File Upload Security

File Upload Security
6OPSWAT™
OPSWAT

20
OPSWAT
ITMetaDefender -Trust no file. Trust no device.

OPSWAT.jpλϨϣʖεϥϱΪ΢χ
File Upload Securityक͵ࠫพԿགྷҾ1. ߶ౕ͵‫ڶ‬Ҙ‫ݗ‬எͳ๹ࢯτέόϫζʖ

3. ߶੓೵ͳηίʖϧϑϨτΡ

2. εϱϕϩͲौೊ͵ఴ֋

4. ΩηνϜ΢θՆ೵͵ϛϨεʖ‫ۂ‬ֆΝϨʖχͤΖγ΢ώʖιΫϣϨτΡτέόϫζʖ͹ɻϜϩοηΫϡϱͳ Deep CDR ʤαϱτϱς͹ඉ෤ૹԿͳɻ࠸ߑ஛ʥͶΓΕɼ‫ع‬எʀາஎ͹‫ڶ‬Ҙ͹‫ݗ‬எͳ૏ࢯREST API Ήͪͺ ICAP ଲԢ੣඾ͳ࿊‫ͪ͢ܠ‬ΨϱϕϪϝηΉͪͺέϧΤχͲ͹ਟଐʀηίʖϧϔϩ͵ࣰૹϏϓΧʖϜϱηͶӪ‫ڻ‬Ν༫͓Ζ͞ͳ͵͚ϓΟ΢ϩΝ߶ଐͶηΫϡϱ͢࠸ߑ஛ɽϑϩφ΢ϱ͹߶੓೵ΠʖΫτέοϡͳෝ՛෾ࢆ‫ؽ‬೵ͶΓΕηίʖϧϑϨτΡΝ఑‫ڛ‬ϤʖδʖɼϓΟ΢ϩૻ৶‫ݫ‬ɼϓΟ΢ϩν΢ϕͶ‫ͪ͏Ͱخ‬ɻઅఈՆ೵͵ϭʖέϓϫʖͳ෾ੵϩʖϩ

OPSWAT ͹ࢩԋ‫ع‬எ͹‫ڶ‬ҘΝΆ· 100%‫ݗ‬எϓΟ΢ϩ಼͹‫ືؽ‬৚ๅΏ॑གྷ৚ๅΝฯ‫ޤ‬

OPSWAT ϜϩοηΫϡϱτέόϫζʖͺɼ30 झྪҐ৏͹ϜϩΤΥΠଲࡨΦϱζϱΝ‫͢༽׈‬ɼ‫ع‬எʀາஎ͹‫ڶ‬Ҙ͹‫ݗ‬எིΝ୉෱Ͷ޴৏͢ɼϜϩΤΥΠ͹ΠΤφϔϪ΢έ‫ݗ‬ड़࣎ؔ͹୻क़Ν఑‫͢ڛ‬ΉͤɽΠρϕϫʖχ͠ΗͪϓΟ΢ϩ಼͹ PIIʤ‫ݺ‬ਕΝಝఈͲ͘Ζ৚ๅʥ౵͹αϱτϱςΝ OPSWAT Proactive DLPʤ৚ๅଝࣨ๹ࢯʥτέόϫζʖͲοΥρέͤΖ͞ͳͲɼಝఈαϱτϱς͗ΦϱχϤʖδʖͶ౺ୣͤΖ઴ɼΉͪͺ‫ڧ؂‬Νड़Ζ઴ͶϔϫρέΉͪͺඁಙԿ͢Ήͤɽκϫυ΢ߊܺͳ߶ౕ͵ϜϩΤΥΠ͹‫ڶ‬ҘΝ๹ࢯαϱϕϧ΢Πϱηགྷ݇΃͹ଲԢ

