ãã¹ã¯ãŒãçææ©
å®å šãªãã¹ã¯ãŒããèªåçæããŸããé·ããæåã®çš®é¡ãèšå®ããè€æ°ã®ãã¹ã¯ãŒããäžåºŠã«äœæã§ããŸãã
å®å šãªãã¹ã¯ãŒããšã¯ïŒ
å®å šãªãã¹ã¯ãŒãã¯12æå以äžã§ã倧æåãå°æåãæ°åãç¹æ®æåãçµã¿åãããŠäœããŸããå人æ å ±ïŒååãçå¹Žææ¥ãªã©ïŒãå«ãããåãµãŒãã¹ããšã«ç°ãªããã¹ã¯ãŒãã䜿çšããããšãæšå¥šãããŸãã
ãã¹ã¯ãŒã管çã®ãã³ã
- åãŠã§ããµã€ãã§ç°ãªããã¹ã¯ãŒãã䜿çšããŠãã ããã
- ãã¹ã¯ãŒããããŒãžã£ãŒã掻çšããŠãã ããã
- 宿çã«ãã¹ã¯ãŒãã倿ŽããŠãã ããã
- äºæ®µéèªèšŒïŒ2FAïŒãæå¹ã«ããŠãã ããã
- å ¬å ±ã®ã³ã³ãã¥ãŒã¿ã§ã¯ãã¹ã¯ãŒããä¿åããªãã§ãã ããã
ð ãã¹ã¯ãŒãã»ãã¥ãªãã£å®å šã¬ã€ã
ð äž»ãªæ©èœ
- 8ã64æåã®ãã¹ã¯ãŒãé·ãèªç±ã«èšå®
- 倧æå/å°æå/æ°å/ç¹æ®æåã®çµã¿åããéžæ
- äžåºŠã«æå€§10åã®ãã¹ã¯ãŒããåæçæ
- ã»ãã¥ãªãã£åŒ·åºŠã®ãªã¢ã«ã¿ã€ã èŠèŠè¡šç€ºïŒ5段éïŒ
- ã¯ã³ã¯ãªãã¯ã³ããŒæ©èœ
ð¡ ãã¹ã¯ãŒãã»ãã¥ãªãã£ãéèŠãªçç±
- 匱ããã¹ã¯ãŒãã¯æ°ç§ã§ãããã³ã°å¯èœïŒ8æåã®å°æåïŒçŽ26ç§ïŒ
- äžçã§æãå€ã䜿çšãããŠãããã¹ã¯ãŒãã¯ã123456ããšãpasswordã
- ããŒã¿æŒæŽ©äºæ ã®81%ã匱ããã¹ã¯ãŒãã«èµ·å
- åããã¹ã¯ãŒããè€æ°ã®ãµã€ãã§äœ¿çšãããšé£éãããã³ã°ã®å±éº
- æ¯å¹Žæ°ååä»¶ã®ã¢ã«ãŠã³ãæ å ±ãããŒã¯ãŠã§ãã«æµåº
ð 匷åãªãã¹ã¯ãŒãã»ãã¥ãªãã£æŠç¥
äºæ®µéèªèšŒïŒ2FAïŒãå¿ ãæå¹ã«ããŠãã ããããã¹ã¯ãŒããæŒæŽ©ããŠãã2FAãèšå®ãããŠããã°è¿œå èªèšŒãªãã§ã¯ã¢ã«ãŠã³ãã«ã¢ã¯ã»ã¹ã§ããŸãããGoogle AuthenticatorãMicrosoft Authenticatorãªã©ã®èªèšŒã¢ããªã䜿çšãããšãSMSèªèšŒããã¯ããã«å®å šã§ãã
ãã¹ã¯ãŒããããŒãžã£ãŒã䜿çšãããšãåãµã€ãããšã«åºæã§è€éãªãã¹ã¯ãŒããå®å šã«ç®¡çã§ããŸãã1PasswordãBitwardenãLastPassãªã©ã®ãµãŒãã¹ã掻çšããŠããã¹ã¿ãŒãã¹ã¯ãŒã1ã€ã ããèŠããæ®ãã¯ãããŒãžã£ãŒã«ä»»ããã®ãæãå®å šãªæ¹æ³ã§ãã
