{"author_url":"https://blog.hatena.ne.jp/ts0818/","published":"2026-10-22 08:04:07","image_url":"https://cdn-ak.f.st-hatena.com/images/fotolife/t/ts0818/20261021/20261021214023.jpg","author_name":"ts0818","blog_title":"ts0818\u306e\u30d6\u30ed\u30b0","description":"enterprisezine.jp \u60c5\u5831\u51e6\u7406\u63a8\u9032\u6a5f\u69cb\uff08IPA\uff09\u306f2026\u5e7410\u670821\u65e5\u3001The PHP Group\u304cPHP\u306b\u304a\u3051\u308b2\u3064\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ea\u30ea\u30fc\u30b9\u3092\u540c\u65e523\u6642\uff08\u65e5\u672c\u6642\u9593\uff09\u306b\u516c\u958b\u4e88\u5b9a\u3067\u3042\u308b\u3068\u767a\u8868\u3057\u305f\u3053\u3068\u3092\u53d7\u3051\u3001\u4e8b\u524d\u6e96\u5099\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002 \u301010\u670821\u65e523\u6642\u306b\u4fee\u6b63\u516c\u958b\u3011PHP\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001IPA\u304c\u4e8b\u524d\u6e96\u5099\u3092\u547c\u3073\u304b\u3051\u308b|EnterpriseZine\uff08\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u30b8\u30f3\uff09 gigazine.net \u30d7\u30ed\u30b0\u30e9\u30df\u30f3\u30b0\u8a00\u8a9e\u306ePHP\u306b\u300cPHP2Shell\u300d\u3068\u547c\u3070\u308c\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u3001\u7dca\u6025\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u307e\u3057\u305f\u3002\u300cPHP2Shell\u300d\u306e2\u3064\u306e\u8106\u5f31\u6027\u306f\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u2026","provider_name":"Hatena Blog","version":"1.0","title":"App-to-Backend Attack\uff08A2B\u653b\u6483\uff09\u3068Living Off The Land\uff08LOTL\uff09 Attacks","categories":["API\uff08Application Programming Interface\uff09","App-to-Backend Attack\uff08A2B\u653b\u6483\uff09","Living Off The Land\uff08LOTL\uff09 Attacks","\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\uff08Information Security\uff09","XDR\uff08Extended Detection and Response\uff09","NDR\uff08Network Detection and Response\uff09","EDR\uff08Endpoint Detection and Response\uff09","MDR\uff08Managed Detection and Response\uff09","WAAP\uff08Web Application and API Protection\uff09","SASE\uff08Secure Access Service Edge\uff09","SIEM\uff08Security Information and Event Management\uff09","\u904b\u7528\u76e3\u8996","\u30ed\u30b0\uff08log\uff09","\u74b0\u5883\u69cb\u7bc9","\u30bc\u30ed\u30c8\u30e9\u30b9\u30c8\uff08ZT\uff1aZero Trust\uff09","\u30b9\u30a4\u30b9\u30c1\u30fc\u30ba\u30e2\u30c7\u30eb\uff08Swiss cheese model\uff09","\u591a\u5c64\u9632\u5fa1\uff08defense in depth\uff09","NIST CSF\uff08Cyber Security Framework\uff09"],"height":"190","url":"https://ts0818.hatenablog.com/entry/2026/10/22/080407","provider_url":"https://hatena.blog","type":"rich","width":"100%","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fts0818.hatenablog.com%2Fentry%2F2026%2F10%2F22%2F080407\" title=\"App-to-Backend Attack\uff08A2B\u653b\u6483\uff09\u3068Living Off The Land\uff08LOTL\uff09 Attacks - ts0818\u306e\u30d6\u30ed\u30b0\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_url":"https://ts0818.hatenablog.com/"}