%u672c%u8a18%u4e8b%u306f%u3001BlueHat %u306e%u30d6%u30ed%u30b0 “New MAPP Initiatives” (2013 %u5e74 7 %u6708 29 %u65e5%u516c%u958b) %u3092%u7ffb%u8a33%u3057%u305f%u8a18%u4e8b%u3067%u3059%u3002
%u307f%u306a%u3055%u3093%u3001%u3053%u3093%u306b%u3061%u306f%u3002
%u30a6%u30a4%u30eb%u30b9%u5bfe%u7b56%u30d9%u30f3%u30c0%u30fc%u306b%u5bfe%u3057%u3066%u65e9%u671f%u306b%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3%u60c5%u5831%u3092%u63d0%u4f9b%u3057%u59cb%u3081%u305f%u9803%u3001%u30d9%u30f3%u30c0%u30fc%u304c%u4fdd%u8b77%u7b56%u306e%u958b%u767a%u3092%u884c%u3044%u3001%u8106%u5f31%u6027%u306e%u5b9a%u7fa9%u30d5%u30a1%u30a4%u30eb%u3092%u691c%u8a3c%u3001%u305d%u3057%u3066%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3%u60c5%u5831%u304c%u516c%u958b%u3055%u308c%u305f%u969b%u306b%u305d%u308c%u3089%u3092%u30ea%u30ea%u30fc%u30b9%u3067%u304d%u308b%u3088%u3046%u306b%u30012008 %u5e74%u306b Microsoft Active Protections Program (MAPP) %u304c%u958b%u59cb%u3055%u308c%u305f%u3053%u3068%u3092%u899a%u3048%u3066%u304a%u3089%u308c%u308b%u65b9%u3082%u3044%u308b%u3068%u601d%u3044%u307e%u3059%u3002MAPP %u306f%u3001%u305d%u306e%u5f53%u6642%u3088%u304f%u4f7f%u7528%u3055%u308c%u3066%u3044%u305f%u300c%u706b%u66dc%u65e5%uff08%u65e5%u672c%u6642%u9593%u306e%u6c34%u66dc%u65e5%uff09%u306b%u66f4%u65b0%u3057%u3001%u6c34%u66dc%u65e5%uff08%u65e5%u672c%u6642%u9593%u306e%u6728%u66dc%u65e5%uff09%u306b%u60aa%u7528%u3059%u308b%u300d%u306b%u5bfe%u3059%u308b%u56de%u7b54%u3067%u3057%u305f%u3002%u3053%u306e%u9803%u3001%u30a8%u30af%u30b9%u30d7%u30ed%u30a4%u30c8%u30e9%u30a4%u30bf%u30fc%u306f%u3001%u30de%u30a4%u30af%u30ed%u30bd%u30d5%u30c8%u306e%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3%u66f4%u65b0%u30d7%u30ed%u30b0%u30e9%u30e0%u306b%u5bfe%u3057%u30ea%u30d0%u30fc%u30b9 %u30a8%u30f3%u30b8%u30cb%u30a2%u30ea%u30f3%u30b0%u3092%u884c%u3044%u3001%u30a8%u30af%u30b9%u30d7%u30ed%u30a4%u30c8%u3092%u30d3%u30eb%u30c9%u3059%u308b%u884c%u7a0b%u306e%u81ea%u52d5%u5316%u3092%u958b%u767a%u3057%u307e%u3057%u305f%u3002%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3%u30d9%u30f3%u30c0%u30fc%u306f%u3001%u305d%u306e%u4ed6%u306e%u4eba%u3005%u3068%u540c%u3058%u6642%u9593%u306b%u60c5%u5831%u3092%u53d7%u3051%u53d6%u308a%u3001%u66f4%u65b0%u30d7%u30ed%u30b0%u30e9%u30e0%u3092%u9069%u7528%u3059%u308b%u524d%u306b%u4fdd%u8b77%u7b56%u306e%u958b%u767a%u3092%u884c%u3044%u3001%u5b9a%u7fa9%u30d5%u30a1%u30a4%u30eb%u3092%u691c%u8a3c%u3057%u306a%u3051%u308c%u3070%u306a%u308a%u307e%u305b%u3093%u3067%u3057%u305f%u3002MAPP %u306b%u3088%u3063%u3066%u3001%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3 %u30d9%u30f3%u30c0%u30fc%u306f%u300c%u5584%u4eba%u306f%u3001%u60aa%u4eba%u306b%u5bfe%u3057%u3066%u3001%u6709%u5229%u306a%u30b9%u30bf%u30fc%u30c8%u3092%u5207%u308b%u300d%u3053%u3068%u304c%u3067%u304d%u308b%u3088%u3046%u306b%u306a%u308a%u307e%u3057%u305f%u3002%u305d%u306e%u958b%u59cb%u304b%u3089%u73fe%u5728%u307e%u3067%u3001MAPP %u306f%u304a%u5ba2%u69d8%u304c%u691c%u8a3c%u306b%u5fc5%u8981%u306a%u6642%u9593%u3092%u304b%u3051%u3066%u66f4%u65b0%u30d7%u30ed%u30b0%u30e9%u30e0%u3092%u9069%u7528%u3067%u304d%u308b%u3088%u3046%u306b%u3001%u30de%u30a4%u30af%u30ed%u30bd%u30d5%u30c8%u304c%u66f4%u65b0%u30d7%u30ed%u30b0%u30e9%u30e0%u3092%u30ea%u30ea%u30fc%u30b9%u3059%u308b%u969b%u306b%u3001%u3053%u308c%u3089%u306e%u30d9%u30f3%u30c0%u30fc%u304c%u4fdd%u8b77%u7b56%u3092%u30ea%u30ea%u30fc%u30b9%u3067%u304d%u308b%u3053%u3068%u306b%u6210%u529f%u3057%u3066%u3044%u307e%u3059%u3002
