ࢥࣥࣉࣛ࢖࢔ࣥࢫ࣭࣍࣡࢖ࢺ࣮࣌ࣃ࣮

Secure Shell ࡟ᑐࡍࡿ᪂ࡋ࠸ NIST ࡢ࢞࢖ࢻࣛ࢖ࣥ࡟
ࡘ࠸࡚ CISO ࡀ▱ࡗ࡚࠾ࡃ࡭ࡁࡇ࡜

Secure Shell ࡟ᑐࡍࡿ᪂ࡋ࠸ NIST ࡢ࢞࢖ࢻࣛ࢖ࣥ࡟ࡘ࠸࡚ CISO ࡀ▱ࡗ࡚࠾ࡃ࡭ࡁࡇ࡜┠ḟ
ࡣࡌࡵ࡟.......................................................................................................................................1
࡞ࡐNIST ࡀSecure Shell ࡟↔Ⅼࢆᙜ࡚ࡿࡢ࠿.........................................................................1
Secure Shell ࡢ ID ࡢ⟶⌮ࡀ୙༑ศ࡞ሙྜࡢ㞃ࢀࡓࣜࢫࢡ ...................................................2
⾲ 1㟢࿊ࡍࡿ୺࡞ࣜࢫࢡ............................................................................................................ 3࣋ࢫࢺࣉࣛࢡࢸ࢕ࢫ..................................................................................................................... 4
CISO ࡬ࡢᐟ㢟.................................................................................................................................4ཧ⪃ᩥ⊩...........................................................................................................................................5











♫࡟ࡘ࠸࡚ᖺ࡟タ❧ࡉࢀࡓ ࢥ࣑ࣗࢽࢣ࣮ࢩ࣭ࣙࣥࢭ࢟ࣗࣜࢸ࢕♫ࡣࠊࢹ࣮ࢱ㌿㏦ࡢࢭ࢟ࣗࣜࢸ࢕࣭ࢯ࣮ࣜࣗࢩࣙࣥ࡜ࡋ࡚ࡢᶆ‽ࣉࣟࢺࢥ࡛ࣝ࠶ࡿ ࣉࣟࢺࢥࣝࢆⓎ࣭᫂㛤Ⓨࡋࡓ௻ᴗ࡛ࡍࠋࣇ࢛࣮ࢳࣗࣥ ࡟ᩘ࠼ࡽࢀࡿ௻ᴗࡢෆࡢ ♫ࢆྵࡴୡ⏺୰ࡢ♫௨ୖࡢ㢳ᐈࡀࠊ♫ࡢ᝟ሗಖドࣉࣛࢵࢺࣇ࢛࣮࣒ࢆ᥇⏝ࡋ࡚࠸ࡲࡍࠋ♫ࡢࣉࣛࢵࢺࣇ࢛࣮࣒ࡣࠊ࠶ࡽࡺࡿᴗ✀ࡸつᶍࡢࣅࢪࢿࢫࡢእ㒊ཬࡧෆ㒊⎔ቃ࡛ࡢࢹ࣮ࢱࢆࢹ࣮ࢱᦆኻ࠿ࡽಖㆤࡋࠊቃ⏺ࢭ࢟ࣗࣜࢸ࢕ࢆᙉ໬ࡋࡲࡍࠋࡲࡓࠊྠ♫ࡢ஧せ⣲ㄆドࢩࢫࢸ࣒ࡸෆ㒊ࢭ࢟ࣗࣜࢸ࢕ไᚚ⟶⌮ࢯ࣮ࣜࣗࢩࣙࣥࢆేࡏ࡚฼⏝ࡍࡿࡇ࡜࡛ࠊ࣮ࣘࢨ࣮㘽ࡢ⟶⌮ࡸࢿࢵࢺ࣮࣡ࢡ࡟࠾ࡅࡿ⟶⌮⪅ࡢ㏻ಙࡢ┘どࡶྵࡵࠊࡼࡾ⡆༢࡟㏻ಙࢹ࣮ࢱࡢಖㆤࢆᙉ໬ࡍࡿࡇ࡜ࡀ࡛ࡁࡲࡍࠋ






!

"

