{"id":19288,"date":"2015-12-26T10:47:43","date_gmt":"2015-12-26T08:47:43","guid":{"rendered":"http:\/\/politeknik.org.tr\/\/?p=19288"},"modified":"2019-01-28T20:37:24","modified_gmt":"2019-01-28T17:37:24","slug":"yasanan-siber-saldirilar-nedir-ne-degildir-politeknik","status":"publish","type":"post","link":"https:\/\/eonmeet.com\/pol\/yasanan-siber-saldirilar-nedir-ne-degildir-politeknik\/","title":{"rendered":"Ya\u015fanan siber sald\u0131r\u0131lar nedir, ne de\u011fildir? – Politeknik"},"content":{"rendered":"

Bir s\u00fcredir kullan\u0131c\u0131lar\u0131n internet eri\u015fimini de aksatan siber sald\u0131r\u0131lar T\u00fcrkiye’nin g\u00fcndeminde. \u00d6nce 14 Aral\u0131k 2015 tarihinde ba\u015flayan yakla\u015f\u0131k bir hafta s\u00fcren NIC.tr’ye y\u00f6nelik sald\u0131r\u0131lar, 24 Aral\u0131k 2015 g\u00fcn\u00fc de banka ve kamu kurumlar\u0131n\u0131n web sitelerindeki servislerin aksamas\u0131na neden oldu. Sald\u0131r\u0131lar \u015fimdilik durmu\u015f g\u00f6r\u00fcn\u00fcyor. \u0130lk olarak kas\u0131m ay\u0131 sonunda bir a\u00e7\u0131klama yay\u0131nlayarak T\u00fcrkiye-I\u015e\u0130D ba\u011flant\u0131lar\u0131 nedeniyle T\u00fcrkiye’ye y\u00f6nelik bir operasyon d\u00fczenleyece\u011fini duyuran Anonymous, ge\u00e7ti\u011fimiz g\u00fcnlerde yeni bir mesaj yay\u0131nlayarak \u201cErdo\u011fan\u2019\u0131n I\u015e\u0130D\u2019e verdi\u011fi destek sona erene kadar\u201d sald\u0131r\u0131lar\u0131n s\u00fcreci\u011fini duyurdu. Bu esnada, AKP iktidar\u0131n\u0131n bakanlar\u0131 ve kurmaylar\u0131 siber sald\u0131r\u0131 g\u00fcndeminin sorumlulu\u011funu, NIC.tr sunucular\u0131n\u0131 y\u00f6neten ODT\u00dc\u2019y\u00fc hedef haline getirerek \u00fczerinden atmaya \u00e7al\u0131\u015ft\u0131. AKP iktidar\u0131, ODT\u00dc’n\u00fcn NIC.tr \u00fczerinden vermi\u015f oldu\u011fu ‘.tr’ alan ad\u0131 hizmetini BTK b\u00fcnyesine ta\u015f\u0131mak istiyor.<\/p>\n

Peki b\u00fct\u00fcn bu olanlar ne anlama geliyor? Konuyu sa\u011fl\u0131kl\u0131 bir bi\u00e7imde de\u011ferlendirebilmek i\u00e7in \u00f6ncelikle sald\u0131r\u0131y\u0131 teknik olarak inceleyelim.<\/p>\n

DDOS sald\u0131r\u0131s\u0131 nedir?<\/strong>
\n‘Da\u011f\u0131t\u0131k Servis D\u0131\u015f\u0131 B\u0131rakma Sald\u0131r\u0131s\u0131’ (Distributed Denial of Service Attack) olarak adland\u0131rabilece\u011fimiz DDOS sald\u0131r\u0131lar\u0131 sistemlere kal\u0131c\u0131 bir zarar vermek veya veri s\u0131zd\u0131rmaktan ziyade, servisleri s\u00fcreli olarak kesintiye u\u011fratarak maddi zarar vermek veya sald\u0131r\u0131lan hedefin itibar\u0131n\u0131 zedelemek amac\u0131yla d\u00fczenlenir. Sald\u0131r\u0131y\u0131 planlayanlar, bir\u00e7ok bilgisayara kullan\u0131c\u0131lar\u0131 farketmeden k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar kurarak, bilgisayarlar\u0131 ele ge\u00e7irirler. Bu ele ge\u00e7irilen bilgisayarlar ‘zombi’ olarak adland\u0131r\u0131l\u0131r. Say\u0131lar\u0131 on binleri bulan zombi bilgisayarlar\u0131, ayn\u0131 anda ayn\u0131 hedefe y\u00f6neltildiklerinde; bu zombi bilgisayardan sald\u0131r\u0131n\u0131n hedefi olan sunuculara bir anda yo\u011fun bir trafik olu\u015fur. Bu nedenle sunucu kaynaklar\u0131 (i\u015flemci g\u00fcc\u00fc, bellek, bant geni\u015fli\u011fi vb.) normal kullan\u0131c\u0131 isteklerine cevap veremez veya ge\u00e7 cevap verebilir hale gelir. Bu da servisi sald\u0131r\u0131 boyunca kesintiye u\u011frat\u0131r. Bunu dakikada 10 ki\u015finin i\u015flem yapabildi\u011fi bir bilet gi\u015fesine, ayn\u0131 anda binlerce ki\u015finin y\u0131\u011f\u0131lmas\u0131na benzetebiliriz.<\/p>\n

