Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
! 
MSVR
!  MSRC	
  
!  Microso+	
  Security	
  Response	
  Center	
  
!  	
  
!  Microso+	
  Bounty	
  Programs	
  
!  Web 	
...
MSVR
!  HackerOne	
  
!  	
  
!  	
  
!  Facebook 	
  
MSVR
!  	
  
	
  
!  	
  
!  	
  
!  	
  
!  	
  
MSVR
!  	
  
!  	
  
!  	
  
!  	
  
MSVR
!  Web 	
  
!  h>p://technet.microso+.com/en-­‐us/security/msvr	
  
!  	
  
!  	
  
!  Windows 	
  
	
  
!  Adobe	
  Reader,	
  Oracle	
  Java PC 	
  
	
  
!  PC 	
  
!  	
  
!  	
  
! 
Reference:	
  h>p://...
!  	
  
!  	
  
!  DNS	
  
!  SSL	
  
!  	
  
!  MSVR 	
  
!  Adobe,	
  AOL,	
  Apple,	
  Blackberry,	
  CA,	
  Cisco,	
  CiZbank,	
  Comodo,	
  Fidelity,	
  Google,	
 ...
!  	
  
	
  
!  0-­‐day 	
  
!  	
  
!  	
  
Reference:	
  h>p://blogs.technet.com/b/msrc/archive/2011/04/19/coordinated-­...
!  	
  
!  	
  
!  	
  
!  	
  
!  	
  
?
!  	
  
!  	
  
!  	
  
!  	
  
!  :	
  Office Word PDF 	
  
	
  Adobe	
  Reader 	
  
!  	
  
!  	
  
!  	
  
!  	
  
!  	
  
!  SDL 	
  
!  	
  
XSS SQL 	
  
!  	
  
	
  
!  iPhone 	
  
!  ROI 	
  
MSVR
!  …	
  
!  CVD 	
  
!  CVD:	
  Coordinated	
  Vulnerability	
  Disclosure	
  -­‐	
   	
  
( “responsible	
  disclosu...
!  	
  
CVD 	
  
!  	
  
!  ( )	
   	
  
!  Microso+	
   ( )	
   	
  
!  Online	
  Service	
  ( )	
  
!  MiZgaZon	
  Bypas...
MSVR
1:
1 :
!  <insert	
  any	
  Windows	
  0day	
  full	
  disclosure	
  post	
  here	
  in	
  the	
  last	
  20	
  years>	
  
2:
!  :	
  
!  	
  
!  	
  
!  	
  
!  	
  
!  	
  
!  	
  
!  	
  
2 :
!  Windows 	
  
!  8 	
  
!  NumLock 	
  	
  
!  8 	
  
!  	
  
	
  
3:
!  ?	
  
!  SSL SSL ?	
  
!  Web Internet	
  Explorer ? 	
  
!  	
  
3 : 0-DAY
!  Microso+ :	
   	
  
	
   	
  
!  Bing 	
  
!  :	
  “Bing ”	
  
4:
!  ( Web 	
  
!  ☺	
  
!  PGP S/MIME 	
  
!  PGP … 	
  
!  	
  
4 :
!  :	
   ID 	
  
!  :	
   ID Web 	
  
	
   	
   	
  
!  :	
   ID 	
  
	
   ?	
  
!  :	
   	
  
	
   	
   	
  
	
   	
 ...
5:
!  	
  
!  	
  
!  	
  
	
  
! 
	
  
5 : !
!  6 	
  
6:
!  	
  
!  	
  
!  ” ” ☺	
  
6 :
!  :	
   !	
  	
  <	
   >	
  
!  :	
   !	
  
7: MSVR
!  	
  
!  	
  
!  	
  
!  	
  
!  	
  
!  	
  
!  	
  
MSVR 	
  
7B: MSVR
!  	
  
: LIBAVCODEC
!  MSVR12-­‐017	
  
!  FFmpeg	
  Libavcodec 	
  
!  VLC WMA !	
  
!  	
  
	
  
Reference:	
  h>p://technet.mi...
: LIBAVCODEC
!  !Exploitable (Windbg) 	
  
libavcodec_plugin.dll WriteAV 	
  
!  VLC A/V 	
  
!  WMA 	
  
	
  
: LIBAVCODEC
: LIBAVCODEC
!  0x0001 0x0007 	
  
!  word ?	
  