##$%&'()&"%*+'$,&)-

1Secure Shell ࡟ᑐࡍࡿ᪂ࡋ࠸ NIST ࡢ࢞࢖ࢻࣛ࢖ࣥ࡟ࡘ࠸࡚ CISO ࡀ▱ࡗ࡚࠾ࡃ࡭ࡁࡇ࡜

ࡣࡌࡵ࡟⡿ᅜᅜ❧ᶆ‽ᢏ⾡◊✲ᡤ (NIST)ࡣ⡿ᅜࡢ㠉᪂ᛶ࡜⏘ᴗ࡟࠾ࡅࡿ➇தຊ࡟㈐ົࢆࡶࡘ⡿ᅜࡢᨻᗓᶵ㛵࡛ࡍࠋNIST ࡀᑐᛂࡍࡿࡘࡢ㡿ᇦࡣࢧ࢖ࣂ࣮ࢭ࢟ࣗࣜࢸ࢕ᶆ‽ࡢ☜❧ཬࡧ⡿ᅜࡢ㐃㑥ᨻᗓᶵ㛵ࡢࡓࡵࡢ࢞࢖ࢻࣛ࢖ࣥࡢ☜❧࡛ࡍࠋࡇࡢ㈐ົࡣ 2002 ᖺࡢ㐃㑥᝟ሗࢭ࢟ࣗࣜࢸ࢕࣐ࢿࢪ࣓ࣥࢺἲ (FISMA) ࡟ࡼࡾࡑࡢᶒ㝈ࢆጤ௵ࡉࢀࡓࡶࡢ࡛ࡍࠋ
ࡇࢀࡽࡢᶆ‽ࡢ᰿ᮏ⌮ᛕࡀ NIST Special Publication 800-53 ࡜࡞ࡾࡲࡍࠋNIST 800-53ࡣࠊ⟶⌮ࠊᶵᐦᛶࠊ᏶඲ᛶࢆಖㆤࡍࡿࡓࡵࡢ㐠⏝ୖࠊᢏ⾡ୖࡢಖㆤᡭẁཬࡧ᝟ሗࢩ
ࢫࢸ࣒ࠊ㟁Ꮚ᝟ሗࡢྍ⏝ᛶ࡟ࡘ࠸࡚᫂☜࡟つᐃࡋ࡚࠸ࡲࡍࠋせࡍࡿ࡟ࠊ2002 ᖺࡢ
FISMA ᮲౛ࡢせồ࡟ᚑ࠸ࠊ㐃㑥ᶵ㛵ࡀᐇ⿦ࡋ࡞ࡃ࡚ࡣ࠸ࡅ࡞࠸ IT ࢭ࢟ࣗࣜࢸ࢕⟶⌮࡟ࡘ࠸࡚グ㏙ࡍࡿࡶࡢ࡛ࡍࠋ
2014 ᖺ 8 ᭶ 20 ᪥࡟ࠊNIST ࡢ CSD Computer Security Division ࡀ Interagency Report
7966 (NISTIR 7966) ࢆⓎ⾲ࡋࡲࡋࡓࠋࡇࡢሗ࿌᭩ࡣࠊSecure Shell(SSH) ࢆ౑⏝ࡋࡓ⮬ື໬ࡉࢀࡓ࢔ࢡࢭࢫࡢ⟶⌮ࡢࡓࡵࡢࢭ࢟ࣗࣜࢸ࢕࣭࢞࢖ࢻࣛ࢖ࣥࢆᥦ౪ࡍࡿࡶࡢ
࡛ࡍࠋࡇࡢሗ࿌᭩࡛ࡣࠊࡇࢀࡽࡢ࢞࢖ࢻࣛ࢖ࣥࡀࠊNIST800-53 ࡛⩏ົ௜ࡅࡽࢀࡓࢭ
࢟ࣗࣜࢸ࢕ࢥࣥࢺ࣮ࣟࣝࡸ኱⤫㡿ࡀⓎ⾜ࡋࡓࢧ࢖ࣂ࣮ࢭ࢟ࣗࣜࢸ࢕ࣇ࣮࣒࣮ࣞ࣡ࢡ
࡟࠸࠿࡟ᑐᛂࡋ࡚࠸ࡿ࠿ࢆㄝ᫂ࡋ࡚࠸ࡲࡍࠋNIST ࡢࡇࢀࡽࡢ᪂ࡋ࠸ᒎ㛤ࡣࠊIT ࢭ࢟ࣗࣜࢸ࢕ࡢ㈐௵⪅࡛࠶ࡿ CISO ࡸࡑࡢ௚ࡢ⤒Ⴀ㝕࡟ᑐࡋ࡚኱ࡁ࡞ព⩏ࡀ࠶ࡾࡲࡍࠋᮏ࣍࣡࢖ࢺ࣮࣌ࣃ࣮࡛ࡣࠊ࡞ࡐ NIST ࡀࡇࢀࡽࡢࢫࢸࢵࣉࢆྲྀࡗࡓ࠿ࠊࡲࡓࡑࢀࡀ㐃㑥ᨻᗓᶵ㛵ෆࡔࡅ࡛࡞ࡃࠊࡑࡢ௚௻ᴗࡢ IT ࢭ࢟ࣗࣜࢸ࢕⟶⌮࡟࠾࠸࡚ఱࢆព࿡ࡍࡿ࠿ࢆㄝ᫂ࡋࡲࡍࠋ