â±ïž ãã¹ã¯ãŒãè§£æã«ãããæéã®åæ
- ãã«ãŒããã©ãŒã¹æ»æïŒãã¹ãŠã®å¯èœãªçµã¿åãããé çªã«è©Šãæ¹æ³ã§ãã6æåã®å°æåãã¹ã¯ãŒãã¯å³åº§ïŒæ°ç§ä»¥å ïŒã«è§£èªã§ããŸãã8æåã®å€§å°æå+æ°åã®çµã¿åããã¯æ°æéã12æåã®å€§å°æå+æ°å+ç¹æ®æåã®çµã¿åããã¯æ°çŸå¹ŽããããŸãã
- èŸæžæ»æïŒäžè¬çãªåèªããã¬ãŒãºããã䜿ããããã¹ã¯ãŒãã®ãªã¹ããä»£å ¥ããæ¹æ³ã§ãããpasswordãã123456ããqwertyããªã©ã®ãã¹ã¯ãŒãã¯1ç§ãããããŸããããp@ssw0rdãã®ãããªå€åœ¢ãæ¢ã«æ»æè ã®èŸæžã«å«ãŸããŠããå±éºã§ãã
- ã¬ã€ã³ããŒããŒãã«æ»æïŒäºåã«èšç®ãããããã·ã¥å€ãšãã¹ã¯ãŒãã®å¯Ÿå¿è¡šãäœ¿ãæ¹æ³ã§ãããœã«ããªãã®MD5ãSHA-1ããã·ã¥ã¯æ°ç§ã§éç®ãããŸãããã®ããçŸä»£ã®ãµãŒãã¹ã¯bcryptãscryptãArgon2ãªã©ã®åŒ·åãªããã·ã¥ã¢ã«ãŽãªãºã ã䜿çšããå¿ èŠããããŸãã
ð« 絶察ã«äœ¿ã£ãŠã¯ãããªãäžçæå€äœ¿çšãã¹ã¯ãŒã TOP5
- #1 "123456" â äžçã§æãå€ã䜿çšãããŠãããã¹ã¯ãŒããè§£æã«1ç§ãããããŸãããæ°åä»¶ã®ã¢ã«ãŠã³ãããã®ãã¹ã¯ãŒãã«ããæŒæŽ©ããŠããŸãã
- #2 "password" â 2çªç®ã«å€ããã¹ã¯ãŒããè±èªã®èŸæžã«ããåèªãªã®ã§ãèŸæžæ»æã§å³åº§ã«íì·šãããŸãããp@ssw0rdãã«å€åœ¢ããŠãæ¢ã«ããã«ãŒã®èŸæžã«ç»é²ãããŠããå±éºã§ãã
- #3 "12345678" â åçŽãªæ°åã®çŸ åã8æåã§ãããé£ç¶ããæ°åãã¿ãŒã³ã¯æåã«è©Šãããçµã¿åããã®äžã€ã§ãã絶察ã«äœ¿çšããŠã¯ãããŸããã
- #4 "qwerty" â ããŒããŒãå·Šäžã®æåã®6æåãããŒããŒããã¿ãŒã³æ»æã«æãè匱ã§ãããqwerty123ããqwerty!ããªã©ã®å€åœ¢ãåæ§ã«å±éºã§ãã
- #5 "abc123" â ã¢ã«ãã¡ããããšæ°åãåçŽã«çµã¿åããã圢ãçããŠäºæž¬ãããããè§£æããŒã«ãæ°ããªç§ã§æ€åºããŸããçå¹Žææ¥ãšååã®çµã¿åãããåæ§ã«å±éºã§ãã
ð äºæ®µéèªèšŒïŒ2FAïŒå®å šèšå®ã¬ã€ã