!  ?	
  
: LIBAVCODEC
!  OffVis 	
  
!  “Microso+	
  Office	
  VisualizaZon	
  Tool(Offivis) IT
doc*,	
  xls*,	
  ppt*
Microso+	
  Office ...
: LIBAVCODEC
: LIBAVCODEC
!  !	
  
!  ASF WMA 	
  
!  ASF “Number	
  of	
  Channels” 	
  
!  16bit 	
  
!  WAVEFORMATEX 	
  
!  “number...
: LIBAVCODEC
!  2 	
  
!  pop	
  ebx	
  
!  call	
  dword	
  ptr[ebx+30h]	
  
!  	
   ?	
  ☺	
  
!  	
  
!  ebx 	
  
!  ca...
: LIBAVCODEC
!  msvr@microso+.com	
  
	
  
!  MSVR 	
  
!  	
  
!  	
  
!  	
  
: LIBAVCODEC
!  2012 5 	
  
: LIBAVCODEC
: VMWARE
!  MSVR13-­‐002	
  
!  VMware	
  OVF	
  Tool 	
  
!  	
  1:	
  VMware	
   ?	
  
!  VMX	
  
!  VMDK	
  
!  OVF	
  ...
: VMWARE
!  2:	
  OVF ?	
  
!  (Open	
  Virtual	
  Machine	
  Format)	
  
!  “ 	
  
”	
  
Reference:	
  h>p://www.vmware.c...
: VMWARE
!  	
  
XML 	
  
!  XML 	
  
	
  
: VMWARE
!  3:	
   VMware OVF ?	
  
!  ov+ool.exe	
   	
  
!  VMware	
  player OVF 	
  
: VMWARE
	
  4:	
  OVFTool ?	
  
: VMWARE
	
  5:	
   	
  
<?xml	
  version="1.0"	
  encoding="uy-­‐8"?>	
  
<ovf:Envelope	
  xmlns:xsi="h>p://www.w3.org/20...
: VMWARE
…	
  
: VMWARE
: BLACKBERRY PTG
!  “Blackberry	
  Print	
  To	
  Go	
  Auth	
  Bypass” 	
  
!  ?	
  
!  Blackberry	
  PTG ?	
  
!  PC Bla...
: BLACKBERRY PTG
: BLACKBERRY PTG
!  Playbook 	
  
!  BlackBerry	
  ID( ID/ ) 	
  
!  Playbook PTG 	
  
!  PIN Playbook 	
  
!  	
  
!  Pla...
: BLACKBERRY PTG
: BLACKBERRY PTG
!  1234 …	
   	
  
!  URL Web
h>p://localhost:1234/myserverlet/	
  
!  	
  
!  	
  
: BLACKBERRY PTG
!  	
  
!  1234 	
  
	
  
: BLACKBERRY PTG
: BLACKBERRY PTG
: BLACKBERRY PTG
: BLACKBERRY PTG
!  ?	
  
!  Playbook 	
  
!  BlackBerry	
   	
  
BlackBerry	
  security 	
  
!  BlackBerry	
   	
  
!  “ ...
!  	
  
!  	
  
!  	
  
!  	
  
!  	
  
!  Web 	
  
	
  
!  	
  
!  MSVR !	
  
MSVR
!  	
  
!  	
  
!  ROI	
  
!  	
  
!  ” ” 	
  
!  :	
  HackerOne ” ” 	
  
!  	
  
!  (PGP	
   S/MIME)	
  
!  	
  
!  !	
  
!  	
  
!  	
  
!  	
  
!  	
  
!  	
  ( )	
  
!  	
  
!  	
  
!  	
  
! msvr@microso+.com	
  
©2014	
  Microso+	
  CorporaZon.	
  All	
  Rights	
  Reserved.	
  
