投稿時間:2023-03-16 04:26:31 RSSフィード2023-03-16 04:00 分まとめ(37件)

カテゴリー等	サイト名等	記事タイトル・トレンドワード等	リンクURL	頻出ワード・要約等/検索ボリューム	登録日
AWS	AWS Partner Network (APN) Blog	Validate and List Your Service Offerings with the AWS Foundational Technical Review	https://aws.amazon.com/blogs/apn/validate-and-list-your-service-offerings-with-the-aws-foundational-technical-review/	Validate and List Your Service Offerings with the AWS Foundational Technical ReviewWe re excited to introduce the AWS Foundational Technical Review FTR for Service Offerings in preview to help partners adopt AWS security and technical best practices increase discoverability and accelerate their partner journey The FTR for Service Offerings validates a partner service offeringーhighlighting technical and customer engagement capabilities and increasing visibility with customers and AWS teams	2023-03-15 18:08:40
AWS	AWS Partner Network (APN) Blog	Say Hello to 103 New AWS Competency, Service Delivery, Service Ready, and MSP Partners Added in February	https://aws.amazon.com/blogs/apn/say-hello-to-103-new-aws-competency-service-delivery-service-ready-and-msp-partners-added-in-february/	Say Hello to New AWS Competency Service Delivery Service Ready and MSP Partners Added in FebruaryWe are excited to highlight AWS Partners that received new or renewed designations in February for our global AWS Competency AWS Managed Service Provider MSP AWS Service Delivery and AWS Service Ready programs These designations span workload solution and industry and help AWS customers identify top AWS Partners that can deliver on core business objectives AWS Partners are focused on your success helping customers take full advantage of the business benefits AWS has to offer	2023-03-15 18:00:56
AWS	AWS Big Data Blog	How Infomedia built a serverless data pipeline with change data capture using AWS Glue and Apache Hudi	https://aws.amazon.com/blogs/big-data/how-infomedia-built-a-serverless-data-pipeline-with-change-data-capture-using-aws-glue-and-apache-hudi/	How Infomedia built a serverless data pipeline with change data capture using AWS Glue and Apache HudiThis is a guest post co written with Gowtham Dandu from Infomedia Infomedia Ltd ASX IFM is a leading global provider of DaaS and SaaS solutions that empowers the data driven automotive ecosystem Infomedia s solutions help OEMs NSCs dealerships and rd party partners manage the vehicle and customer lifecycle They are used by over industry professionals across …	2023-03-15 18:26:12
AWS	AWS Big Data Blog	Accelerate data insights with Elastic and Amazon Kinesis Data Firehose	https://aws.amazon.com/blogs/big-data/accelerate-data-insights-with-elastic-and-amazon-kinesis-data-firehose/	Accelerate data insights with Elastic and Amazon Kinesis Data FirehoseThis is a guest post co written with Udayasimha Theepireddy from Elastic Processing and analyzing log and Internet of Things IoT data can be challenging especially when dealing with large volumes of real time data Elastic and Amazon Kinesis Data Firehose are two powerful tools that can help make this process easier For example by using Kinesis …	2023-03-15 18:16:05
AWS	AWS Game Tech Blog	Amazon GameSparks launches guidance for in-game achievements, player matchmaking, and friends lists	https://aws.amazon.com/blogs/gametech/amazon-gamesparks-launches-guidance-for-in-game-achievements-player-matchmaking-and-friends-lists/	Amazon GameSparks launches guidance for in game achievements player matchmaking and friends listsAt the Game Developers Conference Amazon Web Services AWS announced the preview of Amazon GameSparks nbsp a fully managed service that makes it easier for developers to build and manage their game backend features The service is relevant for game studio production teams that want to use built in integrations and game features to reduce the time …	2023-03-15 18:55:40
AWS	AWS Machine Learning Blog	Bring legacy machine learning code into Amazon SageMaker using AWS Step Functions	https://aws.amazon.com/blogs/machine-learning/bring-legacy-machine-learning-code-into-amazon-sagemaker-using-aws-step-functions/	Bring legacy machine learning code into Amazon SageMaker using AWS Step FunctionsTens of thousands of AWS customers use AWS machine learning ML services to accelerate their ML development with fully managed infrastructure and tools For customers who have been developing ML models on premises such as their local desktop they want to migrate their legacy ML models to the AWS Cloud to fully take advantage of …	2023-03-15 18:32:28
