April 2023
Beginner to intermediate
396 pages
8h 23m
Korean
Content preview from 자바 개발자를 위한 데브옵스 툴
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
243
7
장
바이너리 보안
에 두루 적용할 수 있는 기법이다. 알려진 보안 허점으로부터 시스템의 모든 컴포넌트를 보호
해야만 이후 조치들의 잠재력을 최대한 이끌어낼 수 있다.
SAST
가 정착되면 다음으로
IAST
를
도입하고 마지막으로
RASP
를 추가할 것을 권장한다. 각 단계마다 필요한 작업을 수행하면서
모든 팀이 함께 성장할 수 있고 프로덕션에 걸림돌이나 지연 요소가 생길 위험도 적다.
7.7
공통 취약점 등급 시스템 공통 취약점 등급 시스템
공통 취약점 등급 시스템공통 취약점 등급 시스템
Common
Vulnerability
Scoring
System
(
CVSS
)의 기본 개념은 보안 취약점의 심
각성을 평가하고 일관되게 분류하는 것이다. 이를 위해 다양한 관점에서 취약점을 평가하고 각
각에 가중치를 부여해
0
부터
10
사이의 표준화된 등급을 산정한다.
4
CVSS
를 통해 다양한 약점을 추상화시켜 평가하고 후속 조치 방안을 모색할 수 있다. 약점을
취급하는 방식을 표준화시키는 것이 핵심이다. 평가 결과로 얻은 점수는 구간에 따라 대처 원
칙을 정의하는 근거로 활용된다.
이론적으로
CVSS
는 미리 정의된 인수들을 이용해 위험 발생 확률과 피해 최대치의 관계를 묘
사한다. 이를 도식화하면 ‘리스크 = 발생 확률 × 피해’라는 기본 공식이 도출된다.
CVSS
는
3
개의 직교 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.