ZLeBJt@XuBlack Hat USA 2021vƁuDEF CON 29v̎vv[܂Ƃ߁@PortSwiggerFC^[lbǵu100nsiimbj̈ႢvoU
PortSwiggeŕAZLeBJt@XuBlack Hat USA 2021vƁuDEF CON 29v̎vȃv[e[V܂Ƃ߂uOLJB
̋L͉łBo^ijƑSĂ܂B
@TCo[ZLeBc[x_[PortSwigger2021N89ičԁjAčXxKXƃICŊJÂꂽZLeBJt@XuBlack Hat USA 2021vi2021N731`85jƁuDEF CON 29vi2021N85`8j̎vȃv[e[V܂Ƃ߂uOLJB
uLet's EncryptvU
@tEz[t@[ZLeBiFraunhofer Institute for Secure Information Technologyǰ`[́ASSL/TLS̃T[oؖsF؋ǁuLet's Encryptvɓꂽu_hCvIij\邱Ƃ𖾂炩ɂB
QlLFSSL/TLSؖ́ussvh_hCALet's EncryptJn
@U҂́Ãl[T[oɑăpPbgxBƁAVXéuU҂Il[T[ovɈˑ邱ƂɂȂA_hC܂ȂȂB邱ƂōU҂͔F؋ǂ܂AgLWebhC̃fW^ؖ擾AtBbVOUȂǂ̍\Ɉpł悤ɂȂB
@`[́u̔\̓hC܂Sł͂ȂA\h~ʂ߂ɂ́AKv邱ƂĂvƂĂB
uFragAttacksvƐV́u^C~OUv
@ZLeB҂̃}V[Eoz[tBlack Hat USA 2021ŁAWi-Fi̐ƎiႭjuFragAttacksviFragmentation and Aggregation AttacksjƁAV́u^C~OUvitiming attackjɊւv[e[VB^C~OUƂ́uÍASY̎sԂ𑪒肷邱Ƃŋ@𐄑v́BɂĂ̓oz[tƃgEoEQ[eŔ\B
@oz[t́uFragAttackśwی삳ꂽSĂWi-Filbg[NxłȂA1997NɓoꂵwWEPvgRxɂeB̎̃oOɍL܂ĂAȒPɈp\vƌxB
@ŁAuXɓwIy[eBO`lxƁwr[RیxɂāAFragAttackspU̕ی삪x\ɂȂ邾낤vƃoz[t͌B
@āAoz[tƃQ[e̓^C~OUɊւVm\B
@^C~OÛ悤ȈÍǂA𓐂ރTCo[UiTCh`lUj́Ã݂C^[lbgł{ł邪Albg[N̂炬iWb^j̉eŁAU҂1rbg̏𐄑邽߂ɁA␔S̑茋ʂWKvB
֘AL
Google DriveADropboxȂǂpTCo[U}@[bgXP[[Aʂ\
[bgXP[[́AЂ̌gDuThreatLabZv쐬uÍꂽǓi2020NŁjv\B
SSL/TLSؖ́ussvh_hCALet's EncryptJn
SSL/TLS̃T[oؖŔsĂF؋ǁuLet's Encryptv́ABGP̏̂悤ȍUɑR邽߁A_hCJnBؖ̕ssɂȂU}ޖɗƂB
T|[gIAm炸ɎgƊȂMicrosoftivXgi2020N^2021NŁj
Microsoft鐻iT[rXɂ́AT|[gԂݒ肳ĂAT|[gԒ͍XVvOȂǂ̒sBAT|[gԂIƁAZLeBXVvO̒~܂Ag邱ƂȂԂƂȂBT|[gԂ͐iƂɐݒ肳ĂAɂBŁA2020NɃT|[gIȐiA2021NɃT|[gIȐiꗗ\ɂB
֘AN
Copyright © ITmedia, Inc. All Rights Reserved.
ڂ̃e[}
ITmedia̓ACeBfBAЂ̓o^WłB