{"id":16217,"date":"2026-08-07T10:02:04","date_gmt":"2026-08-07T07:02:04","guid":{"rendered":"https:\/\/www.ihs.com.tr\/blog\/?p=16217"},"modified":"2026-08-07T10:02:04","modified_gmt":"2026-08-07T07:02:04","slug":"arp-spoofing-nedir","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/","title":{"rendered":"ARP Spoofing Nedir? Yerel A\u011f \u0130\u00e7inde (LAN) \u0130leti\u015fim Araya Girerek Nas\u0131l Dinlenir?"},"content":{"rendered":"<p>ARP Spoofing, yerel a\u011flardaki (LAN) en yayg\u0131n ve tehlikeli sald\u0131r\u0131 t\u00fcrlerinden biridir. Temelde a\u011f ileti\u015fiminin yap\u0131 ta\u015flar\u0131ndan biri olan Adres \u00c7\u00f6z\u00fcmleme Protokol\u00fc&#8217;n\u00fcn (ARP) bir zafiyetini istismar ederek, sald\u0131rgan\u0131n kendini a\u011fdaki iki cihaz aras\u0131na &#8220;ortadaki adam&#8221; olarak konumland\u0131rmas\u0131n\u0131 sa\u011flar. Bu sayede sald\u0131rgan, kurbanlar\u0131n t\u00fcm internet trafi\u011fini kendi \u00fczerinden ge\u00e7irerek hassas verileri ele ge\u00e7irebilir, trafi\u011fi manip\u00fcle edebilir veya hizmet kesintilerine yol a\u00e7abilir. Bu makalede, ARP ve LAN ileti\u015fiminin temellerinden ba\u015flayarak ARP Spoofing sald\u0131r\u0131s\u0131n\u0131n nas\u0131l ger\u00e7ekle\u015ftirildi\u011fini, potansiyel tehlikelerini, tespit y\u00f6ntemlerini ve korunma yollar\u0131n\u0131 detayl\u0131 bir \u015fekilde ele alaca\u011f\u0131z.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7erik Tablosu<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a86e1db04af2\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\" id=\"ez-toc-cssicon-toggle-item-6a86e1db04af2\" aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#ARP-ve-LAN-Iletisiminin-Temelleri\" >ARP ve LAN \u0130leti\u015fiminin Temelleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Yerel-Alan-Agi-LAN-Nedir\" >Yerel Alan A\u011f\u0131 (LAN) Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#IP-Adresi-ve-MAC-Adresi-Arasindaki-Iliski\" >IP Adresi ve MAC Adresi Aras\u0131ndaki \u0130li\u015fki<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Adres-Cozumleme-Protokolu-ARP-Nedir-ve-Nasil-Calisir\" >Adres \u00c7\u00f6z\u00fcmleme Protokol\u00fc (ARP) Nedir ve Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#ARP-Tablosu-ARP-Cache-ve-Iletisimdeki-Rolu\" >ARP Tablosu (ARP Cache) ve \u0130leti\u015fimdeki Rol\u00fc<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#ARP-Spoofing-ARP-Zehirlenmesi-Kavrami\" >ARP Spoofing (ARP Zehirlenmesi) Kavram\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#ARP-Spoofing-Nedir\" >ARP Spoofing Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Saldirinin-Temel-Mantigi-Guveni-Kotuye-Kullanma\" >Sald\u0131r\u0131n\u0131n Temel Mant\u0131\u011f\u0131: G\u00fcveni K\u00f6t\u00fcye Kullanma<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#ARP-Onbellek-Zehirlenmesi-ARP-Cache-Poisoning-Nasil-Gerceklesir\" >ARP \u00d6nbellek Zehirlenmesi (ARP Cache Poisoning) Nas\u0131l Ger\u00e7ekle\u015fir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Saldiridaki-Taraflar-Saldirgan-Kurban-ve-Ag-Gecidi-Gateway\" >Sald\u0131r\u0131daki Taraflar: Sald\u0131rgan, Kurban ve A\u011f Ge\u00e7idi (Gateway)<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Adim-Adim-ARP-Spoofing-Saldirisi-ve-Veri-Dinleme\" >Ad\u0131m Ad\u0131m ARP Spoofing Sald\u0131r\u0131s\u0131 ve Veri Dinleme<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Hazirlik-Asamasi-Agdaki-Cihazlarin-Kesfi\" >Haz\u0131rl\u0131k A\u015famas\u0131: A\u011fdaki Cihazlar\u0131n Ke\u015ffi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Kurbanin-ARP-Tablosunu-Zehirleme\" >Kurban\u0131n ARP Tablosunu Zehirleme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Ag-Gecidinin-Gateway-ARP-Tablosunu-Zehirleme\" >A\u011f Ge\u00e7idinin (Gateway) ARP Tablosunu Zehirleme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Ortadaki-Adam-Man-in-the-Middle-Konumunun-Elde-Edilmesi\" >Ortadaki Adam (Man-in-the-Middle) Konumunun Elde Edilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Iletisim-Trafigini-Yakalama-Sniffing-ve-Yonlendirme-Forwarding\" >\u0130leti\u015fim Trafi\u011fini Yakalama (Sniffing) ve Y\u00f6nlendirme (Forwarding)<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#ARP-Spoofing-Saldirisinin-Potansiyel-Tehlikeleri\" >ARP Spoofing Sald\u0131r\u0131s\u0131n\u0131n Potansiyel Tehlikeleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Hassas-Bilgilerin-Ele-Gecirilmesi-Kullanici-Adlari-Sifreler\" >Hassas Bilgilerin Ele Ge\u00e7irilmesi (Kullan\u0131c\u0131 Adlar\u0131, \u015eifreler)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Oturum-Calma-Session-Hijacking\" >Oturum \u00c7alma (Session Hijacking)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#DNS-Spoofing-Saldirilarina-Zemin-Hazirlama\" >DNS Spoofing Sald\u0131r\u0131lar\u0131na Zemin Haz\u0131rlama<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Hizmet-Engelleme-Denial-of-Service-%E2%80%93-DoS-Saldirilari\" >Hizmet Engelleme (Denial of Service &#8211; DoS) Sald\u0131r\u0131lar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Ag-Trafiginin-Manipule-Edilmesi\" >A\u011f Trafi\u011finin Manip\u00fcle Edilmesi<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Populer-ARP-Spoofing-Araclari-ve-Kullanim-Amaclari\" >Pop\u00fcler ARP Spoofing Ara\u00e7lar\u0131 ve Kullan\u0131m Ama\u00e7lar\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Ettercap\" >Ettercap<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Cain-Abel\" >Cain &#038; Abel<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Arpspoof\" >Arpspoof<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Wireshark-Trafik-Analizi-icin-Tamamlayici-Arac\" >Wireshark (Trafik Analizi i\u00e7in Tamamlay\u0131c\u0131 Ara\u00e7)<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#ARP-Spoofing-Saldirilarinin-Tespiti\" >ARP Spoofing Sald\u0131r\u0131lar\u0131n\u0131n Tespiti<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Komut-Satiri-Uzerinden-ARP-Tablosu-Kontrolu-arp-a\" >Komut Sat\u0131r\u0131 \u00dczerinden ARP Tablosu Kontrol\u00fc (arp -a)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Ag-Trafigindeki-Anormalliklerin-Izlenmesi\" >A\u011f Trafi\u011findeki