企業における情報セキュリティ緊急対応体制 ～組織内 CSIRT …

1 CSIRT . 2014 5 15 . JPCERT .. ( CSIRT *). CSIRT . CSIRT . CSIRT Computer Security Incident Response Team 2 Copyright 2014 JPCERT/CC All rights reserved.. ( CSIRT ). 3 Copyright 2014 JPCERT/CC All rights reserved. 3.. JPCERT . JPCERT/CC ( ) .. CSIRT . 4 Copyright 2014 JPCERT/CC All rights reserved.. IT . - IT . - . - .. - - . - - .. 5 Copyright 2014 JPCERT/CC All rights reserved.. (*) .. ( ). (*) IT . DoS .. Web . ( ) .. 6 Copyright 2014 JPCERT/CC All rights reserved.. SSL OpenSSL .. OpenSSL The Heartbleed Bug 7 Copyright 2014 JPCERT/CC All rights reserved.. 8 Copyright 2014 JPCERT/CC All rights reserved.. ( ) . 9 Copyright 2014 JPCERT/CC All rights reserved. CSIRT . CSIRT .. Email .. CSIRT .. Phishing .. 10 Copyright 2014 JPCERT/CC All rights reserved. CSIRT .

2 11 Copyright 2014 JPCERT/CC All rights reserved. 11.. 12 Copyright 2014 JPCERT/CC All rights reserved. CSIRT .. CSIRT . CSIRT .. CSIRT .. CSIRT .. CSIRT . A . A B A B.. CSIRT . B .. 13 Copyright 2014 JPCERT/CC All rights reserved. CSIRT . CSIRT .. CSIRT .. 14 Copyright 2014 JPCERT/CC All rights reserved. CSIRT .. CSIRT .. 15 Copyright 2014 JPCERT/CC All rights reserved. CSIRT .. 16 Copyright 2014 JPCERT/CC All rights reserved. ( )CERT/CC .. - . - / . - . - .. - . - . - .. - . - . - . 17 Copyright 2014 JPCERT/CC All rights reserved. CSIRT . CSIRT .. Reactive Service . CSIRT .. Proactive Service .. CSIRT .. 18 Copyright 2014 JPCERT/CC All rights reserved. CSIRT . 19 Copyright 2014 JPCERT/CC All rights reserved. 19. CSIRT . CSIRT .. Constituency .. CSIRT . CSIRT .

3 CSIRT . 20 Copyright 2014 JPCERT/CC All rights reserved. CSIRT .. CSIRT .. DoS Phishing .. 21 Copyright 2014 JPCERT/CC All rights reserved. CSIRT .. CSIRT .. CSIRT .. CSIRT .. CSIRT .. 22 Copyright 2014 JPCERT/CC All rights reserved. CSIRT .. CSIRT .. CSIRT . 23 Copyright 2014 JPCERT/CC All rights reserved. CSIRT .. CSIRT CSIRT .. CSIRT .. CSIRT .. CSIRT . CSIRT .. 24 Copyright 2014 JPCERT/CC All rights reserved.. FIRST(Forum of Incident Response and Security Teams). 289 (2014/05/12 ) CSIRT .. CSIRT CSIRT .. FIRST 25 Copyright 2014 JPCERT/CC All rights reserved. CSIRT . JPCERT/CC . CSIRT . CSIRT .. CERT/CC Creating a Computer Security Incident Response Team: A Process for Getting Started . TERENA CSIRT Starter Kit . AusCERT Forming an Incident Response Team.

4 RFC 2350 Expectations for Computer Security Incident Response . 26 Copyright 2014 JPCERT/CC All rights reserved.