸãã
- æŠè¡çè åšã€ã³ããªãžã§ã³ã¹ïŒç¹å®ã®è åšã¢ã¯ã¿ãŒããã®ããŒã«ãæè¡ãæé ïŒTTPsïŒã«é¢ããæè¡çãªæ å ±ãæäŸããŸãããã®çš®ã®ã€ã³ããªãžã§ã³ã¹ã¯ãã»ãã¥ãªãã£ã¢ããªã¹ããã€ã³ã·ãã³ã察å¿è ãæ»æãæ€ç¥ãã察å¿ããããã«äœ¿çšããŸãã
- æè¡çè åšã€ã³ããªãžã§ã³ã¹ïŒIPã¢ãã¬ã¹ããã¡ã€ã³åããã¡ã€ã«ããã·ã¥ãªã©ãç¹å®ã®äŸµå®³ææšïŒIOCïŒã«é¢ããè©³çŽ°ãªæ å ±ããã®çš®ã®ã€ã³ããªãžã§ã³ã¹ã¯ãäŸµå ¥æ€ç¥ã·ã¹ãã ïŒIDSïŒãã»ãã¥ãªãã£æ å ±ã»ã€ãã³ã管çïŒSIEMïŒã·ã¹ãã ãªã©ã®ã»ãã¥ãªãã£ããŒã«ã«ãã£ãŠãæªæã®ããæŽ»åãç¹å®ããããã¯ããããã«äœ¿çšãããŸãã
- ãªãã¬ãŒã·ã§ãã«è åšã€ã³ããªãžã§ã³ã¹ïŒçµç¹ã«åœ±é¿ãäžããç¹å®ã®è åšãã£ã³ããŒã³ãæ»æãè匱æ§ã«é¢ããæŽå¯ãããã¯ã峿ã®é²åŸ¡æŠç¥ãã€ã³ã·ãã³ã察å¿ãããã³ã«ã«æ å ±ãæäŸããŸãã
ãªã¹ã¯ã¢ã»ã¹ã¡ã³ããšã¯ïŒ
ãªã¹ã¯ã¢ã»ã¹ã¡ã³ããšã¯ãçµç¹ã®è³ç£ãæ¥åãè©å€ã«åœ±é¿ãäžããå¯èœæ§ã®ããæœåšçãªãªã¹ã¯ãç¹å®ãåæãè©äŸ¡ããããã»ã¹ã§ãããªã¹ã¯ãçºçããå¯èœæ§ãšãã®åœ±é¿ã®å€§ããã倿ããããšãå«ã¿ãŸãããªã¹ã¯ã¢ã»ã¹ã¡ã³ãã¯ãçµç¹ãã»ãã¥ãªãã£ãžã®åãçµã¿ãåªå é äœä»ããããªãœãŒã¹ã广çã«é åããã®ã«åœ¹ç«ã¡ãŸãã
äžè¬çãªãªã¹ã¯ã¢ã»ã¹ã¡ã³ãã®ããã»ã¹ã«ã¯ã以äžã®ã¹ããããå«ãŸããŸãã
- è³ç£ã®ç¹å®ïŒããŒããŠã§ã¢ããœãããŠã§ã¢ãããŒã¿ã人å¡ãªã©ãä¿è·ãã¹ããã¹ãŠã®éèŠãªè³ç£ãç¹å®ããŸãã
- è åšã®ç¹å®ïŒè³ç£ã®è匱æ§ãæªçšããå¯èœæ§ã®ããæœåšçãªè åšãç¹å®ããŸãã
- è匱æ§ã®è©äŸ¡ïŒè åšã«ãã£ãŠæªçšãããå¯èœæ§ã®ããè³ç£ã®è匱æ§ãç¹å®ããŸãã
- å¯èœæ§ã®è©äŸ¡ïŒåè åšãåè匱æ§ãæªçšããå¯èœæ§ã倿ããŸãã
- 圱é¿ã®è©äŸ¡ïŒåè åšãåè匱æ§ãæªçšããå Žåã®æœåšçãªåœ±é¿ã倿ããŸãã