Anormalliklerin \u0130zlenmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-31\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Tekrarlanan-Duplicate-MAC-Adreslerinin-Tespiti\" >Tekrarlanan (Duplicate) MAC Adreslerinin Tespiti<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-32\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#ARP-Izleme-ve-Tespit-Yazilimlari\" >ARP \u0130zleme ve Tespit Yaz\u0131l\u0131mlar\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-33\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#ARP-Spoofing-Saldirilarina-Karsi-Alinabilecek-Onlemler\" >ARP Spoofing Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Al\u0131nabilecek \u00d6nlemler<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-34\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Statik-ARP-Girdileri-Kullanimi\" >Statik ARP Girdileri Kullan\u0131m\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-35\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Dinamik-ARP-Denetimi-Dynamic-ARP-Inspection-%E2%80%93-DAI\" >Dinamik ARP Denetimi (Dynamic ARP Inspection &#8211; DAI)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-36\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Port-Guvenligi-Port-Security-Gibi-Switch-Ozelliklerinin-Aktiflestirilmesi\" >Port G\u00fcvenli\u011fi (Port Security) Gibi Switch \u00d6zelliklerinin Aktifle\u015ftirilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-37\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Ag-Segmentasyonu-ve-VLAN-Yapilandirmasi\" >A\u011f Segmentasyonu ve VLAN Yap\u0131land\u0131rmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-38\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Sanal-Ozel-Ag-VPN-Kullanimi\" >Sanal \u00d6zel A\u011f (VPN) Kullan\u0131m\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-39\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#ARP-Saldirisi-Onleme-Sistemleri-IPSIDS\" >ARP Sald\u0131r\u0131s\u0131 \u00d6nleme Sistemleri (IPS\/IDS)<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-40\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Kurumsal-Ag-Guvenligi-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\" >Kurumsal A\u011f G\u00fcvenli\u011fi \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-41\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Gelismis-Tehdit-Algilama-ve-Onleme-Cozumleri\" >Geli\u015fmi\u015f Tehdit Alg\u0131lama ve \u00d6nleme \u00c7\u00f6z\u00fcmleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-42\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Katmanli-ve-Butunsel-Guvenlik-Mimarisi\" >Katmanl\u0131 ve B\u00fct\u00fcnsel G\u00fcvenlik Mimarisi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-43\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#724-Proaktif-Ag-Izleme-ve-Yonetim-Hizmetleri\" >7\/24 Proaktif A\u011f \u0130zleme ve Y\u00f6netim Hizmetleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-44\" href=\"https:\/\/www.ihs.com.tr\/blog\/arp-spoofing-nedir\/#Uzman-Guvenlik-Danismanligi-ve-Destek-Ekibi\" >Uzman G\u00fcvenlik Dan\u0131\u015fmanl\u0131\u011f\u0131 ve Destek Ekibi<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"ARP-ve-LAN-Iletisiminin-Temelleri\"><\/span>ARP ve LAN \u0130leti\u015fiminin Temelleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>ARP Spoofing sald\u0131r\u0131s\u0131n\u0131 tam olarak anlayabilmek i\u00e7in \u00f6ncelikle yerel a\u011flardaki ileti\u015fimin temel prensiplerini ve bu s\u00fcre\u00e7te rol oynayan adresleme mekanizmalar\u0131n\u0131 bilmek gerekir. Bu b\u00f6l\u00fcm, LAN, IP adresi, MAC adresi ve ARP protokol\u00fc aras\u0131ndaki ili\u015fkiyi a\u00e7\u0131klayarak sald\u0131r\u0131n\u0131n teknik altyap\u0131s\u0131n\u0131 anlaman\u0131z i\u00e7in sa\u011flam bir zemin olu\u015fturacakt\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yerel-Alan-Agi-LAN-Nedir\"><\/span>Yerel Alan A\u011f\u0131 (LAN) Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yerel Alan A\u011f\u0131 (Local Area Network &#8211; LAN), genellikle bir ev, ofis, okul veya bina gibi co\u011frafi olarak s\u0131n\u0131rl\u0131 bir alandaki bilgisayarlar\u0131, yaz\u0131c\u0131lar\u0131 ve di\u011fer a\u011f cihazlar\u0131n\u0131 birbirine ba\u011flayan bir bilgisayar a\u011f\u0131d\u0131r. LAN&#8217;lar, cihazlar\u0131n birbirleriyle h\u0131zl\u0131 ve verimli bir \u015fekilde kaynak payla\u015fmas\u0131n\u0131 (dosya, yaz\u0131c\u0131, internet ba\u011flant\u0131s\u0131 vb.) sa\u011flar. Modern LAN&#8217;lar \u00e7o\u011funlukla Ethernet teknolojisi ve switch (anahtar) gibi cihazlar kullan\u0131larak kurulur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"IP-Adresi-ve-MAC-Adresi-Arasindaki-Iliski\"><\/span>IP Adresi ve MAC Adresi Aras\u0131ndaki \u0130li\u015fki<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir a\u011fdaki cihazlar\u0131n birbiriyle ileti\u015fim kurabilmesi i\u00e7in iki temel adrese ihtiyac\u0131 vard\u0131r: IP adresi ve MAC adresi. Bu iki adres, a\u011f ileti\u015fiminin farkl\u0131 katmanlar\u0131nda g\u00f6rev yapar ve aralar\u0131nda \u00f6nemli bir ili\u015fki bulunur.<\/p>\n<ul>\n<li><strong>IP Adresi (\u0130nternet Protokol\u00fc Adresi):<\/strong> OSI modelinin 3. katman\u0131 olan A\u011f Katman\u0131&#8217;nda \u00e7al\u0131\u015fan mant\u0131ksal bir adrestir. A\u011fdaki bir cihaz\u0131n konumunu belirtir ve a\u011flar aras\u0131nda veri paketlerinin ( y\u00f6nlendirilebilir) hedefe ula\u015fmas\u0131n\u0131 sa\u011flar. IP adresleri genellikle dinamiktir ve de\u011fi\u015ftirilebilir. (\u00d6rn: 192.168.1.10)<\/li>\n<li><strong>MAC Adresi (Medya Eri\u015fim Kontrol Adresi):<\/strong> OSI modelinin 2. katman\u0131 olan Veri Ba\u011flant\u0131 Katman\u0131&#8217;nda \u00e7al\u0131\u015fan fiziksel bir adrestir. A\u011f aray\u00fcz kart\u0131na (Ethernet kart\u0131, Wi-Fi adapt\u00f6r\u00fc) \u00fcretici taraf\u0131ndan kal\u0131c\u0131 olarak yaz\u0131l\u0131r ve d\u00fcnya genelinde benzersizdir. Sadece ayn\u0131 yerel a\u011f (LAN) i\u00e7indeki cihazlar\u0131n birbirini bulmas\u0131n\u0131 sa\u011flar. (\u00d6rn: 00:1A:2B:3C:4D:5E)<\/li>\n<\/ul>\n<p>Temel olarak, IP adresi &#8220;hangi a\u011fdas\u0131n ve o a\u011fdaki kimli\u011fin ne?