This	
  document	
  is	
  provided	
  "as-­‐is."	
  Inf...
CODE BLUE 2014 : マイクロソフトの脆弱性調査 : ベンダーでありながら発見者となるために by デイヴィッド・シードマン David Seidman
CODE BLUE 2014 : マイクロソフトの脆弱性調査 : ベンダーでありながら発見者となるために by デイヴィッド・シードマン David Seidman
CODE BLUE 2014 : マイクロソフトの脆弱性調査 : ベンダーでありながら発見者となるために by デイヴィッド・シードマン David Seidman
CODE BLUE 2014 : マイクロソフトの脆弱性調査 : ベンダーでありながら発見者となるために by デイヴィッド・シードマン David Seidman
CODE BLUE 2014 : マイクロソフトの脆弱性調査 : ベンダーでありながら発見者となるために by デイヴィッド・シードマン David Seidman
Upcoming SlideShare
Loading in …5
×

CODE BLUE 2014 : マイクロソフトの脆弱性調査 : ベンダーでありながら発見者となるために by デイヴィッド・シードマン David Seidman

967 views

Published on

当マイクロソフトでは、社員がしばしば他のベンダー製品のセキュリティ上の問題を発見しており、その原因となるバグの修正のためには、製品のベンダーと一緒に解決を図る協調的な取り組みが必要であることを訴えている。マイクロソフト脆弱性調査 (MSVR) は、企業や研究者が脆弱性を発見し報告する際、マイクロソフトの対応方法を参考としてもらうことを支援するために制定された。MSVRは、この事前対策プログラムのライフタイムの間に重要なソフトウェア中の多数の脆弱性を修正する社内のバグハンターと協力するために重要な役割を演じてきている。我々のやり方を知れば、貴社で同様の脆弱性コーディネーションプログラムをどのように始めればよいか分かるだろう。
この講演では、MSVRの立ち上げ時の詳細な過程と、MSVRと同様の集中型プログラムを制定したい組織のための方法を取りあげる。弊社の技術者が発見しMSVRを通し報告したいくつかの脆弱性を技術的な点からベンダーと協力して脆弱性を修正し、その後、脆弱性に関するアドバイザリーを発行するまでを通しで説明する。

