{"id":16505,"date":"2026-09-13T21:52:54","date_gmt":"2026-09-13T18:52:54","guid":{"rendered":"https:\/\/www.ihs.com.tr\/blog\/?p=16505"},"modified":"2026-09-13T21:52:54","modified_gmt":"2026-09-13T18:52:54","slug":"smurf-saldirisi-nedir","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/","title":{"rendered":"Smurf Sald\u0131r\u0131s\u0131 Nedir? Sahte IP \u0130stekleri Kurban\u0131n \u0130nternet Ba\u011flant\u0131s\u0131n\u0131 Nas\u0131l Bo\u011far?"},"content":{"rendered":"<p>Smurf sald\u0131r\u0131s\u0131, siber sald\u0131rganlar\u0131n hedef ald\u0131klar\u0131 bir sistemin internet altyap\u0131s\u0131n\u0131 kas\u0131tl\u0131 olarak hizmet veremeyecek duruma getirmek i\u00e7in kulland\u0131klar\u0131 eski ancak hala etkili bir Da\u011f\u0131t\u0131lm\u0131\u015f Hizmet Reddi (DDoS) sald\u0131r\u0131 y\u00f6ntemidir. Bu sald\u0131r\u0131 t\u00fcr\u00fcnde, sald\u0131rganlar binlerce, hatta milyonlarca sahte a\u011f iste\u011fi olu\u015fturarak kurban\u0131n internet bant geni\u015fli\u011fini tamamen doldurur. Sonu\u00e7 olarak, me\u015fru kullan\u0131c\u0131lar web sitesine, uygulamaya veya a\u011f kaynaklar\u0131na eri\u015femez hale gelir. Sald\u0131r\u0131n\u0131n temel prensibi, a\u011fdaki bir yay\u0131n (broadcast) \u00f6zelli\u011fini k\u00f6t\u00fcye kullanarak k\u00fc\u00e7\u00fck bir iste\u011fi devasa bir trafik seline d\u00f6n\u00fc\u015ft\u00fcrmektir. Bu y\u00f6n\u00fcyle, bir &#8220;y\u00fckseltme&#8221; sald\u0131r\u0131s\u0131 olarak s\u0131n\u0131fland\u0131r\u0131l\u0131r.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7erik Tablosu<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6aa710e4c8bd9\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\" id=\"ez-toc-cssicon-toggle-item-6aa710e4c8bd9\" aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Smurf-Saldirisinin-Temelleri\" >Smurf Sald\u0131r\u0131s\u0131n\u0131n Temelleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Smurf-Saldirisi-Nedir\" >Smurf Sald\u0131r\u0131s\u0131 Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Dagitilmis-Hizmet-Reddi-DDoS-Saldirilari-Kategorisindeki-Yeri\" >Da\u011f\u0131t\u0131lm\u0131\u015f Hizmet Reddi (DDoS) Sald\u0131r\u0131lar\u0131 Kategorisindeki Yeri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Saldirinin-%E2%80%9CSmurf%E2%80%9D-Sirinler-Olarak-Adlandirilmasinin-Kokeni\" >Sald\u0131r\u0131n\u0131n &#8220;Smurf&#8221; (\u015eirinler) Olarak Adland\u0131r\u0131lmas\u0131n\u0131n K\u00f6keni<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Saldirinin-Ana-Aktorleri-ve-Bilesenleri\" >Sald\u0131r\u0131n\u0131n Ana Akt\u00f6rleri ve Bile\u015fenleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Saldirgan-The-Attacker\" >Sald\u0131rgan (The Attacker)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Kurban-The-Victim\" >Kurban (The Victim)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Yukseltici-Ag-Amplifier-Network-veya-Aracilar\" >Y\u00fckseltici A\u011f (Amplifier Network) veya Arac\u0131lar<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Smurf-Saldirisinin-Teknik-Mekanizmasi-Adim-Adim-Isleyis\" >Smurf Sald\u0131r\u0131s\u0131n\u0131n Teknik Mekanizmas\u0131: Ad\u0131m Ad\u0131m \u0130\u015fleyi\u015f<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Asama-1-IP-Sahteciligi-IP-Spoofing-%E2%80%93-Kaynak-IP-Adresinin-Kurbanin-Adresiyle-Degistirilmesi\" >A\u015fama 1: IP Sahtecili\u011fi (IP Spoofing) &#8211; Kaynak IP Adresinin Kurban\u0131n Adresiyle De\u011fi\u015ftirilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Asama-2-ICMP-Yanki-Istegi-Echo-Request-Paketlerinin-Hazirlanmasi\" >A\u015fama 2: ICMP Yank\u0131 \u0130ste\u011fi (Echo Request) Paketlerinin Haz\u0131rlanmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Asama-3-Yukseltici-Agin-Yayin-Adresine-Broadcast-Address-Paket-Gonderimi\" >A\u015fama 3: Y\u00fckseltici A\u011f\u0131n Yay\u0131n Adresine (Broadcast Address) Paket G\u00f6nderimi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Asama-4-Trafigin-Yukseltilmesi-%E2%80%93-Agdaki-Her-Cihazin-Sahte-Kaynaga-Kurbana-Cevap-Vermesi\" >A\u015fama 4: Trafi\u011fin Y\u00fckseltilmesi &#8211; A\u011fdaki Her Cihaz\u0131n Sahte Kayna\u011fa (Kurbana) Cevap Vermesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Asama-5-Kurbanin-ICMP-Yanki-Cevaplari-Echo-Reply-Seli-Altinda-Kalmasi\" >A\u015fama 5: Kurban\u0131n ICMP Yank\u0131 Cevaplar\u0131 (Echo Reply) Seli Alt\u0131nda Kalmas\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Smurf-Saldirisinin-Kurban-Uzerindeki-Yikici-Etkileri\" >Smurf Sald\u0131r\u0131s\u0131n\u0131n Kurban \u00dczerindeki Y\u0131k\u0131c\u0131 Etkileri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Internet-Bant-Genisliginin-Tamamen-Doldurulmasi\" >\u0130nternet Bant Geni\u015fli\u011finin Tamamen Doldurulmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Ag-Ekipmanlari-ve-Sunucu-Kaynaklarinin-Tukenmesi\" >A\u011f Ekipmanlar\u0131 ve Sunucu Kaynaklar\u0131n\u0131n T\u00fckenmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Hizmet-Reddi-Denial-of-Service-ve-Sistemin-Erisilemez-Hale-Gelmesi\" >Hizmet Reddi (Denial of Service) ve Sistemin Eri\u015filemez Hale Gelmesi<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Smurf-Saldirisini-Tespit-Etme-Yontemleri\" >Smurf Sald\u0131r\u0131s\u0131n\u0131 Tespit Etme Y\u00f6ntemleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Ag-Trafiginde-Gozlemlenen-Anormal-ICMP-Yogunlugu\" >A\u011f Trafi\u011finde G\u00f6zlemlenen Anormal ICMP Yo\u011funlu\u011fu<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Gelen-Paketlerde-Tekrarlayan-Kaynak-IP-Adresleri\" >Gelen Paketlerde Tekrarlayan Kaynak IP Adresleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Ag-Performans-Metriklerinde-Ani-Dususlerin-Analizi\" >A\u011f Performans Metriklerinde Ani D\u00fc\u015f\u00fc\u015flerin Analizi<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Smurf-Saldirilarina-Karsi-Korunma-ve-Onleme-Stratejileri\" >Smurf Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Korunma ve \u00d6nleme Stratejileri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Ag-Yoneticileri-Icin-Onlemler\" >A\u011f Y\u00f6neticileri \u0130\u00e7in \u00d6nlemler<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Potansiyel-Kurbanlar-Icin-Savunma-Taktikleri\" >Potansiyel Kurbanlar \u0130\u00e7in Savunma Taktikleri<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Smurf-Saldirisi-ve-Benzer-Yukseltme-Amplification-Saldirilari\" >Smurf Sald\u0131r\u0131s\u0131 ve Benzer Y\u00fckseltme (Amplification) Sald\u0131r\u0131lar\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Fraggle-Saldirisi-ICMP-yerine-UDP-Kullanimi\" >Fraggle Sald\u0131r\u0131s\u0131 (ICMP yerine UDP Kullan\u0131m\u0131)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#DNS-Yukseltme-Saldirilari\" >DNS Y\u00fckseltme Sald\u0131r\u0131lar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#NTP-Yukseltme-Saldirilari\" >NTP Y\u00fckseltme Sald\u0131r\u0131lar\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Smurf-Saldirilarina-Karsi-Korunmak-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\" >Smurf Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Korunmak \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-31\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Yuksek-Kapasiteli-ve-Katmanli-DDoS-Koruma-Altyapisi\" >Y\u00fcksek Kapasiteli ve Katmanl\u0131 DDoS Koruma Altyap\u0131s\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-32\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Anormal-Trafigi-Otomatik-Olarak-Tespit-Eden-ve-Temizleyen-Akilli-Sistemler\" >Anormal Trafi\u011fi Otomatik Olarak Tespit Eden ve Temizleyen Ak\u0131ll\u0131 Sistemler<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-33\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#724-Gorev-Yapan-Guvenlik-Operasyon-Merkezi-SOC-Destegi\" >7\/24 G\u00f6rev Yapan G\u00fcvenlik Operasyon Merkezi (SOC) Deste\u011fi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-34\" href=\"https:\/\/www.ihs.com.tr\/blog\/smurf-saldirisi-nedir\/#Saldiri-Aninda-ve-Sonrasinda-Detayli-Raporlama-ve-Analiz-Hizmetleri\" >Sald\u0131r\u0131 An\u0131nda ve Sonras\u0131nda Detayl\u0131 Raporlama ve Analiz Hizmetleri<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Smurf-Saldirisinin-Temelleri\"><\/span>Smurf Sald\u0131r\u0131s\u0131n\u0131n Temelleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Smurf sald\u0131r\u0131s\u0131n\u0131 ve siber g\u00fcvenlik d\u00fcnyas\u0131ndaki yerini anlamak, onunla m\u00fccadele edebilmenin ilk ad\u0131m\u0131d\u0131r. Bu b\u00f6l\u00fcmde, sald\u0131r\u0131n\u0131n ne oldu\u011fu, DDoS sald\u0131r\u0131lar\u0131 i\u00e7indeki konumu ve isminin ilgin\u00e7 