Sunucu taraf\u0131nda hangi kullan\u0131c\u0131n\u0131n ger\u00e7ek hangisinin ‘zombi’ klan\u0131n\u0131n mensubu oldu\u011funu anlamak m\u00fcmk\u00fcn de\u011fildir. ‘Zombi’ler d\u00fcnyan\u0131n herhangi bir yerinde, herhangi bir bilgisayar olabilir. \u00d6rne\u011fin Uzakdo\u011fu\u2019dan hackerler taraf\u0131ndan y\u00f6netilen bir sald\u0131r\u0131n\u0131n a\u011f\u0131rl\u0131kl\u0131 kayna\u011f\u0131 Avrupa\u2019daki bilgisayarlar olarak g\u00f6r\u00fcnebilir. Bu nedenle sald\u0131r\u0131n\u0131n merkezini ve sald\u0131rganlar\u0131 tespit etmek de olduk\u00e7a g\u00fc\u00e7t\u00fcr.\"siber<\/a><\/p>\n

NIC.tr Sald\u0131r\u0131s\u0131<\/strong>
\nT\u00fcrkiye’de ilk internet ba\u011flant\u0131s\u0131 ODT\u00dc Bilgi \u0130\u015flem Daire Ba\u015fkanl\u0131\u011f\u0131 b\u00fcnyesinde ger\u00e7ekle\u015ftirilmi\u015f, ilk \u2018.tr\u2019 uzant\u0131l\u0131 alan ad\u0131 kay\u0131tlar\u0131 da yine ODT\u00dc taraf\u0131ndan yap\u0131lm\u0131\u015ft\u0131r. Daha sonra ise alan ad\u0131 i\u015flemleri i\u00e7in \u2018NIC.tr\u2019 kurulmu\u015ftur. \u2018NIC.tr\u2019 d\u00fcnya genelinde genel ve \u00fclke seviyesindeki alan adlar\u0131n\u0131 y\u00f6neten ABD merkezli ba\u011f\u0131ms\u0131z kurulu\u015flar (ICANN ve IANA) ile i\u015fbirli\u011fi i\u00e7erisinde \u00e7al\u0131\u015fmaktad\u0131r.<\/p>\n

Alan adlar\u0131 (domain name); internet \u00fczerinden ula\u015ft\u0131\u011f\u0131m\u0131z servisler sunucular taraf\u0131ndan sa\u011flan\u0131r. Web sitesi servisi de yine sunucular taraf\u0131ndan sa\u011flanan bir hizmettir. Her sunucunun k\u00fcresel, tekil bir numaras\u0131 vard\u0131r; bu numaraya da \u2018IP\u2019(Internet Protocol Address) adresi denir. Sunucular\u0131n IP adreslerini haf\u0131zada tutmak ve IP adresleri \u00fczerinden ula\u015fmak zor olaca\u011f\u0131 i\u00e7in, alan ad\u0131 sistemi olu\u015fturulmu\u015ftur. Alan Ad\u0131 Sunucusu (Domain Name Server) diye isimlendirilen sunucular, alan ad\u0131 ve IP ili\u015fkisi bilgisini tutar. Bu sayede biz taray\u0131c\u0131ya \u2018abc.com\u2019 yazd\u0131\u011f\u0131m\u0131zda, arka tarafta DNS sunucular\u0131 sayesinde IP adresi tespit edilir ve ilgili web sunucusuna ba\u011flant\u0131 kurulur. D\u00fcnya \u00e7ap\u0131nda \u00fcniversiteler, \u015firketler vb. ba\u011f\u0131ms\u0131z kurulu\u015flarca y\u00f6netilen 13 adet k\u00f6k sunucu<\/a><\/span> vard\u0131r.<\/p>\n

