脆弱性対策の標準仕様SCAPの仕組み · 脆弱性対策の標準仕様scap概要 オフライン版myjvnバージョンチェッカのカスタマイズ ipaの脆弱性対策に関する取り組み
現場で使える脆弱性検査サービス VAddy
-
Upload
ichikaway -
Category
Technology
-
view
68 -
download
0
Transcript of 現場で使える脆弱性検査サービス VAddy
![Page 1: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/1.jpg)
Copyright (c) Bitforest Co., Ltd.
VAddy
1
#vaddy
![Page 2: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/2.jpg)
Copyright (c) Bitforest Co., Ltd.2
• VAddy•
• VAddy
• PrivateNet VAddy
![Page 3: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/3.jpg)
Copyright (c) Bitforest Co., Ltd.3
• VAddy
• Web•
•
![Page 4: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/4.jpg)
Copyright (c) Bitforest Co., Ltd.4
• 2002
• ( ),
• Web ( )
• Scutum(WAF) 2009
• VAddy 2014
![Page 5: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/5.jpg)
Copyright (c) Bitforest Co., Ltd.5
![Page 6: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/6.jpg)
Copyright (c) Bitforest Co., Ltd.
•
•
•
•
6
![Page 7: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/7.jpg)
Copyright (c) Bitforest Co., Ltd.7
![Page 8: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/8.jpg)
Copyright (c) Bitforest Co., Ltd.8
Web
Vulnerability Assessment is your Buddy
![Page 9: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/9.jpg)
Copyright (c) Bitforest Co., Ltd.9
![Page 10: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/10.jpg)
Copyright (c) Bitforest Co., Ltd.
• as a Service
• SQLi, XSS, etc• Web
• WebAPI CI
10
![Page 11: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/11.jpg)
Copyright (c) Bitforest Co., Ltd.
• http://example.com/show?id=1&name=foo• id=1’&name=foo• id=abs(“1”)&name=foo• id=1&name=foo’• id=1&name=abs(“1”)
11
POST PUT DELETE JSON
![Page 12: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/12.jpg)
Copyright (c) Bitforest Co., Ltd.12
![Page 13: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/13.jpg)
Copyright (c) Bitforest Co., Ltd.
VAddy
13
![Page 14: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/14.jpg)
Copyright (c) Bitforest Co., Ltd.
VAddy
14
![Page 15: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/15.jpg)
Copyright (c) Bitforest Co., Ltd.15
![Page 16: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/16.jpg)
Copyright (c) Bitforest Co., Ltd.16
![Page 17: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/17.jpg)
Copyright (c) Bitforest Co., Ltd.17
SQL
XSS
![Page 18: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/18.jpg)
Copyright (c) Bitforest Co., Ltd.
• STEP1
• STEP2
• STEP3 / WebAPI)
18
![Page 19: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/19.jpg)
Copyright (c) Bitforest Co., Ltd.19
![Page 20: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/20.jpg)
Copyright (c) Bitforest Co., Ltd.20
(URL
ProxyVAddy Proxy
Web
![Page 21: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/21.jpg)
Copyright (c) Bitforest Co., Ltd.
•
•
•
21
![Page 22: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/22.jpg)
Copyright (c) Bitforest Co., Ltd.22
DEMO
![Page 23: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/23.jpg)
Copyright (c) Bitforest Co., Ltd.23
PrivateNet
VAddy
![Page 24: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/24.jpg)
Copyright (c) Bitforest Co., Ltd.24
OK NG
![Page 25: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/25.jpg)
Copyright (c) Bitforest Co., Ltd.
•
•
•
• VM Vagrant Docker
• CI as a Service
25
![Page 26: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/26.jpg)
Copyright (c) Bitforest Co., Ltd.26
ssh pfd.vaddy.net:22 (outbound)
WebPort 443
![Page 27: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/27.jpg)
Copyright (c) Bitforest Co., Ltd.27
SSHLocal: 443Remote: 3210
Scan
WebPort 443
Sca
n
![Page 28: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/28.jpg)
Copyright (c) Bitforest Co., Ltd.28
SSHLocal: 192.168.1.18: 8888Remote: 3210
Scan
Scan
![Page 29: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/29.jpg)
Copyright (c) Bitforest Co., Ltd.
• PrivateNet
• WebAPI
•
•
• / WebAPI)
29
![Page 30: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/30.jpg)
Copyright (c) Bitforest Co., Ltd.30
DEMO
![Page 31: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/31.jpg)
Copyright (c) Bitforest Co., Ltd.
•
• Starter $60, Pro $190 19,800 )
•
•
• 2
31
![Page 33: 現場で使える脆弱性検査サービス VAddy](https://reader036.fdocument.pub/reader036/viewer/2022082217/5a6480f07f8b9a3b568b4af7/html5/thumbnails/33.jpg)
Copyright (c) Bitforest Co., Ltd.33 @vaddynet