AWS	AWS Startups Blog	Women founders Q&A – Learn how they’re impacting their communities, industries, and beyond	https://aws.amazon.com/blogs/startups/women-founders-qa-learn-how-theyre-impacting-their-communities-industries-and-beyond/	Women founders Q amp A Learn how they re impacting their communities industries and beyondToday we re talking to six women founders and leaders about how they re making impacts in their communities industries and beyond Ritu Chakrawarty founder of Graaphene Caitlin Colgrove co founder and CEO of Hex Veronica Falzone co founder and CEO of Thumbo Leanne Linsky founder and CEO of Plauzzable Anna London co founder and CEO of Chrysallis AI and Barr Moses co founder and CEO of Monte Carlo	2023-03-15 18:04:43
海外TECH	MakeUseOf	How to Use GPT-4 on ChatGPT Right Now	https://www.makeuseof.com/how-to-use-gpt4/	chatgpt	2023-03-15 18:40:16
海外TECH	MakeUseOf	Samsung Galaxy A54 vs. Galaxy A53: Should You Upgrade?	https://www.makeuseof.com/galaxy-a54-vs-galaxy-a53/	popular	2023-03-15 18:35:16
海外TECH	MakeUseOf	Deep Learning vs. Machine Learning: What's the Difference?	https://www.makeuseof.com/deep-learning-vs-machine-learning-difference/	artificial	2023-03-15 18:30:16
海外TECH	MakeUseOf	The 12 Most Common Instagram DM Questions, Answered	https://www.makeuseof.com/tag/instagram-dms-questions-answered/	instagram	2023-03-15 18:30:16
海外TECH	MakeUseOf	11 Ways to Open the Credential Manager on Windows 11	https://www.makeuseof.com/open-credential-manager-windows-11/	credentials	2023-03-15 18:15:17
海外TECH	MakeUseOf	IEMs vs. Earbuds: What Are IEMs? Are They Better Than Earbuds?	https://www.makeuseof.com/iems-vs-earbuds/	earbuds	2023-03-15 18:05:16
海外TECH	DEV Community	10 Essential Steps for Web Application Security Testing	https://dev.to/yayabobi/10-essential-steps-for-web-application-security-testing-4b	Essential Steps for Web Application Security Testing  of developers don t see security as a top priority when writing code If your team is part of this stat we can t blame you Pressing deadlines time constraints and lack of training are severe problems within dev teams And of course they make security seem like a painful and strenuous chore that can be avoided amid all the chaos  You already know that securing web applications is essential but it can be daunting Still  there are ways to make security work for your team really So in this article we will cover the different types of web application security testing and ten critical steps in securing your web applications    Overview of Web Application Security TestingWeb application security testing or WAST is a process used to ensure your web applications are secure  It is a continuous effort and requires multiple security tests which we will explain later in this article  While it focuses mainly on the application layer you may have heard the concept of Web AppSec  it aims to find vulnerabilities across the application and all its functionalities  Some features reviewed during WAST include server configuration input and output handling and authorization and authentication credentials Why should you consider Web Application Security Testing Cyber threats are a never ending storm constantly changing and evolving leaving businesses vulnerable to attack It s not just about finding vulnerabilities  It s about understanding the potential impact of those vulnerabilities and taking the appropriate measures to mitigate them  For example an exposure that allows an attacker to steal sensitive data requires other migitation actions than a vulnerability that allows an attacker to execute arbitrary code And WAST isn t just about protecting your business It s about compliance too  Regulations like PCI DSS  HIPAA and SOC  require organizations to protect sensitive data and demonstrate that they have implemented adequate security controls WAST can be used as a guide to ensure you meet all the regulatory requirements Types of Web Application TestingEvery kind of WAST addresses specific security concerns and can be executed at various stages of the software development life cycle SDLC Some of the most commonly used types of WAST include SASTSAST or Static Application Security Testing comes early in the development process before the application s deployment  It can be integrated into the development process and run automatically as part of the build process making it easy to ensure security is built in from the start SAST tools analyze the application s code and identify potential