Her \u00fclke lokal uzant\u0131l\u0131 alan adlar\u0131n\u0131 (.tr -T\u00fcrkiye,.uk – \u0130ngiltere,.ca-Canada,.ru-Rusya vb.) kendi ba\u011f\u0131ms\u0131z kurulu\u015flar\u0131 taraf\u0131ndan y\u00f6netir. Sald\u0131r\u0131 NIC.tr taraf\u0131ndan y\u00f6netilen be\u015f sunucuyu hedef alm\u0131\u015ft\u0131r. \u00d6nce yurtd\u0131\u015f\u0131ndan eri\u015fim engellenerek ge\u00e7ici olarak \u00f6nlem al\u0131nm\u0131\u015f, sonras\u0131nda sunucu say\u0131s\u0131 5\u2019ten 11\u2019e \u00e7\u0131kart\u0131larak sistemlerin \u00e7al\u0131\u015f\u0131r hale gelmesi sa\u011flanm\u0131\u015ft\u0131r.<\/p>\n

Bu s\u00fcre\u00e7te NIC.tr’den yap\u0131lan a\u00e7\u0131klamada 40 Gbps kapasiteli ileti\u015fim hatt\u0131n\u0131n zaman zaman 200 Gbps’i a\u015fan ataklar kar\u015f\u0131s\u0131nda cevap veremez duruma gelindi\u011fi ifade edilmi\u015ftir. 2015 y\u0131l\u0131 itibariyle 100 Gbps’\u0131 a\u015fan sald\u0131r\u0131lar\u0131n b\u00fcy\u00fck DDOS sald\u0131r\u0131lar\u0131 olarak nitelendirildi\u011fini ve bug\u00fcne kadar kaydedilmi\u015f en b\u00fcy\u00fck sald\u0131r\u0131n\u0131n 400 Gbps<\/a> <\/span>oldu\u011funu d\u00fc\u015f\u00fcn\u00fcrsek, hem yo\u011funluk hem s\u00fcre bak\u0131m\u0131ndan b\u00fcy\u00fck bir sald\u0131r\u0131 ile kar\u015f\u0131 kar\u015f\u0131ya kal\u0131nd\u0131\u011f\u0131n\u0131 belirtebiliriz.<\/p>\n

NIC.tr yine yapt\u0131\u011f\u0131 a\u00e7\u0131klamada sald\u0131r\u0131lara kar\u015f\u0131 BTK ve di\u011fer servis sa\u011flay\u0131c\u0131lar ile i\u015fbirli\u011fi i\u00e7erisinde hareket etti\u011fini ifade etmi\u015ftir.<\/p>\n

Bankalara y\u00f6nelik sald\u0131r\u0131<\/strong>
\n\u00dcst \u00fcste gelen bu sald\u0131r\u0131lar\u0131 teknik a\u00e7\u0131dan birbirinden ba\u011f\u0131ms\u0131z olarak de\u011ferlendirebiliriz. NIC.tr’nin \u00f6nlemleri almas\u0131ndan sonra yine ayn\u0131 sald\u0131r\u0131 yakla\u015f\u0131m\u0131 ile bankalar ve baz\u0131 devlet siteleri hedef al\u0131nm\u0131\u015ft\u0131r. Buralarda da siber sald\u0131r\u0131lar\u0131n ge\u00e7ici olarak sistemleri devre d\u0131\u015f\u0131 b\u0131rakmas\u0131 yine her bir kurumun kendi internet ve sunucu alt yap\u0131s\u0131na ba\u011fl\u0131 olarak de\u011fi\u015fmektedir.<\/p>\n

Anonymous\u2019un siber sald\u0131r\u0131 gerek\u00e7esi ortadayken AKP neden ODT\u00dc\u2019ye hedef al\u0131yor?<\/strong>
\nAKP iktidar\u0131, internet \u00fczerinde 5651 say\u0131l\u0131 yasa ve BTK’ye ba\u011fl\u0131 T\u0130B taraf\u0131ndan bu kadar yo\u011fun bir sans\u00fcr ve kontrol uygularken, T\u00fcrk Telekom arac\u0131l\u0131\u011f\u0131yla keyfi ve kullan\u0131c\u0131 g\u00fcvenli\u011fini hi\u00e7e sayan uygulamalar\u0131 s\u00fcrerken, \u201cNic.tr\u201d gibi kritik bir servisin ODT\u00dc taraf\u0131ndan verilmesini istemiyor. BTK\u2019nin alan ad\u0131 kontrol\u00fcn\u00fc almas\u0131yla; internet sitelerine uygulanan mevcut \u201ceri\u015fim engelleme\u201d mekanizmas\u0131, \u00f6rne\u011fin BTK’nin talep edilen ‘abc.org.tr’ vb. uzant\u0131l\u0131 alan ad\u0131n\u0131 ‘sak\u0131ncal\u0131’ bularak vermemesi gibi \u00a0hayata ge\u00e7ecektir. BTK ve NIC.tr aras\u0131ndaki yetki\/g\u00f6rev tart\u0131\u015fmas\u0131 yarg\u0131ya ta\u015f\u0131nm\u0131\u015f durumda.<\/p>\n

