September 2025
Intermediate
544 pages
19h 22m
Japanese
Content preview from マルチクラウドセキュリティの教科書 クラウド横断で実現する堅牢なセキュリティ基盤
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Chapter 5 クラウドデータセキュリティ
300
れてしまう
○
対策としては、アプリケーションでの入力値の検証やエスケープ処理、パラメータのクエリ化がある
○
クラウドサービスで実施できる対策としては、最小権限の原則に従い、過剰な権限を与えないことが挙げられる。
これにより、万が一
SQLインジェクションが成功した場合でも、被害を最小限に抑えられる可能性がある
○
また、Web Application Firewall（WAF）の利用も効果的である。SQLインジェクションの攻撃パターンを検
知し、遮断できる可能性がある
データに関わる脅威について、いくつか例を挙げました。データの重要性が増大し、攻撃手法が多様化する中、さまざ
まな脅威への対策を行うことで、データを保護することが可能となります。
5-1-4 デ ー タライフ サイクル
脅威に対するデータセキュリティ対策はデータライフサイクル全体を通じて、適切に講じられる必要があります。デー
タライフサイクルとは、データが生成されてから廃棄されるまでの一連のプロセスを指します。まず、どのようなデータ
が生成されるかを計画し、そのデータの特性にもとづいて必要なセキュリティ対策を考えます。そして、データが実際に
生成・蓄積される段階では、計画した対策を実行し、継続的に改善することが重要です。これは、当該データが適切に廃
棄されるまで、継続されます。
この
Sectionでは各データライフサイクルにおいてどのような検討・対策が必要なのかを記載します。 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.