VAddy at LL Diver LT
14
継続的 WEB セキュリティ診断 株式会社ビットフォレスト 市川 2014/8/23
-
Upload
ichikaway -
Category
Technology
-
view
177 -
download
5
Transcript of VAddy at LL Diver LT
![Page 1: VAddy at LL Diver LT](https://reader033.fdocuments.net/reader033/viewer/2022060110/55615384d8b42aa20d8b5105/html5/thumbnails/1.jpg)
継続的 WEBセキュリティ診断
株式会社ビットフォレスト
市川
2014/8/23
![Page 2: VAddy at LL Diver LT](https://reader033.fdocuments.net/reader033/viewer/2022060110/55615384d8b42aa20d8b5105/html5/thumbnails/2.jpg)
WEBセキュリティ診断• HTTP/HTTPS上で動くWEBアプリ
WEB アプリケーション
攻撃リクエスト
レスポンスチェック
![Page 3: VAddy at LL Diver LT](https://reader033.fdocuments.net/reader033/viewer/2022060110/55615384d8b42aa20d8b5105/html5/thumbnails/3.jpg)
診断ツール• 有料 • APPScan (IBM)
• WebInspect (HP)
• 無料 • OWASP ZAP
• SkipFish (Google)
![Page 4: VAddy at LL Diver LT](https://reader033.fdocuments.net/reader033/viewer/2022060110/55615384d8b42aa20d8b5105/html5/thumbnails/4.jpg)
OWASP ZAP
![Page 5: VAddy at LL Diver LT](https://reader033.fdocuments.net/reader033/viewer/2022060110/55615384d8b42aa20d8b5105/html5/thumbnails/5.jpg)
診断サービス
• セキュリティ企業の検査員がテスト・報告 • 詳細な報告書・説明会 • 1回 数十万円~
![Page 6: VAddy at LL Diver LT](https://reader033.fdocuments.net/reader033/viewer/2022060110/55615384d8b42aa20d8b5105/html5/thumbnails/6.jpg)
理想開発初期段階からリリース後まで
常に脆弱性検査
CI x SecurityTest
![Page 7: VAddy at LL Diver LT](https://reader033.fdocuments.net/reader033/viewer/2022060110/55615384d8b42aa20d8b5105/html5/thumbnails/7.jpg)
CI x Security 課題
• 診断企業に毎回依頼 • 時間とお金
• 診断ツールを自分で実施 • ノウハウと環境構築・維持
![Page 8: VAddy at LL Diver LT](https://reader033.fdocuments.net/reader033/viewer/2022060110/55615384d8b42aa20d8b5105/html5/thumbnails/8.jpg)
無料で何回でも実行できる CI 連携可能な
診断サービスがほしい
![Page 9: VAddy at LL Diver LT](https://reader033.fdocuments.net/reader033/viewer/2022060110/55615384d8b42aa20d8b5105/html5/thumbnails/9.jpg)
継続的WEBセキュリティ診断サービス
![Page 10: VAddy at LL Diver LT](https://reader033.fdocuments.net/reader033/viewer/2022060110/55615384d8b42aa20d8b5105/html5/thumbnails/10.jpg)
VAddy
![Page 12: VAddy at LL Diver LT](https://reader033.fdocuments.net/reader033/viewer/2022060110/55615384d8b42aa20d8b5105/html5/thumbnails/12.jpg)
DEMO
![Page 13: VAddy at LL Diver LT](https://reader033.fdocuments.net/reader033/viewer/2022060110/55615384d8b42aa20d8b5105/html5/thumbnails/13.jpg)
VAddy
Vulnerability Assessment is your Buddy (脆弱性診断はあなたの相棒)
![Page 14: VAddy at LL Diver LT](https://reader033.fdocuments.net/reader033/viewer/2022060110/55615384d8b42aa20d8b5105/html5/thumbnails/14.jpg)
Thank you
Everybody, Let’s VAddy
株式会社ビットフォレストYasushi Ichikawa