࡞ࡐ NIST ࡀ Secure Shell ࡟↔Ⅼࢆᙜ࡚ࡿࡢ࠿
Secure Shell ࡜ࡣࠊࢹ࣮ࢱ㌿㏦ࠊ࢔ࣉࣜࢣ࣮ࢩ࣭ࣙࣥࢺࣥࢿࣜࣥࢢࠊ࣮ࣜࣔࢺ࣭ࢩࢫࢸ࣒⟶⌮ࢆᏳ඲࡟⾜࠺ࡓࡵࡢ୍㐃ࡢࣉࣟࢺࢥࣝཬࡧࢯࣇࢺ࢙࢘࢔࡛ࡍࠋSecure Shell
ࡣ UnixࠊLinuxࠊIBM ࣓࢖ࣥࣇ࣮࣒࡛ࣞࡣணࡵ࢖ࣥࢫࢺ࣮ࣝࡉࢀ࡚࠾ࡾࠊWindows ࡛ࡶ฼⏝ྍ⬟࡛ࡍࠋSecure Shell ࡣᩘⓒ୓ྎࡢࢧ࣮ࣂ࣮࡟ᒎ㛤ࡉࢀ࡚࠾ࡾࠊࢹ࣮ࢱࢭࣥࢱ࣮⎔ቃࡢ⣙ 90 ࣃ࣮ࢭࣥࢺ࡛฼⏝ࡉࢀ࡚࠸ࡲࡍࠋࢩࢫࢸ࣒⟶⌮⪅ࡸ࢔ࣉࣜࢣ࣮ࢩ
ࣙࣥ㛤Ⓨ⪅࡜࠸ࡗࡓ≉ᶒ࣮ࣘࢨ࣮ࡣ࢖ࣥࢱࣛࢡࢸ࢕ࣈ࡞࢔ࢡࢭࢫ࡟ Secure Shell ࢆ౑⏝ࡋࡲࡍࠋࡑࢀ௨ୖ࡟ Secure Shell ࡣࣂࢵࢡ࢔ࢵࣉࠊࢹ࣮ࢱ࣮࣮࣋ࢫࡢ᭦᪂ࠊࢩࢫࢸ࣒ࡢṚά┘どࢆ⾜࠺࢔ࣉࣜࢣ࣮ࢩࣙࣥࠊ⮬ື໬ࡉࢀࡓࢩࢫࢸ࣒ࡢ⟶⌮ࢆྵࡴࢩࢫࢸ࣒࣭ࣉࣟࢭࢫࢆ⮬ື໬ࡍࡿࡓࡵࡢࢩࢫࢸ࣒࡟ᖜᗈࡃ฼⏝ࡉࢀ࡚࠸ࡲࡍࠋせࡍࡿ࡟ࠊSecure Shell ࡣ⌧ᅾࡢ㧗ᗘ࡟⮬ື໬ࡉࢀࡓࢹ࣮ࢱࢭࣥࢱ࣮࡛ᴟࡵ࡚㔜せ࡞ᙺ๭ࢆ⫼㈇ࡗ࡚࠸ࡿ࡜࠸࠺ࡇ࡜࡛ࡍࠋ
ࡋ࠿ࡋࠊSecure Shell ࡣࠕᅵ⟶ࠊ㓄⟶ࡢ୍㒊ࠖ࡜࠸࠺ࡼ࠺࡞༳㇟ࢆ୚࠼ࠊ㐠⏝ୖࡢࣜࢫࢡ࡜ࡋ࡚ࡢὀពࢆᚓࡿࡇ࡜ࡣ⁛ከ࡟࠶ࡾࡲࡏࢇࠋNIST ࡢゝⴥࢆ೉ࡾࢀࡤࠊࠕSSHࢆ౑⏝ࡋࡓ⮬ື࢔ࢡࢭࢫࡢࢭ࢟ࣗࣜࢸ࢕ࡣ௒ࡲ࡛࡯࡜ࢇ࡝↓どࡉࢀ࡚ࡁࡓࠖ࡜࠸࠺ࡇ࡜࡟࡞ࡾࡲࡍࠋࡇࡢ┣Ⅼࡣࠊከࡃࡢ౯್ࡢ㧗࠸࠶ࡿ࠸ࡣ኱ࡁ࡞ᦆᐖࢆࡶࡓࡽࡍࡼ࠺࡞ࢹ࣮ࢱ࡟ᑐࡍࡿ౵ᐖࡢ୍ᅉ࡜࡞ࡗ࡚࠸ࡲࡍࠋ⤖ᯝ࡜ࡋ࡚ࠊNIST ࡢ CSD ࡣࠊ,7⎔
ቃෆ࡛ࡢ㈋ᙅ࡞ Secure Shell ࢔ࢡࢭࢫ࣭ࢥࣥࢺ࣮ࣟࣝࡣࠊ㐠⏝ୖࡢ኱ࡁ࡞ࣜࢫࢡ࡜࡞ࡿ࡜⤖ㄽࢆୗࡋࡲࡋࡓࠋࡇࢀ࡟ᑐᛂࡍࡿࡓࡵࠊNIST ࡣ㐃㑥ᨻᗓᶵ㛵ཬࡧࡑࡢ௚௻ᴗࡀ᥇⏝ࡍ࡭ࡁໟᣓⓗ࡞࢞࢖ࢻࣛ࢖ࣥ࡜ࢥࣥࢺ࣮ࣟࣝࢆⓎ⾲ࡋࡲࡋࡓࠋ