&#8221; sorusuna cevap verirken, MAC adresi &#8220;bu yerel a\u011fdaki fiziksel cihaz olarak sen kimsin?&#8221; sorusuna cevap verir. Bir cihaz, ba\u015fka bir cihaza yerel a\u011fda veri g\u00f6ndermek istedi\u011finde, hedef cihaz\u0131n IP adresini bilse bile, Ethernet \u00e7er\u00e7evesini g\u00f6nderebilmek i\u00e7in o IP adresine kar\u015f\u0131l\u0131k gelen MAC adresini de bilmek zorundad\u0131r. \u0130\u015fte bu noktada ARP devreye girer.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Adres-Cozumleme-Protokolu-ARP-Nedir-ve-Nasil-Calisir\"><\/span>Adres \u00c7\u00f6z\u00fcmleme Protokol\u00fc (ARP) Nedir ve Nas\u0131l \u00c7al\u0131\u015f\u0131r?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Adres \u00c7\u00f6z\u00fcmleme Protokol\u00fc (Address Resolution Protocol &#8211; ARP), bir yerel a\u011f \u00fczerinde bilinen bir IP adresine kar\u015f\u0131l\u0131k gelen MAC (fiziksel) adresini bulmak i\u00e7in kullan\u0131lan bir ileti\u015fim protokol\u00fcd\u00fcr. \u00c7al\u0131\u015fma mant\u0131\u011f\u0131 olduk\u00e7a basittir:<\/p>\n<ol>\n<li>Cihaz A (IP: 192.168.1.10), Cihaz B&#8217;ye (IP: 192.168.1.20) veri g\u00f6ndermek ister.<\/li>\n<li>Cihaz A, kendi ARP tablosuna (\u00f6nbelle\u011fine) bakar. E\u011fer 192.168.1.20 IP&#8217;sine ait bir MAC adresi kayd\u0131 yoksa, a\u011fdaki t\u00fcm cihazlara bir ARP \u0130ste\u011fi (ARP Request) paketi g\u00f6nderir.<\/li>\n<li>Bu paket, bir yay\u0131n (broadcast) mesaj\u0131d\u0131r ve temel olarak &#8220;Hey herkes, 192.168.1.20 IP adresine sahip olan cihaz kimse, l\u00fctfen MAC adresini bana s\u00f6ylesin?&#8221; der.<\/li>\n<li>A\u011fdaki di\u011fer t\u00fcm cihazlar bu mesaj\u0131 al\u0131r ama IP adresi kendilerine ait olmad\u0131\u011f\u0131 i\u00e7in g\u00f6rmezden gelirler.<\/li>\n<li>Sadece Cihaz B (IP: 192.168.1.20) bu mesaja cevap verir. Cihaz A&#8217;ya do\u011frudan (unicast) bir ARP Yan\u0131t\u0131 (ARP Reply) paketi g\u00f6nderir ve &#8220;Merhaba, 192.168.1.20 benim, MAC adresim AA:BB:CC:DD:EE:FF&#8221; der.<\/li>\n<li>Cihaz A, bu bilgiyi al\u0131r almaz kendi ARP tablosuna kaydeder ve art\u0131k Cihaz B ile do\u011frudan ileti\u015fime ge\u00e7ebilir.<\/li>\n<\/ol>\n<h3><span class=\"ez-toc-section\" id=\"ARP-Tablosu-ARP-Cache-ve-Iletisimdeki-Rolu\"><\/span>ARP Tablosu (ARP Cache) ve \u0130leti\u015fimdeki Rol\u00fc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>ARP Tablosu veya ARP \u00d6nbelle\u011fi (ARP Cache), bir cihaz\u0131n yerel a\u011fda daha \u00f6nce ileti\u015fim kurdu\u011fu di\u011fer cihazlar\u0131n IP adresi ve MAC adresi e\u015fle\u015fmelerini ge\u00e7ici olarak saklad\u0131\u011f\u0131 bir tablodur. Bu tablo, her ileti\u015fim denemesinde yeniden ARP iste\u011fi g\u00f6nderme ihtiyac\u0131n\u0131 ortadan kald\u0131rarak a\u011f trafi\u011fini azalt\u0131r ve ileti\u015fimi h\u0131zland\u0131r\u0131r. Bir cihaz, veri g\u00f6ndermeden \u00f6nce her zaman ilk olarak kendi ARP tablosunu kontrol eder. Kay\u0131tlar bu tabloda belirli bir s\u00fcre (genellikle birka\u00e7 dakika) tutulur ve sonra silinir. Windows&#8217;ta <code>arp -a<\/code> komutuyla bu tablo g\u00f6r\u00fcnt\u00fclenebilir. ARP Spoofing sald\u0131r\u0131s\u0131n\u0131n temel hedefi, i\u015fte bu tabloyu sahte bilgilerle manip\u00fcle etmektir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"ARP-Spoofing-ARP-Zehirlenmesi-Kavrami\"><\/span>ARP Spoofing (ARP Zehirlenmesi) Kavram\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>ARP&#8217;nin nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 anlad\u0131ktan sonra, bu protokol\u00fcn zafiyetlerinin nas\u0131l k\u00f6t\u00fcye kullan\u0131labilece\u011fini inceleyebiliriz. ARP Spoofing, protokol\u00fcn tasar\u0131m\u0131ndaki bir g\u00fcven varsay\u0131m\u0131n\u0131 hedef alarak yerel a\u011f ileti\u015fiminin gizlili\u011fini ve b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc ciddi \u015fekilde tehdit eder.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"ARP-Spoofing-Nedir\"><\/span>ARP Spoofing Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>ARP Spoofing (ARP Zehirlenmesi veya ARP \u00d6nbellek Zehirlenmesi olarak da bilinir), bir sald\u0131rgan\u0131n yerel a\u011fdaki di\u011fer cihazlar\u0131n ARP tablolar\u0131na sahte ARP yan\u0131tlar\u0131 g\u00f6ndererek kendini a\u011fdaki farkl\u0131 bir cihaz (genellikle a\u011f ge\u00e7idi &#8211; gateway) gibi tan\u0131tmas\u0131 ve b\u00f6ylece a\u011f trafi\u011fini kendi \u00fczerine y\u00f6nlendirmesiyle ger\u00e7ekle\u015ftirdi\u011fi bir &#8220;Ortadaki Adam&#8221; (Man-in-the-Middle &#8211; MitM) sald\u0131r\u0131s\u0131d\u0131r. Sald\u0131rgan, bu konuma geldi\u011finde iki cihaz aras\u0131ndaki t\u00fcm ileti\u015fimi gizlice dinleyebilir, de\u011fi\u015ftirebilir veya engelleyebilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Saldirinin-Temel-Mantigi-Guveni-Kotuye-Kullanma\"><\/span>Sald\u0131r\u0131n\u0131n Temel Mant\u0131\u011f\u0131: G\u00fcveni K\u00f6t\u00fcye Kullanma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>ARP protokol\u00fc tasarlan\u0131rken temel bir varsay\u0131ma dayan\u0131yordu: Ayn\u0131 yerel a\u011fdaki t\u00fcm cihazlar g\u00fcvenilirdir. Bu nedenle, ARP protokol\u00fcnde herhangi bir kimlik do\u011frulama mekanizmas\u0131 bulunmaz. Bir cihaz, bir ARP yan\u0131t\u0131 ald\u0131\u011f\u0131nda, bu yan\u0131t\u0131n ger\u00e7ekten do\u011fru kaynaktan gelip gelmedi\u011fini veya istenen bir bilgi olup olmad\u0131\u011f\u0131n\u0131 kontrol etmez. Gelen ARP yan\u0131t\u0131ndaki IP-MAC e\u015fle\u015fmesini sorgusuz sualsiz kabul eder ve kendi ARP tablosunu bu yeni bilgiyle g\u00fcnceller. ARP Spoofing, tam olarak bu &#8220;k\u00f6r\u00fc k\u00f6r\u00fcne g\u00fcven&#8221; mekanizmas\u0131n\u0131 istismar eder.