2FAæ¹åŒã®æ¯èŒïŒ
- SMSèªèšŒïŒæã匱ãïŒïŒSMSã§6æ¡ã®ã³ãŒããåãåãæ¹åŒã§ããSIMã¹ã¯ããã³ã°æ»æã«è匱ã§ãéä¿¡äŒç€Ÿã®ã»ãã¥ãªãã£äžã®æ¬ é¥ãå©çšãããããã³ã°ãå¯èœã§ããäœãããªãããã¯ãã·ã§ãããå¯èœã§ããã°TOTPã䜿çšããŠãã ããã
- TOTPèªèšŒã¢ããªïŒæšå¥šïŒïŒGoogle AuthenticatorãMicrosoft AuthenticatorãAuthyãªã©ã代衚çã§ãã30ç§ããšã«å€ãã6æ¡ã®ã¯ã³ã¿ã€ã ã³ãŒãïŒOTPïŒãçæããŸããã€ã³ã¿ãŒãããæ¥ç¶ãªãã§ãåäœããSMSæ¹åŒããã¯ããã«å®å šã§ããèšå®æ¹æ³ïŒã¢ããªãã€ã³ã¹ããŒã«âãµãŒãã¹ã§2FAèšå®âQRã³ãŒããã¹ãã£ã³â6æ¡ã³ãŒãã確èªããŠä¿åã
- ããŒããŠã§ã¢ã»ãã¥ãªãã£ããŒïŒæåŒ·ïŒïŒYubiKeyãGoogle Titan Keyã®ãããªç©ççãªUSB/NFCããŒã䜿çšããŸãããã£ãã·ã³ã°æ»æã«ãå®å šã«å ç«ããããéèæ©é¢ãäŒæ¥ã»ãã¥ãªãã£ã«æšå¥šãããŸããçŽå€±æã«åããŠå¿ ãããã¯ã¢ããããŒãçšæããŠãã ããã
ðïž ãã¹ã¯ãŒããããŒãžã£ãŒæ¯èŒåæ
- 1Password â ææãµãŒãã¹ïŒå人ãã©ã³æé¡$2.99ãïŒãçŽæçãªUIã匷åãªã»ãã¥ãªãã£ããã©ãã«ã¢ãŒãïŒåœå¢ééæã«æ©å¯ããŒã¿ãé衚瀺ïŒãããŒã å ±ææ©èœãåªããŠããŸããmacOS/iOS ãšã³ã·ã¹ãã ã«ç¹ã«æé©åãããŠããã宿çã«ã»ãã¥ãªãã£ç£æ»ãåããŠããä¿¡é Œã§ãããµãŒãã¹ã§ãã
- Bitwarden â ãªãŒãã³ãœãŒã¹ã®ç¡æãµãŒãã¹ïŒãã¬ãã¢ã 幎é$10ïŒããœãŒã¹ã³ãŒããå ¬éãããŠãããã»ãã¥ãªãã£å°éå®¶ã«ããæ€èšŒãåããŠããŸããèªå·±ãã¹ãã£ã³ã°ãå¯èœã§ãå®å šãªããŒã¿ç®¡çæš©ãæããŠãŒã¶ãŒã«æé©ã§ãããã¹ãŠã®ãã©ãããã©ãŒã ããµããŒãããŠããŸãã
- LastPass â ãã€ãŠæã人æ°ã®ãããµãŒãã¹ã§ãããã2022幎ã«å€§èŠæš¡ãªããŒã¿æŒæŽ©äºæ ãçºçããŸãããçŸåšã¯ã»ãã¥ãªãã£åŒ·åæªçœ®ãè¬ããŠããŸãããä¿¡é Œå埩ã«ã¯æéãå¿ èŠã§ããç¡æãã©ã³ã®æ©èœãçž®å°ãããŸãããä»ã®ä»£æ¿ææ®µãåªå ããããšããå§ãããŸãã