vulnerabilities without the need for the application to be running  They look for vulnerabilities such as SQL injection cross site scripting XSS and cross site request forgery CSRF   DASTDAST Dynamic Application Security Testing tools simulate real world attacks by sending requests to the application analyzing the responses and identifying potential vulnerabilities  This type of testing is often performed during the testing stage of the SDLC to identify any security flaws that may have gone unnoticed during development One of the advantages of DAST is that it can identify vulnerabilities that may not be present in the source code but are present in how the application is configured  DAST can also identify vulnerabilities that only appear when the application runs such as vulnerabilities caused by misconfigured servers or other runtime issues Penetration TestingPenetration testing is like a thrilling game of cat and mouse between ethical hackers and your web application s defenses  Expert ethical hackers known for their mastery in uncovering vulnerabilities in a target system  typically conduct penetration testing on the application to ensure its security  By simulating a real world attack penetration testing can help identify vulnerabilities that other methods may miss  It can also help organizations understand how an attacker might exploit a vulnerability and take steps to mitigate the risk   RASPRuntime Application Self Protection RASP constantly monitors the runtime environment of a web application to identify and prevent security threats  RASP can identify vulnerabilities that may not be present in the source code but are present in how the application is configured and only appear when the application runs  It s the last line of defense that can help ensure the security of your web application Essential Steps for Web Application Security TestingTo properly perform web application security testing these are ten essential steps that you should follow Understand your security testing scopeUnderstanding your security testing scope includes identifying the web applications for testing the types of testing required and the necessary resources Having a clear and defined scope for your testing is essential to ensure that all critical areas are covered and that you are not wasting resources on unnecessary testing A well defined scope will also help you set realistic metrics for the testing process and prioritize vulnerabilities that the security testing scope must address   Implement each tool on all resources As we have seen earlier many tools are available  It s essential to choose the right tools for your specific needs and to ensure that they are up to date and compatible with your environment  But the process goes beyond selecting the right tools  you also have to configure and monitor each tool and ensure that it integrates seamlessly into your pipeline  This is often complicated and exhausting as each tool requires different implementation configuration and management on top of the fact that they don t communicate with each other  Jit simplifies this experience by enabling you to easily integrate security tools throughout each stage of your CI CD pipeline and to monitor them from one platform   Implement SSDLCSSDLC  Secure Software Development Lifecycle is a methodology that emphasizes security throughout the entire software development process from requirements gathering to deployment  Secure software includes incorporating security requirements into the development process performing regular security testing and implementing security controls   Perform a risk assessmentPerforming a risk assessment includes gathering information about potential vulnerabilities and threats how often they may appear and their impacts  The tester can then use this information to prioritize vulnerabilities that need to be addressed and develop a plan to mitigate those vulnerabilities Provide security training for developersUnsurprisingly or not    of developers feel like their in house security training could be improved  Developers play a critical role in the security of web applications whether they see it or not  They must understand how to write secure code and identify and address potential vulnerabilities But to do this they must be adequately trained through educational resources and hands on exercises If you want to make it even easier for them  Jit offers a native dev experience so your developers don t have to learn or log into any other platform