- ãªã¹ã¯ã®ç®åºïŒå¯èœæ§ãšåœ±é¿ãæãåãããããšã§ãå šäœçãªãªã¹ã¯ãèšç®ããŸãã
- ãªã¹ã¯ã®ç·©åïŒãªã¹ã¯ãäœæžããããã®ç·©åæŠç¥ãçå®ãã宿œããŸãã
- ç£èŠãšã¬ãã¥ãŒïŒãªã¹ã¯ã¢ã»ã¹ã¡ã³ããæ£ç¢ºãã€ææ°ã®ç¶æ ãç¶æããŠããããšã確èªããããã«ãç¶ç¶çã«ç£èŠããã³ã¬ãã¥ãŒããŸãã
è åšã€ã³ããªãžã§ã³ã¹ãšãªã¹ã¯ã¢ã»ã¹ã¡ã³ãã®çµ±å
è åšã€ã³ããªãžã§ã³ã¹ããªã¹ã¯ã¢ã»ã¹ã¡ã³ãã«çµ±åããããšã§ãè åšã©ã³ãã¹ã±ãŒããããå æ¬çãã€æ å ±ã«åºã¥ããŠçè§£ã§ããçµç¹ã¯ãã广çãªã»ãã¥ãªãã£äžã®æææ±ºå®ãè¡ããããã«ãªããŸãã以äžã«ãã®çµ±åæ¹æ³ã瀺ããŸãã
1. è åšã®ç¹å®
åŸæ¥ã®ã¢ãããŒãïŒäžè¬çãªè åšãªã¹ããæ¥çã¬ããŒãã«äŸåããã è åšã€ã³ããªãžã§ã³ã¹äž»å°ã®ã¢ãããŒãïŒè åšã€ã³ããªãžã§ã³ã¹ã®ãã£ãŒããã¬ããŒããåæã掻çšããŠãèªç€Ÿã®æ¥çãå°åãæè¡ã¹ã¿ãã¯ã«ç¹ã«é¢é£æ§ã®é«ãè åšãç¹å®ãããããã«ã¯ãè åšã¢ã¯ã¿ãŒã®åæ©ãTTPãã¿ãŒã²ããã®çè§£ãå«ãŸããŸããäŸãã°ãããªãã®äŒç€ŸããšãŒãããã®éèã»ã¯ã¿ãŒã§äºæ¥ãå±éããŠããå Žåãè åšã€ã³ããªãžã§ã³ã¹ã¯ãšãŒãããã®éè¡ãæšçãšããç¹å®ã®ãã«ãŠã§ã¢ãã£ã³ããŒã³ãæããã«ããããšãã§ããŸãã
äŸïŒããã°ããŒãã«ãªæµ·éäŒç€Ÿã¯ãè åšã€ã³ããªãžã§ã³ã¹ã䜿çšããŠãåœã®è¹ç©æžé¡ã§åŸæ¥å¡ãç¹ã«æšçãšãããã£ãã·ã³ã°ãã£ã³ããŒã³ãç¹å®ããŸããããã«ãããããã¢ã¯ãã£ãã«åŸæ¥å¡ãæè²ãããããã®è åšããããã¯ããããã®ã¡ãŒã«ãã£ã«ã¿ãªã³ã°ã«ãŒã«ãå®è£ ããããšãã§ããŸãã
2. è匱æ§ã®è©äŸ¡
åŸæ¥ã®ã¢ãããŒãïŒèªååãããè匱æ§ã¹ãã£ãã䜿çšãããã³ããŒæäŸã®ã»ãã¥ãªãã£ã¢ããããŒãã«äŸåããã è åšã€ã³ããªãžã§ã³ã¹äž»å°ã®ã¢ãããŒãïŒè åšã¢ã¯ã¿ãŒã«ãã£ãŠã©ã®è匱æ§ãç©æ¥µçã«æªçšãããŠãããã«é¢ããè åšã€ã³ããªãžã§ã³ã¹ã«åºã¥ããŠãè匱æ§ã®ä¿®æ£ã«åªå é äœãä»ãããããã«ãããæãéèŠãªè匱æ§ã®ãããé©çšã«ãªãœãŒã¹ãéäžãããããšãã§ããŸããè åšã€ã³ããªãžã§ã³ã¹ã¯ãå ¬ã«é瀺ãããåã®ãŒããã€è匱æ§ãæããã«ããããšããããŸãã