2

Secure Shell ࡟ᑐࡍࡿ᪂ࡋ࠸ NIST ࡢ࢞࢖ࢻࣛ࢖ࣥ࡟ࡘ࠸࡚ CISO ࡀ▱ࡗ࡚࠾ࡃ࡭ࡁࡇ࡜

Secure Shell ࡢ ID ࡢ⟶⌮ࡀ୙༑ศ࡞ሙྜࡢ㞃ࢀࡓࣜࢫࢡ
Secure Shell ࡣ୺࡟ࠊ࣮ࣜࣔࢺ࣭ࢧ࣮ࣂ࣮ࡢ࢔ࣉࣜࢣ࣮ࢩࣙࣥࡸࢧ࣮ࣅࢫ࣭࢔࢝࢘ࣥࢺ࡟ࣟࢢ࢖ࣥࡍࡿ㝿࡟౑⏝ࡉࢀࡲࡍࠋSecure Shell ࡣࣃࢫ࣮࣡ࢻࠊࢺ࣮ࢡࣥࠊࢹࢪࢱࣝド᫂᭩ࠊබ㛤㘽➼ࡢㄆド᪉ἲࢆࢧ࣏࣮ࢺࡋࡲࡍࠋබ㛤㘽ㄆド࡛ࡣࠊID 㘽࡜࡞ࡿᑠᐜ㔞ࡢࣇ࢓࢖ࣝ࠿ࡽᡂࡿ⛎ᐦ㘽ࡀࢡࣛ࢖࢔ࣥࢺഃ㸦ከࡃࡢሙྜࢧ࣮ࣂ࣮࣐ࢩ࣮ࣥ㸧࡟ಖᏑࡉࢀࠊᢎㄆ῭ࡳࡢබ㛤㘽ࡀࢧ࣮ࣂ࣮ഃ࡟⨨࠿ࢀࡲࡍࠋ⛎ᐦ㘽ࣇ࢓࢖ࣝࡣࣃࢫࣇ࣮ࣞࢬࢆ౑⏝ࡋ࡚ᬯྕ໬ࡍࡿࡇ࡜ࡶ࡛ࡁࡲࡍࠋణࡋࠊ⮬ື໬ࢩࢫࢸ࣒࡛౑⏝ࡍࡿ⛎ᐦ㘽࡟ࡣ㏻ᖖࣃࢫࣇ࣮ࣞࢬࡣ౑⏝ࡉࢀࡲࡏࢇࠋࡇࢀࡣࣉࣟࢭࢫࢆ⮬ືᐇ⾜ࡍࡿ࡟ࡣࣃࢫࣇ࣮ࣞࢬ⮬㌟ࢆࣇ࢓࢖ࣝ࡟ಖᏑࡍࡿ࠿ࠊࢫࢡࣜࣉࢺ࡟┤᥋グ㏙ࡍࡿᚲせᛶࡀⓎ⏕ࡍࡿࡓࡵ࡛ࡍࠋ
බ㛤⛎ᐦ㘽࡟ࡼࡿㄆドࡣᮏ㉁ⓗ࡟ࡣࠊࣃࢫ࣮࣡ࢻ➼ࡢ௚ࡢㄆド᪉ᘧࡼࡾᏳ඲࡞᪉ᘧ࡛ࡍࠋࡇࢀࡀබ㛤㘽ࡢ౑⏝ࢆ NIST ࡀ່ࡵࡿ⌮⏤࡛࠶ࡾࠊࣉࣟࢭࢫ࣭࣮࢜ࢺ࣓࣮ࢩࣙ
ࣥ⎔ቃ࡛ࡣ≉࡟ࡇࡢ౑⏝ࢆᨭᣢࡋ࡚࠸ࡲࡍࠋࡲࡓᐇ㝿࡟ࠊ㘽࣮࣋ࢫࡢㄆドࡣᨻᗓཬࡧ௻ᴗ཮᪉ඹ࡟㠀ᖖ࡟ᗈ⠊ᅖ࡟౑⏝ࡉࢀ࡚࠸ࡲࡍࠋࡓࡔࡋࠊṧᛕ࡞ࡇ࡜࡟࣐࢖ࢼࢫ
㠃ࡶ࠶ࡾࡲࡍࠋ⟶⌮ࡀ୙㐺ษ࡞ሙྜࠊᨷᧁ⪅ࡀ Secure Shell ࡢ㘽ࢆ౑⏝ࡋ࡚ IT ࢖ࣥࣇࣛࢫࢺࣛࢡࢳࣕࢆ㈏㏻ࡍࡿࡇ࡜ࡀ࡛ࡁࡿࡢ࡛ࡍࠋࡓࡗࡓ 1 ಶࡢ⛎ᐦ㘽ࢆ౵ᐖࡍࡿࡔࡅ࡛ࠊࡇࢀࢆ฼⏝ࡋ࡚≉ᶒ࢔ࢡࢭࢫ⟶⌮ࢯ࣮ࣜࣗࢩࣙࣥࢆࣂ࢖ࣃࢫࡋࠊࡲࡓ኱つᶍᨷᧁࢆ⾜࠸ࠊࢹ࣮ࢱ౵ᐖࢆᐇ⾜ࡍࡿࡓࡵࡢⓎぢࡋ࡙ࡽ࠸ࣂࢵࢡࢻ࢔ࢆసࡿࡇ࡜ࡀ࡛ࡁࡲࡍࠋNIST ࡣ௻ᴗ࣭⤌⧊ࡀࡋࡤࡋࡤ㟢࿊ࡍࡿᙅⅬཬࡧࢭ࢟ࣗࣜࢸ࢕ᰝᐃ࡛ホ౯ࡍ࡭ࡁⅬ࡜ࡋ࡚௨ୗࡢ㡯┠ࢆ≉ᐃࡋ࡚࠸ࡲࡍࠋ͌ ⬤ᙅᛶࡢ࠶ࡿ SSH ࡢᐇ⿦ Ᏻ඲࡛ࡣ࡞࠸ࣂ࣮ࢪࣙࣥࠊタᐃ࡟࠾ࡅࡿᙅⅬ ࠋ͌ ┐㞴ࠊ₃ὤࠊኻຠࡉࡏ࡚࠸࡞࠸ SSH ࣮ࣘࢨ࣮㘽 㘽ࡢࣛ࢖ࣇࢧ࢖ࢡࣝ⟶⌮ࡢྍどᛶ࡜ࣉࣟࢭࢫ⟶⌮ࡢ୙㊊ ࠋ͌ ࣂࢵࢡࢻ࢔ ᮍᢎㄆࡢ࣮ࣘࢨ࣮㘽 ࠋ͌ ࣮ࣘࢨ࣮㘽ࡢពᅗࡋ࡚࠸࡞࠸᪉ἲ࡛ࡢ฼⏝ ㈐ົࡢศ㞳ࡢ୙༑ศࠊᮍᢎㄆࡢ≉ᶒ࢚ࢫ࣮࢝ࣞࢩࣙࣥ ࠋ͌ ṇࡋࡃ࡞࠸ሙᡤ࡬ࡢ࣮ࣘࢨ࣮㘽ࡢಖ⟶ 㘽ࣇ࢓࢖ࣝ࡬ࡢ࢔ࢡࢭࢫ࣭ࢥࣥࢺ࣮ࣟࣝࡢḞዴࠊ୙㊊ ࠋࡇࢀࡽࡢ⬤ᙅᛶࡣ⾲ 1 ࡟⾲♧ࡉࢀࡿࣜࢫࢡࢆ⏕ࡳࡲࡍࠋ3Secure Shell ࡟ᑐࡍࡿ᪂ࡋ࠸ NIST ࡢ࢞࢖ࢻࣛ࢖ࣥ࡟ࡘ࠸࡚ CISO ࡀ▱ࡗ࡚࠾ࡃ࡭ࡁࡇ࡜