Nihai olarak, bu sald\u0131r\u0131 ODT\u00dc’y\u00fc itibars\u0131zla\u015ft\u0131rmaya y\u00f6nelik bir f\u0131rsat olarak de\u011ferlendirilmi\u015f ve bakanlar d\u00fczeyinde ger\u00e7eklerle ilgisi olmayan a\u00e7\u0131klamalarla kamuoyunda kafa kar\u0131\u015f\u0131kl\u0131\u011f\u0131 yarat\u0131lmaya \u00e7al\u0131\u015f\u0131lm\u0131\u015ft\u0131r.<\/p>\n

\u00d6te yandan tart\u0131\u015fman\u0131n oda\u011f\u0131na ODT\u00dc’n\u00fcn koyulmas\u0131yla, g\u00f6zden ka\u00e7\u0131r\u0131lmaya \u00e7al\u0131\u015f\u0131lan\u00a0di\u011fer nokta ise; Anonymous’un politik eylemi ve eylem gerek\u00e7esidir. Daha \u00f6nce de Haziran \u0130syan\u0131\u2019na destek vermek amac\u0131yla dijital eylemlerde bulunmu\u015f, o d\u00f6nemde Red Hack ile ortak sald\u0131r\u0131lar d\u00fczenlemi\u015fti. Anonymous son sald\u0131r\u0131lar\u0131; AKP iktidar\u0131n\u0131n I\u015e\u0130D ile ili\u015fkilerine kar\u015f\u0131 yapt\u0131\u011f\u0131n\u0131 a\u00e7\u0131klam\u0131\u015ft\u0131.<\/p>\n

\u0130nternet’in ba\u011f\u0131ms\u0131z kurulu\u015flarca ilgili t\u00fcm bile\u015fenlerin g\u00f6r\u00fc\u015f, \u00f6neri ve katk\u0131lar\u0131yla y\u00f6netilmesi tart\u0131\u015fmas\u0131 d\u00fcnya \u00f6l\u00e7e\u011finde s\u00fcrmektedir. Devletler ve sermaye\u00a0\u0130nternet \u00fczerinde daha fazla tahakk\u00fcm hedeflerken, toplumsal muhalefet unsurlar\u0131 ve ba\u011f\u0131ms\u0131z dijital hak savunucular\u0131 \u0130nternet’in y\u00f6netiminin daha demokratik hale getirilmesi i\u00e7in m\u00fccadele\u00a0etmektedir. Bu m\u00fccadele devam edecektir.<\/p>\n

Politeknik<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"Bir s\u00fcredir kullan\u0131c\u0131lar\u0131n internet eri\u015fimini de aksatan siber sald\u0131r\u0131lar T\u00fcrkiye’nin g\u00fcndeminde. \u00d6nce…\n","protected":false},"author":2,"featured_media":40571,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[4688],"tags":[2858],"class_list":{"0":"post-19288","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-politeknik-gundem-2","8":"tag-siber-saldiri"},"acf":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/eonmeet.com\/pol\/wp-json\/wp\/v2\/posts\/19288","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eonmeet.com\/pol\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eonmeet.com\/pol\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eonmeet.com\/pol\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/eonmeet.com\/pol\/wp-json\/wp\/v2\/comments?post=19288"}],"version-history":[{"count":0,"href":"https:\/\/eonmeet.com\/pol\/wp-json\/wp\/v2\/posts\/19288\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/eonmeet.com\/pol\/wp-json\/wp\/v2\/media\/40571"}],"wp:attachment":[{"href":"https:\/\/eonmeet.com\/pol\/wp-json\/wp\/v2\/media?parent=19288"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eonmeet.com\/pol\/wp-json\/wp\/v2\/categories?post=19288"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/eonmeet.com\/pol\/wp-json\/wp\/v2\/tags?post=19288"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}