äŸïŒãããœãããŠã§ã¢éçºäŒç€Ÿã¯ãè åšã€ã³ããªãžã§ã³ã¹ã掻çšããŠãåºã䜿çšãããŠãããªãŒãã³ãœãŒã¹ã©ã€ãã©ãªã®ç¹å®ã®è匱æ§ãã©ã³ãµã ãŠã§ã¢ã°ã«ãŒãã«ãã£ãŠç©æ¥µçã«æªçšãããŠããããšãçºèŠããŸãã圌ãã¯çŽã¡ã«èªç€Ÿè£œåã®ãã®è匱æ§ã«ããããé©çšããããšãåªå ãã顧客ã«éç¥ããŸãã
3. å¯èœæ§ã®è©äŸ¡
åŸæ¥ã®ã¢ãããŒãïŒéå»ã®ããŒã¿ã䞻芳çãªå€æã«åºã¥ããŠè åšã®å¯èœæ§ãæšå®ããã è åšã€ã³ããªãžã§ã³ã¹äž»å°ã®ã¢ãããŒãïŒè åšã¢ã¯ã¿ãŒã®æŽ»åã«é¢ããå®éã®èŠ³æž¬ã«åºã¥ããŠè åšã®å¯èœæ§ãè©äŸ¡ããããã«ãè åšã€ã³ããªãžã§ã³ã¹ã䜿çšãããããã«ã¯ãè åšã¢ã¯ã¿ãŒã®ã¿ãŒã²ãã£ã³ã°ãã¿ãŒã³ãæ»æé »åºŠãæåçã®åæãå«ãŸããŸããäŸãã°ãè åšã€ã³ããªãžã§ã³ã¹ãç¹å®ã®è åšã¢ã¯ã¿ãŒãããªãã®æ¥çã®çµç¹ãç©æ¥µçã«æšçã«ããŠããããšã瀺ããŠããå Žåãæ»æã®å¯èœæ§ã¯é«ããªããŸãã
äŸïŒç±³åœã®å»çæäŸè ã¯ãè åšã€ã³ããªãžã§ã³ã¹ãã£ãŒããç£èŠããå°åã®ç é¢ãæšçãšããã©ã³ãµã ãŠã§ã¢æ»æã®æ¥å¢ãçºèŠããŸãããã®æ å ±ã«ãããã©ã³ãµã ãŠã§ã¢æ»æã®å¯èœæ§è©äŸ¡ãé«ãŸããé²åŸ¡ã匷åããããä¿ãããŸãã
4. 圱é¿ã®è©äŸ¡
åŸæ¥ã®ã¢ãããŒãïŒæœåšçãªééçæå€±ãè©å€ã®æå®³ãèŠå¶äžã®çœ°éã«åºã¥ããŠè åšã®åœ±é¿ãæšå®ããã è åšã€ã³ããªãžã§ã³ã¹äž»å°ã®ã¢ãããŒãïŒæåããæ»æã®å®éã®äŸã«åºã¥ããŠè åšã®æœåšçãªåœ±é¿ãçè§£ããããã«ãè åšã€ã³ããªãžã§ã³ã¹ã䜿çšãããããã«ã¯ãä»ã®çµç¹ã«å¯Ÿããåæ§ã®æ»æã«ãã£ãŠåŒãèµ·ããããééçæå€±ãæ¥åã®äžæãè©å€ã®æå®³ã®åæãå«ãŸããŸããè åšã€ã³ããªãžã§ã³ã¹ã¯ãæåããæ»æã®é·æçãªçµæãæããã«ããããšããããŸãã