ఱᖺࡶ๓࡟ゎ⣙ࡋࡓᴗ⪅ࡸ㏥⫋ࡋࡓᚑᴗဨࡢ࢔ࢡࢭࢫᶒࡀ㔜せ࡞ࢩࢫࢸ࣒࡟ࡲࡔṧࡗ࡚࠸ࡿሙྜࠋࡇࢀࡣ௻ᴗࡀࢹ࣮ࢱࢆᦆኻࡍࡿࠊࡲࡓࡣ௚ࡢᝏព࠶ࡿ⾜Ⅽࢆཷࡅࡿཎᅉ࡜࡞ࡾࡲࡍࠋ
ࢩࢫࢸ࣒ࠊ࢔ࣉࣜࢣ࣮ࢩࣙࣥࠊ࣮ࣘࢨ࣮࢔࢝࢘ࣥࢺ࡟୙ᚲせ࡞㘽ࡀᢎㄆࡉࢀࡓ≧ែࡢࡲࡲṧࡗ࡚࠸ࡿሙྜࠋྛබ㛤㘽࣮࣋ࢫࡢㄆドࡣࠊᑐᛂࡍࡿ⛎ᐦ㘽ࡀ౵ᐖࡉࢀࡓሙྜ࡟ࠊࢩࢫࢸ࣒ࡢ஌ࡗྲྀࡾࡸ᝟ሗ₃ὤࡢၥ㢟ࢆㄏⓎࡋࡲࡍࠋᢎㄆࡉࢀ࡚࠸࡞࠸⛎ᐦ㘽ࡢࢥࣆ࣮ࡀ฼⏝ࡶࡋࡃࡣᚠ⎔ࠊὶ㏻ࡋ࡚࠸ࡿሙ
ྜࠋ୍⯡࡟ࠊ⛎ᐦ㘽ࡢᡤᣢ⪅ࡣࡓ࡜࠼ࡇࢀࡀ఍♫ࡢ࣏ࣜࢩ࣮㐪཯࡛࠶ࡗࡓ
࡜ࡋ࡚ࡶࢥࣆ࣮ࡍࡿࡇ࡜ࡀ࡛ࡁ࡚ࡋࡲ࠸ࡲࡍࠋ୰ኸ࡛ࡢ┘どཬࡧࢥࣥࢺ࣮ࣟࣝࢆ⾜࠺ࡇ࡜࡛ࠊᢎㄆࡉࢀ࡚࠸࡞࠸㘽ࡢ౑⏝ࡢྍ⬟ᛶࢆῶᑡࠊࡶࡋࡃࡣ↓ࡃࡍࡇ࡜ࡀ࡛ࡁࡲࡍࠋࣃࢫࣇ࣮ࣞࢬ࡛ಖㆤࡉࢀ࡚࠸࡞࠸⛎ᐦ㘽ࡀ࠶ࡿሙྜࠋ⛎ᐦ㘽ࡢಖㆤ࡟ᑐࡍࡿ࣏ࣜࢩ࣮ࡢ᪋⾜ࡀ୙༑ศ࡞ሙྜࠊࢡࣞࢹࣥࢩࣕࣝࡀᝏ⏝ࡉࢀࡿࣜࢫࢡࡀቑ኱ࡋࡲࡍࠋ㘽ࡀつ๎ṇࡋࡃ᭦᪂ࡉ࡚࠸࡞࠸ࠊࡲࡓࡣ඲ࡃ᭦᪂ࡉࢀ࡚࠸࡞࠸ሙྜࠋ࡯࡜ࢇ࡝ࡢ⤌⧊ࡀ࢚ࣥࢻ࣭࣮ࣘࢨ࣮࡟つ๎ṇࡋࡃࣃࢫ࣮࣡ࢻࢆኚ᭦ࡍࡿࡼ࠺࡟
せồࡋ࡚࠸ࡿࡢ࡜ྠᵝࠊ㘽ࡢ᭦᪂ࡣࢡࣞࢹࣥࢩࣕࣝಖㆤࡢⅭࡢᇶᮏⓗ࡞せồ࡛ࡍࠋពᅗࡋ࡚࠸࡞࠸࢔ࢡࢭࢫࡢ࢚ࢫ࣮࢝ࣞࢩࣙࣥࡀ࡞ࡉࢀ࡚࠸ࡿሙྜࠋSecureShell ࡢᵓᡂ⟶⌮ࡣ࣮ࣘࢨ࣮ࡀ≉ᶒࢆ࢚ࢫ࣮࢝ࣞࢺࡉࡏࠊ௚ࡢ࢔࢝࢘ࣥࢺ࡟࢔ࢡࢭࢫᶒࢆ௜୚ࡍࡿࡇ࡜ࢆ㜵ࡄࡓࡵ࡟ᚲせ࡛ࡍࠋ㈐ົࡢศ㞳ࡀ⾜ࢃࢀ࡚࠸࡞࠸ሙྜࠋ㔠⼥ᴗ⏺࡛ࡼࡃぢࡽࢀࡿၥ㢟࡛ࡍࠋࡇࢀࡣ㛤Ⓨ࠿ࡽ㐠⏝ࢧ࣮ࣂ࣮࡬ࢩࢫࢸ࣒ࢆᣑᙇࡍࡿ㝿࡟ࠊ㘽ࡢᶒ㝈ࡢࢥࣥࢺ࣮ࣟࣝࡀ୙༑ศ࡞ࡇ࡜࡟ࡼࡗ࡚ࡋࡤࡋࡤᘬࡁ㉳ࡇࡉࢀࡲࡍࠋࢸࢫࢺཬࡧᮏ␒⎔ቃ㛫࡟ពᅗࡋ࡞࠸࢔ࢡࢭࢫࡀチྍࡉࢀ࡚࠸ࡿሙྜࠋಙ㢗㛵ಀࡢྍどᛶࡀ୙㊊ࡋ࡚࠸ࡿሙྜࠋ┘ᰝせồࢆ‶ࡓࡍࡇ࡜ࡀ࡛ࡁ࡞࠸ሙྜࠋࡇࢀࡣࡍ࡭࡚ࡢಙ㢗㛵ಀࡸ᧯సࣟࢢࡢ࣏࣮ࣞࢺ࡜࠸ࡗࡓᇶᮏⓗ࡞஦㡯࡟ࡲ࡛ཬࡧࡲࡍࠋᡭసᴗ࡛ࡢ㘽ࡢタᐃཬࡧ㝖ཤࣉࣟࢭࢫࡢ㝿ࡢேⅭⓗ㐣ኻࡀ࠶ࡿሙྜࠋࡇࢀࡣᢎㄆࡉࢀ࡚࠸࡞࠸࢔ࢡࢭࢫ࡟ᶒ㝈ࢆ୚࠼ࡓࡾࠊᚲせ࡞ᶒ㝈ࡢ๐㝖ࢆ⾜ࢃ࡞࠿ࡗࡓࡾࡍࡿࡇ࡜࡟ࡼࡿၥ㢟ࡢཎᅉ࡜࡞ࡾࡲࡍࠋSecure Shell ࢯࣇࢺ࢙࢘࢔ࡢタᐃ࣑ࢫࡀ࠶ࡿሙྜࠋࢿࢵࢺ࣮࣡ࢡࡢෆഃࡶࡋࡃࡣእഃ࠿ࡽࡢ VPN ࢔ࢡࢭࢫ࡟㛵ࡍࡿ⚗Ṇ஦㡯ࡢ࣏ࣜࢩ࣮㐪཯ࢆ࣮ࣘࢨ࣮࡟チྍࡍࡿࡇ࡜࡜࡞ࡾࡲࡍࠋỌ⥆ⓗ࡞ಙ㢗㛵ಀࢆసᡂࡍࡿࡇ࡜ࡀ࡛ࡁࡿ⟶⌮⪅ࡢேᩘࡀከ࠸ሙྜࠋ࢔ࢡࢭࢫ࣭ࢥࣥࢺ࣮ࣟࣝࡢ◚⥢ࡢཎᅉ࡜࡞ࡾࡲࡍࠋ
⾲ 1 : 㟢࿊ࡍࡿ୺࡞ࣜࢫࢡ

