ルックアウト・ジャパン株式会社 大浦地 匡史 氏

2. •
• C D
• D
•
• 0
• 2 1
7

3. Web Crawlers App store APIs
S
C
5
Capability
Assessment
Exploit
Assessment5
9 6L 9 9 L
7
c
Mobile Sensors
00 0 1 /0 +

4. Securing the post perimeter world

5. 5
Internet
Internet
Web
Proxy
Web
http://www http://www
Internet
http://www

6. WN
W IS
IS
IS
V
a
D
G D
V
, , N
WF
P
MP V
, ,N V

7. OS
7

8. 8
WiFi
Jailbreak/Root

10. 10
/
W
F

11. 5535 6 I L P
. I L P
P E
P E
112/
E
EMO
5535 6 P E A 6 S
A 112/ E D
Intune
+

12. 1. Intune Lookout MES
AAD Tenant ID Group Object ID Lookout
2. Intune Mobile Threat Defense(MTP) Lookout for Work(L4W)
3. AAD L4W iOS Android
4. Intune
5. L4W
AAD Deny/Allow
6. ( )
7.

13. Lookout MES
Intune/AAD

16. – > > >

18. 1. Intune 2. 3.
4.Intune 5.Intune
6.Lookout (MES)
7.

20. 20
INCIDENT RESPONSE
Lookout MES
! X
X
Lookout
MOBILE RISK API

21. + +
Machines Reporting
(OS
)
“Top machines at risk”
“Top users at risk”
“Service Health”
- Lookout MES
- Lookout
Machines Reporting
(OS
)

23. : iOS
2 Exploits
Jailbreak
1.
2. C&C
3.
Safari Exploit
Safari Jailbreak
SMS

24. https://blog.lookout.com/esurv-research
Android 2016 Google Play Store
”Exodus” iOS
iOS
Android
iOS
GPS
Android C2
April 8, 2019 Lookout

26. • O
• W
S
• M S
• M

27. : C / : E
: C 2 5C C6
,
R MHL
aN e
: C E e
5 U
31 46 IN c
a P S U
5 Nd
: C . 2U

28. ) 1
1. Hangouts
2.
3.

29. ) 2
1. HTML
URL
2.
3.

30. 30