äŸïŒããEã³ããŒã¹äŒæ¥ã¯ãè åšã€ã³ããªãžã§ã³ã¹ã䜿çšããŠãç«¶åä»ç€Ÿã§æè¿çºçããããŒã¿äŸµå®³ã®åœ±é¿ãåæããŸãã圌ãã¯ããã®äŸµå®³ãé倧ãªééçæå€±ãè©å€ã®æå®³ã顧客é¢ãããããããããšãçºèŠããŸãããã®æ å ±ã«ãããããŒã¿äŸµå®³ã®åœ±é¿è©äŸ¡ãé«ãŸãããã匷åãªããŒã¿ä¿è·å¯Ÿçãžã®æè³ãä¿ãããŸãã
5. ãªã¹ã¯ã®ç·©å
åŸæ¥ã®ã¢ãããŒãïŒäžè¬çãªã»ãã¥ãªãã£ã³ã³ãããŒã«ãå®è£ ããæ¥çã®ãã¹ããã©ã¯ãã£ã¹ã«åŸãã è åšã€ã³ããªãžã§ã³ã¹äž»å°ã®ã¢ãããŒãïŒè åšã€ã³ããªãžã§ã³ã¹ãéããŠç¹å®ãããç¹å®ã®è åšãè匱æ§ã«å¯ŸåŠããããã«ãã»ãã¥ãªãã£ã³ã³ãããŒã«ã調æŽãããããã«ã¯ãäŸµå ¥æ€ç¥ã«ãŒã«ããã¡ã€ã¢ãŠã©ãŒã«ããªã·ãŒããšã³ããã€ã³ãä¿è·ã®èšå®ãªã©ãã¿ãŒã²ãããçµã£ãã»ãã¥ãªãã£å¯Ÿçã®å®è£ ãå«ãŸããŸããè åšã€ã³ããªãžã§ã³ã¹ã¯ãã€ã³ã·ãã³ã察å¿èšç»ãæºäžæŒç¿ã®çå®ã«ãæ å ±ãæäŸã§ããŸãã
äŸïŒããéä¿¡äŒç€Ÿã¯ãè åšã€ã³ããªãžã§ã³ã¹ã䜿çšããŠãèªç€Ÿã®ãããã¯ãŒã¯ã€ã³ãã©ãæšçãšããç¹å®ã®ãã«ãŠã§ã¢äºçš®ãç¹å®ããŸãã圌ãã¯ãããã®ãã«ãŠã§ã¢äºçš®ãæ€åºããããã®ã«ã¹ã¿ã äŸµå ¥æ€ç¥ã«ãŒã«ãéçºããææã®æ¡å€§ãå¶éããããã«ãããã¯ãŒã¯ã»ã°ã¡ã³ããŒã·ã§ã³ãå®è£ ããŸãã
è åšã€ã³ããªãžã§ã³ã¹ãšãªã¹ã¯ã¢ã»ã¹ã¡ã³ããçµ±åããã¡ãªãã
è åšã€ã³ããªãžã§ã³ã¹ãšãªã¹ã¯ã¢ã»ã¹ã¡ã³ãã®çµ±åã«ã¯ã以äžã®ãããªæ°å€ãã®ã¡ãªããããããŸãã
- 粟床ã®åäžïŒè åšã€ã³ããªãžã§ã³ã¹ã¯è åšã©ã³ãã¹ã±ãŒãã«é¢ããå®äžçã®æŽå¯ãæäŸããããæ£ç¢ºãªãªã¹ã¯ã¢ã»ã¹ã¡ã³ãã«ã€ãªãããŸãã
- å¹çã®åäžïŒè åšã€ã³ããªãžã§ã³ã¹ã¯ã»ãã¥ãªãã£ã®åãçµã¿ã«åªå é äœãä»ãããªãœãŒã¹ã广çã«é åããã®ã«åœ¹ç«ã¡ãå šäœçãªã»ãã¥ãªãã£ã³ã¹ããåæžããŸãã
- ããã¢ã¯ãã£ããªã»ãã¥ãªãã£ïŒè åšã€ã³ããªãžã§ã³ã¹ã«ãããçµç¹ã¯æ»æãçºçããåã«äºæž¬ãã鲿¢ããããšãã§ããã»ãã¥ãªãã£ã€ã³ã·ãã³ãã®åœ±é¿ãäœæžããŸãã