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"ARP-Onbellek-Zehirlenmesi-ARP-Cache-Poisoning-Nasil-Gerceklesir\"><\/span>ARP \u00d6nbellek Zehirlenmesi (ARP Cache Poisoning) Nas\u0131l Ger\u00e7ekle\u015fir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>ARP \u00d6nbellek Zehirlenmesi, sald\u0131rgan\u0131n kurban cihazlara talep edilmemi\u015f (unsolicited) ARP yan\u0131tlar\u0131 g\u00f6ndermesiyle ger\u00e7ekle\u015fir. \u00d6rne\u011fin, sald\u0131rgan kurban bir cihaza s\u00fcrekli olarak &#8220;A\u011f ge\u00e7idinin (Gateway) IP adresi benim MAC adresime aittir&#8221; diyen sahte ARP paketleri g\u00f6nderir. Kurban cihaz, bu sahte bilgiyi do\u011fru kabul eder ve ARP tablosunu g\u00fcnceller. Bu andan itibaren kurban, internete \u00e7\u0131kmak i\u00e7in g\u00f6nderece\u011fi t\u00fcm veri paketlerini ger\u00e7ek a\u011f ge\u00e7idi yerine sald\u0131rgan\u0131n bilgisayar\u0131na g\u00f6ndermeye ba\u015flar. Bu i\u015flem, ARP tablosundaki girdiler zaman a\u015f\u0131m\u0131na u\u011frad\u0131k\u00e7a s\u00fcrekli tekrarlan\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Saldiridaki-Taraflar-Saldirgan-Kurban-ve-Ag-Gecidi-Gateway\"><\/span>Sald\u0131r\u0131daki Taraflar: Sald\u0131rgan, Kurban ve A\u011f Ge\u00e7idi (Gateway)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Tipik bir ARP Spoofing senaryosunda \u00fc\u00e7 ana taraf bulunur:<\/p>\n<ul>\n<li><strong>Sald\u0131rgan (Attacker):<\/strong> A\u011f trafi\u011fini ele ge\u00e7irmek isteyen k\u00f6t\u00fc niyetli kullan\u0131c\u0131. Amac\u0131, kurban ile a\u011f ge\u00e7idi aras\u0131na girmektir.<\/li>\n<li><strong>Kurban (Victim):<\/strong> Trafi\u011fi dinlenecek olan hedef cihaz. Bu, a\u011fdaki herhangi bir kullan\u0131c\u0131 bilgisayar\u0131, sunucu veya mobil cihaz olabilir.<\/li>\n<li><strong>A\u011f Ge\u00e7idi (Gateway):<\/strong> Genellikle bir modem veya router olan ve yerel a\u011fdaki cihazlar\u0131n internete \u00e7\u0131kmas\u0131n\u0131 sa\u011flayan cihazd\u0131r. Kurban\u0131n t\u00fcm internet trafi\u011fi normalde bu cihaz \u00fczerinden ge\u00e7er.<\/li>\n<\/ul>\n<p>Sald\u0131r\u0131 ba\u015far\u0131l\u0131 olmak i\u00e7in hem kurban\u0131n hem de a\u011f ge\u00e7idinin ARP tablolar\u0131n\u0131n ayn\u0131 anda zehirlenmesini gerektirir. Bu sayede trafik \u00e7ift y\u00f6nl\u00fc olarak sald\u0131rgan\u0131n \u00fczerinden akar.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Adim-Adim-ARP-Spoofing-Saldirisi-ve-Veri-Dinleme\"><\/span>Ad\u0131m Ad\u0131m ARP Spoofing Sald\u0131r\u0131s\u0131 ve Veri Dinleme<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Teorik bilgileri bir kenara b\u0131rak\u0131p, bir ARP Spoofing sald\u0131r\u0131s\u0131n\u0131n pratikte nas\u0131l ad\u0131m ad\u0131m ger\u00e7ekle\u015ftirildi\u011fini inceleyelim. Bu s\u00fcre\u00e7, a\u011f ke\u015ffinden ba\u015flayarak trafi\u011fin ele ge\u00e7irilip analiz edilmesine kadar uzan\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Hazirlik-Asamasi-Agdaki-Cihazlarin-Kesfi\"><\/span>Haz\u0131rl\u0131k A\u015famas\u0131: A\u011fdaki Cihazlar\u0131n Ke\u015ffi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131n\u0131n ilk ad\u0131m\u0131, hedef a\u011fdaki aktif cihazlar\u0131 ve bunlar\u0131n IP\/MAC adreslerini tespit etmektir. Sald\u0131rgan, bu a\u015famada genellikle <code>nmap<\/code>, <code>netdiscover<\/code> gibi a\u011f tarama ara\u00e7lar\u0131n\u0131 kullan\u0131r. Bu tarama sonucunda sald\u0131rgan, kurban olarak se\u00e7ece\u011fi cihaz\u0131n IP adresini ve internete \u00e7\u0131k\u0131\u015f\u0131 sa\u011flayan a\u011f ge\u00e7idinin (router\/modem) IP adresini \u00f6\u011frenir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kurbanin-ARP-Tablosunu-Zehirleme\"><\/span>Kurban\u0131n ARP Tablosunu Zehirleme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131rgan, hedef olarak belirledi\u011fi kurban cihaza (\u00f6rne\u011fin IP&#8217;si 192.168.1.15 olan bir kullan\u0131c\u0131) sahte bir ARP yan\u0131t\u0131 g\u00f6nderir. Bu paketin i\u00e7eri\u011fi \u015f\u00f6yledir: &#8220;192.168.1.1 (A\u011f Ge\u00e7idinin IP&#8217;si) benim MAC adresimde (Sald\u0131rgan\u0131n MAC adresi)&#8221;. Kurban cihaz bu paketi al\u0131nca, ARP tablosundaki A\u011f Ge\u00e7idine ait MAC adresi giri\u015fini sald\u0131rgan\u0131n MAC adresi ile g\u00fcnceller.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ag-Gecidinin-Gateway-ARP-Tablosunu-Zehirleme\"><\/span>A\u011f Ge\u00e7idinin (Gateway) ARP Tablosunu Zehirleme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131n\u0131n \u00e7ift y\u00f6nl\u00fc \u00e7al\u0131\u015fabilmesi i\u00e7in sald\u0131rgan\u0131n ayn\u0131 anda a\u011f ge\u00e7idini de zehirlemesi gerekir. Bu kez a\u011f ge\u00e7idine (IP: 192.168.1.1) \u015fu bilgiyi i\u00e7eren sahte bir ARP yan\u0131t\u0131 g\u00f6nderir: &#8220;192.168.1.15 (Kurban\u0131n IP&#8217;si) benim MAC adresimde (Sald\u0131rgan\u0131n MAC adresi)&#8221;. A\u011f ge\u00e7idi de bu sahte bilgiye inanarak ARP tablosunu g\u00fcnceller.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ortadaki-Adam-Man-in-the-Middle-Konumunun-Elde-Edilmesi\"><\/span>Ortadaki Adam (Man-in-the-Middle) Konumunun Elde Edilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bu iki zehirleme i\u015flemi ba\u015far\u0131yla tamamland\u0131\u011f\u0131nda, sald\u0131rgan mant\u0131ksal olarak kurban ile a\u011f ge\u00e7idi aras\u0131na girmi\u015f olur. Art\u0131k:<\/p>\n<ul>\n<li>Kurban cihaz internete veri g\u00f6ndermek istedi\u011finde, paketleri ger\u00e7ek a\u011f ge\u00e7idi yerine sald\u0131rgana g\u00f6nderir.<\/li>\n<li>A\u011f ge\u00e7idi de kurbana gelen cevaplar\u0131 (\u00f6rne\u011fin bir web sitesinden gelen veriler) ger\u00e7ek kurban yerine sald\u0131rgana g\u00f6nderir.<\/li>\n<\/ul>\n<p>B\u00f6ylece kurban ile internet aras\u0131ndaki t\u00fcm ileti\u015fim, kurban fark\u0131nda olmadan sald\u0131rgan\u0131n bilgisayar\u0131 \u00fczerinden akmaya ba\u015flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Iletisim-Trafigini-Yakalama-Sniffing-ve-Yonlendirme-Forwarding\"><\/span>\u0130leti\u015fim Trafi\u011fini Yakalama (Sniffing) ve Y\u00f6nlendirme (Forwarding)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131rgan, &#8220;ortadaki adam&#8221; konumuna eri\u015ftikten sonra iki temel i\u015flem yapar. \u0130lk olarak, \u00fczerinden ge\u00e7en t\u00fcm trafi\u011fi yakalamak i\u00e7in Wireshark gibi bir a\u011f analiz arac\u0131 (sniffer) kullan\u0131r. Bu sayede \u015fifrelenmemi\u015f protokoller (HTTP, FTP, Telnet vb.) \u00fczerinden g\u00f6nderilen kullan\u0131c\u0131 adlar\u0131, \u015fifreler, e-postalar ve sohbet mesajlar\u0131 gibi t\u00fcm verileri d\u00fcz metin olarak g\u00f6rebilir. \u0130kinci olarak, ileti\u015fimin