k\u00f6keni ele al\u0131nacakt\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Smurf-Saldirisi-Nedir\"><\/span>Smurf Sald\u0131r\u0131s\u0131 Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Smurf Sald\u0131r\u0131s\u0131, \u0130nternet Kontrol Mesaj Protokol\u00fc (ICMP) yank\u0131 isteklerini (genellikle &#8220;ping&#8221; olarak bilinir) kullanarak hedef bir IP adresine a\u015f\u0131r\u0131 miktarda trafik y\u00f6nlendiren bir Da\u011f\u0131t\u0131lm\u0131\u015f Hizmet Reddi (DDoS) sald\u0131r\u0131s\u0131d\u0131r. Sald\u0131rgan, kurban\u0131n IP adresini taklit ederek (IP sahtecili\u011fi) bir veya daha fazla bilgisayar a\u011f\u0131na ICMP yank\u0131 istekleri g\u00f6nderir. Bu a\u011flardaki t\u00fcm cihazlar, bu sahte iste\u011fe yan\u0131t verir ve t\u00fcm yan\u0131tlar do\u011frudan kurbana y\u00f6nlendirilir. Bu durum, kurban\u0131n a\u011f\u0131n\u0131 ve kaynaklar\u0131n\u0131 t\u00fcketerek hizmetin durmas\u0131na neden olur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Dagitilmis-Hizmet-Reddi-DDoS-Saldirilari-Kategorisindeki-Yeri\"><\/span>Da\u011f\u0131t\u0131lm\u0131\u015f Hizmet Reddi (DDoS) Sald\u0131r\u0131lar\u0131 Kategorisindeki Yeri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Smurf sald\u0131r\u0131s\u0131, DDoS sald\u0131r\u0131lar\u0131n\u0131n &#8220;y\u00fckseltme&#8221; (amplification) kategorisine aittir. Y\u00fckseltme sald\u0131r\u0131lar\u0131n\u0131n temel mant\u0131\u011f\u0131, sald\u0131rgan\u0131n az bir kaynak kullanarak hedef \u00fczerinde \u00e7ok daha b\u00fcy\u00fck bir etki yaratmas\u0131d\u0131r. Smurf sald\u0131r\u0131s\u0131nda bu, tek bir ICMP yank\u0131 iste\u011finin, bir a\u011fdaki y\u00fczlerce veya binlerce cihaz taraf\u0131ndan yan\u0131tlanmas\u0131yla sa\u011flan\u0131r. Bu sayede sald\u0131rgan, kendi bant geni\u015fli\u011finin \u00e7ok \u00f6tesinde bir <a href=\"https:\/\/www.ihs.com.tr\/blog\/ddos-saldirilarinin-ortalama-boyutu-yuzde-52-artti\/\" target=\"_blank\">sald\u0131r\u0131 trafi\u011fi<\/a> olu\u015fturabilir. Bu y\u00f6ntem, sald\u0131rgan\u0131n kimli\u011fini gizlemesini kolayla\u015ft\u0131r\u0131rken, sald\u0131r\u0131n\u0131n etkisini katbekat art\u0131r\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Saldirinin-%E2%80%9CSmurf%E2%80%9D-Sirinler-Olarak-Adlandirilmasinin-Kokeni\"><\/span>Sald\u0131r\u0131n\u0131n &#8220;Smurf&#8221; (\u015eirinler) Olarak Adland\u0131r\u0131lmas\u0131n\u0131n K\u00f6keni<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131n\u0131n ad\u0131, 1980&#8217;lerin pop\u00fcler \u00e7izgi filmi &#8220;\u015eirinler&#8221;den (The Smurfs) gelmektedir. \u00c7izgi filmde, \u00e7ok say\u0131da k\u00fc\u00e7\u00fck ve mavi \u015eirin karakteri, bir araya gelerek kendilerinden \u00e7ok daha b\u00fcy\u00fck olan d\u00fc\u015fmanlar\u0131 Gargamel&#8217;i alt ederdi. Bu siber sald\u0131r\u0131 t\u00fcr\u00fcnde de benzer bir analoji s\u00f6z konusudur: \u00c7ok say\u0131da k\u00fc\u00e7\u00fck ICMP yank\u0131 cevab\u0131 (\u015eirinler), bir araya gelerek hedef sistemi (Gargamel) alt eder. Sald\u0131r\u0131n\u0131n yap\u0131s\u0131, bu k\u00fc\u00e7\u00fck ama toplu g\u00fcc\u00fcn y\u0131k\u0131c\u0131 etkisini yans\u0131tt\u0131\u011f\u0131 i\u00e7in &#8220;Smurf Sald\u0131r\u0131s\u0131&#8221; olarak adland\u0131r\u0131lm\u0131\u015ft\u0131r.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Saldirinin-Ana-Aktorleri-ve-Bilesenleri\"><\/span>Sald\u0131r\u0131n\u0131n Ana Akt\u00f6rleri ve Bile\u015fenleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Smurf sald\u0131r\u0131s\u0131n\u0131n nas\u0131l i\u015fledi\u011fini tam olarak kavramak i\u00e7in sald\u0131r\u0131 senaryosunda yer alan \u00fc\u00e7 ana unsuru tan\u0131mak gerekir. Bu bile\u015fenler; sald\u0131r\u0131y\u0131 ba\u015flatan, sald\u0131r\u0131ya maruz kalan ve sald\u0131r\u0131n\u0131n etkisini art\u0131rmak i\u00e7in kullan\u0131lan arac\u0131 a\u011fd\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Saldirgan-The-Attacker\"><\/span>Sald\u0131rgan (The Attacker)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131rgan, Smurf sald\u0131r\u0131s\u0131n\u0131 planlayan ve ba\u015flatan ki\u015fi veya gruptur. Sald\u0131rgan\u0131n temel amac\u0131, se\u00e7ti\u011fi bir hedefi (kurban) eri\u015filemez hale getirmektir. Bunu ba\u015farmak i\u00e7in, internet \u00fczerinde k\u00f6t\u00fc yap\u0131land\u0131r\u0131lm\u0131\u015f ve y\u00f6nlendirilmi\u015f yay\u0131n isteklerine izin veren a\u011flar\u0131 (y\u00fckseltici a\u011flar) bulur. Ard\u0131ndan, kurban\u0131n IP adresini kaynak olarak g\u00f6steren sahte ICMP paketleri olu\u015fturarak bu a\u011flara g\u00f6nderir ve sald\u0131r\u0131 s\u00fcrecini tetikler.