- ã¬ãžãªãšã³ã¹ã®åŒ·åïŒè åšã€ã³ããªãžã§ã³ã¹ã¯ãçµç¹ãããã¬ãžãªãšã³ããªã»ãã¥ãªãã£äœå¶ãæ§ç¯ããã®ãå©ããæ»æããè¿ éã«å埩ã§ããããã«ããŸãã
- ããè¯ãæææ±ºå®ïŒè åšã€ã³ããªãžã§ã³ã¹ã¯ãæ å ±ã«åºã¥ããã»ãã¥ãªãã£äžã®æææ±ºå®ãè¡ãããã«å¿ èŠãªæ å ±ãæææ±ºå®è ã«æäŸããŸãã
è åšã€ã³ããªãžã§ã³ã¹ãšãªã¹ã¯ã¢ã»ã¹ã¡ã³ããçµ±åããéã®èª²é¡
è åšã€ã³ããªãžã§ã³ã¹ãšãªã¹ã¯ã¢ã»ã¹ã¡ã³ãã®çµ±åã¯å€ãã®ã¡ãªããããããããŸãããããã€ãã®èª²é¡ãååšããŸãã
- ããŒã¿éå€ïŒè åšã€ã³ããªãžã§ã³ã¹ã®ããŒã¿éã¯å§åçã«ãªãå¯èœæ§ããããŸããçµç¹ã¯ããŒã¿ããã£ã«ã¿ãªã³ã°ããåªå é äœãä»ããŠãæãé¢é£æ§ã®é«ãè åšã«éäžããå¿ èŠããããŸãã
- ããŒã¿å質ïŒè åšã€ã³ããªãžã§ã³ã¹ããŒã¿ã®å質ã¯å€§ããç°ãªãå¯èœæ§ããããŸããçµç¹ã¯ããŒã¿ãæ€èšŒãããããæ£ç¢ºã§ä¿¡é Œã§ãããã®ã§ããããšã確èªããå¿ èŠããããŸãã
- å°éç¥èã®äžè¶³ïŒè åšã€ã³ããªãžã§ã³ã¹ãšãªã¹ã¯ã¢ã»ã¹ã¡ã³ãã®çµ±åã«ã¯ãå°éçãªã¹ãã«ãšå°éç¥èãå¿ èŠã§ããçµç¹ã¯ãããã®ã¿ã¹ã¯ãå®è¡ããããã«ã¹ã¿ãããéçšãŸãã¯ãã¬ãŒãã³ã°ããå¿ èŠããããããããŸããã
- çµ±åã®è€éãïŒè åšã€ã³ããªãžã§ã³ã¹ãæ¢åã®ã»ãã¥ãªãã£ããŒã«ãããã»ã¹ãšçµ±åããã®ã¯è€éã«ãªãå¯èœæ§ããããŸããçµç¹ã¯å¿ èŠãªæè¡ãšã€ã³ãã©ã«æè³ããå¿ èŠããããŸãã
- ã³ã¹ãïŒè åšã€ã³ããªãžã§ã³ã¹ã®ãã£ãŒããããŒã«ã¯é«äŸ¡ã«ãªãããšããããŸããçµç¹ã¯ãããã®ãªãœãŒã¹ã«æè³ããåã«ãã³ã¹ããšã¡ãªãããæ éã«è©äŸ¡ããå¿ èŠããããŸãã
è åšã€ã³ããªãžã§ã³ã¹ãšãªã¹ã¯ã¢ã»ã¹ã¡ã³ããçµ±åããããã®ãã¹ããã©ã¯ãã£ã¹
課é¡ãå æããè åšã€ã³ããªãžã§ã³ã¹ãšãªã¹ã¯ã¢ã»ã¹ã¡ã³ãã®çµ±åã«ããã¡ãªãããæå€§åããããã«ãçµç¹ã¯ä»¥äžã®ãã¹ããã©ã¯ãã£ã¹ã«åŸãã¹ãã§ãã