kesilmemesi ve kurban\u0131n \u015f\u00fcphelenmemesi i\u00e7in yakalad\u0131\u011f\u0131 paketleri ait olduklar\u0131 hedeflere (kurbandan geleni a\u011f ge\u00e7idine, a\u011f ge\u00e7idinden geleni kurbana) y\u00f6nlendirmesi (IP forwarding) gerekir. Aksi takdirde, kurban\u0131n internet ba\u011flant\u0131s\u0131 kesilir ve sald\u0131r\u0131 fark edilebilir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"ARP-Spoofing-Saldirisinin-Potansiyel-Tehlikeleri\"><\/span>ARP Spoofing Sald\u0131r\u0131s\u0131n\u0131n Potansiyel Tehlikeleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>ARP Spoofing, sadece veri dinlemekle kalmaz, ayn\u0131 zamanda daha karma\u015f\u0131k ve y\u0131k\u0131c\u0131 bir\u00e7ok sald\u0131r\u0131ya da zemin haz\u0131rlar. Sald\u0131rgan\u0131n a\u011f trafi\u011fi \u00fczerinde tam kontrol sahibi olmas\u0131, say\u0131s\u0131z k\u00f6t\u00fc niyetli senaryonun kap\u0131s\u0131n\u0131 aralar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Hassas-Bilgilerin-Ele-Gecirilmesi-Kullanici-Adlari-Sifreler\"><\/span>Hassas Bilgilerin Ele Ge\u00e7irilmesi (Kullan\u0131c\u0131 Adlar\u0131, \u015eifreler)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131n\u0131n en bariz tehlikesi, \u015fifresiz ileti\u015fim kanallar\u0131 \u00fczerinden akan hassas verilerin \u00e7al\u0131nmas\u0131d\u0131r. HTTP protokol\u00fc kullanan web sitelerine yap\u0131lan giri\u015f denemeleri, e-posta istemcileri, FTP ba\u011flant\u0131lar\u0131 ve anl\u0131k mesajla\u015fma uygulamalar\u0131 gibi bir\u00e7ok servis \u00fczerinden g\u00f6nderilen kullan\u0131c\u0131 ad\u0131 ve \u015fifreler, sald\u0131rgan taraf\u0131ndan kolayca okunabilir. G\u00fcvenli bir <a href=\"https:\/\/www.ihs.com.tr\/ssl\/\" target=\"_blank\">ssl<\/a> sertifikas\u0131 kullan\u0131lmayan siteler bu konuda b\u00fcy\u00fck risk alt\u0131ndad\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Oturum-Calma-Session-Hijacking\"><\/span>Oturum \u00c7alma (Session Hijacking)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kullan\u0131c\u0131lar bir web sitesinde oturum a\u00e7t\u0131klar\u0131nda, sunucu genellikle taray\u0131c\u0131ya bir &#8220;oturum \u00e7erezi&#8221; (session cookie) g\u00f6nderir. Sald\u0131rgan, ARP Spoofing ile bu \u00e7erezi ele ge\u00e7irebilir. Ard\u0131ndan, bu \u00e7erezi kendi taray\u0131c\u0131s\u0131na kopyalayarak, kullan\u0131c\u0131n\u0131n kimli\u011fine b\u00fcr\u00fcnebilir ve sanki kullan\u0131c\u0131 ad\u0131 ve \u015fifreyle giri\u015f yapm\u0131\u015f gibi o kullan\u0131c\u0131n\u0131n hesab\u0131na tam eri\u015fim sa\u011flayabilir. Bu, \u00f6zellikle sosyal medya ve e-posta hesaplar\u0131 i\u00e7in ciddi bir risktir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"DNS-Spoofing-Saldirilarina-Zemin-Hazirlama\"><\/span>DNS Spoofing Sald\u0131r\u0131lar\u0131na Zemin Haz\u0131rlama<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>ARP Spoofing ile ortadaki adam konumuna ge\u00e7en sald\u0131rgan, kurban\u0131n DNS (Alan Ad\u0131 Sistemi) sorgular\u0131n\u0131 da yakalayabilir. Kurban, me\u015fru bir web sitesine (\u00f6rne\u011fin banka.com) gitmek istedi\u011finde, sald\u0131rgan bu DNS iste\u011fine sahte bir yan\u0131t vererek kullan\u0131c\u0131y\u0131 kendi kontrol\u00fcndeki sahte bir web sitesine (phishing sitesi) y\u00f6nlendirebilir. Kullan\u0131c\u0131, ger\u00e7ek siteye girdi\u011fini d\u00fc\u015f\u00fcnerek kimlik bilgilerini bu sahte siteye girebilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Hizmet-Engelleme-Denial-of-Service-%E2%80%93-DoS-Saldirilari\"><\/span>Hizmet Engelleme (Denial of Service &#8211; DoS) Sald\u0131r\u0131lar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131rgan, \u00fczerinden ge\u00e7en trafi\u011fi hedefe y\u00f6nlendirmek yerine kas\u0131tl\u0131 olarak silebilir (drop). Bu durumda, kurban cihaz\u0131n veya cihazlar\u0131n internete eri\u015fimi tamamen kesilir. Sald\u0131rgan, bu y\u00f6ntemi kullanarak belirli bir kullan\u0131c\u0131y\u0131 veya a\u011f\u0131n tamam\u0131n\u0131 internetsiz b\u0131rakabilir, bu da bir t\u00fcr hizmet engelleme sald\u0131r\u0131s\u0131d\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ag-Trafiginin-Manipule-Edilmesi\"><\/span>A\u011f Trafi\u011finin Manip\u00fcle Edilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131rgan, sadece trafi\u011fi dinlemekle kalmay\u0131p ayn\u0131 zamanda aktif olarak de\u011fi\u015ftirebilir de. \u00d6rne\u011fin, bir kullan\u0131c\u0131n\u0131n indirdi\u011fi bir dosyay\u0131 anl\u0131k olarak zararl\u0131 bir yaz\u0131l\u0131mla de\u011fi\u015ftirebilir veya bir web sitesinin i\u00e7eri\u011fini kullan\u0131c\u0131ya ula\u015fmadan \u00f6nce manip\u00fcle edebilir. Bu durum, zararl\u0131 yaz\u0131l\u0131m yayma veya yanl\u0131\u015f bilgi yayma gibi ama\u00e7larla kullan\u0131labilir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Populer-ARP-Spoofing-Araclari-ve-Kullanim-Amaclari\"><\/span>Pop\u00fcler ARP Spoofing Ara\u00e7lar\u0131 ve Kullan\u0131m Ama\u00e7lar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>ARP Spoofing sald\u0131r\u0131lar\u0131, bu i\u015f i\u00e7in \u00f6zel olarak geli\u015ftirilmi\u015f yaz\u0131l\u0131mlar sayesinde olduk\u00e7a kolay bir \u015fekilde ger\u00e7ekle\u015ftirilebilir. Bu ara\u00e7lar, a\u011f ke\u015ffinden zehirlemeye ve trafik analizine kadar t\u00fcm s\u00fcreci otomatize eder. \u0130\u015fte en bilinen ARP Spoofing ara\u00e7lar\u0131ndan baz\u0131lar\u0131:<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ettercap\"><\/span>Ettercap<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Ettercap, ortadaki adam sald\u0131r\u0131lar\u0131 i\u00e7in geli\u015ftirilmi\u015f kapsaml\u0131 ve g\u00fc\u00e7l\u00fc bir ara\u00e7t\u0131r. Grafiksel bir aray\u00fcze (GUI) ve komut sat\u0131r\u0131 aray\u00fcz\u00fcne (CLI) sahiptir. ARP zehirlenmesi, DNS sahtekarl\u0131\u011f\u0131, parola yakalama gibi bir\u00e7ok \u00f6zelli\u011fi b\u00fcnyesinde bar\u0131nd\u0131r\u0131r. Hem sald\u0131r\u0131 hem de a\u011f g\u00fcvenli\u011fi testi (penetration testing) ama\u00e7lar\u0131yla yayg\u0131n olarak kullan\u0131l\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Cain-Abel\"><\/span>Cain &#038; Abel<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u00d6zellikle Windows i\u015fletim sistemleri i\u00e7in geli\u015ftirilmi\u015f, eski ancak hala etkili bir parola kurtarma ve a\u011f dinleme arac\u0131d\u0131r. ARP zehirlenmesi yetene\u011fi sayesinde a\u011fdaki \u015fifreleri (hash format\u0131nda) yakalayabilir ve \u00e7e\u015fitli k\u0131rma y\u00f6ntemleriyle bu \u015fifreleri \u00e7\u00f6zmeye \u00e7al\u0131\u015fabilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Arpspoof\"><\/span>Arpspoof<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Dsniff adl\u0131 a\u011f denetim ara\u00e7lar\u0131 paketinin bir par\u00e7as\u0131 olan Arpspoof, komut sat\u0131r\u0131 \u00fczerinden \u00e7al\u0131\u015fan basit ve etkili bir ARP zehirleme arac\u0131d\u0131r. Sadece zehirleme i\u015flemini yapar; trafi\u011fi dinlemek veya analiz etmek i\u00e7in Wireshark gibi ek ara\u00e7larla birlikte kullan\u0131lmas\u0131 gerekir. Minimalist yap\u0131s\u0131 nedeniyle siber g\u00fcvenlik uzmanlar\u0131 taraf\u0131ndan s\u0131k\u00e7a tercih edilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Wireshark-Trafik-Analizi-icin-Tamamlayici-Arac\"><\/span>Wireshark (Trafik Analizi i\u00e7in Tamamlay\u0131c\u0131 Ara\u00e7)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Wireshark, bir ARP Spoofing arac\u0131 de\u011fildir, ancak bu sald\u0131r\u0131lar\u0131n vazge\u00e7ilmez bir tamamlay\u0131c\u0131s\u0131d\u0131r. Sald\u0131r\u0131 ba\u015far\u0131l\u0131 olup trafik ele ge\u00e7irildikten sonra, a\u011f \u00fczerinden akan paketleri detayl\u0131 bir \u015fekilde incelemek, analiz etmek ve i\u00e7indeki verileri (\u015fifreler, \u00e7erezler vb.) g\u00f6rmek i\u00e7in kullan\u0131l\u0131r. Ayn\u0131 zamanda, bir ARP Spoofing sald\u0131r\u0131s\u0131n\u0131n tespitinde de kilit rol oynar.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>Ara\u00e7<\/th>\n<th>Platform<\/th>\n<th>Aray\u00fcz<\/th>\n<th>Temel \u0130\u015flevi<\/th>\n<th>\u00d6ne \u00c7\u0131kan \u00d6zelli\u011fi<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Ettercap<\/strong><\/td>\n<td>Linux, Windows, macOS<\/td>\n<td>GUI ve CLI<\/td>\n<td>MitM Sald\u0131r\u0131lar\u0131 (ARP, DNS Spoofing)<\/td>\n<td>Hepsi bir arada \u00e7\u00f6z\u00fcm olmas\u0131<\/td>\n<\/tr>\n<tr>\n<td><strong>Cain &#038; Abel<\/strong><\/td>\n<td>Windows<\/td>\n<td>GUI<\/td>\n<td>Parola Kurtarma ve A\u011f Dinleme<\/td>\n<td>\u015eifre k\u0131rma yetenekleri<\/td>\n<\/tr>\n<tr>\n<td><strong>Arpspoof<\/strong><\/td>\n<td>Linux<\/td>\n<td>CLI<\/td>\n<td>Sadece ARP Zehirleme<\/td>\n<td>Hafif ve amaca y\u00f6nelik olmas\u0131<\/td>\n<\/tr>\n<tr>\n<td><strong>Wireshark<\/strong><\/td>\n<td>Linux, Windows, macOS<\/td>\n<td>GUI<\/td>\n<td>A\u011f Trafi\u011fi Analizi<\/td>\n<td>Trafi\u011fi detayl\u0131 inceleme ve filtreleme<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"ARP-Spoofing-Saldirilarinin-Tespiti\"><\/span>ARP Spoofing Sald\u0131r\u0131lar\u0131n\u0131n Tespiti<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>ARP Spoofing sald\u0131r\u0131lar\u0131 do\u011fas\u0131 gere\u011fi gizlidir ve s\u0131radan bir kullan\u0131c\u0131 taraf\u0131ndan fark edilmesi zordur. Ancak dikkatli bir a\u011f y\u00f6neticisi veya g\u00fcvenlik uzman\u0131, baz\u0131 belirtileri ve ara\u00e7lar\u0131 kullanarak bu t\u00fcr sald\u0131r\u0131lar\u0131 tespit edebilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Komut-Satiri-Uzerinden-ARP-Tablosu-Kontrolu-arp-a\"><\/span>Komut Sat\u0131r\u0131 \u00dczerinden ARP Tablosu Kontrol\u00fc (arp -a)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131y\u0131 tespit etmenin en temel yolu, \u015f\u00fcphelenilen cihaz\u0131n komut sat\u0131r\u0131nda <code>arp -a<\/code> komutunu \u00e7al\u0131\u015ft\u0131rmakt\u0131r. Bu komut, cihaz\u0131n ARP tablosunu listeler. E\u011fer listede, farkl\u0131 IP adreslerine (\u00f6rne\u011fin hem a\u011f ge\u00e7idinin IP&#8217;si hem de ba\u015fka bir kullan\u0131c\u0131n\u0131n IP&#8217;si) ayn\u0131 MAC adresinin atanm\u0131\u015f oldu\u011fu g\u00f6r\u00fcl\u00fcyorsa, bu durum g\u00fc\u00e7l\u00fc bir ARP Spoofing sald\u0131r\u0131s\u0131 belirtisidir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ag-Trafigindeki-Anormalliklerin-Izlenmesi\"><\/span>A\u011f Trafi\u011findeki Anormalliklerin \u0130zlenmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>A\u011f trafi\u011finin Wireshark gibi bir ara\u00e7la izlenmesi, anormalliklerin tespitinde yard\u0131mc\u0131 olabilir. A\u015f\u0131r\u0131 miktarda ARP yan\u0131t\u0131 (ARP Reply) paketi g\u00f6r\u00fclmesi, \u00f6zellikle de bu paketler herhangi bir ARP iste\u011fine (ARP Request) kar\u015f\u0131l\u0131k gelmiyorsa, bir zehirleme giri\u015fiminin i\u015fareti olabilir. Ayr\u0131ca, a\u011fda ani yava\u015flamalar veya ba\u011flant\u0131 kesintileri de bir sald\u0131r\u0131n\u0131n yan etkisi olarak ortaya \u00e7\u0131kabilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Tekrarlanan-Duplicate-MAC-Adreslerinin-Tespiti\"><\/span>Tekrarlanan (Duplicate) MAC Adreslerinin Tespiti<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir MAC adresinin a\u011fdaki birden fazla IP adresiyle ili\u015fkilendirilmesi, en net sald\u0131r\u0131 g\u00f6stergesidir. Sald\u0131rgan, hem kurban\u0131n hem de a\u011f ge\u00e7idinin trafi\u011fini kendi \u00fczerine almak i\u00e7in kendi MAC adresini her iki IP ile de e\u015fle\u015ftirir. A\u011f izleme yaz\u0131l\u0131mlar\u0131, bu t\u00fcr tekrarlanan MAC adresi kay\u0131tlar\u0131n\u0131 tespit ederek alarm \u00fcretebilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"ARP-Izleme-ve-Tespit-Yazilimlari\"><\/span>ARP \u0130zleme ve Tespit Yaz\u0131l\u0131mlar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bu i\u015f i\u00e7in \u00f6zel olarak geli\u015ftirilmi\u015f yaz\u0131l\u0131mlar mevcuttur. \u00d6rne\u011fin, <code>Arpwatch<\/code> gibi ara\u00e7lar, bir a\u011fdaki IP-MAC adresi e\u015fle\u015fmelerini s\u00fcrekli olarak izler ve herhangi bir de\u011fi\u015fiklik (\u00f6rne\u011fin bir IP adresine ait MAC adresinin aniden de\u011fi\u015fmesi) oldu\u011funda sistem y\u00f6neticisine bir uyar\u0131 g\u00f6nderir. Bir\u00e7ok IDS\/IPS (Sald\u0131r\u0131 Tespit\/\u00d6nleme Sistemi) de ARP Spoofing