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kurban-The-Victim\"><\/span>Kurban (The Victim)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kurban, sald\u0131r\u0131n\u0131n hedefi olan sunucu, web sitesi, online hizmet veya a\u011f altyap\u0131s\u0131d\u0131r. Sald\u0131r\u0131n\u0131n nihai amac\u0131, kurban\u0131n sistem kaynaklar\u0131n\u0131 ve internet bant geni\u015fli\u011fini t\u00fcketerek me\u015fru kullan\u0131c\u0131lara hizmet vermesini engellemektir. Kurban, sald\u0131r\u0131 s\u0131ras\u0131nda y\u00fckseltici a\u011fdaki t\u00fcm cihazlardan gelen yo\u011fun ICMP yank\u0131 cevaplar\u0131 seli alt\u0131nda kal\u0131r ve bu trafik y\u00fck\u00fcn\u00fc kald\u0131ramayarak devre d\u0131\u015f\u0131 kal\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yukseltici-Ag-Amplifier-Network-veya-Aracilar\"><\/span>Y\u00fckseltici A\u011f (Amplifier Network) veya Arac\u0131lar<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Y\u00fckseltici a\u011f, Smurf sald\u0131r\u0131s\u0131n\u0131n en kritik bile\u015fenidir. Bu a\u011f, IP y\u00f6nlendirilmi\u015f yay\u0131n (IP directed broadcast) trafi\u011fine izin verecek \u015fekilde yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f bir bilgisayar a\u011f\u0131d\u0131r. Sald\u0131rgan, kurban\u0131n IP&#8217;siyle sahtecilik yapt\u0131\u011f\u0131 ICMP iste\u011fini bu a\u011f\u0131n yay\u0131n adresine g\u00f6nderdi\u011finde, a\u011fdaki t\u00fcm aktif cihazlar (bilgisayarlar, yaz\u0131c\u0131lar, y\u00f6nlendiriciler vb.) bu iste\u011fe cevap verir. Her bir cihaz\u0131n g\u00f6nderdi\u011fi cevap paketi, sald\u0131r\u0131n\u0131n &#8220;y\u00fckseltilmesini&#8221; sa\u011flar. \u00d6rne\u011fin, 100 cihaz\u0131n bulundu\u011fu bir a\u011f, tek bir iste\u011fi 100 kat\u0131na \u00e7\u0131kararak kurbana y\u00f6nlendirir.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>Akt\u00f6r\/Bile\u015fen<\/th>\n<th>Rol\u00fc<\/th>\n<th>Amac\u0131 \/ \u0130\u015flevi<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Sald\u0131rgan (Attacker)<\/strong><\/td>\n<td>Ba\u015flat\u0131c\u0131<\/td>\n<td>Sahte ICMP iste\u011fini olu\u015fturur ve y\u00fckseltici a\u011fa g\u00f6ndererek sald\u0131r\u0131y\u0131 tetikler.<\/td>\n<\/tr>\n<tr>\n<td><strong>Kurban (Victim)<\/strong><\/td>\n<td>Hedef<\/td>\n<td>Sald\u0131r\u0131n\u0131n nihai hedefidir. Yo\u011fun trafik alt\u0131nda kalarak hizmet veremez hale gelir.<\/td>\n<\/tr>\n<tr>\n<td><strong>Y\u00fckseltici A\u011f (Amplifier Network)<\/strong><\/td>\n<td>Arac\u0131 \/ Y\u00fckseltici<\/td>\n<td>Sald\u0131rgandan gelen tek bir iste\u011fi a\u011fdaki t\u00fcm cihazlara yay\u0131nlar ve yan\u0131tlar\u0131n kurbana y\u00f6nlendirilmesini sa\u011flayarak sald\u0131r\u0131n\u0131n g\u00fcc\u00fcn\u00fc art\u0131r\u0131r.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"Smurf-Saldirisinin-Teknik-Mekanizmasi-Adim-Adim-Isleyis\"><\/span>Smurf Sald\u0131r\u0131s\u0131n\u0131n Teknik Mekanizmas\u0131: Ad\u0131m Ad\u0131m \u0130\u015fleyi\u015f<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Smurf sald\u0131r\u0131s\u0131, belirli a\u011f protokollerinin ve yap\u0131land\u0131rmalar\u0131n\u0131n zafiyetlerinden faydalanan \u00e7ok ad\u0131ml\u0131 bir s\u00fcre\u00e7tir. Sald\u0131r\u0131n\u0131n nas\u0131l ger\u00e7ekle\u015fti\u011fini anlamak, korunma y\u00f6ntemlerinin mant\u0131\u011f\u0131n\u0131 kavramay\u0131 kolayla\u015ft\u0131r\u0131r. \u0130\u015fte bu s\u00fcrecin ad\u0131m ad\u0131m teknik a\u00e7\u0131klamas\u0131.