VUCÃTCo[ZLeBʂAЃCeWFXƃ[gXgFv́u[gXgvZLeBi22j
fW^gXg邽߂̐VȏZLeB݂̍ɂĂ͂AځB́AЃCeWFXƃ[gXgɂĉB
̋L͉łBo^ijƑSĂ܂B
@ߔNARiЂɂ鐢EIȔQACەϓɂЊQ̕pAnwIXNAHƊ@ʉݕϓƂЂXɌ݉AƊɉe^Ă܂B܂ł̌oʗpȂ\s\Ȏ́uVUCAiu[JjvƂĂ܂B
@VUCAƂ́AVolatilityiϓjAUncertaintyismjAComplexityiGjAAmbiguityiBj̓킹̂ŁAߔN芪ۑ̎̕ωImɕ\Ă܂B
@VUCȀԂ́ÃTCo[ZLeBɂĂ͂܂܂B܂ł̃TCo[ZLeBł́AuXiTCo[U̍x╡Gւ̑ړIvƂĂ܂BAŋ߂ł͂ɉăfW^⓭̊̂̂̕ωɑΉZLeB߂悤ɂȂ܂B@̐ގړIƂxWI^UɉAʂƂɒږڂɌQyڂ^TEFAŮgȂǑΏׂЂ̌`ωĂ܂B[gXgAfW^̊ωTCo[Ђ̐VȌ`ԂɑΉZLeB̍lƂĒڂ𗁂т`ƂȂ܂B
@TCo[ZLeBɂĂ\s\XN݉VUCAԂ̒AʂJMƂȂ̂TCo[ȔuCeWFXvłB
@fW^gXg邽߂̐VȏZLeB݂̍ɂĂ͂{Aځwv́u[gXgvZLeBxB̓[gXgƃTCo[ЃCeWFXɂĉ܂B
ZLeBɊpTCo[ЃCeWFXƂ
@lbg[NZLeBip鈫IPAhXURLXgA}EFAiEDRiEndpoint Detection and Responsejip}EFÃnbVlt@Cp^[Ȃǂ̃f[^́A]pĂ\IȃTCo[ЃCeWFXłB
@TCo[ЃCeWFXiCyber Threat Intelligencej́AƂgDɂăZLeB̌v^pɊpłTCo[UɊւf[^Am̏W܂łB
@ZLeB\[VLɋ@\ɂ́ATCo[ЃCeWFX̊psłBTCo[ЃCeWFX́AZLeB̐ƂTCo[ȔIɏW߂@ւɂĒ܂BTCo[U̎ނړIA@ɂ킽čXƏω錻݁AU҂̈Ӑ}U@AΏۂȂǂOɔcłAƂgDRɂƂׂǐ肪\łB
@TCo[ЃCeWFX́ÃTCo[UɑĐ헪IpΌʂ̍{ŕsȏƂčl悤ɂȂ܂B
[gXgA[LeN`ɂTCo[ЃCeWFX
@č{@ւNISTičWZpj[gXgA[LeN`̉ASP800-207uZero Trust Architecturevł́AЃCeWFX̓|V[̂߂̏\[XƂĎĂ܂B
@[gXgɂ|V[́AɍŐV̏ɊÂf߂܂BTCo[ЃCeWFX̃f[^tB[h|V[GW̓͂ɊpApF߂IPAhX̃ANZXȂǂTCo[U҂̃ANZXƂĔ肪\ɂȂ܂B
TCo[ЃCeWFX̎
@TCo[ЃCeWFXł́AUɎgpꂽIPAhXURLAUc[̃nbVl⓮p^[Ȃǂ̃TCo[U̍ՂATCo[U҂̑fɔ鑮ATCo[U҂̋ƊE@ւȂǂ_Ly[AUɈpƎiႭj̏AƂgDRƂATCo[UɊւ邠ΏۂƂȂ܂B
@e`ԁAW@ɂĊ̃^Cvɕނł܂BNIST́ASP800-150uTCo[Џ̋LvȂǂ̕ŁATCo[ЃCeWFXȉ̂悤ɕނĂ܂B
CWP[^[܂IoCiIndicator of Compromisej
@TCo[U҂ߋ܂͌ݎgpĂTCo[U̍ՂmFłłB^킵T[o┭MIPAhXAhCl[AURLAt@C̃nbVlAdq[̌Ȃǂ܂݂܂BZLeBuZLeBT[rXŁAmΏۂƂĊp܂B
헪ApA@iTTPsFTactics, Techniques, Proceduresj
@TCo[U҂̂ӂ܂ɂāA̖ړIΏہAU菇AzMɂĕ͂łB̃TCo[U҂gp}EFÃV[YAUJjYATCo[U̒iKƂɐꂽ@uTCo[L`F[vȂǁAÃTCo[UɊւ鍂xȏ܂݂܂B
@TCo[U҂̂ӂ܂UΏۂ̗ɂāAIȃTCo[U\ɂȂ܂B
ZLeBA[g
@ݔĂTCo[ŮϑTCo[UɈpdĂȐƎ㐫AƎ㐫pN@uGNXvCgvȂǁAZLeBZp҂QƂłB
@ZLeB|V[̐ݒAЂgpĂ\tgEFA~hEFA܂ސƎ㐫̒AΉ̔fɊp܂B
ЃCeWFX|[g
@ЃCeWFX|[ǵATTPsTCo[U҂̑wiAWIȂǂ̏WĂAʂ̈ӎvɊp\łB