Deep CDRʤαϱτϱς͹ඉ෤ૹԿͳ࠸ߑ஛ʥτέόϫζʖͺɼϓΟ΢ϩΝໃ֒Կ͢࠸ߑ஛ͤΖ͞ͳͲɼϓΟ΢ϩͶઞ΋ɼ‫ݗ‬எͲ͘͵͏Ն೵੓͹͍Ζ‫ڶ‬Ҙ͖Δฯ‫͢ޤ‬ΉͤɽϓΟ΢ϩͶດΌࠒΉΗͱ͏
Ζઞࡑద͵‫ڶ‬ҘΝໃްԿ͢ɼ҈સ͵αϱτϱςͲϤʖδϑϨτΡΝң࣍͢ΉͤɽҩൕΏϕϧ΢ώεʖ৷֒Ν࠹ঘ‫ݸ‬Ͷཊ͓ΖͪΌͶɼ‫و‬੏αϱϕϧ΢Πϱηགྷ݇͗న༽͠ΗΉͤɽαϱϕϧ΢Πϱη΃͹ଲԢͶͺ͖͖࣎ؔ͗Εɼགྷ݇͗ຮͪ͠Η͵͏৖߻ͺαηφ͖͖͗ΖՆ೵੓͍͗ΕΉͤɽOPSWAT τέόϫζʖͺɼใ‫ׇ‬ద͵Նࢻ੓ͳ৆ࡋ͵Ϫϛʖφ‫ؽ‬೵Ν఑‫͢ڛ‬ɼOWASP Ϊ΢χϧ΢ϱ͹གྷ݇ଲԢΝࢩԋ͢Ήͤɽ੮ओ੓‫ݗ‬ड़͹࠹୉Կଡ͚͹ૌ৭͗ɼϓΟ΢ϩ͹੮ओ੓Νѳ༽ͤΖߊܺͶ͠Δ͠Ηͱ͏ΉͤɽΠρϕϫʖχ͠ΗͪϓΟ΢ϩͺɼϧ΢ϔϧϨ/ΠϕϨίʖεϥϱ͹੮ओ੓ΝӀًͤ͘͞Ն೵੓͍͗ΕΉͤɽOPSWAT のϓΟ΢ϩϗʖη͹੮ओ੓඲ՃτέόϫζʖͺɼϓΟ΢ϩ͗ૌ৭Ͷ೘Ζ઴ͶɼϋρφϭʖέΰʖφΤΥ΢Ͳɼ΢ϱηφʖϧʖɼώ΢ψϨϓΟ΢
ϩɼIoT ϓΟʖϞΤΥΠ͹੮ओ੓Ν‫ݗ‬ड़͢Ήͤɽ

Trust no file. Trust no device.