anormalliklerini tespit edebilecek imzalara sahiptir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"ARP-Spoofing-Saldirilarina-Karsi-Alinabilecek-Onlemler\"><\/span>ARP Spoofing Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Al\u0131nabilecek \u00d6nlemler<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>ARP protokol\u00fcn\u00fcn do\u011fas\u0131ndaki zafiyetler nedeniyle ARP Spoofing&#8217;e kar\u015f\u0131 %100 koruma sa\u011flamak zordur. Ancak do\u011fru yap\u0131land\u0131rmalar ve g\u00fcvenlik teknolojileri ile risk \u00f6nemli \u00f6l\u00e7\u00fcde azalt\u0131labilir. Bu \u00f6nlemler, sald\u0131r\u0131y\u0131 engellemeyi, zorla\u015ft\u0131rmay\u0131 veya etkisiz hale getirmeyi ama\u00e7lar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Statik-ARP-Girdileri-Kullanimi\"><\/span>Statik ARP Girdileri Kullan\u0131m\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>En temel ve etkili y\u00f6ntemlerden biri, cihazlar\u0131n ARP tablolar\u0131na kritik girdileri (\u00f6rne\u011fin a\u011f ge\u00e7idinin IP-MAC e\u015fle\u015fmesi) manuel olarak ve kal\u0131c\u0131 (statik) olarak eklemektir. Statik bir girdi, dinamik ARP yan\u0131tlar\u0131 taraf\u0131ndan g\u00fcncellenemez. Bu y\u00f6ntem, sald\u0131rgan\u0131n ARP tablosunu zehirlemesini engeller. Ancak, a\u011fdaki her cihaza bu yap\u0131land\u0131rmay\u0131 tek tek uygulamak gerekti\u011fi i\u00e7in b\u00fcy\u00fck ve dinamik a\u011flarda y\u00f6netimi olduk\u00e7a zordur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Dinamik-ARP-Denetimi-Dynamic-ARP-Inspection-%E2%80%93-DAI\"><\/span>Dinamik ARP Denetimi (Dynamic ARP Inspection &#8211; DAI)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>DAI, modern y\u00f6netilebilir switch&#8217;lerde bulunan geli\u015fmi\u015f bir g\u00fcvenlik \u00f6zelli\u011fidir. Temel olarak, a\u011fdaki her bir switch portundan gelen ARP paketlerinin me\u015frulu\u011funu kontrol eder. DAI, DHCP Snooping tablosunu kullanarak g\u00fcvenilir bir IP-MAC-Port e\u015fle\u015fme veritaban\u0131 olu\u015fturur. Bu veritaban\u0131yla uyu\u015fmayan veya ge\u00e7ersiz g\u00f6r\u00fcnen ARP paketlerini engeller. Bu, ARP Spoofing sald\u0131r\u0131lar\u0131na kar\u015f\u0131 son derece etkili ve \u00f6l\u00e7eklenebilir bir \u00e7\u00f6z\u00fcmd\u00fcr.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Port-Guvenligi-Port-Security-Gibi-Switch-Ozelliklerinin-Aktiflestirilmesi\"><\/span>Port G\u00fcvenli\u011fi (Port Security) Gibi Switch \u00d6zelliklerinin Aktifle\u015ftirilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Y\u00f6netilebilir switch&#8217;lerde bulunan Port G\u00fcvenli\u011fi \u00f6zelli\u011fi, bir switch portuna ba\u011flanmas\u0131na izin verilen MAC adresi say\u0131s\u0131n\u0131 s\u0131n\u0131rlamak i\u00e7in kullan\u0131labilir. Sald\u0131rgan\u0131n a\u011fa ba\u011flan\u0131p sald\u0131r\u0131 yapmas\u0131n\u0131 zorla\u015ft\u0131rabilir. &#8220;Sticky MAC&#8221; gibi \u00f6zellikler, bir porta ilk ba\u011flanan cihaz\u0131n MAC adresini \u00f6\u011frenip sadece o adresten gelen trafi\u011fe izin vererek g\u00fcvenli\u011fi art\u0131r\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ag-Segmentasyonu-ve-VLAN-Yapilandirmasi\"><\/span>A\u011f Segmentasyonu ve VLAN Yap\u0131land\u0131rmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>A\u011flar\u0131 daha k\u00fc\u00e7\u00fck, izole edilmi\u015f segmentlere veya Sanal LAN&#8217;lara (VLAN) b\u00f6lmek, bir ARP Spoofing sald\u0131r\u0131s\u0131n\u0131n etki alan\u0131n\u0131 s\u0131n\u0131rlar. ARP yay\u0131nlar\u0131 (broadcast) sadece kendi VLAN&#8217;lar\u0131 i\u00e7inde hareket edebilir. Bu sayede, bir VLAN&#8217;daki bir sald\u0131rgan, di\u011fer VLAN&#8217;lardaki cihazlar\u0131 hedef alamaz. Bu, \u00f6zellikle b\u00fcy\u00fck kurumsal a\u011flarda g\u00fcvenli\u011fi art\u0131rmak i\u00e7in standart bir uygulamad\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sanal-Ozel-Ag-VPN-Kullanimi\"><\/span>Sanal \u00d6zel A\u011f (VPN) Kullan\u0131m\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir VPN kullanmak, ARP Spoofing sald\u0131r\u0131s\u0131n\u0131 engellemese de en tehlikeli sonucunu (veri h\u0131rs\u0131zl\u0131\u011f\u0131) etkisiz hale getirir. VPN, cihaz\u0131n\u0131z ile VPN sunucusu aras\u0131nda \u015fifreli bir t\u00fcnel olu\u015fturur. Bir sald\u0131rgan ARP Spoofing ile trafi\u011fi ele ge\u00e7irmeyi ba\u015farsa bile, t\u00fcm veriler g\u00fc\u00e7l\u00fc bir \u015fifreleme ile korundu\u011fu i\u00e7in okuyabilece\u011fi tek \u015fey anlams\u0131z, \u015fifrelenmi\u015f karakterler olacakt\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"ARP-Saldirisi-Onleme-Sistemleri-IPSIDS\"><\/span>ARP Sald\u0131r\u0131s\u0131 \u00d6nleme Sistemleri (IPS\/IDS)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>A\u011f tabanl\u0131 Sald\u0131r\u0131 \u00d6nleme Sistemleri (IPS) ve Sald\u0131r\u0131 Tespit Sistemleri (IDS), a\u011f trafi\u011fini anormal aktiviteler i\u00e7in s\u00fcrekli olarak analiz eder. Bir\u00e7ok modern IPS\/IDS, ARP Spoofing giri\u015fimlerini karakterize eden anormal ARP trafi\u011fini (\u00f6rne\u011fin, \u00e7ok say\u0131da istenmemi\u015f ARP yan\u0131t\u0131) tespit edebilir ve bu trafi\u011fi engelleyerek veya sistem y\u00f6neticisini uyararak sald\u0131r\u0131y\u0131 durdurabilir.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>\u00d6nlem Y\u00f6ntemi<\/th>\n<th>Koruma D\u00fczeyi<\/th>\n<th>Uygulama Zorlu\u011fu<\/th>\n<th>\u00d6l\u00e7eklenebilirlik<\/th>\n<th>A\u00e7\u0131klama<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Statik ARP Girdileri<\/strong><\/td>\n<td>Y\u00fcksek<\/td>\n<td>Y\u00fcksek<\/td>\n<td>D\u00fc\u015f\u00fck<\/td>\n<td>Manuel yap\u0131land\u0131rma gerektirir, b\u00fcy\u00fck a\u011flar i\u00e7in pratik de\u011fildir.<\/td>\n<\/tr>\n<tr>\n<td><strong>Dynamic ARP Inspection (DAI)<\/strong><\/td>\n<td>\u00c7ok Y\u00fcksek<\/td>\n<td>Orta<\/td>\n<td>Y\u00fcksek<\/td>\n<td>Y\u00f6netilebilir switch gerektirir, otomatik ve etkilidir.<\/td>\n<\/tr>\n<tr>\n<td><strong>A\u011f Segmentasyonu (VLAN)<\/strong><\/td>\n<td>Orta<\/td>\n<td>Orta<\/td>\n<td>Y\u00fcksek<\/td>\n<td>Sald\u0131r\u0131n\u0131n yay\u0131lmas\u0131n\u0131 ve etki alan\u0131n\u0131 s\u0131n\u0131rlar.