- KeePass â å®å šç¡æã®ãªãŒãã³ãœãŒã¹ããŒã«ã«ä¿åæ¹åŒãã€ã³ã¿ãŒãããã«ããŒã¿ãä¿åããªããããã¯ã©ãŠãæŒæŽ©ã®ãªã¹ã¯ããããŸããããã ããããã€ã¹éã®åæã¯èªåã§èšå®ããå¿ èŠãããïŒDropboxãGoogle Driveãšã®é£æºå¯èœïŒãUIã¯ããè€éã§ããæè¡çãªç¥èã®ãããŠãŒã¶ãŒã«ãå§ãããŸãã
ð ãœãŒã·ã£ã«ãšã³ãžãã¢ãªã³ã°æ»æãšé²åŸ¡æŠç¥
- ãã£ãã·ã³ã°ïŒæ£èŠã®äŒæ¥ïŒéè¡ãGoogleãAmazonçïŒãè£ ã£ãåœã®ã¡ãŒã«ãã¡ãã»ãŒãžãéãããã¹ã¯ãŒããã«ãŒãçªå·ãå ¥åãããŸãã察çïŒãªã³ã¯ãã¯ãªãã¯ãããçŽæ¥ã¢ãã¬ã¹ãå ¥åããŠãã ãããéä¿¡å ãã¡ã€ã³ãåžžã«ç¢ºèªããäžå¯©ã«æã£ããå ¬åŒãµããŒãã«åãåãããŠãã ããã
- ããªããã¹ãã£ã³ã°ïŒåœã®ã·ããªãªãäœã£ãŠæ å ±ãèŠæ±ããæ¹æ³ã§ããäŸãã°ãITããŒã ããšåä¹ããã¢ã«ãŠã³ãç¹æ€ãçç±ã«ãã¹ã¯ãŒããèŠæ±ããã±ãŒã¹ã§ãã察çïŒãããªãæ©é¢ããã¹ã¯ãŒããé»è©±ãã¡ãŒã«ã§èŠæ±ããããšã¯ãããŸãããçµ¶å¯Ÿã«æããªãã§ãã ããã
- ãã€ãã£ã³ã°ïŒé§è»å Žã«USBãã©ã€ããèœãšããŠãããããç¡æãœãããŠã§ã¢ã«åœè£ ãããã«ãŠã§ã¢ãé åžããŸãã察çïŒåºæäžæã®USBããã¡ã€ã«ã¯çµ¶å¯Ÿã«éããªãã§ãã ãããå ¬åŒã¹ãã¢ããã®ã¿ãœãããŠã§ã¢ãããŠã³ããŒãããŠãã ããã
- ããããã¯ã©ãŒïŒäœããæäŸãããµããããŠæ å ±ãèŠæ±ããŸãããç¡æVPNããæäŸããæ¡ä»¶ã§ã¢ã«ãŠã³ãæ å ±ãèŠæ±ãããããªæå£ã§ãã察çïŒç¡æãµãŒãã¹ã®ä»£ããã«å人æ å ±ãèŠæ±ãããå Žåã¯å¿ ãçã£ãŠãã ããã
ðš å人æ å ±æŒæŽ©çºçæã®å³æå¯Ÿå¿6ã¹ããã
- å³åº§ã«æŒæŽ©ç¢ºèªïŒhaveibeenpwned.comã§ã¡ãŒã«ã¢ãã¬ã¹ãæ€çŽ¢ããã©ã®ãµãŒãã¹ã§æŒæŽ©ãããã確èªããŠãã ããã該åœãµãŒãã¹ã®å ¬åŒçºè¡šãšãã¥ãŒã¹å ±éã«æ³šç®ããŠãã ããã
- æŒæŽ©ãããµãŒãã¹ã®ãã¹ã¯ãŒããå³åº§ã«å€æŽïŒæŒæŽ©ã確èªããããµãŒãã¹ã®ãã¹ã¯ãŒãããæ°ãã匷åãªãã¹ã¯ãŒãã«ããã«å€æŽããŠãã ãããåããã¹ã¯ãŒãã䜿çšããŠããä»ã®ãã¹ãŠã®ãµãŒãã¹ã®ãã¹ã¯ãŒããåãããŠå€æŽããå¿ èŠããããŸãã