OPSWAT.jpλϨϣʖεϥϱΪ΢χ
File Upload Securityཤ఼ΩηνϞιΫϣϨτΡϛϨεʖͳϭʖέϓϫʖ‫ܩ‬କద͵Նࢻ੓ͳ੏‫ޜ‬؇ཀྵंͺɼϤʖδʖɼϓΟ΢ϩλʖηɼϓΟ΢ϩν΢ϕͶ‫ͪ͏Ͱخ‬ɼ͠Ή͡Ή͵ιΫϣϨτΡϛϨεʖΝॴཀྵͤΖͪΌͶɼ෵਼͹ϭʖέϓϫʖΝࡠ੔ͤΖ͞ͳ͗Ͳ͘ΉͤɽϨΠϩν΢Ϟ͹ࢻְద͵ιΫϣϨτΡητʖνηξρεϣϚʖχ͹Ҳ‫ݫ‬Կ͠ΗͪUI ͺɼࣁࢊΝ‫׮‬સͶՆࢻԿ͢ɼઞࡑద͵‫ڶ‬ҘΝଊ࠴Ͷܱࠄ͢Ήͤɽใ‫ׇ‬ద͵ฯ‫ޤ‬ఁ૱ॶ༙αηφ (TCO)॑གྷεητϞ͹ϨηέΝܲ‫͢ݰ‬ɼ๹‫ޜ‬Νյඈͪ͢Ն೵੓͹͍Ζ‫ڶ‬ҘΝ๹ࢯ͢ΉͤɽTCOΝࡡ‫ͤݰ‬Ζौೊ͵੣඾ͲͤɽୱҲϕϧρφϓΧʖϞ͹‫͵ྙک‬γ΢ώʖιΫϣϨτΡ͹੏‫ޜ‬ͶΓΕɼROI ͹޴৏ɼࡀ༽͹ଁՅɼΨʖώʖϖρχ͹‫ݰ‬ঙɼͨ͢ͱɼ෵ࡸ͵εητϞΝ؄ࢻͤΖͪΌͶφϪʖωϱή͠Ηͪ઒໵Պ͹චགྷ੓͗ঙ͵͚͵ΕΉͤɽࢴͪͬ͗఑‫ͤڛ‬Ζ΍͹ϓΟ΢ϩΠρϕϫʖχιΫϣϨτΡΠιηϟϱφγʖϑη
OPSWATϕϫϓΥρεϥψϩγʖϑηοʖϞͺɼૌ৭͹ϓΟ΢ϩΠρϕϫʖχγʖϑη͹ιΫϣϨτΡϙʖϩͳɼ੮ओ੓Ν໎Δ͖ͶͤΖͪΌͶઅ‫͠ܯ‬ΗͪҲ࿊͹τηφΝࣰߨ͢ΉͤɽࣰৄࡃΊ͹๏๑࿨Ͷ‫ͱ͏Ͱخ‬ɼૌ৭͹ಝఈωʖθͶ߻Κͦͱ඲ՃΝ௒੖
͢ɼOPSWAT の઒໵ٗढ़ं͗ɼ͠Ή͡Ή͵ਬওࣆߴͳ࣏͹ητρϕͶͯ͏ͱઈ໎͢ΉͤɽΩηνϞΠϕϨίʖεϥϱͳ౹߻γʖϑηOPSWAT ੣඾ͳ͹΢ϱνʖϓΥʖηͶචགྷ͵ΠϕϨίʖεϥϱ౹߻ΝɼOPSWAT ͹ΦϱζωΠ͗ߑ஛͢Ήͤɽ౲ऀ͹ιΫϣϨτΡ੣඾Ν‫ک‬ԿͤΖΠϕϨίʖεϥϱ͹ߑ஛Ώɼ‫ع‬ଚ͹ϭʖέϓϫʖͳ౲ऀ͹ιΫϣϨτΡ੣඾ͳ͹౹߻΍ଲেͲͤɽ

Trust no file. Trust no device.

OPSWAT.jpλϨϣʖεϥϱΪ΢χ
File Upload Security࠹న͵MetaDefender η΢ʖφ
MetaDefender ͺɼΨϱϕϪϝηɼέϧΤχ΢ϱϓϧ಼ɼΉͪͺ MetaDefender Cloud ͳ͹౹߻Ͳఴ֋Ͳ͘Ήͤɽυʖν͗ଚࡑ
ͤΖ৖ॶͶԢͣͱɼϋ΢τΡϔαϋένɼΉͪͺ͠Ή͡Ή͵ఴ֋εψϨΨΝγϛʖφͤΖ REST API ͶΓΖ౹߻Ν఑‫͢ڛ‬Ήͤɽƒ ΨϱϕϪϝη -‫͏͢ݭ‬੏༁͹͍ΖΨϱϕϪϝη͹ఴ֋Ͳͺɼଡ͚͹৖߻ɼMetaDefender Core ͗࠹న͵λϨϣʖεϥϱͲͤɽƒ SaaS - SaaS ੣඾ͳ౹߻ͤΖ MetaDefender ͗චགྷ͵৖߻ͺɼ༲ҝ͵ηίʖϧϑϨτΡɼ24 ࣎ؔ͹Ն༽੓ɼ࠹ঘ‫ݸ‬͹Ψʖώʖϖρχ͹ MetaDefender Cloud Ν‫ݗ‬౾͢ͱ͚ͫ͠͏ɽƒ έϧΤχ/ IaaS - IaaS ‫ڧ؂‬Ͷఴ֋ͤΖ৖߻Ͳ΍ɼMetaDefender Cloud Ν‫ݗ‬౾͢ͱ͚ͫ͠͏ɽ
ͪͫ͢ɼૌ৭֐ͶϓΟ΢ϩΝૻ
৶ͤΖ৖߻ͺɼMetaDefender Core ΝέϧΤχ‫ڧ؂‬Ͷఴ֋Ͳ͘ΉͤɽAWS͹ఴ֋Ͷͺɼ༲ҝ͵ࣰૹͲεʖϞϪη͵ηίʖϧϑϨτΡ͹ͪΌͶ MetaDefender AMI Ν‫ݗ‬౾͢ͱ͚ͫ͠͏ɽ