<\/td>\n<\/tr>\n<tr>\n<td><strong>VPN Kullan\u0131m\u0131<\/strong><\/td>\n<td>Y\u00fcksek (Veri Koruma)<\/td>\n<td>D\u00fc\u015f\u00fck<\/td>\n<td>Y\u00fcksek<\/td>\n<td>Sald\u0131r\u0131y\u0131 engellemez ama veriyi \u015fifreleyerek okunmaz hale getirir.<\/td>\n<\/tr>\n<tr>\n<td><strong>IPS\/IDS Sistemleri<\/strong><\/td>\n<td>Orta-Y\u00fcksek<\/td>\n<td>Orta-Y\u00fcksek<\/td>\n<td>Y\u00fcksek<\/td>\n<td>Anormal ARP trafi\u011fini tespit edip alarm \u00fcretir veya engeller.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"Kurumsal-Ag-Guvenligi-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\"><\/span>Kurumsal A\u011f G\u00fcvenli\u011fi \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>ARP Spoofing gibi gizli ve etkili sald\u0131r\u0131lar, kurumsal a\u011flar\u0131n ne kadar savunmas\u0131z olabilece\u011finin en net g\u00f6stergelerinden biridir. Standart g\u00fcvenlik \u00f6nlemlerinin yetersiz kald\u0131\u011f\u0131 bu gibi durumlarda, proaktif, katmanl\u0131 ve uzman y\u00f6netimli g\u00fcvenlik \u00e7\u00f6z\u00fcmlerine ihtiya\u00e7 duyulur. G\u00fcvenilir bir <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/\" target=\"_blank\">hosting<\/a> altyap\u0131s\u0131 kadar, bu altyap\u0131y\u0131 koruyan g\u00fcvenlik servisleri de kritiktir. \u0130HS Telekom, kurumunuzun dijital varl\u0131klar\u0131n\u0131 korumak i\u00e7in kapsaml\u0131 ve modern g\u00fcvenlik hizmetleri sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Gelismis-Tehdit-Algilama-ve-Onleme-Cozumleri\"><\/span>Geli\u015fmi\u015f Tehdit Alg\u0131lama ve \u00d6nleme \u00c7\u00f6z\u00fcmleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130HS Telekom, sadece bilinen tehditlere kar\u015f\u0131 de\u011fil, ayn\u0131 zamanda ARP Spoofing gibi davran\u0131\u015fsal anormalliklere dayanan sald\u0131r\u0131lara kar\u015f\u0131 da koruma sa\u011flayan geli\u015fmi\u015f tehdit alg\u0131lama sistemleri kullan\u0131r. A\u011f trafi\u011finizi s\u00fcrekli analiz ederek \u015f\u00fcpheli aktiviteleri an\u0131nda tespit eder ve m\u00fcdahale ederiz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Katmanli-ve-Butunsel-Guvenlik-Mimarisi\"><\/span>Katmanl\u0131 ve B\u00fct\u00fcnsel G\u00fcvenlik Mimarisi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>G\u00fcvenli\u011fin tek bir \u00fcr\u00fcne veya teknolojiye indirgenemeyece\u011finin bilincindeyiz. Bu nedenle, g\u00fcvenlik duvarlar\u0131ndan (Firewall) sald\u0131r\u0131 \u00f6nleme sistemlerine (IPS\/IDS), DAI ve port g\u00fcvenli\u011fi gibi switch seviyesi kontrollerden \u015fifreli ileti\u015fim sa\u011flayan VPN \u00e7\u00f6z\u00fcmlerine kadar bir\u00e7ok katman\u0131 bir arada kullanan b\u00fct\u00fcnsel bir g\u00fcvenlik mimarisi sunuyoruz. \u0130ster payla\u015f\u0131ml\u0131 bir <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/wordpress-hosting.html\" target=\"_blank\">wordpress hosting<\/a> hizmeti, ister size \u00f6zel bir <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vps-server.html\" target=\"_blank\">vps<\/a> olsun, her katmanda g\u00fcvenli\u011fi \u00f6n planda tutar\u0131z.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"724-Proaktif-Ag-Izleme-ve-Yonetim-Hizmetleri\"><\/span>7\/24 Proaktif A\u011f \u0130zleme ve Y\u00f6netim Hizmetleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Siber sald\u0131r\u0131lar zaman ve mekan tan\u0131maz. \u0130HS Telekom&#8217;un G\u00fcvenlik Operasyon Merkezi (SOC), a\u011f\u0131n\u0131z\u0131 7\/24 proaktif olarak izler. Uzman ekibimiz, olas\u0131 bir sald\u0131r\u0131 belirtisini an\u0131nda fark ederek tehditleri size ula\u015fmadan etkisiz hale getirir ve sistemlerinizin kesintisiz ve g\u00fcvenli \u00e7al\u0131\u015fmas\u0131n\u0131 sa\u011flar. \u00d6zellikle y\u00fcksek performans gerektiren <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vds-sunucu.html\" target=\"_blank\">vds<\/a> veya fiziksel <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/\" target=\"_blank\">sunucu<\/a> \u00e7\u00f6z\u00fcmlerinde bu proaktif izleme hayati \u00f6nem ta\u015f\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Uzman-Guvenlik-Danismanligi-ve-Destek-Ekibi\"><\/span>Uzman G\u00fcvenlik Dan\u0131\u015fmanl\u0131\u011f\u0131 ve Destek Ekibi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>A\u011f altyap\u0131n\u0131z\u0131n mevcut g\u00fcvenlik durumunu analiz etmek, zafiyetlerinizi belirlemek ve kurumunuza \u00f6zel en uygun g\u00fcvenlik stratejisini olu\u015fturmak i\u00e7in uzman dan\u0131\u015fmanlar\u0131m\u0131zdan destek alabilirsiniz. \u0130htiya\u00e7lar\u0131n\u0131za y\u00f6nelik do\u011fru g\u00fcvenlik \u00e7\u00f6z\u00fcmlerini konumland\u0131rmaktan, mevcut sistemlerinizin y\u00f6netimine kadar her a\u015famada yan\u0131n\u0131zday\u0131z. G\u00fcvenli bir altyap\u0131n\u0131n ilk ad\u0131m\u0131 do\u011fru bir <a href=\"https:\/\/www.ihs.com.tr\/domain\/alan-adi-domain-tescili.html\" target=\"_blank\">domain sorgulama<\/a> ve tescili ile ba\u015flar ve katmanl\u0131 g\u00fcvenlik \u00f6nlemleriyle devam eder.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>ARP Spoofing, yerel a\u011flardaki (LAN) en yayg\u0131n ve tehlikeli sald\u0131r\u0131 t\u00fcrlerinden biridir. Temelde a\u011f ileti\u015fiminin yap\u0131 ta\u015flar\u0131ndan biri olan Adres \u00c7\u00f6z\u00fcmleme Protokol\u00fc&#8217;n\u00fcn&hellip;<\/p>\n","protected":false},"author":3,"featured_media":16218,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[466],"tags":[],"class_list":["post-16217","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bilgi-guvenligi"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16217","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=16217"}],"version-history":[{"count":1,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16217\/revisions"}],"predecessor-version":[{"id":16219,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16217\/revisions\/16219"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/16218"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=16217"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=16217"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=16217"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}