- æç¢ºãªç®æšã®å®çŸ©ïŒè åšã€ã³ããªãžã§ã³ã¹ããã°ã©ã ã®ç®çãšãããããªã¹ã¯ã¢ã»ã¹ã¡ã³ãããã»ã¹ãã©ã®ããã«ãµããŒãããããæç¢ºã«å®çŸ©ããŸãã
- é¢é£ããè åšã€ã³ããªãžã§ã³ã¹ãœãŒã¹ã®ç¹å®ïŒèªç€Ÿã®æ¥çãå°åãæè¡ã¹ã¿ãã¯ã«é¢é£ããããŒã¿ãæäŸãããä¿¡é Œã§ããè©å€ã®è¯ãè åšã€ã³ããªãžã§ã³ã¹ãœãŒã¹ãç¹å®ããŸãããªãŒãã³ãœãŒã¹ãšåçšã®äž¡æ¹ã®ãœãŒã¹ãæ€èšããŸãã
- ããŒã¿åéãšåæã®èªååïŒè åšã€ã³ããªãžã§ã³ã¹ããŒã¿ã®åéãåŠçãåæãèªååããŠãæäœæ¥ãæžãããå¹çãåäžãããŸãã
- ããŒã¿ã®åªå é äœä»ããšãã£ã«ã¿ãªã³ã°ïŒé¢é£æ§ãšä¿¡é Œæ§ã«åºã¥ããŠè åšã€ã³ããªãžã§ã³ã¹ããŒã¿ãåªå é äœä»ããããã£ã«ã¿ãªã³ã°ããã¡ã«ããºã ãå®è£ ããŸãã
- æ¢åã®ã»ãã¥ãªãã£ããŒã«ãšã®çµ±åïŒè åšã®æ€ç¥ãšå¯Ÿå¿ãèªååããããã«ãSIEMã·ã¹ãã ããã¡ã€ã¢ãŠã©ãŒã«ãäŸµå ¥æ€ç¥ã·ã¹ãã ãªã©ã®æ¢åã®ã»ãã¥ãªãã£ããŒã«ãšè åšã€ã³ããªãžã§ã³ã¹ãçµ±åããŸãã
- çµç¹å ã§ã®è åšã€ã³ããªãžã§ã³ã¹ã®å ±æïŒã»ãã¥ãªãã£ã¢ããªã¹ããã€ã³ã·ãã³ã察å¿è ãçµå¶é£ãªã©ãçµç¹å ã®é¢é£ããã¹ããŒã¯ãã«ããŒãšè åšã€ã³ããªãžã§ã³ã¹ãå ±æããŸãã
- è åšã€ã³ããªãžã§ã³ã¹ãã©ãããã©ãŒã ã®éçºãšç¶æïŒè åšã€ã³ããªãžã§ã³ã¹ããŒã¿ã®åéãåæãå ±æãäžå åããããã«ãè åšã€ã³ããªãžã§ã³ã¹ãã©ãããã©ãŒã ïŒTIPïŒã®å®è£ ãæ€èšããŸãã
- ã¹ã¿ããã®ãã¬ãŒãã³ã°ïŒãªã¹ã¯ã¢ã»ã¹ã¡ã³ããšã»ãã¥ãªãã£ã®æææ±ºå®ãæ¹åããããã«è åšã€ã³ããªãžã§ã³ã¹ã䜿çšããæ¹æ³ã«ã€ããŠãã¹ã¿ããã«ãã¬ãŒãã³ã°ãæäŸããŸãã
- ããã°ã©ã ã®å®æçãªã¬ãã¥ãŒãšæŽæ°ïŒè åšã€ã³ããªãžã§ã³ã¹ããã°ã©ã ã广çãã€é¢é£æ§ãç¶æããŠããããšã確èªããããã«ã宿çã«ã¬ãã¥ãŒããæŽæ°ããŸãã