  • DOWNLOAD THIS BOOKS INTO AVAILABLE FORMAT (Unlimited) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { https://soo.gd/qURD } ......................................................................................................................... Download Full EPUB Ebook here { https://soo.gd/qURD } ......................................................................................................................... Download Full doc Ebook here { https://soo.gd/qURD } ......................................................................................................................... Download PDF EBOOK here { https://soo.gd/qURD } ......................................................................................................................... Download EPUB Ebook here { https://soo.gd/qURD } ......................................................................................................................... Download doc Ebook here { https://soo.gd/qURD } ......................................................................................................................... ......................................................................................................................... ................................................................................................................................... eBook is an electronic version of a traditional print book THIS can be read by using a personal computer or by using an eBook reader. (An eBook reader can be a software application for use on a computer such as Microsoft's free Reader application, or a book-sized computer THIS is used solely as a reading device such as Nuvomedia's Rocket eBook.) Users can purchase an eBook on diskette or CD, but the most popular method of getting an eBook is to purchase a downloadable file of the eBook (or other reading material) from a Web site (such as Barnes and Noble) to be read from the user's computer or reading device. Generally, an eBook can be downloaded in five minutes or less ......................................................................................................................... .............. Browse by Genre Available eBooks .............................................................................................................................. Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, ......................................................................................................................... ......................................................................................................................... .....BEST SELLER FOR EBOOK RECOMMEND............................................................. ......................................................................................................................... Blowout: Corrupted Democracy, Rogue State Russia, and the Richest, Most Destructive Industry on Earth,-- The Ride of a Lifetime: Lessons Learned from 15 Years as CEO of the Walt Disney Company,-- Call Sign Chaos: Learning to Lead,-- StrengthsFinder 2.0,-- Stillness Is the Key,-- She Said: Breaking the Sexual Harassment Story THIS Helped Ignite a Movement,-- Atomic Habits: An Easy &amp; Proven Way to Build Good Habits &amp; Break Bad Ones,-- Everything Is Figureoutable,-- What It Takes: Lessons in the Pursuit of Excellence,-- Rich Dad Poor Dad: What the Rich Teach Their Kids About Money THIS the Poor and Middle Class Do Not!,-- The Total Money Makeover: Classic Edition: A Proven Plan for Financial Fitness,-- Shut Up and Listen!: Hard Business Truths THIS Will Help You Succeed, ......................................................................................................................... .........................................................................................................................
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here
  • DOWNLOAD THIS BOOKS INTO AVAILABLE FORMAT (2019 Update) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download Full EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download Full doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... ......................................................................................................................... ................................................................................................................................... eBook is an electronic version of a traditional print book THIS can be read by using a personal computer or by using an eBook reader. (An eBook reader can be a software application for use on a computer such as Microsoft's free Reader application, or a book-sized computer THIS is used solely as a reading device such as Nuvomedia's Rocket eBook.) Users can purchase an eBook on diskette or CD, but the most popular method of getting an eBook is to purchase a downloadable file of the eBook (or other reading material) from a Web site (such as Barnes and Noble) to be read from the user's computer or reading device. Generally, an eBook can be downloaded in five minutes or less ......................................................................................................................... .............. Browse by Genre Available eBooks .............................................................................................................................. Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, ......................................................................................................................... ......................................................................................................................... .....BEST SELLER FOR EBOOK RECOMMEND............................................................. ......................................................................................................................... Blowout: Corrupted Democracy, Rogue State Russia, and the Richest, Most Destructive Industry on Earth,-- The Ride of a Lifetime: Lessons Learned from 15 Years as CEO of the Walt Disney Company,-- Call Sign Chaos: Learning to Lead,-- StrengthsFinder 2.0,-- Stillness Is the Key,-- She Said: Breaking the Sexual Harassment Story THIS Helped Ignite a Movement,-- Atomic Habits: An Easy &amp; Proven Way to Build Good Habits &amp; Break Bad Ones,-- Everything Is Figureoutable,-- What It Takes: Lessons in the Pursuit of Excellence,-- Rich Dad Poor Dad: What the Rich Teach Their Kids About Money THIS the Poor and Middle Class Do Not!,-- The Total Money Makeover: Classic Edition: A Proven Plan for Financial Fitness,-- Shut Up and Listen!: Hard Business Truths THIS Will Help You Succeed, ......................................................................................................................... .........................................................................................................................
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here
  • DOWNLOAD THIS BOOKS INTO AVAILABLE FORMAT (2019 Update) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download Full EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download Full doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... ......................................................................................................................... ................................................................................................................................... eBook is an electronic version of a traditional print book THIS can be read by using a personal computer or by using an eBook reader. (An eBook reader can be a software application for use on a computer such as Microsoft's free Reader application, or a book-sized computer THIS is used solely as a reading device such as Nuvomedia's Rocket eBook.) Users can purchase an eBook on diskette or CD, but the most popular method of getting an eBook is to purchase a downloadable file of the eBook (or other reading material) from a Web site (such as Barnes and Noble) to be read from the user's computer or reading device. Generally, an eBook can be downloaded in five minutes or less ......................................................................................................................... .............. Browse by Genre Available eBooks .............................................................................................................................. Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, ......................................................................................................................... ......................................................................................................................... .....BEST SELLER FOR EBOOK RECOMMEND............................................................. ......................................................................................................................... Blowout: Corrupted Democracy, Rogue State Russia, and the Richest, Most Destructive Industry on Earth,-- The Ride of a Lifetime: Lessons Learned from 15 Years as CEO of the Walt Disney Company,-- Call Sign Chaos: Learning to Lead,-- StrengthsFinder 2.0,-- Stillness Is the Key,-- She Said: Breaking the Sexual Harassment Story THIS Helped Ignite a Movement,-- Atomic Habits: An Easy &amp; Proven Way to Build Good Habits &amp; Break Bad Ones,-- Everything Is Figureoutable,-- What It Takes: Lessons in the Pursuit of Excellence,-- Rich Dad Poor Dad: What the Rich Teach Their Kids About Money THIS the Poor and Middle Class Do Not!,-- The Total Money Makeover: Classic Edition: A Proven Plan for Financial Fitness,-- Shut Up and Listen!: Hard Business Truths THIS Will Help You Succeed, ......................................................................................................................... .........................................................................................................................
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here

CODE BLUE 2014 : マイクロソフトの脆弱性調査 : ベンダーでありながら発見者となるために by デイヴィッド・シードマン David Seidman