%u3053%u3053%u306b%u81f3%u308b%u307e%u3067%u3001MAPP %u306f%u3001%u30de%u30a4%u30af%u30ed%u30bd%u30d5%u30c8%u304c%u5b9f%u74b0%u5883%u3067%u60aa%u7528%u3092%u767a%u898b%u3057%u305f%u5834%u5408%u306e%u30a4%u30f3%u30b7%u30c7%u30f3%u30c8%u30ec%u30b9%u30dd%u30f3%u30b9 %u30d7%u30ed%u30bb%u30f3%u30b9%u306e%u91cd%u8981%u306a%u90e8%u5206%u306b%u3082%u306a%u3063%u3066%u3044%u307e%u3059%u3002%u3053%u308c%u3089%u306e%u30a4%u30f3%u30b7%u30c7%u30f3%u30c8%u306b%u898b%u821e%u308f%u308c%u3066%u3044%u308b%u9593%u3001%u30de%u30a4%u30af%u30ed%u30bd%u30d5%u30c8%u306f MAPP %u30d1%u30fc%u30c8%u30ca%u30fc%u306b%u8a73%u7d30%u306a%u691c%u51fa%u30ac%u30a4%u30c0%u30f3%u30b9%u3092%u63d0%u4f9b%u3059%u308b%u3053%u3068%u3067%u3001%u79c1%u9054%u306e%u5171%u901a%u306e%u304a%u5ba2%u69d8%u306b%u5bfe%u3057%u3001%u65e9%u6025%u306b%u4fdd%u8b77%u7b56%u3092%u69cb%u7bc9%u3067%u304d%u308b%u3088%u3046%u652f%u63f4%u3059%u308b%u3053%u3068%u304c%u3067%u304d%u307e%u3059%u3002%u5927%u62b5%u306e%u5834%u5408%u3001%u79c1%u9054%u304c%u6052%u4e45%u7684%u306a%u4fee%u6b63%u3067%u305d%u306e%u554f%u984c%u3092%u89e3%u6c7a%u3057%u3088%u3046%u3068%u50cd%u304f%u4e00%u65b9%u3067%u3001%u304a%u5ba2%u69d8%u306b%u5bfe%u3057%u3066%u91cd%u8981%u306a%u30ec%u30d9%u30eb%u306e%u4fdd%u8b77%u7b56%u3092%u63d0%u4f9b%u3059%u308b%u3082%u306e%u3067%u3059%u3002
MAPP %u304c%u958b%u59cb%u3055%u308c%u3066%u304b%u3089%u3001%u305d%u306e%u904b%u7528%u65b9%u6cd5%u306b%u5c11%u3005%u306e%u5916%u7684%u5909%u5316%u304c%u3042%u308a%u307e%u3057%u305f%u3002%u793e%u5185%u7684%u306b%u306f%u3001%u30d7%u30ed%u30b0%u30e9%u30e0%u306e%u7ba1%u7406%u65b9%u6cd5%u306b%u591a%u5c11%u306e%u4fee%u6b63%u3092%u884c%u3044%u307e%u3057%u305f%u304c%u3001%u5927%u90e8%u5206%u306f 2008 %u5e74%u306e%u3082%u306e%u3068%u540c%u3058%u30d7%u30ed%u30b0%u30e9%u30e0%u3067%u3001%u30d1%u30fc%u30c8%u30ca%u30fc%u3082%u540c%u3058%u30d7%u30ed%u30b0%u30e9%u30e0%u3092%u5f7c%u3089%u304c%u904b%u7528%u3092%u884c%u3046%u4e0a%u3067%u5fc5%u9808%u3060%u3068%u8a00%u3063%u3066%u3044%u307e%u3059%u3002%u4f8b%u3068%u3057%u3066%u4ee5%u4e0b%u3092%u3054%u53c2%u7167%u304f%u3060%u3055%u3044%u3002
%u300cMAPP %u30d7%u30ed%u30b0%u30e9%u30e0%u306f%u3001Trend Micro %u306e%u30b5%u30a4%u30d0%u30fc%u72af%u7f6a%u8005%u306b%u5bfe%u3059%u308b%u9632%u5fa1%u306e%u5f37%u5316%u3092%u652f%u63f4%u3057%u307e%u3059%u3002%u30bf%u30a4%u30e0%u30ea%u30fc%u306a%u60c5%u5831%u5171%u6709%u306e%u304a%u304b%u3052%u3067%u3001%u8aa4%u691c%u51fa%u3092%u6700%u5c0f%u9650%u306b%u6b62%u3081%u3001%u304a%u5ba2%u69d8%u306b%u6700%u826f%u3067%u6b63%u78ba%u306a%u4fdd%u8b77%u7b56%u3092%u63d0%u4f9b%u3059%u308b%u3053%u3068%u304c%u3067%u304d%u307e%u3059%u3002%u300d%u3068 Trend Micro %u306e CTO%u3001Raimund Genes %u306f%u8a00%u3063%u3066%u3044%u307e%u3059%u3002
%u300cMAPP %u304b%u3089%u63d0%u4f9b%u3055%u308c%u305f%u30c7%u30fc%u30bf%u3067%u3001%u304a%u5ba2%u69d8%u306b%u5bfe%u3057%u3066%u3001%u30bc%u30ed%u30c7%u30a4%u306e%u8106%u5f31%u6027%u3078%u306e%u4fdd%u8b77%u7b56%u3092%u3088%u308a%u65e9%u304f%u63d0%u4f9b%u3067%u304d%u308b%u3088%u3046%u306b%u306a%u308a%u3001%u554f%u984c%u306e%u5148%u56de%u308a%u3092%u3059%u308b%u4fa1%u5024%u306e%u3042%u308b%u30bd%u30fc%u30b9%u3067%u3042%u308b%u3053%u3068%u3092%u8a3c%u660e%u3057%u3066%u3044%u307e%u3059%u3002%u300d — Peter Szabo, Senior Threat Researcher, SophosLabs Canada