- ãããŒãžãã»ãã¥ãªãã£ãµãŒãã¹ãããã€ããŒïŒMSSPïŒã®æ€èšïŒå éšãªãœãŒã¹ãéãããŠããå Žåã¯ãè åšã€ã³ããªãžã§ã³ã¹ãµãŒãã¹ãšå°éç¥èãæäŸããMSSPãšã®ææºãæ€èšããŸãã
è åšã€ã³ããªãžã§ã³ã¹ãšãªã¹ã¯ã¢ã»ã¹ã¡ã³ãã®ããã®ããŒã«ãšãã¯ãããžãŒ
ããã€ãã®ããŒã«ãšãã¯ãããžãŒããçµç¹ã®è åšã€ã³ããªãžã§ã³ã¹ãšãªã¹ã¯ã¢ã»ã¹ã¡ã³ãã®çµ±åãæ¯æŽããŸãã
- è åšã€ã³ããªãžã§ã³ã¹ãã©ãããã©ãŒã ïŒTIPïŒïŒè åšã€ã³ããªãžã§ã³ã¹ããŒã¿ã®åéãåæãå ±æãäžå åããŸããäŸãšããŠã¯ãAnomaliãThreatConnectãRecorded Futureãªã©ããããŸãã
- ã»ãã¥ãªãã£æ å ±ã»ã€ãã³ã管çïŒSIEMïŒã·ã¹ãã ïŒããŸããŸãªãœãŒã¹ããã®ã»ãã¥ãªãã£ãã°ãéçŽã»åæããè åšãæ€ç¥ããŠå¯Ÿå¿ããŸããäŸãšããŠã¯ãSplunkãIBM QRadarãMicrosoft Sentinelãªã©ããããŸãã
- è匱æ§ã¹ãã£ãïŒã·ã¹ãã ãã¢ããªã±ãŒã·ã§ã³ã®è匱æ§ãç¹å®ããŸããäŸãšããŠã¯ãNessusãQualysãRapid7ãªã©ããããŸãã
- ãããã¬ãŒã·ã§ã³ãã¹ãããŒã«ïŒå®éã®æ»æãã·ãã¥ã¬ãŒãããŠãã»ãã¥ãªãã£é²åŸ¡ã®åŒ±ç¹ãç¹å®ããŸããäŸãšããŠã¯ãMetasploitãBurp Suiteãªã©ããããŸãã
- è åšã€ã³ããªãžã§ã³ã¹ãã£ãŒãïŒããŸããŸãªãœãŒã¹ããã®ãªã¢ã«ã¿ã€ã ã®è åšã€ã³ããªãžã§ã³ã¹ããŒã¿ãžã®ã¢ã¯ã»ã¹ãæäŸããŸããäŸãšããŠã¯ãAlienVault OTXãVirusTotalãããã³åçšã®è åšã€ã³ããªãžã§ã³ã¹ãããã€ããŒãªã©ããããŸãã
è åšã€ã³ããªãžã§ã³ã¹äž»å°ã®ãªã¹ã¯ã¢ã»ã¹ã¡ã³ãã®å®äŸ
以äžã¯ãçµç¹ãè åšã€ã³ããªãžã§ã³ã¹ã䜿çšããŠãªã¹ã¯ã¢ã»ã¹ã¡ã³ãããã»ã¹ã匷åããŠããå®äŸã§ãã
- ããã°ããŒãã«éè¡ã¯ãè åšã€ã³ããªãžã§ã³ã¹ã䜿çšããŠãé¡§å®¢ãæšçãšãããã£ãã·ã³ã°ãã£ã³ããŒã³ãç¹å®ããåªå é äœãä»ããŠããŸããããã«ããããããã®è åšã«ã€ããŠé¡§å®¢ã«äºåã«èŠåããã¢ã«ãŠã³ããä¿è·ããããã®ã»ãã¥ãªãã£å¯Ÿçãè¬ããããšãã§ããŸãã
- ããæ¿åºæ©é¢ã¯ãè åšã€ã³ããªãžã§ã³ã¹ã䜿çšããŠãéèŠã€ã³ãã©ãæšçãšããé«åºŠãªæç¶çè åšïŒAPTïŒãç¹å®ãã远跡ããŠããŸããããã«ãããé²åŸ¡ã匷åããæ»æãé²ãããšãã§ããŸãã
- ãã補é äŒç€Ÿã¯ãè åšã€ã³ããªãžã§ã³ã¹ã䜿çšããŠããµãã©ã€ãã§ãŒã³æ»æã®ãªã¹ã¯ãè©äŸ¡ããŠããŸããããã«ããããµãã©ã€ãã§ãŒã³ã®è匱æ§ãç¹å®ã»ç·©åããæ¥åãä¿è·ããããšãã§ããŸãã
- ããå°å£²äŒç€Ÿã¯ãè åšã€ã³ããªãžã§ã³ã¹ã䜿çšããŠãã¯ã¬ãžããã«ãŒãè©æ¬ºãç¹å®ãã鲿¢ããŠããŸããããã«ããã顧客ãä¿è·ããééçæå€±ãåæžããããšãã§ããŸãã
çµè«
è åšã€ã³ããªãžã§ã³ã¹ãšãªã¹ã¯ã¢ã»ã¹ã¡ã³ãã®çµ±åã¯ãããã¢ã¯ãã£ãã§ã¬ãžãªãšã³ããªã»ãã¥ãªãã£äœå¶ãæ§ç¯ããããã«äžå¯æ¬ ã§ããè åšã€ã³ããªãžã§ã³ã¹ã掻çšããããšã§ãçµç¹ã¯è åšã©ã³ãã¹ã±ãŒããããå æ¬çã«çè§£ããã»ãã¥ãªãã£ãžã®åãçµã¿ã«åªå é äœãä»ããããæ å ±ã«åºã¥ããã»ãã¥ãªãã£äžã®æææ±ºå®ãè¡ãããšãã§ããŸããè åšã€ã³ããªãžã§ã³ã¹ãšãªã¹ã¯ã¢ã»ã¹ã¡ã³ãã®çµ±åã«ã¯èª²é¡ã䌎ããŸããããã®ã¡ãªããã¯ã³ã¹ããã¯ããã«äžåããŸãããã®ã¬ã€ãã§æŠèª¬ãããã¹ããã©ã¯ãã£ã¹ã«åŸãããšã§ãçµç¹ã¯è åšã€ã³ããªãžã§ã³ã¹ããªã¹ã¯ã¢ã»ã¹ã¡ã³ãããã»ã¹ã«æåè£ã«çµ±åããå šäœçãªã»ãã¥ãªãã£äœå¶ãåäžãããããšãã§ããŸããè åšã©ã³ãã¹ã±ãŒããé²åãç¶ããäžãè åšã€ã³ããªãžã§ã³ã¹ã¯æåããã»ãã¥ãªãã£æŠç¥ã®ãŸããŸãéèŠãªèŠçŽ ãšãªãã§ããããæ¬¡ã®æ»æãåŸ ã€ã®ã§ã¯ãªãã仿¥ããè åšã€ã³ããªãžã§ã³ã¹ããªã¹ã¯ã¢ã»ã¹ã¡ã³ãã«çµ±åãå§ããŸãããã
é¢é£è³æ
- SANS Institute: https://www.sans.org
- NIST Cybersecurity Framework: https://www.nist.gov/cyberframework
- OWASP: https://owasp.org