  1. 1. !  !  !  !  !  ! 
  2. 2. !  !  !  ! 
  3. 3. !  !  !  !  !  ! 
  4. 4. !  !  !  ! 
  5. 5. !  !  ! 
  6. 6. !  ! 
  7. 7. MSVR !  MSRC   !  Microso+  Security  Response  Center   !    !  Microso+  Bounty  Programs   !  Web     !   
  8. 8. MSVR !  HackerOne   !    !    !  Facebook  
  9. 9. MSVR !      !    !    !    !   
  10. 10. MSVR !    !    !    !   
  11. 11. MSVR !  Web   !  h>p://technet.microso+.com/en-­‐us/security/msvr   !    !   
  12. 12. !  Windows     !  Adobe  Reader,  Oracle  Java PC     !  PC   !    !    !  Reference:  h>p://download.microso+.com/download/5/0/3/50310CCE-­‐8AF5-­‐4FB4-­‐83E2-­‐03F1DA92F33C/Microso+_Security_Intelligence_Report_Volume_15_English.pdf  
  13. 13. !    !    !  DNS   !  SSL   !   
  14. 14. !  MSVR   !  Adobe,  AOL,  Apple,  Blackberry,  CA,  Cisco,  CiZbank,  Comodo,  Fidelity,  Google,   Hex-­‐Rays,  HP,  IBM,  Intel,  Intuit,  Lenovo,  Mozilla,  Nullso+,  Nvidia,  OpenOffice,   Opera,  Oracle,  PGP,  RealNetworks,  SAP,  Symantec,  VMware,  Wireshark,   WordPress,  Yahoo!   !   
  15. 15. !      !  0-­‐day   !    !    Reference:  h>p://blogs.technet.com/b/msrc/archive/2011/04/19/coordinated-­‐vulnerability-­‐disclosure-­‐from-­‐philosophy-­‐to-­‐pracZce.aspx  
  16. 16. !    !    !    !    !   
  17. 17. ? !    !    !    !    !  :  Office Word PDF    Adobe  Reader   !    !    !   
  18. 18. !    !    !  SDL   !    XSS SQL   !      !  iPhone   !  ROI  
  19. 19. MSVR !  …   !  CVD   !  CVD:  Coordinated  Vulnerability  Disclosure  -­‐     ( “responsible  disclosure  -­‐   ” )   !  0-­‐day   !  MSVR   !  :     !  MSVR  
  20. 20. !    CVD   !    !  ( )     !  Microso+   ( )     !  Online  Service  ( )   !  MiZgaZon  Bypass  ( )   !  :   !    !   
  21. 21. MSVR
  22. 22. 1:
  23. 23. 1 : !  <insert  any  Windows  0day  full  disclosure  post  here  in  the  last  20  years>  
  24. 24. 2: !  :   !    !    !    !    !    !    !   
  25. 25. 2 : !  Windows   !  8   !  NumLock     !  8   !     
  26. 26. 3: !  ?   !  SSL SSL ?   !  Web Internet  Explorer ?   !   
  27. 27. 3 : 0-DAY !  Microso+ :         !  Bing   !  :  “Bing ”  
  28. 28. 4: !  ( Web   !  ☺   !  PGP S/MIME   !  PGP …   !   
  29. 29. 4 : !  :   ID   !  :   ID Web         !  :   ID     ?   !  :                 !  :                
  30. 30. 5: !    !    !      !   
  31. 31. 5 : ! !  6  
  32. 32. 6: !    !    !  ” ” ☺  
  33. 33. 6 : !  :   !    <   >   !  :   !  
  34. 34. 7: MSVR !    !    !    !    !    !    !    MSVR  
  35. 35. 7B: MSVR !   
  36. 36. : LIBAVCODEC !  MSVR12-­‐017   !  FFmpeg  Libavcodec   !  VLC WMA !   !      Reference:  h>p://technet.microso+.com/en-­‐us/security/msvr/msvr12-­‐017  
  37. 37. : LIBAVCODEC !  !Exploitable (Windbg)   libavcodec_plugin.dll WriteAV   !  VLC A/V   !  WMA    
  38. 38. : LIBAVCODEC
  39. 39. : LIBAVCODEC !  0x0001 0x0007   !  word ?   !  ?  
  40. 40. : LIBAVCODEC !  OffVis   !  “Microso+  Office  VisualizaZon  Tool(Offivis) IT doc*,  xls*,  ppt* Microso+  Office ”   !  Web   !    GUT   Reference:  h>p://www.microso+.com/en-­‐us/download/details.aspx?id=2096  