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Asama-1-IP-Sahteciligi-IP-Spoofing-%E2%80%93-Kaynak-IP-Adresinin-Kurbanin-Adresiyle-Degistirilmesi\"><\/span>A\u015fama 1: IP Sahtecili\u011fi (IP Spoofing) &#8211; Kaynak IP Adresinin Kurban\u0131n Adresiyle De\u011fi\u015ftirilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131n\u0131n ilk ve en \u00f6nemli ad\u0131m\u0131 <a href=\"https:\/\/www.ihs.com.tr\/blog\/ip-adresleri-nedir-ve-nasil-calisir\/\" target=\"_blank\">IP adresi<\/a> sahtecili\u011fidir (IP Spoofing). Sald\u0131rgan, g\u00f6nderece\u011fi ICMP paketinin kaynak IP adresi b\u00f6l\u00fcm\u00fcne kendi IP adresini de\u011fil, kurban\u0131n IP adresini yazar. Bu, a\u011fdaki cihazlar\u0131n gelen iste\u011fe cevap verirken yan\u0131tlar\u0131n\u0131 sald\u0131rgana de\u011fil, do\u011frudan kurbana g\u00f6ndermesini sa\u011flar. Bu y\u00f6ntem, hem sald\u0131r\u0131n\u0131n hedefine ula\u015fmas\u0131n\u0131 garantiler hem de sald\u0131rgan\u0131n kimli\u011fini gizlemesine yard\u0131mc\u0131 olur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Asama-2-ICMP-Yanki-Istegi-Echo-Request-Paketlerinin-Hazirlanmasi\"><\/span>A\u015fama 2: ICMP Yank\u0131 \u0130ste\u011fi (Echo Request) Paketlerinin Haz\u0131rlanmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131rgan, kaynak IP adresini kurban\u0131n adresiyle de\u011fi\u015ftirdi\u011fi bir ICMP Yank\u0131 \u0130ste\u011fi (Echo Request) paketi olu\u015fturur. Bu paket, temel olarak bir &#8220;ping&#8221; iste\u011fidir. Normalde a\u011fdaki bir cihaz\u0131n aktif olup olmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in kullan\u0131lan bu masum protokol, Smurf sald\u0131r\u0131s\u0131nda bir silaha d\u00f6n\u00fc\u015f\u00fcr.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Asama-3-Yukseltici-Agin-Yayin-Adresine-Broadcast-Address-Paket-Gonderimi\"><\/span>A\u015fama 3: Y\u00fckseltici A\u011f\u0131n Yay\u0131n Adresine (Broadcast Address) Paket G\u00f6nderimi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Haz\u0131rlanan sahte ICMP paketi, daha \u00f6nce belirlenmi\u015f olan y\u00fckseltici a\u011f\u0131n yay\u0131n adresine (broadcast address) g\u00f6nderilir. Bir a\u011f\u0131n yay\u0131n adresi (\u00f6rne\u011fin, 192.168.1.255), o a\u011fdaki t\u00fcm cihazlara ayn\u0131 anda veri g\u00f6ndermek i\u00e7in kullan\u0131lan \u00f6zel bir adrestir. Y\u00f6nlendiriciler normalde bu t\u00fcr d\u0131\u015far\u0131dan gelen yay\u0131n isteklerini engeller, ancak yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f a\u011flar bu paketleri kabul eder ve i\u015fleme al\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Asama-4-Trafigin-Yukseltilmesi-%E2%80%93-Agdaki-Her-Cihazin-Sahte-Kaynaga-Kurbana-Cevap-Vermesi\"><\/span>A\u015fama 4: Trafi\u011fin Y\u00fckseltilmesi &#8211; A\u011fdaki Her Cihaz\u0131n Sahte Kayna\u011fa (Kurbana) Cevap Vermesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Y\u00fckseltici a\u011f\u0131n y\u00f6nlendiricisi, yay\u0131n adresine gelen ICMP yank\u0131 iste\u011fini a\u011fdaki t\u00fcm aktif cihazlara (bilgisayarlar, sunucular, ak\u0131ll\u0131 cihazlar vb.) iletir. ICMP protokol\u00fc gere\u011fi, bu iste\u011fi alan her cihaz, bir ICMP Yank\u0131 Cevab\u0131 (Echo Reply) paketi olu\u015fturarak iste\u011fin geldi\u011fi kaynak IP adresine geri g\u00f6nderir. IP sahtecili\u011fi nedeniyle bu kaynak adres, kurban\u0131n IP adresidir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Asama-5-Kurbanin-ICMP-Yanki-Cevaplari-Echo-Reply-Seli-Altinda-Kalmasi\"><\/span>A\u015fama 5: Kurban\u0131n ICMP Yank\u0131 Cevaplar\u0131 (Echo Reply) Seli Alt\u0131nda Kalmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Son a\u015famada, y\u00fckseltici a\u011fdaki y\u00fczlerce veya binlerce cihazdan gelen ICMP yank\u0131 cevaplar\u0131 ayn\u0131 anda kurban\u0131n sistemine ula\u015f\u0131r. Bu ani ve devasa trafik art\u0131\u015f\u0131, kurban\u0131n internet ba\u011flant\u0131s\u0131n\u0131n bant geni\u015fli\u011fini tamamen doldurur ve sunucu kaynaklar\u0131n\u0131 (CPU, RAM) t\u00fcketir. Sonu\u00e7 olarak, kurban\u0131n sistemi me\u015fru isteklere cevap veremez hale gelir ve hizmet reddi ger\u00e7ekle\u015fir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Smurf-Saldirisinin-Kurban-Uzerindeki-Yikici-Etkileri\"><\/span>Smurf Sald\u0131r\u0131s\u0131n\u0131n Kurban \u00dczerindeki Y\u0131k\u0131c\u0131 Etkileri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Smurf sald\u0131r\u0131s\u0131, basit bir mekanizmaya sahip olmas\u0131na ra\u011fmen, hedef sistemler \u00fczerinde ciddi ve y\u0131k\u0131c\u0131 sonu\u00e7lar do\u011furabilir. Sald\u0131r\u0131n\u0131n temel amac\u0131 olan hizmet kesintisi, \u00e7e\u015fitli teknik problemlerin bir araya gelmesiyle ortaya \u00e7\u0131kar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Internet-Bant-Genisliginin-Tamamen-Doldurulmasi\"><\/span>\u0130nternet