@ʓIɃCWP[^[TTPs̓ZLeBZp҂ړIŏĂAoc҂CISOiōZLeBӔCҁjƂӎv@ւcƂĂ͏ڍ߂ꍇ܂BЃCeWFX|[gł́ATCo[U҂̔wiQA\Iȑ菇ȂǂQlɁAgDǂ̂悤ɑΉׂ̈ӎvx܂B
c[̍\
@U҂̐NmVOl`At@CAEH[̃[AWebTCgANZXtB^ȂǁATCo[Umđ邽߂̋@|V[̐ݒłB
TCo[ЃCeWFX̓@
@̏́ȂZLeBT[`[ɂ钲⌤ɂĒĂ܂BTCo[ЃCeWFX́Aȉ̂悤ȓ@܂B
- ZLeBx_[鋺ЃCeWFXtB[hƂē
- wnj^̃TCo[ЃCeWFX|[gƂē
- ZLeB҂̌luOwǂē
- TwitterȂǃ\[Vlbg[Nʂē
- I@ւƊEĉɂLlbg[Nʂē
- TCo[ЃCeWFXGWɂW
- J̎WȂOSINTiOpen Source IntelligencejɂW
@TCo[U҂Ɋւ̑́ATCo[UQœꂽgpĂ܂BgDƂ̃ZLeBĎĂZLeBx_[́AݔĂTCo[Ȕ𑽂WĂȀŃCeWFXƂĊp\Ȍ`ԂɉHĒĂP[X܂B
@܂AڃTCo[U҂̏悤ƂۂɁȂR~jP[VɃ_[NEFuA_[OEhgpĂ̂ŁAʓIȏł͌Ȃ̂łB_[NEFȕWƂZLeB[`[TCo[ЃCeWFXƎ҂钲|[g⌟GWT[rXƂĒĂ܂B
@TCo[UɊւWł́AƎ̒ƌÊŁATCo[ЃCeWFXT[rX̊p֗łB
X|VuȃTCo[ZLeBƂƂɃvANeBufBtFX
@TCo[U͐N҂̌m}EFA̔Aĕ߂ƂX|VuȖh䂪SƂȂĂ܂B
@[gXgł́A펞ACfeBeB[iIDj𒆐SƂ̊mFɂăZLeBmۂlɃVtg悤ƂĂ܂BlƂāAVXeɃTCo[U҂̕tƎ㐫ȂAZLeB͕ۂĂƂ܂BAVXe̐ݓIȐƎ㐫ւ̑Ή͍ƂĂ̂ŁAt@CAEH[IPS/IDSisNmVXe^sNh~VXejȂǂ̃ZLeB@́AVXeɐڑlbg[ÑC[ŐNmATCo[U}ʂĂ܂B
@e[NNEhT[rX̗pɂāAƂgDۗLĂIȃlbg[N̋E܂ĂAlbg[N̊OƓ̋ʂɈӖȂȂA[gXg̃RZvgւ̒ڂi݂܂B
@VXeAI[v\[X\tgEFÅpƐƎ㐫ffc[̐iɂAƎ㐫ւ̏펞Ή\ȏԂɂȂ܂B
@
@TCo[U͍U҂ɗDʂȏɂΏ̐傫ȉۑłBTCo[ЃCeWFX́AgDh䂷邽߂݂̏ɒALLĐxƑNx߂銈ɂāA̔Ώ̐ɂMbv߂܂BTCo[UɂQɑAꂽ\[XōőRɖh䂷g݂Ƃ܂B
MҏЉ
㗳
j[WFZLeB
CTO NEhZLeBƕ
bNƖ쑺̍قɂNEhZLeBƁAj[WFZLeBCTO߂TAifW^eNmW[ȂATCo[ZLeB̊ϓ_ŐVȋZp̎ǧsB
fW^gXgirQ[^[BƂł͖ȖȃNtgr[ЎɃ^o[Xł̐߂ĂB
֘AL
NEh́uf[^Uv\\CCoEZLeB{ƂĂڂ闝R
2022N9ɊJÂꂽuITmedia Security Week 2022 HvADay3́uNEh[gXg][vł́Aj[WFZLeB NEhZLeBƕ CTO 㗳ɂuuf[^ŨNEhZLeB̎nߕvsꂽBITłuv́w[gXgxZLeBvAڂ钇㎁́A{ZbVŃNEhpƂʂuf[^UvɂZLeB{ƂĂڂgCCoEh̖ƍlqׂBăIv~XŃVXe\zĂƂ͈قȂKoiX̍lĂ݂悤B![uЃx[XAv[`ṽXN]Ƃ͉\\MITRE ATT&CKNavigatorōUO[vƑ肵Ă݂](https://image.itmedia.co.jp/ait/articles/2208/08/news007.png)
uЃx[XAv[`ṽXN]Ƃ͉\\MITRE ATT&CKNavigatorōUO[vƑ肵Ă݂
NCɒړx܂iuЃx[X̃ZLeBvB̎xuMITRE ATT&CKvi}C^[A^bNjɂĉAځB́AXN]ɂuЃx[XAv[`vƁux[XCAv[`v̈ႢAUO[vƑ肷vZXATT&CKNavigator̎HIȎgЉB
lC̃I[v\[XЃCeWFX^ЃneBOc[7I
ZLeBESET͌uOŁAlC̍I[v\[X̋ЃCeWFXc[ƋЃneBOc[7グATvЉB
Copyright © ITmedia, Inc. All Rights Reserved.
ڂ̃e[}
ITmedia̓ACeBfBAЂ̓o^WłB