%u300cMAPP %u306f%u8106%u5f31%u6027%u306b%u95a2%u3059%u308b%u4e8b%u524d%u901a%u77e5%u3060%u3051%u3067%u306f%u306a%u304f%u3001%u5b9f%u884c%u53ef%u80fd%u306a%u60c5%u5831%u3082%u63d0%u4f9b%u3059%u308b%u3053%u3068%u3067%u3001%u3088%u308a%u65e9%u304f%u3001%u304a%u5ba2%u69d8%u306e%u305f%u3081%u306b%u4fdd%u8b77%u7b56%u3092%u69cb%u7bc9%u3059%u308b%u3053%u3068%u304c%u3067%u304d%u308b%u3088%u3046%u306b%u306a%u308a%u307e%u3057%u305f%u3002%u3053%u306e%u305f%u3081%u3001%u91cd%u8981%u306a%u30b5%u30a4%u30af%u30eb%u3092%u7dad%u6301%u3059%u308b%u3053%u3068%u304c%u3067%u304d%u3001MAPP %u306e%u4fa1%u5024%u3042%u308b%u60c5%u5831%u5171%u6709%u306f%u3001%u79c1%u9054%u306e%u30b5%u30a4%u30d0%u30fc%u72af%u7f6a%u306b%u5bfe%u3059%u308b%u8105%u5a01%u306b%u6ce8%u529b%u3057%u305f%u30a2%u30d7%u30ed%u30fc%u30c1%u3092%u5168%u9762%u7684%u306b%u30b5%u30dd%u30fc%u30c8%u3057%u3066%u3044%u307e%u3059%u3002%u300d – Matt Watchinski, Vice President of Vulnerability Research, Sourcefire
%u3053%u308c%u307b%u3069%u306e%u9ad8%u8a55%u4fa1%u3092%u3044%u305f%u3060%u3044%u3066%u3044%u307e%u3059%u304c%u3001%u30de%u30a4%u30af%u30ed%u30bd%u30d5%u30c8%u306f%u5e38%u306b%u30d7%u30ed%u30b0%u30e9%u30e0%u306e%u8a55%u4fa1%u3092%u3057%u3066%u3044%u307e%u3059%u3002%u4eca%u56de%u3001%u5909%u5316%u3059%u308b%u8105%u5a01%u306e%u5168%u4f53%u50cf%u3001%u304a%u3088%u3073%u30d1%u30fc%u30c8%u30ca%u30fc%u304b%u3089%u306e%u30d5%u30a3%u30fc%u30c9%u30d0%u30c3%u30af%u3092%u57fa%u306b%u884c%u3063%u305f%u3044%u304f%u3064%u304b%u306e%u5909%u66f4%u70b9%u306b%u3064%u3044%u3066%u7d39%u4ecb%u3057%u307e%u3059%u3002
%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3 %u30d9%u30f3%u30c0%u30fc%u5411%u3051%u306e MAPP
%u306f%u3058%u3081%u306b%u3001%u65e2%u5b58%u306e MAPP %u30d7%u30ed%u30b0%u30e9%u30e0%u306e%u660e%u78ba%u306a%u5b9a%u7fa9%u3092%u6301%u3061%u3001%u65b0%u3057%u3044%u30d7%u30ed%u30b0%u30e9%u30e0%u306e%u7570%u306a%u308b%u70b9%u304c%u4f55%u304b%u3092%u4f1d%u3048%u308b%u305f%u3081%u306b%u3001%u73fe%u5728%u3001%u4e16%u9593%u306b%u77e5%u3089%u308c%u3066%u3044%u308b MAPP %u3092%u300c%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3 %u30d9%u30f3%u30c0%u30fc%u5411%u3051%u306e MAPP%u300d%u3068%u547c%u3076%u3053%u3068%u306b%u3057%u307e%u3059%u3002%u4ee5%u4e0b%u304c%u3001%u5f93%u6765%u306e MAPP %u304c%u4eca%u5f8c%u3069%u3046%u306a%u3063%u3066%u3044%u304f%u304b%u3001%u305d%u306e%u6982%u8981%u3067%u3059%u3002
MSRC %u306f%u3001%u304a%u5ba2%u69d8%u3001%u304a%u3088%u3073%u30d1%u30fc%u30c8%u30ca%u30fc%u304b%u3089%u30d5%u30a3%u30fc%u30c9%u30d0%u30c3%u30af%u3092%u96c6%u3081%u3001%u307e%u305f%u305d%u308c%u306b%u5bfe%u51e6%u3057%u3066%u304d%u305f%u6b74%u53f2%u304c%u3042%u308a%u307e%u3059%u3002%u4f8b%u3048%u3070%u3001Software Update Validation Program (SUVP) (%u82f1%u8a9e%u60c5%u5831)%u306f%u3001%u6a29%u9650%u3092%u4e0e%u3048%u3089%u308c%u305f%u4f01%u696d%u304c%u3001%u904b%u7528%u74b0%u5883%u5916%u3067%u30de%u30a4%u30af%u30ed%u30bd%u30d5%u30c8%u306e%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3%u66f4%u65b0%u30d7%u30ed%u30b0%u30e9%u30e0%u306e%u691c%u8a3c%u3092%u8a31%u53ef%u3057%u3001%u30ea%u30ea%u30fc%u30b9%u524d%u306b%u3001%u305d%u308c%u3089%u306e%u66f4%u65b0%u30d7%u30ed%u30b0%u30e9%u30e0%u306b%u5bfe%u3059%u308b%u30d5%u30a3%u30fc%u30c9%u30d0%u30c3%u30af%u304c%u63d0%u4f9b%u3055%u308c%u3066%u304d%u307e%u3057%u305f%u3002%u304a%u5ba2%u69d8%u3068%u306e%u30d1%u30fc%u30c8%u30ca%u30fc%u95a2%u4fc2%u306f%u3001%u793e%u5185%u691c%u8a3c%u306e%u57df%u3092%u8d85%u3048%u3001%u304a%u5ba2%u69d8%u306e%u30cd%u30c3%u30c8%u30ef%u30fc%u30af%u3067%u7a3c%u50cd%u3057%u3066%u3044%u308b%u591a%u304f%u306e%u30ab%u30b9%u30bf%u30e0%u30a2%u30d7%u30ea%u30b1%u30fc%u30b7%u30e7%u30f3%u3092%u542b%u307f%u307e%u3059%u3002
%u307b%u307c%u540c%u3058%u65b9%u6cd5%u3067%u3001%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3 %u30d9%u30f3%u30c0%u30fc%u5411%u3051%u306e MAPP %u306e%u4e00%u74b0%u3068%u3057%u3066%u3001%u5e83%u7bc4%u306a MAPP %u30b3%u30df%u30e5%u30cb%u30c6%u30a3%u306b%u914d%u4fe1%u3059%u308b%u524d%u306b%u3001%u6a29%u9650%u3092%u4e0e%u3048%u3089%u308c%u305f%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3 %u30d9%u30f3%u30c0%u30fc%u304c%u30de%u30a4%u30af%u30ed%u30bd%u30d5%u30c8%u306e%u691c%u51fa%u30ac%u30a4%u30c0%u30f3%u30b9%u306b%u5bfe%u3059%u308b%u30d5%u30a3%u30fc%u30c9%u30d0%u30c3%u30af%u3092%u63d0%u4f9b%u3059%u308b MAPP Validate (MAPP %u8a8d%u8a3c) %u3092%u5c0e%u5165%u3057%u3066%u3044%u307e%u3059%u3002%u3053%u308c%u306f%u3001%u30b3%u30df%u30e5%u30cb%u30c6%u30a3%u306b%u6e96%u62e0%u3057%u305f%u30a4%u30cb%u30b7%u30a2%u30c6%u30a3%u30d6%u3067%u3001%u958b%u767a%u3092%u5408%u7406%u5316%u3057%u3001%u3088%u308a%u8fc5%u901f%u3067%u9ad8%u54c1%u8cea%u306a%u4fdd%u8b77%u7b56%u3092%u304a%u5ba2%u69d8%u306b%u63d0%u4f9b%u3067%u304d%u308b%u3088%u3046%u306b%u3001%u691c%u51fa%u30ac%u30a4%u30c0%u30f3%u30b9%u3092%u4f7f%u7528%u3059%u308b%u652f%u63f4%u3068%u306a%u308a%u307e%u3059%u3002
%u6b21%u306b%u3001%u30d1%u30fc%u30c8%u30ca%u30fc%u9054%u306f%u3001%u30de%u30a4%u30af%u30ed%u30bd%u30d5%u30c8%u304c%u4fdd%u8b77%u7b56%u3092%u958b%u767a%u3059%u308b%u305f%u3081%u306b%u5f7c%u3089%u306b%u4e0e%u3048%u3066%u3044%u308b 1 %u65e5%u65e9%u3044%u958b%u767a%u30b9%u30bf%u30fc%u30c8%u306b%u3001%u660e%u78ba%u306a%u30d3%u30b8%u30cd%u30b9%u4fa1%u5024%u3092%u898b%u51fa%u3057%u3066%u3044%u308b%u3068%u8a00%u3063%u3066%u3044%u307e%u3059%u3002%u3057%u304b%u3057%u306a%u304c%u3089%u3001%u6642%u306b%u306f%u69cb%u7bc9%u3001%u691c%u8a3c%u3001%u304a%u3088%u3073%u4e0a%u8cea%u306a%u5b9a%u7fa9%u30d5%u30a1%u30a4%u30eb%u306e%u63d0%u4f9b%u306b%u306f%u66f4%u306a%u308b%u6642%u9593%u304c%u304b%u304b%u308b%u5834%u5408%u3082%u3042%u308a%u307e%u3059%u3002%u305d%u306e%u305f%u3081%u3001%u691c%u51fa%u30ac%u30a4%u30c0%u30f3%u30b9%u3092%u52b9%u7387%u3001%u6539%u5584%u3059%u308b%u305f%u3081%u306b%u3001%u3042%u308b%u4e00%u5b9a%u306e%u53b3%u3057%u3044%u57fa%u6e96%u3092%u6e80%u305f%u3059 MAPP %u30d1%u30fc%u30c8%u30ca%u30fc%u306b%u3064%u3044%u3066%u306f%u5b9a%u7fa9%u30d5%u30a1%u30a4%u30eb%u958b%u767a%u306b%u304b%u304b%u308b%u6642%u9593%u30921 %u55b6%u696d%u65e5%u304b%u3089 3 %u55b6%u696d%u65e5%u306b%u5ef6%u9577%u3057%u307e%u3059%u3002%u57fa%u6e96%u306b%u3064%u3044%u3066%u306f%u3001%u4f8b%u3048%u3070%u3001%u30d1%u30fc%u30c8%u30ca%u30fc%u306f%u30ec%u30dd%u30fc%u30c6%u30a3%u30f3%u30b0%u8981%u4ef6%u3092%u6e80%u305f%u3057%u3066%u3044%u308b%u3068%u3044%u3046%u30c8%u30e9%u30c3%u30af %u30ec%u30b3%u30fc%u30c9%u304c%u6700%u4f4e 2 %u5e74%u3042%u308b%u3053%u3068%u3001%u307e%u305f%u3001%u30e6%u30fc%u30b6%u30fc%u74b0%u5883%u3067%u65b0%u3057%u3044%u554f%u984c%u3092%u30d1%u30fc%u30c8%u30ca%u30fc%u304c%u767a%u898b%u3057%u305f%u5834%u5408%u306b%u3001%u79c1%u9054%u304c%u3059%u3070%u3084%u304f%u5bfe%u5fdc%u3059%u308b%u5fc5%u8981%u304c%u3042%u308b%u305f%u3081%u3001%u79c1%u9054%u3068%u306e%u30d1%u30fc%u30c8%u30ca%u30fc%u95a2%u4fc2%u306b%u5bfe%u3059%u308b%u7a4d%u6975%u6027%u304c%u7acb%u8a3c%u3055%u308c%u3066%u3044%u306a%u3051%u308c%u3070%u306a%u308a%u307e%u305b%u3093%u3002%u30a8%u30f3%u30c8%u30ea%u30fc%u30ec%u30d9%u30eb%u306e MAPP %u30d1%u30fc%u30c8%u30ca%u30fc%u306b%u3064%u3044%u3066%u306f%u3001%u4eca%u5f8c%u3082 1 %u65e5%u65e9%u304f%u60c5%u5831%u3092%u53d7%u3051%u53d6%u308b%u3060%u3051%u3067%u3059%u3002%u3053%u308c%u307e%u3067%u3068%u540c%u3058%u3088%u3046%u306b%u3001%u79c1%u9054%u306f%u304a%u5ba2%u69d8%u306e%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3%u306b%u3064%u3044%u3066%u975e%u5e38%u306b%u6df1%u523b%u306b%u53d7%u3051%u6b62%u3081%u3066%u304a%u308a%u307e%u3059%u3002%u3044%u305a%u308c%u304b%u306e%u30d1%u30fc%u30c8%u30ca%u30fc%u304c%u3001%u6c17%u3065%u304b%u306a%u3044%u3046%u3061%u306b%u3001%u3042%u308b%u3044%u306f%u6c17%u3065%u304d%u306a%u304c%u3089%u3082%u6f0f%u3048%u3044%u3057%u305f%u60c5%u5831%u304c%u3042%u308b%u3068%u5224%u660e%u3057%u305f%u5834%u5408%u306f%u3001%u8abf%u67fb%u306e%u7d50%u679c%u306b%u4f9d%u3063%u3066%u3001%u3059%u3079%u3066%u306e%u30d7%u30ed%u30b0%u30e9%u30e0%u304b%u3089%u306f%u305a%u3055%u308c%u3001%u30a8%u30f3%u30c8%u30ea%u30fc%u30ec%u30d9%u30eb%u306e%u30b9%u30c6%u30fc%u30bf%u30b9%u306e%u307f%u306b%u5909%u66f4%u3055%u308c%u307e%u3059%u3002
%u30ec%u30b9%u30dd%u30f3%u30c0%u30fc%u5411%u3051%u306e MAPP
%u696d%u754c%u5168%u4f53%u306b%u308f%u305f%u3063%u3066%u3001%u6a19%u7684%u578b%u653b%u6483%u306f%u4f01%u696d%u3001%u653f%u5e9c%u3001%u304a%u3088%u3073%u305d%u306e%u4ed6%u306e%u56e3%u4f53%u306b%u3068%u3063%u3066%u4e3b%u8981%u306a%u8105%u5a01%u306e 1 %u3064%u3067%u3042%u308b%u3068%u8a8d%u8b58%u3055%u308c%u3066%u3044%u307e%u3059%u3002%u5fdc%u5bfe%u3059%u308b%u4f01%u696d%u3001CSIRT%u3001ISAC%u3001%u305d%u3057%u3066%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3 %u30d9%u30f3%u30c0%u30fc%u3092%u542b%u3080%u30a4%u30f3%u30b7%u30c7%u30f3%u30c8 %u30ec%u30b9%u30dd%u30f3%u30c0%u30fc%u306f%u3001%u3053%u308c%u3089%u653b%u6483%u306e%u691c%u51fa%u3001%u5bfe%u5fdc%u3001%u304a%u3088%u3073%u4fee%u6b63%u3068%u3044%u3046%u95d8%u3044%u306e%u6700%u524d%u7dda%u306b%u7acb%u3063%u3066%u3044%u307e%u3059%u3002%u30ec%u30b9%u30dd%u30f3%u30c0%u30fc%u5411%u3051%u306e MAPP %u3068%u3044%u3046%u3053%u306e%u30d7%u30ed%u30b0%u30e9%u30e0%u3092%u901a%u3058%u3066%u3001%u79c1%u9054%u306f%u6226%u7565%u7684%u306a%u77e5%u8b58%u306e%u4ea4%u63db%u3092%u53ef%u80fd%u306b%u3059%u308b%u65b0%u3057%u3044%u30d1%u30fc%u30c8%u30ca%u30fc%u95a2%u4fc2%u3001%u305d%u3057%u3066%u30b3%u30df%u30e5%u30cb%u30c6%u30a3%u306e%u30b3%u30e9%u30dc%u30ec%u30fc%u30b7%u30e7%u30f3%u3092%u78ba%u7acb%u3057%u3088%u3046%u3068%u53d6%u308a%u7d44%u3093%u3067%u3044%u307e%u3059%u3002%u30de%u30a4%u30af%u30ed%u30bd%u30d5%u30c8%u306f%u3001%u60aa%u610f%u306e%u3042%u308b URL%u3001%u30d5%u30a1%u30a4%u30eb %u30cf%u30c3%u30b7%u30e5%u3001%u30a4%u30f3%u30b7%u30c7%u30f3%u30c8 %u30c7%u30fc%u30bf%u3001%u304a%u3088%u3073%u95a2%u9023%u3059%u308b%u691c%u51fa%u30ac%u30a4%u30c0%u30f3%u30b9%u3092%u5171%u6709%u3059%u308b%u3053%u3068%u3067%u3053%u306e%u53d6%u308a%u7d44%u307f%u306b%u8ca2%u732e%u3059%u308b%u5fc3%u3065%u3082%u308a%u3067%u3059%u3002%u300c%u5f97%u308b%u305f%u3081%u306b%u4e0e%u3048%u308b%u300d%u3068%u3044%u3046%u30e2%u30c7%u30eb%u3092%u63a1%u7528%u3059%u308b%u3053%u3068%u3067%u3001%u30b3%u30df%u30e5%u30cb%u30c6%u30a3%u306f%u5f7c%u3089%u304c%u63d0%u4f9b%u3057%u305f%u30c7%u30fc%u30bf%u304c%u305d%u306e%u4ed6%u306e%u95a2%u4fc2%u8005%u304b%u3089%u306e%u30c7%u30fc%u30bf%u3092%u96c6%u7d04%u3057%u3001%u5f37%u5316%u3055%u308c%u308b%u3053%u3068%u3067%u5229%u76ca%u3092%u5f97%u307e%u3059%u3002
%u30ec%u30b9%u30dd%u30f3%u30c0%u30fc%u5411%u3051%u306e MAPP %u3068%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3%u30d9%u30f3%u30c0%u30fc%u5411%u3051%u306e MAPP %u306e%u9055%u3044%u306f%u4f55%u3067%u3057%u3087%u3046%u304b?%u524d%u8005%u304c%u9ad8%u3044%u30ec%u30d9%u30eb%u3067%u691c%u51fa%u3068%u4fee%u6b63%u3092%u76ee%u7684%u3068%u3057%u3066%u3044%u308b%u306e%u306b%u5bfe%u3057%u3001%u5f8c%u8005%u306f%u3001%u4fdd%u8b77%u7b56%u306e%u958b%u767a%u304c%u3059%u3079%u3066%u3067%u3059%u3002%u30ec%u30b9%u30dd%u30f3%u30b9%u30d1%u30fc%u30c8%u30ca%u30fc%u3068%u5171%u6709%u3057%u3088%u3046%u3068%u79c1%u9054%u304c%u8a08%u753b%u3059%u308b%u60c5%u5831%u306f%u3001%u8106%u5f31%u6027%u306b%u7279%u5316%u3057%u3066%u3044%u308b%u3068%u3044%u3046%u3088%u308a%u306f%u3001%u3088%u308a%u8105%u5a01%u306b%u95a2%u3059%u308b%u60c5%u5831%u306b%u6ce8%u529b%u3057%u3066%u3044%u307e%u3059%u3002%u3053%u308c%u3089%u30012 %u3064%u306e%u30d7%u30ed%u30b0%u30e9%u30e0%u3092%u7d71%u5408%u3057%u305f%u3082%u306e%u304c%u30a4%u30f3%u30b7%u30c7%u30f3%u30c8%u30ec%u30b9%u30dd%u30f3%u30b9%u5468%u8fba%u306e%u60c5%u5831%u3067%u3059%u3002%u6a19%u7684%u578b%u653b%u6483%u306b%u5bfe%u3057%u3001%u3088%u308a%u591a%u304f%u306e%u30c7%u30a3%u30d5%u30a7%u30f3%u30c0%u30fc%u3067%u5bfe%u7b56%u3059%u308b%u3053%u3068%u304c%u3001%u79c1%u9054%u306e%u5168%u4f53%u7684%u306a%u6226%u7565%u306e%u4e3b%u8ef8%u3067%u3059%u3002
%u52b9%u679c%u7684%u306a%u77e5%u8b58%u306e%u4ea4%u63db%u306b%u306f%u3001%u81ea%u52d5%u5316%u3068%u5171%u901a%u306e%u5f62%u5f0f%u304c%u5fc5%u8981%u3067%u3059%u3002%u3053%u308c%u3092%u9054%u6210%u3059%u308b%u305f%u3081%u306b%u306f%u3001Mitre %u306e STIX (Structured Threat Information Expression [%u69cb%u9020%u5316%u3055%u308c%u305f%u8105%u5a01%u60c5%u5831%u306e%u8868%u73fe])%u3001%u304a%u3088%u3073 TAXII (Trusted Automated Exchange of Indicator Information [%u30a4%u30f3%u30b8%u30b1%u30fc%u30bf%u30fc%u60c5%u5831%u306e%u4fe1%u983c%u6e08%u307f%u81ea%u52d5%u4ea4%u63db])%u4ed5%u69d8%u3092%u30b5%u30dd%u30fc%u30c8%u3059%u308b%u4e88%u5b9a%u3067%u3059%u3002%u60c5%u5831%u306e%u5f62%u5f0f%u5316%u3001%u304a%u3088%u3073%u79fb%u52d5%u306b%u95a2%u3059%u308b%u516c%u958b%u306e%u898f%u683c%u3068%u3057%u3066%u3001STIX%u3001%u304a%u3088%u3073 TAXII %u306f%u5e83%u7bc4%u56f2%u306b%u63a1%u7528%u3055%u308c%u59cb%u3081%u3066%u3044%u307e%u3059%u3002%u5f62%u5f0f%u306b%u95a2%u308f%u3089%u305a%u3001%u79c1%u9054%u306f%u3001%u8105%u5a01%u306b%u95a2%u3059%u308b%u60c5%u5831%u3092%u6d3b%u7528%u3067%u304d%u308b%u7d44%u7e54%u306b%u5bfe%u3059%u308b%u8105%u5a01%u60c5%u5831%u306e%u6d41%u308c%u3092%u4fc3%u9032%u3059%u308b%u3053%u3068%u3067%u3001%u304a%u5ba2%u69d8%u306b%u5bfe%u5fdc%u3057%u305f%u3044%u3068%u601d%u3063%u3066%u3044%u307e%u3059%u3002%u307e%u305f%u3001%u79c1%u9054%u306f%u4ed6%u306e%u4e00%u822c%u306b%u4f7f%u7528%u3055%u308c%u3066%u3044%u308b%u5f62%u5f0f%u306b%u4ee3%u308f%u308b%u5f62%u5f0f%u3092%u69cb%u7bc9%u3057%u3088%u3046%u3068%u52aa%u3081%u3066%u3044%u307e%u3059%u3002%u3053%u306e%u5f62%u5f0f%u306f%u73fe%u5728%u958b%u767a%u4e2d%u3067%u3001%u8fd1%u3044%u5c06%u6765%u3001%u30d1%u30a4%u30ed%u30c3%u30c8%u7248%u3092%u958b%u59cb%u3059%u308b%u4e88%u5b9a%u3067%u3059%u3002
MAPP %u30b9%u30ad%u30e3%u30ca%u30fc
MSRC %u306f%u3001!exploitable%u3001OffVis%u3001%u304a%u3088%u3073 EMET %u306a%u3069%u306e%u30c4%u30fc%u30eb%u3092%u69cb%u7bc9%u3057%u305f%u3001%u696d%u754c%u5185%u3067%u3082%u6307%u6298%u308a%u306e%u30a8%u30f3%u30b8%u30cb%u30a2%u3092%u63a1%u7528%u3057%u3066%u3044%u307e%u3059%u3002MAPP %u30b9%u30ad%u30e3%u30ca%u30fc%u306f%u975e%u516c%u958b%u306e%u30d1%u30a4%u30ed%u30c3%u30c8 %u30d7%u30ed%u30b0%u30e9%u30e0%u3067%u3059%u304c%u3001%u30a4%u30f3%u30b7%u30c7%u30f3%u30c8%u306e%u8abf%u67fb%u3092%u76ee%u7684%u3068%u3057%u3066%u79c1%u9054%u306e%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3 %u30a8%u30f3%u30b8%u30cb%u30a2%u304c%u958b%u767a%u3057%u305f%u3001%u30b3%u30f3%u30c6%u30f3%u30c4%u30d9%u30fc%u30b9%u306e%u8106%u5f31%u6027%u30b9%u30ad%u30e3%u30ca%u30fc%u3067%u3059%u3002%u79c1%u9054%u306f%u3001%u8106%u5f31%u6027%u3092%u60aa%u7528%u3057%u3088%u3046%u3068%u8a66%u307f%u3066%u3044%u308b%u304b%u3069%u3046%u304b%u5224%u65ad%u3059%u308b%u305f%u3081 Office %u30c9%u30ad%u30e5%u30e1%u30f3%u30c8%u3001PDF %u30d5%u30a1%u30a4%u30eb%u3001Flash %u52d5%u753b%u3001%u304a%u3088%u3073%u7591%u308f%u3057%u3044 URL %u3092%u30b9%u30ad%u30e3%u30f3%u3067%u304d%u308b%u30af%u30e9%u30a6%u30c9%u30d9%u30fc%u30b9%u306e%u30b5%u30fc%u30d3%u30b9%u3067%u3042%u308b MAPP %u30b9%u30ad%u30e3%u30ca%u30fc%u3092%u3054%u7d39%u4ecb%u3057%u307e%u3059%u3002
MAPP %u30b9%u30ad%u30e3%u30ca%u30fc%u306f%u3001%u30d5%u30a1%u30a4%u30eb%u304c%u8106%u5f31%u6027%u3092%u60aa%u7528%u3057%u3088%u3046%u3068%u8a66%u307f%u3066%u3044%u308b%u304b%u5224%u65ad%u3059%u308b%u305f%u3081%u306b%u3001%u30b9%u30bf%u30c6%u30a3%u30c3%u30af%u578b%u3001%u304a%u3088%u3073%u30a2%u30af%u30c6%u30a3%u30d6%u578b%u306e%u4e21%u65b9%u306e%u5206%u6790%u3092%u5b9f%u884c%u3057%u307e%u3059%u3002%u30b5%u30dd%u30fc%u30c8%u3055%u308c%u3066%u3044%u308b%u3059%u3079%u3066%u306e%u30d0%u30fc%u30b8%u30e7%u30f3%u306e Windows %u4e0a%u306e%u30d0%u30fc%u30c1%u30e3%u30eb%u30de%u30b7%u30f3%u3092%u30b9%u30d4%u30f3%u30a2%u30c3%u30d7%u3057%u3001%u30b5%u30dd%u30fc%u30c8%u3055%u308c%u3066%u3044%u308b%u30d0%u30fc%u30b8%u30e7%u30f3%u306e%u9069%u5207%u306a%u30a2%u30d7%u30ea%u30b1%u30fc%u30b7%u30e7%u30f3%u5185%u306e%u30b3%u30f3%u30c6%u30f3%u30c4%u3092%u958b%u304d%u307e%u3059%u3002MAPP %u30b9%u30ad%u30e3%u30ca%u30fc%u306f%u65e2%u77e5%u306e%u8106%u5f31%u6027%u3092%u691c%u51fa%u3059%u308b%u3053%u3068%u304c%u3067%u304d%u3001%u305d%u306e%u554f%u984c%u306b%u5bfe%u3057 CVE %u304a%u3088%u3073%u5f71%u97ff%u3092%u53d7%u3051%u308b%u30d7%u30e9%u30c3%u30c8%u30d5%u30a9%u30fc%u30e0%u3092%u623b%u3059%u4e00%u65b9%u3067%u3001%u3088%u308a%u6df1%u3044%u5206%u6790%u306e%u65e2%u77e5%u306e%u8106%u5f31%u6027%u3068%u95a2%u9023%u3057%u306a%u3044%u3001%u7591%u308f%u3057%u3044%u30a2%u30af%u30c6%u30a3%u30d3%u30c6%u30a3%u306b%u5bfe%u3057%u30d5%u30e9%u30b0%u3092%u305f%u3066%u307e%u3059%u3002%u7d50%u679c%u3068%u3057%u3066%u3001MAPP %u30b9%u30ad%u30e3%u30ca%u30fc%u306f%u73fe%u5728%u672a%u78ba%u8a8d%u306e%u8106%u5f31%u6027%u3092%u7279%u5b9a%u3059%u308b%u305f%u3081%u306b%u975e%u5e38%u306b%u52b9%u679c%u7684%u3067%u3042%u308b%u3068%u3068%u3082%u306b%u3001%u30a4%u30f3%u30b7%u30c7%u30f3%u30c8%u3092%u8abf%u67fb%u3059%u308b%u30ec%u30b9%u30dd%u30f3%u30c0%u30fc%u306e%u80fd%u529b%u3068%u52b9%u7387%u3092%u5287%u7684%u306b%u5411%u4e0a%u3055%u305b%u3066%u3044%u308b%u3068%u3044%u3048%u307e%u3059%u3002
%u3053%u306e%u30c6%u30af%u30ce%u30ed%u30b8%u30fc%u3092%u3001%u6a19%u7684%u578b%u653b%u6483%u306b%u3055%u3089%u3055%u308c%u308b%u53ef%u80fd%u6027%u304c%u3042%u308b%u30d1%u30fc%u30c8%u30ca%u30fc%u3001%u304a%u3088%u3073%u3001%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3%u30a4%u30f3%u30b7%u30c7%u30f3%u30c8%u3092%u8abf%u67fb%u3001%u4fee%u6b63%u3059%u308b%u305f%u3081%u306b%u30d1%u30fc%u30c8%u30ca%u30fc%u3068%u5354%u529b%u3059%u308b%u4eba%u9054%u306b%u5229%u7528%u53ef%u80fd%u306b%u3059%u308b%u3053%u3068%u3067%u3001%u65b0%u3057%u3044%u653b%u6483%u3001%u304a%u3088%u3073%u653b%u6483%u30d9%u30af%u30bf%u30fc%u304c%u767a%u898b%u3055%u308c%u308b%u898b%u8fbc%u307f%u304c%u5897%u3048%u307e%u3057%u305f%u3002%u307e%u305f%u3001%u3053%u308c%u306f%u8abf%u67fb%u306e%u52b9%u7387%u6027%u3092%u76ee%u7684%u3068%u3057%u3066%u304a%u308a%u3001%u653b%u6483%u306e%u7279%u5b9a%u3001%u304a%u3088%u3073%u9069%u5207%u306a%u4fdd%u8b77%u7b56%u304c%u9069%u7528%u3055%u308c%u308b%u30d7%u30ed%u30bb%u30b9%u304c%u6642%u9593%u77ed%u7e2e%u3055%u308c%u307e%u3059%u3002
%u4eca%u5f8c
BlueHat Prize%u3001%u304a%u3088%u3073%u79c1%u9054%u306e%u65b0%u3057%u3044%u5831%u5968%u91d1%u30d7%u30ed%u30b0%u30e9%u30e0%u306a%u3069%u306e%u3001%u305d%u306e%u4ed6%u306e%u30de%u30a4%u30af%u30ed%u30bd%u30d5%u30c8 %u30bb%u30ad%u30e5%u30ea%u30c6%u30a3 %u30a4%u30cb%u30b7%u30a2%u30c6%u30a3%u30d6%u3068%u540c%u69d8%u306b MAPP %u306e%u4efb%u52d9%u306f%u300c%u3042%u3089%u3086%u308b%u30ec%u30d9%u30eb%u306e%u653b%u6483%u3092%u7de9%u548c%u3057%u3001%u304a%u5ba2%u69d8%u3092%u4fdd%u8b77%u3059%u308b%u300d%u3068%u3044%u3046%u30b7%u30f3%u30d7%u30eb%u306a%u3082%u306e%u3067%u3059%u3002%u79c1%u9054%u306f%u3001%u3053%u306e%u4efb%u52d9%u3092%u679c%u305f%u3059%u305f%u3081%u306b%u3055%u307e%u3056%u307e%u306a%u7570%u306a%u308b%u30b3%u30df%u30e5%u30cb%u30c6%u30a3%u3068%u5354%u529b%u3057%u3066%u304d%u305f%u9577%u3044%u6b74%u53f2%u304c%u3042%u308a%u3001%u5f15%u304d%u7d9a%u304d%u3001%u5354%u529b%u95a2%u4fc2%u3092%u7d9a%u3051%u3066%u3044%u304f%u3064%u3082%u308a%u3067%u3059%u3002%u307e%u305f%u3001%u73fe%u5728%u53d6%u308a%u7d44%u3093%u3067%u3044%u308b%u305d%u306e%u4ed6%u306e%u30a4%u30cb%u30b7%u30a2%u30c6%u30a3%u30d6%u3082%u3042%u308a%u307e%u3059%u306e%u3067%u3001%u4eca%u5f8c%u3001%u3053%u306e%u5834%u3067%u53d6%u308a%u4e0a%u3052%u3089%u308c%u308b%u3088%u3046%u306a%u5831%u544a%u3092%u304a%u5f85%u3061%u304f%u3060%u3055%u3044%u3002
Jerry Bryant
Senior Security Strategist
Microsoft Trustworthy Computing
Blog Post by: JSECTEAM