4Secure Shell ࡟ᑐࡍࡿ᪂ࡋ࠸ NIST ࡢ࢞࢖ࢻࣛ࢖ࣥ࡟ࡘ࠸࡚ CISO ࡀ▱ࡗ࡚࠾ࡃ࡭ࡁࡇ࡜

࣋ࢫࢺࣉࣛࢡࢸ࢕ࢫ
ࡇࢀࡽࡢࣜࢫࢡࡢ῝้ࡉࢆㄆ㆑ࡋࠊNIST IR 7966 ࡣ Secure Shell ࡢ ID බ㛤㘽ࠊ⛎ᐦ㘽 ࢆ⟶⌮ࡍࡿࡓࡵࡢ୍㐃ࡢ᥎⸀࣋ࢫࢺ࣭ࣉࣛࢡࢸ࢕ࢫࢆᥦ౪ࡋࡲࡍࠋࡇࢀࡽࡢ࣋ࢫ
ࢺ࣭ࣉࣛࢡࢸ࢕ࢫࡣࠊNIST800-53 ࡛⩏ົ௜ࡅࡽࢀࡓࢭ࢟ࣗࣜࢸ࢕ࢥࣥࢺ࣮ࣟࣝࡸ኱
⤫㡿ࡀⓎ⾜ࡋࡓࢧ࢖ࣂ࣮ࢭ࢟ࣗࣜࢸ࢕ࣇ࣮࣒࣮ࣞ࣡ࢡ࡟ᑐᛂࡋ࡚࠸ࡲࡍࠋ࣋ࢫࢺ࣭
ࣉࣛࢡࢸ࢕ࢫࡢせ⣙ࡣࠊ௨ୗࡢ㏻ࡾ࡛ࡍࠋ 㘽ࡢᵓᡂࢆ⎔ቃ඲య࡟ࢃࡓࡾᶆ‽໬ࡍࡿࠋ ᢎㄆ῭ࡳࡢ㘽ࣇ࢓࢖ࣝ࡟ࡣ࢚ࣥࢻ࣭࣮ࣘࢨ࣮࡟᭩ࡁ㎸ࡳ࢔ࢡࢭࢫᶒࢆチྍࡋ࡞࠸ࠋ ୰ኸ࡛ࡢ㘽ࡢࣉࣟࣅࢪࣙࢽࣥࢢ ಶே࡟ࠕࢭࣝࣇࢧ࣮ࣅࢫ࡛ࡢࣉࣟࣅࢪࣙࢽࣥࢢࠖࢆチࡉ࡞࠸ ࠋ㘽ࡢࣉࣟࣅࢪࣙࢽࣥࢢࡣ୰ኸ࡛⾜࠸ࠊࡇࢀ࡟ࡼࡾ࣮ࣝࢺ࣭ࣞ࣋ࣝࡢ⟶⌮⪅ࢆᑡ࡞࠸ேᩘ࡟ไ㝈ࡍࡿࠋ ᬯྕࡢタᐃ㸫ᙉຊ࡞ᬯྕ࡜ᣦᐃࡋࡓ㘽㛗ࡢࡳチྍࡍࡿࠋ ⛎ᐦ㘽࡟ࡣࣃࢫ࣮࣡ࢻಖㆤࢆせồࡍࡿࠋ6. Secure Shell ࡢ᧯స࡟㛵ࡍࡿࣟࢢࢆせồࡍࡿ ᢎㄆ῭ࡳࡢ㘽ࣇ࢓࢖ࣝཬࡧ࣮࣒࣭࣍ࢹ࢕ࣞࢡࢺࣜࡀࢭ࢟ࣗ࢔࡛࡞࠸ሙྜࠊSecureShell ࢧ࣮ࣂ࣮ࡀືసࡋ࡞࠸ࡼ࠺࡟ࡍࡿࠋ ࣉࣟࢭࢫࡢࢫ࣏࢘ࢽࣥࢢ࡟ࡼࡿ≉ᶒ࢚ࢫ࣮࢝ࣞࢩࣙࣥࢆ㜵ࡄࠋ ࢩࢫࢸ࣒࢔࢝࢘ࣥࢺ࡜ேࡢ࢔࢝࢘ࣥࢺࢆศ㞳ࡍࡿࠋ≉ᐃࡢࢥ࣐ࣥࢻཬࡧࢯ࣮ࢫ࣭࢔ࢻࣞࢫ࡟ᑐࡋไ㝈ࢆ⾜࠺ࡼ࠺࡟ Secure Shell ࡢ࢔ࢡࢭࢫࢆไ㝈ࡍࡿࡓࡵࡢᡭẁࢆ౑⏝ࡍࡿࠋ㘽ࢆ᭦᪂ࡍࡿࠋ୙ᚲせ࡞࣮ࣘࢨ࣮㘽ࢆ๐㝖ࡍࡿࠋ㘽ࡢ౑⏝ࢆᩥ᭩໬ࡍࡿࠋᐃᮇⓗ࡞┘ᰝࡢᐇ᪋ࠋCISO ࡬ࡢᐟ㢟NIST ࡢ CDS ࠿ࡽࡢ᥎ዡࡣࠊ⡿ᅜࡢ㐃㑥ᨻᗓෆࡢ CISO ࡬ࡢ┤᥋ࡢ࿧ࡧ࠿ࡅ࡛ࡍࠋࡇ
ࢀࡣࡲࡓ௻ᴗࡢ CISO ࡢࡓࡵࡢ⾜ື࡬ࡢ┤᥋ࡢ࿧ࡧ࠿ࡅ࡛ࡶ࠶ࡾࡲࡍࠋ㐃㑥ᨻᗓ࡜ྲྀᘬࡋ࡚࠸࡞࠸௻ᴗ࡛࠶ࡗ࡚ࡶࠊNIST 800-53 ࡜ࡑࡢ㛵㐃ࡍࡿᨻᗓᶵ㛵ࡢ࣏࣮ࣞࢺࡣᗈࡃཷࡅධࢀࡽࢀ࡚࠸ࡿᴗ⏺ᶆ‽ࡢ࣋ࢫࢺ࣭ࣉࣛࢡࢸ࢕ࢫ࡛ࡍࠋᮁሗ࡜ࡋ࡚ࡣࠊࡇࢀࡽࡢၥ㢟࡟ྲྀࡾ⤌ࡴࡓࡵࡢࡢ➨୍Ṍࡣ㞴ࡋࡃ࡞ࡃࠊࡲࡓ㈝⏝ࡶ࠿࠿ࡽ࡞࠸࡜࠸࠺ࡇ࡜࡛ࡍࠋ➨୍Ṍࡣࢩࣥࣉ࡛ࣝࠊ࡝ࡢ⠊ᅖ࡛⤌⧊ࡀࣜࢫࢡ࡟ࡉࡽ
ࡉࢀ࡚࠸ࡿ࠿ࢆ NIST ࡀ♧ࡋࡓࣜࢫࢡ࡜↷ࡽࡋྜࢃࡏࡇࢀࢆぢࡘࡅฟࡍࡇ࡜࡛ࡍࠋ㐺ษ࡞ࢶ࣮ࣝࢆࡶࡘ⇍⦎ࡋࡓ♫ဨ࡞ࡽࡤࠊᩘ᪥㛫࡛ࡇࢀࢆ࡞ࡋ㐙ࡆࡿࡇ࡜ࡀ࡛ࡁࡲࡍࠋࡶࡋࡇࢀࡽࡢࣜࢯ࣮ࢫࡀෆ㒊࡟࡞࠸ሙྜ࡛ࡶࠊ⣲᪩ࡃࡑࡋ࡚ຠ⋡ⓗ࡟ෆ㒊ࢫࢱࢵࣇ࡜༠ຊࡋ࡚ࡇࡢࢪࣙࣈࢆ᏶஢ࡍࡿࡇ࡜ࡀ࡛ࡁࡿㄆᐃࡉࢀࡓ➨୕⪅ᶵ㛵ࡶᏑᅾࡋࡲࡍࠋ࠸ࡎࢀ࡟ࡋ࡚ࡶࠊCISO ࡣࢫࢱࢵࣇ࡟௨ୗࢆせồࡍࡿ࡭ࡁ࡛ࡋࡻ࠺ࠋ ᥎⸀ࡉࢀࡓ NIST 800-53 ࡢࢥࣥࢺ࣮ࣟࣝ࡟ᑐࡋ࡚ࡢ⌧≧ࡢホ౯ཬࡧ࣋ࣥࢳ࣐࣮ࢡ ࣜࢫࢡࡢホ౯ ୍㐃ࡢ᥎⸀஦㡯5