- äºæ®µéèªèšŒïŒ2FAïŒãå³åº§ã«æå¹åïŒãŸã 2FAã䜿çšããŠããªãå Žåã¯ãä»ããèšå®ããŠãã ãããç¹ã«ã¡ãŒã«ãéèãSNSã¢ã«ãŠã³ãã«ã¯å¿ ã2FAãæå¹ã«ããŠãã ãããTOTPã¢ããªæ¹åŒã¯SMSããå®å šã§ãã
- ã¢ã«ãŠã³ãã¢ã¯ãã£ããã£ã®ã¢ãã¿ãªã³ã°ïŒã¡ãŒã«ãéèã¢ã«ãŠã³ããSNSã®ãã°ã€ã³å±¥æŽã確èªããŠãã ãããèªåãè¡ã£ãŠããªããã°ã€ã³ãååŒãèŠã€ãã£ãå Žåã¯ãããã«ã¢ã«ãŠã³ããããã¯ããŠã«ã¹ã¿ããŒãµããŒãã«å ±åããŠãã ããã
- ä¿¡çšã¢ãã¿ãªã³ã°ããã³ããªãŒãºã®æ€èšïŒãã€ãã³ããŒãéèæ å ±ãæŒæŽ©ããå Žåãä¿¡çšæ å ±æ©é¢ïŒæ¥æ¬ä¿¡çšæ å ±æ©æ§JICCãªã©ïŒã«ä¿¡çšã¢ãã¿ãªã³ã°ãµãŒãã¹ãç³è«ããããæ°èŠã¯ã¬ãžããéèšãé²ãããã®ã¯ã¬ãžããããªãŒãºãæ€èšããŠãã ããã
- é¢ä¿æ©é¢ãžã®å ±åïŒå人æ å ±ä¿è·å§å¡äŒïŒppc.go.jpïŒãŸãã¯åœæ°ç掻ã»ã³ã¿ãŒã«å人æ å ±äŸµå®³ã®çžè«ãç³ã蟌ãã§ãã ãããéè被害ã®å Žåã¯éèåºãŸãã¯èŠå¯ã®ãµã€ããŒç¯çœªçžè«çªå£ã«å ±åããŠãã ããã
ð é¢é£ããŒã«
ð æåã«ãŠã³ã¿ãŒ
æåã«ãŠã³ã¿ãŒã¯ãããã¹ãã®æåæ°ãåèªæ°ããã€ãæ°ãå³åº§ã«ç¢ºèªã§ããããŒã«ã§ãããã¹ã¯ãŒããçæããåŸãæåã«ãŠã³ã¿ãŒã§å®éã®é·ããšãã€ãæ°ãæ€èšŒããããšã§ããµãŒãã¹ããšã®ãã¹ã¯ãŒãé·å¶éãäºåã«ç¢ºèªã§ããŸãã
- çæããããã¹ã¯ãŒãã®æ£ç¢ºãªæåæ°ããã³ãã€ãæ°ã®ç¢ºèª
- ãµãŒãã¹ããšã®æå€§ãã¹ã¯ãŒãé·å¶éã®äºåæ€èšŒ
- ç¹æ®æåã®äœ¿çšç¶æ³ãæ§æåæãžã®æŽ»çš
ð æåå倿
æåå倿ã¯ãããã¹ãã®å€§æåå°æå倿ã空çœåŠçãç¹æ®æåã®çœ®æãªã©ãããŸããŸãªæååå å·¥æ©èœãæäŸããŸãããã¹ã¯ãŒãã®ç¹å®ã®æåãå€åœ¢ãããããã¹ãã¬ãŒãºïŒè€æ°ã®åèªãçµã¿åããããã¹ã¯ãŒãïŒãäœæããéã«æŽ»çšã§ããŸãã
- ããã¹ãã®å€§æåå°æåäžæ¬å€æã§ãã¹ã¯ãŒãã®å€åœ¢ã¢ã€ãã¢ãæ¢çŽ¢
- ãã¹ãã¬ãŒãºäœææã®æååå å·¥ã»å€æã®æŽ»çš
- ãã¹ã¯ãŒãã®ãã³ãããã¹ãã®æŽçãšãã©ãŒããã倿