Jit runs on their PRs and only runs on the changes It only highlights in context vulnerabilities and it also provides remediation suggestions so they can fix it just in time   Use various security layersSecurity testing doesn t just come up in the testing stage  It s essential to use a variety of security measures throughout all phases of the SDLC  such as the ones we mentioned earlier to ensure that all potential vulnerabilities are identified and addressed The more the better   Automate security tasksAutomating vulnerability scanning penetration testing and security compliance checks can help ensure that these tasks are completed regularly and promptly  Additionally automating these tasks can reduce the workload for security and engineering teams allowing them to focus on more critical tasks  Jit offers an orchestration layer that makes it easy to automate security tasks and integrate security tools into the software development process like a command center that controls all the security functions Patch and update regularlyRegularly patching and updating web applications ensures that known vulnerabilities are addressed and that the web application is up to date with the latest security features It may seem like a primary step and it is but the most basic measures often need to be more recognized and remembered  Make sure you plan for each update to prevent incompatibility issues between APIs   Adopt a Continuous Security Monitoring toolTraditional security controls like firewalls and antivirus software are not enough anymore  To detect real time threats you need real time visibility  While it s humanly impossible to be looking at code the software can do it for you  Continuous Security Monitoring tools help identify potential security threats and vulnerabilities in real time  allowing organizations to take proactive measures to address these issues Plus they take some of the pressure off developers by automating most of the processes Document your resultsDocumentation includes reporting the identified vulnerabilities the actions taken to address those vulnerabilities and the consequences of any testing performed  The business can use this information to track the progress of security efforts and identify trends in vulnerabilities like an after action report to improve future strategies  This documentation also serves as evidence of a company s commitment to security and can be used to demonstrate compliance with industry regulations Measuring and benchmarking security and documenting these are also key steps in gaining a deeper understanding of your DevSecOps processes  Sure you may be aware of best security practices and implement these in your team  But without measuring security in quantifiable terms do you really know what needs to be changed DORA Metrics like Change Failure Rate CFR and Mean Time to Recovery MTTR which are traditionally used in DevOps can be applied to security in addition to Mean Time to Resolve Detection Rate Exposure Window and more  Metrics should be tracked on an ongoing basis to keep up with the fast paced engineering processes   Don t leave Web Application Security to chanceWhile security experts may have different ways of protecting web applications some measures are non negotiable It may be overwhelming at first but it will undoubtedly get easier once you have implemented all the basic security measures and your team has access to the right tools  Producing secure software is a win for everyone  Learn how Jit can help you master your application security toolchain and get started for free	2023-03-15 18:23:54
海外TECH	Engadget	PS Plus Extra and Premium games for March include 'Tchia' and the PS5 Uncharted collection	https://www.engadget.com/ps-plus-extra-and-premium-games-for-march-include-tchia-and-the-ps5-uncharted-collection-184523537.html?src=rss	PS Plus Extra and Premium games for March include x Tchia x and the PS Uncharted collectionAfter teasing some of the titles during the recent State of Play event Sony has unveiled the full slate of additions to the PlayStation Plus Extra and Premium catalog for March It s shaping up to be another strong month for the service Tchia will be just the second game to debut on PS Plus Extra on its release date following Stray It s a gorgeous looking sandbox adventure in which you can take over and control animals and objects likely in a far less sinister way than in Prey When you feel the need to take a break from exploring the New Caledonia inspired world you can