May 2026
Intermediate
496 pages
12h 11m
Japanese
book
実践 ハイブリッドクラウド・セキュリティアーキテクチャ ―ゼロトラスト原則を用いたセキュリティ設計の実践的手法
by Mark Buckwell, Stefaan Van daele, Carsten Horst, 石川 朝久
Content preview from 実践 ハイブリッドクラウド・セキュリティアーキテクチャ ―ゼロトラスト原則を用いたセキュリティ設計の実践的手法
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
6.6
脅威モデリング
197
セキュリティ管理策の実施コストが、関連する脅威を悪用した場合に発生する損害よりも高額であれ
ば、この対策に投資することはビジネスの観点からは意味がありません。
つまり、脅威が組織にもたらすリスクを理解する必要があります。
リスクの一般的な定義では、「リスク＝発生確率（Likelihood）× 影 響（ Impact）」と 定 義 さ れ ま す 。 サ
イバーセキュリティの分野では、定性的なリスク分析がリスクを評価するための最も一般的なアプロー
チであり、本書でもこれを応用しています。しかし近年では、FAIR
※３７
やISF-QIRA
※３８
（Information
Security Forum Quantitative Information Security Risk Assessment）のような定量的リスク評価アプ
ローチの採用が増えています。定性的アプローチの欠点は、リスク評価に評価者の経験に基づいたバ
イアスが存在することです。リスクの影響カテゴリを特定することは容易かもしれませんが、脅威の発
生確率を一貫したアプローチで特定することは難しいといえるでしょう。個人の経験による影響を減ら
すため、OWASP は、OWASP Risk Rating Methodology
※３９
とRisk Calculator
※４０
のようなリスク評価ア
プローチを開発しました。この方法を使うことで、多くのバイアスが取り除かれ、十分な再現性のある
結果が得られます。
OWASP Risk ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.