¥½¥Õ¥Æ¥Ã¥¯¡¦¥È¥Ã¥×¥Ú¡¼¥¸¤Ø
¥Û¡¼¥à À½ÉÊ ¥»¥­¥å¥ê¥Æ¥£¡¦¥µ¡¼¥Ó¥¹ HPC¥µ¡¼¥Ó¥¹ ¥À¥¦¥ó¥í¡¼¥É ´ë¶È¾ðÊó
WebProbe¡¢¥»¥­¥å¥ê¥Æ¥£¥µ¡¼¥Ó¥¹¤Ë´Ø¤¹¤ë¤´¼ÁÌä¤ÎÊý¤Ï¡¢¤³¤Á¤é¤«¤é¤ªÌ䤤¹ç¤ï¤»¤¯¤À¤µ¤¤¡¡

¥½¥Õ¥Æ¥Ã¥¯¤Ï¡¢WAS
(Web Application Security)
¥Õ¥©¡¼¥é¥à¤Î¼Â¹Ô°Ñ°÷¤È¤·¤Æ
³èư¤·¤Æ¤¤¤Þ¤¹¡£


SofTek Security TOPIC
¥»¥Ã¥·¥ç¥ó´ÉÍý¤ÎÀȼåÀ­ (1/3)

¥»¥Ã¥·¥ç¥ó´ÉÍý¤ÎÀȼåÀ­¤È¤Ï¡¢¥í¥°¥¤¥ó¤Î¤¢¤ëǧ¾Ú¥Ú¡¼¥¸¤Ç¤Ïɬ¤ºÉ¬ÍפȤʤë¡Ö¥»¥Ã¥·¥ç¥ó´ÉÍý¡×¤Ë´ØÏ¢¤¹¤ëÀȼåÀ­¤òÁí¾Î¤·¤¿¤â¤Î¤Ç¤¹¡£ °Ê²¼¤Ç¤Ï¡¢¡Ö¥»¥Ã¥·¥ç¥ó´ÉÍý¤ÎÀȼåÀ­¡×¤¬¤É¤Î¤è¤¦¤Ê¤â¤Î¤Ê¤Î¤«¡¢¤Þ¤¿¤É¤Î¤è¤¦¤ÊÈï³²¤ò¼õ¤±¤ë¤Î¤«¤ò½ç¤òÄɤäÆÀâÌÀ¤·¤Æ¤¤¤­¤Þ¤¹¡£

¡¡¡¡¡¡¡ü¡¡¥»¥Ã¥·¥ç¥ó´ÉÍý¤Ë¤Ä¤¤¤Æ
¡¡¡¡¡¡¡ü¡¡¥»¥Ã¥·¥ç¥ó¤Î´ÉÍýÊýË¡
¡¡¡¡¡¡¡ü¡¡¥»¥Ã¥·¥ç¥ó´ÉÍý¤ÎÀȼåÀ­¤È¤Ï


¢£ ¥»¥Ã¥·¥ç¥ó´ÉÍý¤Ë¤Ä¤¤¤Æ

¡¡¡Ö¥»¥Ã¥·¥ç¥ó´ÉÍý¤ÎÀȼåÀ­¡×¤òÍý²ò¤¹¤ë¤¿¤á¤Ë¤Ï¡¢¤Þ¤º¡Ö¥»¥Ã¥·¥ç¥ó´ÉÍý¡×¤Ë¤Ä¤¤¤ÆÃΤäƤ¤¤Ê¤±¤ì¤Ð¤Ê¤ê¤Þ¤»¤ó¡£¤³¤³¤Ç¤Ï¡¢¥»¥Ã¥·¥ç¥ó´ÉÍý¤Ë¤Ä¤¤¤Æ´Êñ¤ËÀâÌÀ¤·¤Þ¤¹¡£