bust out a fully playable ukulele Play the right tunes and you can attract animals or cause rain to fall Also coming to the library on March st is Uncharted Legacy of Thieves Collection It includes Uncharted A Thief s End and Uncharted The Lost Legacy both of which have been remastered beautifully for PS Life Is Strange True Colors nbsp and Life is Strange will join the original game and Life is Strange Before the Storm nbsp in the lineup too The other games that will hit the PS Plus Extra and Premium catalog this month are Tom Clancy s Rainbow Six ExtractionGhostwire Tokyo which is also coming to Xbox Game Pass in April Immortals Fenyx RisingDragon Ball Z KakarotStreet Fighter V Champion EditionUntitled Goose GameFinal Fantasy Type HDRage Neo The World Ends with YouHavenPremium subscribers will soon gain access to a few more older games at no extra cost Sony will add Ridge Racer Type Ape Escape both PS and Syphon Filter Dark Mirror PSP on March st On the downside several games are reportedly leaving the Extra catalog on the same date Monster Energy Supercross The Official Videogame Override Super Mech League Danger Zone Dungeons Ghost of a Tale The Vanishing of Ethan Carter Velocibox Victor Vran Overkill Edition and WWE K will no longer be playable through the subscription service after that time Meanwhile Sony has revealed the first game that all PS Plus members will be able to claim in April Meet Your Maker an intriguing fortress building and looting game from Dead by Daylight studio Behavior Interactive will be available on the Essential tier on its April th launch day This article originally appeared on Engadget at	2023-03-15 18:45:23
海外TECH	Engadget	Next-generation Zipline P2 Zip drone comes with an adorable ‘droid’ sidekick	https://www.engadget.com/next-generation-zipline-p2-zip-drone-comes-with-an-adorable-droid-sidekick-183238257.html?src=rss	Next generation Zipline P Zip drone comes with an adorable droid sidekickIn former Amazon CEO Jeff Bezos predicted Prime Air the company s then newly announced drone delivery unit would be flying within four to five years A decade later the service appears to be no closer to reality than it was in However some drone startups have had more success Among those is Zipline which says it s on track to complete about million deliveries by the end of the year By the company expects to operate more flights than most airlines a feat it intends to accomplish thanks to its next generation drone the Platform or P Zip Zipline s latest drone consists of two autonomous vehicles that will work in unison with one another to deliver packages that weigh up to pounds The first is a UAV that can complete a mile flight in about minutes When it arrives at its destination P Zip will hover about feet off the ground and deploy its sidekick an adorable “fully autonomous delivery droid The latter descends from its counterpart using a tether the company is called Zipline for a reason and gently drops off your package According to Zipline P Zip is nearly silent in flight producing a sound the company claims is similar to rustling leaves in the wind and precise enough thanks to its droid companion to deliver packages to areas as small as patio tables and front steps Zipline CEO Keller Rinaudo Cliffton told CNBC P Zip may even put an end to porch pirates since the drone is fast enough to enable on demand delivery ZiplineFor more distant deliveries the P Zip can fly up to miles one way from dock to dock charging at each docking station before completing the next leg of its journey and picking up new cargo The drone s charging station looks like something from science fiction It features a chute for the delivery droid to enter the building the station is attached to and what looks like a net to catch one of the drones if they fall The company told CNBC setting up a P Zip dock takes about as much time as installing an electric vehicle charger It envisions restaurants and hospitals installing the dock to enable the fast delivery of food and prescriptions Zipline already has a few customers eager to test the P Zip including restaurant chain Sweetgreen Intermountain Health in Salt Lake City Michigan Medicine and Multicare Healthcare in Washington State Before those companies gain access to the drone sometime next year the startup plans to conduct more than test flights with about aircraft This article originally appeared on Engadget at	2023-03-15 18:32:38