Trust no file. Trust no device.

OPSWAT.jpλϨϣʖεϥϱΪ΢χ
File Upload Security

ICAP (Internet Content Adaptation Protocol)࠹΍ཤ༽͠Ηͱ͏Ζϋ΢τΡϔαϋένλϨϣʖεϥϱ͹1 ͯͺɼMetaDefender ICAP Server ͲͤɽҐԾ͹੣඾Ν‫؜‬΋ɼΆͳΞʹ͹ Web ΠϕϨίʖεϥϱϓΟ΢ΠΤΧʖϩʤWAF ʥɼϫʖχώϧϱγʖʤ LB ʥͳ͹౹߻Ν఑‫͢ڛ‬Ήͤɽ“Upwork ͲͺɼҲൢద͵ΠϱοϜϩΤΥΠλϓφͲ 70%͖͢ϔϫρέͲ͘͵͖ͮͪκϫυ΢͹ϓΟ΢ϩߊܺΝ Deep
CDR Ͳ 100% ๹ࢯͤΖ͞ͳ͗Ͳ͘Ήͪ͢ɽΠέτΡϔ͵ΨϔζΥέφΝ‫؜‬΋સͱ͹ϓΟ΢ϩͺໃ֒Կƒ F5 Advanced WAF™

͠ΗΉͤɽ75% ͹ϓΟ΢ϩ͗ 1 භາຮͲॴཀྵ͠Ηཤ༽Ն೵ƒ F5 Big-IP® ASM™

Ͷ͵Εɼ 99% ͺ 6 භາຮͲॴཀྵ͠ΗΉͤɽ”ƒ F5 Big-IP LTM™

Head of Security at Upwork

ƒ F5 SSL Orchestrator™
ƒ A10 Networks Thunder® SSLi®

ICAP ΢ϱνʖϓΥʖη
NGFW,LTM,WAF,SWGWeb γʖϑη΢ϱνʖϋρφ

Firewall / DMZExternal Access + Level 1 Security

HTTP/ HTTPSHTTP/ HTTPSREQMOD, RESPMOD& FILEMOD

MetaDefender ICAP Server

MetaDefender CoreTechnologies

Multiscanning

Trust no file. Trust no device.