¡¡Web ¥Ú¡¼¥¸¤Ë¤ª¤±¤ë¥»¥Ã¥·¥ç¥ó´ÉÍý¤È¤Ï¡¢Web ¥µ¡¼¥Ð¤ËÂФ¹¤ë¿¿ô¤Î¥¢¥¯¥»¥¹¤«¤éÆÃÄê¤Î¥æ¡¼¥¶¤Î¥¢¥¯¥»¥¹¤ò¶èÊ̤·¤Æ½èÍý¤¹¤ë¤¿¤á¤Î¥·¥¹¥Æ¥à¤Î°ì¤Ä¤Ç¤¹¡£
¶ñÂÎŪ¤Ë¤Ï¡¢°Ê²¼¤Î¿Þ¤Î¤è¤¦¤Ë¤Ê¤ê¤Þ¤¹¡£

¡¡­¢ ¤Ë¤è¤ê Web ¥Ö¥é¥¦¥¶¤Ë¥æ¡¼¥¶¤ò¼±Ê̤¹¤ë¾ðÊó¤¬Á÷¤é¤ì¤ë¤¿¤á¡¢­£ °Ê¹ß¤Ç¤Ï Web ¥Ö¥é¥¦¥¶¤«¤é¤Î¥¢¥¯¥»¥¹¤Ë¥æ¡¼¥¶¤ò¼±Ê̤¹¤ë¾ðÊ󤬴ޤޤ졢Web ¥µ¡¼¥Ð¦¤Ç¥¢¥¯¥»¥¹¤·¤Æ¤¤¤ë¥æ¡¼¥¶¤ò¼±Ê̤¹¤ë¤³¤È¤¬½ÐÍè¤ë¤è¤¦¤Ë¤Ê¤ê¤Þ¤¹¡£ ¤³¤Î°ìÏ¢¤Î¥æ¡¼¥¶¼±Ê̤Υ·¥¹¥Æ¥à¤ò¥»¥Ã¥·¥ç¥ó´ÉÍý¤È¤¤¤¤¤Þ¤¹¡£

¡¡Web ¥Ú¡¼¥¸¤Ë¤ª¤¤¤Æ¥»¥Ã¥·¥ç¥ó´ÉÍý¤¬É¬Íפˤʤë¤Î¤Ï¡¢Web ¥Ú¡¼¥¸¤Ë¥¢¥¯¥»¥¹¤¹¤ë¤¿¤á¤ËÍøÍѤµ¤ì¤ë¥×¥í¥È¥³¥ë HTTP (Hyper Text Transfer Protocol) ¤Ë¤Ï¥¢¥¯¥»¥¹¤·¤Æ¤¯¤ë¥¯¥é¥¤¥¢¥ó¥È¡ÊWeb ¥Ö¥é¥¦¥¶Åù¡Ë¤ò¼±Ê̤¹¤ëµ¡Ç½¤¬Ìµ¤¤¤³¤È¤¬¸¶°ø¤Ç¤¹¡£
¡¡HTTP ¤Ï¡¢´ðËÜŪ¤Ë¥¯¥é¥¤¥¢¥ó¥È¤«¤é¤Î°ì¤ÄÍ×µá¤ËÂбþ¤¹¤ë±þÅú¤òÊÖ¤·¤¿¤é¤¹¤°¤ËÀÚÃǤ·¤Æ¤·¤Þ¤¤¤Þ¤¹¡Ê¼ÂºÝ¤Ë¤Ï Keep Alive µ¡Ç½¤Ë¤è¤êϢ³Ū¤ËÍ×µá¤òÁ÷¤ë¤³¤È¤â²Äǽ¤Ê¾ì¹ç¤¬¤¢¤ê¤Þ¤¹¡Ë¡£°Ê²¼¤Î¿Þ¤Ï¡¢¼ÂºÝ¤Ë Web ¥Ö¥é¥¦¥¶¤Ç Web ¥µ¡¼¥Ð¤Ë¥¢¥¯¥»¥¹¤·¤¿ºÝ¤Î¥¢¥¯¥»¥¹ÆâÍÆ¤Î°ìÉô¤Ç¤¹¡£

­¡ Web ¥Ö¥é¥¦¥¶¤«¤é Web ¥µ¡¼¥Ð¤Ø¤ÎÍ×µá
¡¡¡¡¡¡ (http://www.example.com/index.html ¤Ë¥¢¥¯¥»¥¹)