海外科学	NYT > Science	NASA and Axiom Reveal New Spacesuits for Artemis III Moon Mission	https://www.nytimes.com/2023/03/15/science/nasa-moon-suit-astronauts.html	spacex	2023-03-15 18:31:02
海外科学	NYT > Science	This Dinosaur’s 50-Foot Neck Was Not a Stretch	https://www.nytimes.com/2023/03/15/science/dinosaur-neck-mamenchisaurus-china.html	china	2023-03-15 18:14:05
海外科学	NYT > Science	Audubon Society Votes to Keep Its Name Despite Ties to Slavery	https://www.nytimes.com/2023/03/15/science/audobon-society-name-change.html	Audubon Society Votes to Keep Its Name Despite Ties to SlaveryThe bird conservation group said it would “reckon with the racist legacy of John James Audubon a naturalist and illustrator who was an enslaver but voted to keep the namesake	2023-03-15 18:54:50
ニュース	BBC News - Home	US drone downing: Russia will try to retrieve remnants of drone	https://www.bbc.co.uk/news/world-europe-64961958?at_medium=RSS&at_campaign=KARANGA	russian	2023-03-15 18:27:30
ニュース	BBC News - Home	Football fans clash with police in Napoli	https://www.bbc.co.uk/news/world-europe-64970977?at_medium=RSS&at_campaign=KARANGA	champions	2023-03-15 18:07:18
ニュース	BBC News - Home	William says Diana would be disappointed at level of homelessness	https://www.bbc.co.uk/news/uk-64970278?at_medium=RSS&at_campaign=KARANGA	wales	2023-03-15 18:34:03
ニュース	BBC News - Home	Cigarette prices rise but draught beer duty is frozen	https://www.bbc.co.uk/news/uk-64969334?at_medium=RSS&at_campaign=KARANGA	cigarettes	2023-03-15 18:49:47
ニュース	BBC News - Home	Disability work tests to be scrapped in welfare shake-up	https://www.bbc.co.uk/news/uk-politics-64967329?at_medium=RSS&at_campaign=KARANGA	financial	2023-03-15 18:23:36
ニュース	BBC News - Home	Cheltenham Festival 2023: Energumene wins Champion Chase again for Brighton's Tony Bloom	https://www.bbc.co.uk/sport/horse-racing/64966101?at_medium=RSS&at_campaign=KARANGA	Cheltenham Festival Energumene wins Champion Chase again for Brighton x s Tony BloomEnergumene ridden by Paul Townend for trainer Willie Mullins and owner Tony Bloom wins the Queen Mother Champion Chase at Cheltenham for the second year running	2023-03-15 18:05:22
ニュース	BBC News - Home	Napoli v Eintracht Frankfurt: Visiting fans clash with police before Champions League tie	https://www.bbc.co.uk/sport/football/64970500?at_medium=RSS&at_campaign=KARANGA	Napoli v Eintracht Frankfurt Visiting fans clash with police before Champions League tieEintracht Frankfurt fans clash with police after arriving in Naples despite being banned from their team s Champions League match with Napoli	2023-03-15 18:32:53
ビジネス	ダイヤモンド・オンライン - 新着記事	平均年収2000万円・営業利益率50％超！キーエンスの付加価値の神髄を元社員が解剖 - ニュースな本	https://diamond.jp/articles/-/318538	平均年収万円・営業利益率超キーエンスの付加価値の神髄を元社員が解剖ニュースな本仕事の生産性を高め、売上や利益を効率良く高めていくために必要な「付加価値」は、いったいどうやってつくりだすのか。	2023-03-16 03:55:00
ビジネス	ダイヤモンド・オンライン - 新着記事	アシスタント職減少　失われる幹部の象徴 - WSJ PickUp	https://diamond.jp/articles/-/319523	wsjpickup	2023-03-16 03:50:00
ビジネス	ダイヤモンド・オンライン - 新着記事	「卵を一つの籠に盛るな」投資でリスク分散の重要性が一段と増している理由 - マーケットフォーカス	https://diamond.jp/articles/-/319500	資産運用	2023-03-16 03:45:00
ビジネス	ダイヤモンド・オンライン - 新着記事	米銀破綻でバイデン氏に試練　国民の反発避ける - WSJ PickUp	https://diamond.jp/articles/-/319522	wsjpickup	2023-03-16 03:40:00
ビジネス	ダイヤモンド・オンライン - 新着記事	重要鉱物巡る外交、生産大国との関係強化が肝心 - WSJ PickUp	https://diamond.jp/articles/-/319520	wsjpickup	2023-03-16 03:35:00
ビジネス	ダイヤモンド・オンライン - 新着記事	ベストプラクティスを捨て「未来を創造する企業」が生き残る（後編） - 進化する組織	https://diamond.jp/articles/-/319127	ベストプラクティスを捨て「未来を創造する企業」が生き残る後編進化する組織年前のコロナ禍突入で、景気低迷とサプライチェーン分断。	2023-03-16 03:30:00
ビジネス	ダイヤモンド・オンライン - 新着記事	パワハラをなくすために、今日からできる、上司と部下の向き合い方 - HRオンライン	https://diamond.jp/articles/-/319017		2023-03-16 03:25:00
ビジネス	ダイヤモンド・オンライン - 新着記事	【精神科医が教える】 一度上げた生活レベルを落とせない人の共通点 - 精神科医Tomyが教える 心の執着の手放し方	https://diamond.jp/articles/-/317464	【精神科医が教える】一度上げた生活レベルを落とせない人の共通点精神科医Tomyが教える心の執着の手放し方【大好評シリーズ万部突破】誰しも悩みや不安は尽きない。	2023-03-16 03:20:00
ビジネス	ダイヤモンド・オンライン - 新着記事	頭のいい人が「冗談でも言わない」2つのこと - 超完璧な伝え方	https://diamond.jp/articles/-/319315	人間関係	2023-03-16 03:15:00
ビジネス	ダイヤモンド・オンライン - 新着記事	長い会議をスパッと終わらせる「気がきく一言」とは？ - 気づかいの壁	https://diamond.jp/articles/-/318471	長い会議をスパッと終わらせる「気がきく一言」とは気づかいの壁発売週間で重版決定。	2023-03-16 03:05:00
Azure	Azure の更新情報	Public preview: Azure Database for MySQL connector for Power Apps, Logic Apps	https://azure.microsoft.com/ja-jp/updates/public-preview-azure-database-for-mysql-connector-for-power-apps-logic-apps/	Public preview Azure Database for MySQL connector for Power Apps Logic AppsUse the Azure Database for MySQL Flexible Server connector to connect to MySQL data and build with Power Apps and Logic Apps	2023-03-15 19:00:18