File-Based
Vulnerability

Deep CDR

Proactive DLP

OPSWAT.jpλϨϣʖεϥϱΪ΢χ
File Upload Security

MetaDefender Core Containerࢴͪͬ͹৿͢͏λϨϣʖεϥϱͺɼαϱτψԿ͠ΗͪΦαεητϞͶ MetaDefender Core ͹ఴ֋ΝՆ೵Ͷ͢Ήͤɽ
MetaDefender Core Container ͶΓΕɼ͠Ή͡Ή͵‫ڧ؂‬ΏΨϘϪʖτΡϱήεητϞͶΚͪͮͱɼΠϕϨίʖεϥϱ͹‫ۋ‬Ҳ੓Ν֮ฯ͢ɼ‫ڧ؂‬ғଚ͹ঈ‫ڊ‬ɼϨλʖηভඇ͹ࡡ‫ݰ‬ɼϜϩΤΥΠߊܺ͹๹‫ޜ‬Ͷॄ஦ͪ͢ɼ߶ౕ͵ଡ૜γ΢ώʖιΫϣϨτΡϕϧρφϓΧʖϞΝ֨௃Ͳ͘Ήͤɽƒ ࣙಊԿఴ֋ͳ૤ࡠ੓ͶΓΕ౹߻ͳฯगΝ؈ોԿαϱτψԿͺɼ‫ۂة‬Νୱ૜͹ϠόϨερέΠϕϨίʖεϥϱ͖Δ࠹৿͹ଡ૜Ϝ΢έϫγʖϑηΠʖΫτέοϡͶਬ਒ͤ
ΖητρϕͲͤɽƒ චགྷ͵γʖϑη͹Ί͹ηίʖϨϱήͲෝ՛͹‫ଁٺ‬ͶଲԢƒ ୉෱͵TCO ࡡ‫ݰ‬ʤ૱ॶ༙αηφʥƒ ‫ͤ߻ڟ‬ΖΠϕϨίʖεϥϱ͹ғଚ‫ܐؖ‬౵֐෨གྷҾͶΓͮͱӀً͘͞͠ΗΖ෵ࡸ͠ͳ෈໎֮͠͹ঈ‫ڊ‬ƒ ༲ҝͲौೊ͵ਭฑηίʖϨϱήαϱτψԿ‫ڧ؂‬Ͷ͕͜Ζ MetaDefender Core ͹͚͢Ί?

MetaDefender Core

MetaDefender Core

MetaDefender CoreϜϩΤΥΠࡡঈϓΟ΢ϩΠρϕϫʖχ෈໎͵ητʖνηॴཀྵࡃέϨʖϱ͵ϓΟ΢ϩ

‫ືؽ‬υʖνฯ‫ޤ‬
MetaDefender Core

Trust no file. Trust no device.

MetaDefender Core

MetaDefender Core

OPSWAT.jp

File Upload Security

導入事例
Ϥʖδʖ

Upwork - WebWebιΫϣϨτΡ՟ୌλϨϣʖεϥϱƒUpworkƒ3

1
4Upwork

Deep CDRMicrosoft Office

MetaDefender Deep CDRPDF͢ΉͤްՎ√ Deep CDR√ Upwork√

Upwork Ͳͺ

70%
͹100%

√༙ް͵γ΢ώʖιΫϣϨτΡΝཤ༽߶ౕԿɼ޾ຽԿͤΖ‫ڶ‬Ҙ͖Δ΢ϱϓϧΝฯ‫ͤޤ‬Ζ OPSWAT͹ࢩԋΝɼOPSWAT͹ٗढ़ं͗͟ઈ໎͢Ήͤɽ͕‫ܲـ‬Ͷ͕໲͏߻Κ͚ͦͫ͠͏ɽopswat.jp/contact͕໲͏߻ΚͦϓΟ΢ϩΠρϕϫʖχιΫϣϨτΡ͹৆ࡋͺɼ
opswat.jp/solutions/file-upload-security Ν֮͟೟͚ͫ͠͏ɽ

੊ֆ͹ 1,500 Ν௔͓Ζ୉घ‫ۂة‬Ώ੕ැ‫͖ؖؽ‬Δ৶བ͠Ηͱ͏Ήͤ
Trust no file. Trust no device.
© 2021 OPSWAT, Inc. All rights reserved. OPSWAT®,
MetaDefender®, MetaAccess™, Trust No File™ andthe OPSWAT logo are trademarks of OPSWAT, Inc.
Revised Nov 25,2021
੣඾͹࢕༹ͺ༩ࠄ͵͢ͶรߍͤΖ͞ͳ͍͗ΕΉͤɽຌΩνϫή஦͹৚ๅͺɼΩνϫήࡠ੔఼࣎͹΍͹ͲͤɽຌΩνϫή͹಼༲Ͷͯ͘Ή͢ͱͺຬસΝ‫͕ͱ͢غ‬ΕΉͤ͗౲ऀͺຌॽ͹‫ޣ‬ΕͶ‫੻ͱؖ͢‬೜Νෝ͏͖͸Ήͤ͹Ͳ͟྅ট͚ͫ͠͏ɽ

OPSWAT౲ऀ͹੣඾
98%
OPSWAT

OPSWAT.jp/contact