  41. 41. : LIBAVCODEC
  42. 42. : LIBAVCODEC !  !   !  ASF WMA   !  ASF “Number  of  Channels”   !  16bit   !  WAVEFORMATEX   !  “number  of  audio  channels”( )   !  0x0003 0x0008   !  0x0009 VLC WMA2     Reference:  h>p://msdn.microso+.com/en-­‐us/library/bb643323.aspx  
  43. 43. : LIBAVCODEC !  2   !  pop  ebx   !  call  dword  ptr[ebx+30h]   !    ?  ☺   !    !  ebx   !  call pop  
  44. 44. : LIBAVCODEC !  msvr@microso+.com     !  MSVR   !    !    !   
  45. 45. : LIBAVCODEC !  2012 5  
  46. 46. : LIBAVCODEC
  47. 47. : VMWARE !  MSVR13-­‐002   !  VMware  OVF  Tool   !   1:  VMware   ?   !  VMX   !  VMDK   !  OVF   !  …more   Reference:  h>p://technet.microso+.com/en-­‐us/security/msvr/msvr13-­‐002  
  48. 48. : VMWARE !  2:  OVF ?   !  (Open  Virtual  Machine  Format)   !  “   ”   Reference:  h>p://www.vmware.com/pdf/ovf_whitepaper_specificaZon.pdf  
  49. 49. : VMWARE !    XML   !  XML    
  50. 50. : VMWARE !  3:   VMware OVF ?   !  ov+ool.exe     !  VMware  player OVF  
  51. 51. : VMWARE  4:  OVFTool ?  
  52. 52. : VMWARE  5:     <?xml  version="1.0"  encoding="uy-­‐8"?>   <ovf:Envelope  xmlns:xsi="h>p://www.w3.org/2001/XMLSchema-­‐instance"  xmlns:ovf="%p. %p.%p.%p.%p.%p.%p.%p"  xmlns:vssd="h>p://schemas.dmy.org/wbem/wscim/1/cim-­‐ schema/2/CIM_VirtualSystemSe{ngData"     …   </ovf:Envelope>    
  53. 53. : VMWARE …  
  54. 54. : VMWARE
  55. 55. : BLACKBERRY PTG !  “Blackberry  Print  To  Go  Auth  Bypass”   !  ?   !  Blackberry  PTG ?   !  PC BlackBerry  Playbook ” ”   !  PC     PDF Playbook  
  56. 56. : BLACKBERRY PTG
  57. 57. : BLACKBERRY PTG !  Playbook   !  BlackBerry  ID( ID/ )   !  Playbook PTG   !  PIN Playbook   !    !  Playbook ” ” BlackBerry  
  58. 58. : BLACKBERRY PTG
  59. 59. : BLACKBERRY PTG !  1234 …     !  URL Web h>p://localhost:1234/myserverlet/   !    !   
  60. 60. : BLACKBERRY PTG !    !  1234    
  61. 61. : BLACKBERRY PTG
  62. 62. : BLACKBERRY PTG
  63. 63. : BLACKBERRY PTG
  64. 64. : BLACKBERRY PTG !  ?   !  Playbook   !  BlackBerry     BlackBerry  security   !  BlackBerry     !  “ BlackBerry  ID   ”   !  Playbook   !    !   
  65. 65. !    !    !    !   
  66. 66. !    !  Web     !    !  MSVR !  
  67. 67. MSVR !    !    !  ROI   !    !  ” ”   !  :  HackerOne ” ”  
  68. 68. !    !  (PGP   S/MIME)   !    !  !  
  69. 69. !    !    !    !    !   ( )   !    !    !   
  70. 70. ! msvr@microso+.com  
  71. 71. ©2014  Microso+  CorporaZon.  All  Rights  Reserved.   This  document  is  provided  "as-­‐is."  InformaZon  and  views  expressed  in  this   document,  including  URL  and  other  Internet  Web  site  references,  may  change   without  noZce.  You  bear  the  risk  of  using  it.  Some  examples  are  for  illustraZon   only  and  are  ficZZous.  No  real  associaZon  is  intended  or  inferred.  This  document   does  not  provide  you  with  any  legal  rights  to  any  intellectual  property  owned  by   Microso+.  You  may  copy  and  use  this  document  for  your  internal,  reference   purposes.  

×