Secure Shell ࡟ᑐࡍࡿ᪂ࡋ࠸ NIST ࡢ࢞࢖ࢻࣛ࢖ࣥ࡟ࡘ࠸࡚ CISO ࡀ▱ࡗ࡚࠾ࡃ࡭ࡁࡇ࡜ୖグෆᐜࢆᇶᮏせ௳࡜ࡋ࡚ࠊᢸᙜ⪅ࡣ㔜せ࡞ࢥࣥࣉࣛ࢖࢔ࣥࢫ࡜ࣜࢫࢡࢆᢅ࠺ࡓࡵࡢ⾜ືせ⥘ࢆᵓ⠏ࡍࡿࡇ࡜ࡀ࡛ࡁࡲࡍࠋSSH ࢥ࣑ࣗࢽࢣ࣮ࢩࣙࣥࢬ࣭ࢭ࢟ࣗࣜࢸ࢕♫ࡣ NIST ࡀᥦ㉳ࡋࡓၥ㢟ࢆ௻ᴗ࣭⤌⧊ࡀᢅ࠺ຓࡅ࡜࡞ࡿࢺ࣮ࣞࢽࣥࢢࠊࢧ࣮ࣅࢫࠊ〇ရࢆᥦ౪ࡋࡲࡍࠋ㈗♫ࢫࢱࢵࣇ࡜ࡢඹྠసᴗࢆ⾜࠺ࡇ࡜࡛ࠊ⌧ᅾࡢ⎔ቃࡢໟᣓⓗ࡞ホ౯ࢆᥦ౪ࡋࠊ᫝ṇࡢⅭࡢຠᯝⓗ࡞࢔ࣉ࣮ࣟࢳࢆ᥎⸀ࡋࡲࡍࠋཧ⪃ᩥ⊩>> NISTIR 7966>> NIST 800-53

www.ssh.com /lang/jpn