Bant Geni\u015fli\u011finin Tamamen Doldurulmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131n\u0131n en belirgin ve anl\u0131k etkisi, kurban\u0131n internet ba\u011flant\u0131s\u0131n\u0131n tamamen doymas\u0131d\u0131r. Bir y\u00fckseltici a\u011fdaki y\u00fczlerce cihaz\u0131n ayn\u0131 anda g\u00f6nderdi\u011fi ICMP cevap paketleri, hedefin a\u011f altyap\u0131s\u0131n\u0131n ta\u015f\u0131yabilece\u011finden \u00e7ok daha fazla trafik olu\u015fturur. Bu durum, internet hatt\u0131n\u0131n bir nevi &#8220;t\u0131kanmas\u0131na&#8221; neden olur. Sonu\u00e7 olarak, ne i\u00e7eriye ne de d\u0131\u015far\u0131ya y\u00f6nelik hi\u00e7bir me\u015fru veri paketi hareket edemez.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ag-Ekipmanlari-ve-Sunucu-Kaynaklarinin-Tukenmesi\"><\/span>A\u011f Ekipmanlar\u0131 ve Sunucu Kaynaklar\u0131n\u0131n T\u00fckenmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Gelen yo\u011fun trafik seli sadece bant geni\u015fli\u011fini de\u011fil, ayn\u0131 zamanda kurban\u0131n a\u011f ekipmanlar\u0131n\u0131 (y\u00f6nlendiriciler, g\u00fcvenlik duvarlar\u0131) ve sunucular\u0131n\u0131 da hedef al\u0131r. Bu cihazlar, gelen her bir paketi i\u015flemek, analiz etmek ve yan\u0131tlamak i\u00e7in CPU ve bellek gibi kaynaklar kullan\u0131r. Saniyede on binlerce veya y\u00fcz binlerce paketin gelmesi, bu kaynaklar\u0131n h\u0131zla t\u00fckenmesine yol a\u00e7ar. Kaynaklar\u0131 t\u00fckenen <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/\" target=\"_blank\">sunucu<\/a>, me\u015fru kullan\u0131c\u0131 isteklerini i\u015fleyemez ve hatta kilitlenerek tamamen yan\u0131t vermeyi durdurabilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Hizmet-Reddi-Denial-of-Service-ve-Sistemin-Erisilemez-Hale-Gelmesi\"><\/span>Hizmet Reddi (Denial of Service) ve Sistemin Eri\u015filemez Hale Gelmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yukar\u0131da belirtilen iki etkinin do\u011fal sonucu, hizmet reddidir. Bant geni\u015fli\u011fi dolmu\u015f ve sistem kaynaklar\u0131 t\u00fckenmi\u015f bir sunucu, bar\u0131nd\u0131rd\u0131\u011f\u0131 web sitesine, uygulamaya veya online hizmete eri\u015fimi imkans\u0131z hale getirir. M\u00fc\u015fteriler, kullan\u0131c\u0131lar ve \u00e7al\u0131\u015fanlar sisteme ula\u015famaz, bu da ciddi finansal kay\u0131plara, itibar zedelenmesine ve operasyonel aksakl\u0131klara yol a\u00e7ar. Sald\u0131r\u0131 devam etti\u011fi s\u00fcrece sistem tamamen eri\u015filemez kal\u0131r.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Smurf-Saldirisini-Tespit-Etme-Yontemleri\"><\/span>Smurf Sald\u0131r\u0131s\u0131n\u0131 Tespit Etme Y\u00f6ntemleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Bir Smurf sald\u0131r\u0131s\u0131na maruz kal\u0131nd\u0131\u011f\u0131nda h\u0131zl\u0131 m\u00fcdahale edebilmek i\u00e7in sald\u0131r\u0131y\u0131 erken a\u015famada tespit etmek kritik \u00f6neme sahiptir. A\u011f y\u00f6neticileri ve g\u00fcvenlik uzmanlar\u0131, belirli anormallikleri izleyerek bu t\u00fcr bir sald\u0131r\u0131n\u0131n varl\u0131\u011f\u0131n\u0131 anlayabilirler.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ag-Trafiginde-Gozlemlenen-Anormal-ICMP-Yogunlugu\"><\/span>A\u011f Trafi\u011finde G\u00f6zlemlenen Anormal ICMP Yo\u011funlu\u011fu<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Smurf sald\u0131r\u0131s\u0131n\u0131n en belirgin i\u015fareti, a\u011f trafi\u011fi analiz ara\u00e7lar\u0131nda g\u00f6zlemlenen ani ve orant\u0131s\u0131z ICMP trafi\u011fi art\u0131\u015f\u0131d\u0131r. \u00d6zellikle, \u00e7ok say\u0131da farkl\u0131 kaynaktan gelen ICMP Yank\u0131 Cevab\u0131 (Echo Reply) paketlerinin g\u00f6r\u00fclmesi tipik bir g\u00f6stergedir. Normal bir a\u011f trafi\u011finde bu kadar yo\u011fun ve tek y\u00f6nl\u00fc bir ICMP cevab\u0131 ak\u0131\u015f\u0131 beklenmez. Bu anomali, bir y\u00fckseltme sald\u0131r\u0131s\u0131n\u0131n habercisidir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Gelen-Paketlerde-Tekrarlayan-Kaynak-IP-Adresleri\"><\/span>Gelen Paketlerde Tekrarlayan Kaynak IP Adresleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bu ba\u015fl\u0131k genellikle yanl\u0131\u015f anla\u015f\u0131lmaktad\u0131r. Asl\u0131nda, Smurf sald\u0131r\u0131s\u0131nda kurban\u0131n IP adresi *hedef* adrestir ve gelen