GET /index.html HTTP/1.0 
Host: www.example.com

­¢ ­¡¤ËÂФ¹¤ë Web ¥µ¡¼¥Ð ¤«¤é Web ¥Ö¥é¥¦¥¶¤Ø¤Î±þÅú

HTTP/1.1 200 OK 
Date: Mon, 04 Jul 2005 08:49:41 GMT 
Server: Apache 
Content-Length: 110 
Content-Type: text/html; charset=UTF-8 
Connection: close 

<html> 
  <head> 
    <title>Top Page</title> 
  </head> 
  <body> 
    Top Page 
  </body> 
</html> 

¡¡Ê£¿ô¤Î Web ¥Ú¡¼¥¸¤¬Á«°Ü¤¹¤ë¾ì¹ç¡ÊÎ㤨¤Ð¡¢ÆþÎÏ¥Õ¥©¡¼¥à¤Ë¾ðÊó¤òÆþÎϤ·¤ÆÅÐÏ¿¥Ü¥¿¥ó¤ò²¡¤¹¤È¡¢¼¡¤Î¥Ú¡¼¥¸¤ÇÆâÍÆ³Îǧ¤Î¥Ú¡¼¥¸¤¬É½¼¨¤µ¤ì¡¢ºÆÅÙÅÐÏ¿¥Ü¥¿¥ó¤ò²¡¤¹¤È¡ÖÅÐÏ¿¤·¤Þ¤·¤¿¡×¤È¤¤¤¦¥á¥Ã¥»¡¼¥¸¤¬É½¼¨¤µ¤ì¤ë¤è¤¦¤Ê Web ¥Ú¡¼¥¸¡Ë¡¢¥¢¥¯¥»¥¹¤·¤Æ¤­¤¿¥¯¥é¥¤¥¢¥ó¥È¤¬Á°¤Ë¥¢¥¯¥»¥¹¤·¤Æ¤­¤¿¥¯¥é¥¤¥¢¥ó¥È¤«¤É¤¦¤«¤ò³Îǧ½ÐÍè¤Ê¤±¤ì¤Ð¡¢Àµ¾ï¤Ëưºî¤µ¤»¤ë¤³¤È¤¬½ÐÍè¤Þ¤»¤ó¡£ ¤Þ¤¿¡¢¥æ¡¼¥¶¤ò¼±Ê̤·¤Ê¤±¤ì¤Ð¡¢¥æ¡¼¥¶Ç§¾Ú¤òɬÍפȤ¹¤ë Web ¥Ú¡¼¥¸¤ò¹½ÃÛ¤¹¤ë¤³¤È¤¬½ÐÍè¤Ê¤¯¤Ê¤ê¤Þ¤¹¡£

¡¡¥»¥Ã¥·¥ç¥ó´ÉÍý¤ò¹Ô¤¦¤³¤È¤Ç¡¢¾åµ­¤Î¤è¤¦¤Ê¥·¥¹¥Æ¥à¤ËÂбþ¤¹¤ë¤³¤È¤¬²Äǽ¤Ë¤Ê¤ê¤Þ¤¹¡£ ¤Ê¤ª¡¢¥»¥Ã¥·¥ç¥ó´ÉÍý¤Ë»ÈÍѤµ¤ì¤ë¼±Ê̾ðÊó¤È¤·¤Æ ID ¤ò»ÈÍѤ¹¤ë¾ì¹ç¡¢ ¥»¥Ã¥·¥ç¥ó ID ¤Î¤è¤¦¤Ë¸Æ¤Ð¤ì¤ë¤³¤È¤¬¤¢¤ê¤Þ¤¹¡£

¡¡¡¡1¡¡¡¡¡¡ 2 ¡¡¡¡¡¡3 ¡¡¡¡¡¡¼¡¤Î¥Ú¡¼¥¸¢ª




¡¡¡¡¡¡²èÌ̤ΥȥåפØ


¥µ¥¤¥È¥Þ¥Ã¥× ¤ªÌä¹ç¤»
Copyright 2006 SofTek Systems Inc. All Rights Reserved.