paketlerin *kaynak* IP adresleri y\u00fckseltici a\u011fdaki farkl\u0131 cihazlara aittir. Dolay\u0131s\u0131yla, tespitteki kilit nokta, \u00e7ok say\u0131da farkl\u0131 ve alakas\u0131z kaynaktan gelen ICMP cevaplar\u0131n\u0131n tek bir hedefe (kurban\u0131n IP&#8217;sine) y\u00f6nelmesidir. A\u011f y\u00f6neticileri, bu beklenmedik ve istenmemi\u015f cevap paketlerini analiz ederek sald\u0131r\u0131y\u0131 tespit edebilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ag-Performans-Metriklerinde-Ani-Dususlerin-Analizi\"><\/span>A\u011f Performans Metriklerinde Ani D\u00fc\u015f\u00fc\u015flerin Analizi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Teknik trafik analizinin yan\u0131 s\u0131ra, sistemin genel performans metriklerindeki ani bozulmalar da \u00f6nemli bir ipucudur. Y\u00fcksek gecikme (latency), paket kayb\u0131 (packet loss) oranlar\u0131nda art\u0131\u015f, sunucu CPU kullan\u0131m\u0131n\u0131n %100&#8217;e ula\u015fmas\u0131 ve internet bant geni\u015fli\u011fi kullan\u0131m\u0131n\u0131n tavan yapmas\u0131 gibi belirtiler, bir hizmet reddi sald\u0131r\u0131s\u0131n\u0131n ya\u015fand\u0131\u011f\u0131n\u0131 g\u00f6sterir. Bu metrikler, ICMP anormallikleri ile birle\u015fti\u011finde Smurf sald\u0131r\u0131s\u0131 te\u015fhisini g\u00fc\u00e7lendirir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Smurf-Saldirilarina-Karsi-Korunma-ve-Onleme-Stratejileri\"><\/span>Smurf Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Korunma ve \u00d6nleme Stratejileri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Smurf sald\u0131r\u0131s\u0131 eski bir y\u00f6ntem olmas\u0131na ra\u011fmen, internet \u00fczerindeki yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f a\u011flar var oldu\u011fu s\u00fcrece bir tehdit olmaya devam edecektir. Bu sald\u0131r\u0131lara kar\u015f\u0131 korunma, hem a\u011flar\u0131n birer y\u00fckseltici olarak kullan\u0131lmas\u0131n\u0131 engellemeyi hem de potansiyel kurbanlar\u0131n kendilerini savunmas\u0131n\u0131 i\u00e7erir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ag-Yoneticileri-Icin-Onlemler\"><\/span>A\u011f Y\u00f6neticileri \u0130\u00e7in \u00d6nlemler<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>A\u011f altyap\u0131s\u0131n\u0131 y\u00f6neten profesyoneller, kendi a\u011flar\u0131n\u0131n bir sald\u0131r\u0131da arac\u0131 olarak kullan\u0131lmas\u0131n\u0131 \u00f6nlemek i\u00e7in kritik bir role sahiptir. Bu, t\u00fcm internet ekosisteminin g\u00fcvenli\u011fine katk\u0131da bulunur.<\/p>\n<h4>Y\u00f6nlendiricilerde (Router) Y\u00f6nlendirilmi\u015f Yay\u0131n (Directed Broadcast) Deste\u011fini Kapatma<\/h4>\n<p>Smurf sald\u0131r\u0131s\u0131na kar\u015f\u0131 en etkili ve temel \u00f6nlem budur. Modern y\u00f6nlendiricilerin \u00e7o\u011fu varsay\u0131lan olarak bu ayarla gelse de, t\u00fcm a\u011f ge\u00e7idi y\u00f6nlendiricilerinin d\u0131\u015far\u0131dan gelen ve bir yay\u0131n adresine y\u00f6nlendirilmi\u015f paketleri iletmeyecek \u015fekilde yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131ndan emin olunmal\u0131d\u0131r. Bu basit yap\u0131land\u0131rma, bir a\u011f\u0131n y\u00fckseltici olarak kullan\u0131lmas\u0131n\u0131 tamamen engeller.<\/p>\n<h4>Gelen ve Giden Trafikte IP Sahtecili\u011fini \u00d6nleyici Filtreler (Ingress\/Egress Filtering)<\/h4>\n<p>A\u011f y\u00f6neticileri, a\u011flar\u0131ndan \u00e7\u0131kan (egress) ve a\u011flar\u0131na giren (ingress) trafi\u011fi filtreleyebilir. Egress filtrelemesi, a\u011f\u0131n\u0131zdaki bir kullan\u0131c\u0131n\u0131n sahte bir kaynak IP adresi ile paket g\u00f6ndermesini engeller. Ingress filtrelemesi ise, a\u011f\u0131n\u0131z\u0131n d\u0131\u015f\u0131ndan gelen ve kaynak IP adresi olarak mant\u0131ksal olarak a\u011f\u0131n\u0131z\u0131n i\u00e7inden bir adres gibi g\u00f6r\u00fcnen paketleri engelleyerek IP sahtecili\u011fine kar\u015f\u0131 koruma sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Potansiyel-Kurbanlar-Icin-Savunma-Taktikleri\"><\/span>Potansiyel Kurbanlar \u0130\u00e7in Savunma Taktikleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Do\u011frudan sald\u0131r\u0131ya u\u011frayan veya u\u011frama riski ta\u015f\u0131yan kurumlar i\u00e7in savunma, sald\u0131r\u0131 trafi\u011fini hedefe ula\u015fmadan engellemeye odaklan\u0131r.<\/p>\n<h4>\u0130nternet Servis Sa\u011flay\u0131c\u0131 (ISP) D\u00fczeyinde Koruma Talep Etme<\/h4>\n<p>Bir sald\u0131r\u0131 ba\u015flad\u0131\u011f\u0131nda, kurban\u0131n kendi altyap\u0131s\u0131 genellikle trafi\u011fi engelleyemeyecek kadar a\u015f\u0131r\u0131 y\u00fcklenmi\u015f olur. Bu durumda, \u0130nternet Servis Sa\u011flay\u0131c\u0131s\u0131 (ISP) ile ileti\u015fime ge\u00e7mek en etkili ilk ad\u0131md\u0131r. ISP&#8217;ler, sald\u0131r\u0131 trafi\u011fini kendi b\u00fcy\u00fck a\u011flar\u0131nda, yani &#8220;yukar\u0131 ak\u0131\u015fta&#8221; (upstream) tespit edip engelleyebilirler. Bu i\u015fleme &#8220;blackholing&#8221; veya &#8220;scrubbing&#8221; denir ve zararl\u0131 trafi\u011fin kurban\u0131n a\u011f\u0131na ula\u015fmas\u0131n\u0131 \u00f6nler.<\/p>\n<h4>Profesyonel DDoS Koruma Hizmetlerini Kullanma<\/h4>\n<p>S\u00fcrekli sald\u0131r\u0131 riski alt\u0131nda olan kurumlar i\u00e7in en sa\u011flam \u00e7\u00f6z\u00fcm, profesyonel DDoS koruma hizmeti almakt\u0131r. Bu hizmetler, k\u00fcresel olarak da\u011f\u0131t\u0131lm\u0131\u015f devasa bir a\u011f altyap\u0131s\u0131na sahiptir. Gelen t\u00fcm trafik \u00f6nce bu hizmetin &#8220;temizleme merkezlerine&#8221; y\u00f6nlendirilir. Burada, geli\u015fmi\u015f algoritmalar ve donan\u0131mlar kullan\u0131larak anormal ve k\u00f6t\u00fc niyetli trafik (Smurf paketleri gibi) filtrelenir ve sadece temiz, me\u015fru trafik kurban\u0131n sunucusuna iletilir. Bu, en b\u00fcy\u00fck \u00f6l\u00e7ekli sald\u0131r\u0131lara kar\u015f\u0131 bile kesintisiz hizmet sa\u011flar.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Smurf-Saldirisi-ve-Benzer-Yukseltme-Amplification-Saldirilari\"><\/span>Smurf Sald\u0131r\u0131s\u0131 ve Benzer Y\u00fckseltme (Amplification) Sald\u0131r\u0131lar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Smurf, bir y\u00fckseltme sald\u0131r\u0131s\u0131n\u0131n ilk ve en bilinen \u00f6rneklerinden biridir, ancak sald\u0131rganlar ayn\u0131 temel prensibi farkl\u0131 protokolleri kullanarak da uygulam\u0131\u015flard\u0131r. Bu sald\u0131r\u0131lar\u0131n ortak noktas\u0131, k\u00fc\u00e7\u00fck bir iste\u011fi b\u00fcy\u00fck bir yan\u0131ta d\u00f6n\u00fc\u015ft\u00fcrerek hedefi bo\u011fmakt\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Fraggle-Saldirisi-ICMP-yerine-UDP-Kullanimi\"><\/span>Fraggle Sald\u0131r\u0131s\u0131 (ICMP yerine UDP Kullan\u0131m\u0131)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Fraggle sald\u0131r\u0131s\u0131, Smurf sald\u0131r\u0131s\u0131n\u0131n bir varyasyonudur ve neredeyse tamamen ayn\u0131 \u015fekilde \u00e7al\u0131\u015f\u0131r. Aradaki tek temel fark, protokol se\u00e7imidir. Smurf, ICMP yank\u0131 isteklerini kullan\u0131rken, Fraggle Kullan\u0131c\u0131 Datagram Protokol\u00fc (UDP) yank\u0131 isteklerini (genellikle port 7 ve 19&#8217;daki servisler) kullan\u0131r. Sald\u0131rgan, yine kurban\u0131n IP&#8217;sini taklit ederek y\u00fckseltici a\u011f\u0131n yay\u0131n adresine UDP paketleri g\u00f6nderir ve a\u011fdaki cihazlar\u0131n UDP cevaplar\u0131n\u0131 kurbana y\u00f6nlendirmesini sa\u011flar. Mekanizma ayn\u0131, sadece kullan\u0131lan &#8220;mermi&#8221; farkl\u0131d\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"DNS-Yukseltme-Saldirilari\"><\/span>DNS Y\u00fckseltme Sald\u0131r\u0131lar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bu sald\u0131r\u0131 t\u00fcr\u00fcnde, sald\u0131rganlar internet \u00fczerindeki a\u00e7\u0131k DNS \u00e7\u00f6z\u00fcmleyicilerini (open DNS resolvers) kullan\u0131r. Sald\u0131rgan, kurban\u0131n IP adresini kaynak olarak g\u00f6stererek bu DNS sunucular\u0131na k\u00fc\u00e7\u00fck bir DNS sorgusu g\u00f6nderir. Genellikle, b\u00fcy\u00fck bir yan\u0131t \u00fcretecek \u00f6zel bir sorgu se\u00e7ilir (\u00f6rne\u011fin, &#8220;ANY&#8221; sorgusu). DNS sunucusu, bu k\u00fc\u00e7\u00fck iste\u011fe kar\u015f\u0131l\u0131k \u00e7ok daha b\u00fcy\u00fck boyutlu bir yan\u0131t paketi olu\u015fturur ve bunu sahte kaynak adresine, yani kurbana g\u00f6nderir. Bu y\u00f6ntemle \u00e7ok y\u00fcksek y\u00fckseltme oranlar\u0131na ula\u015fmak m\u00fcmk\u00fcnd\u00fcr.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"NTP-Yukseltme-Saldirilari\"><\/span>NTP Y\u00fckseltme Sald\u0131r\u0131lar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>A\u011f Zaman Protokol\u00fc (NTP), bilgisayar saatlerini senkronize etmek i\u00e7in kullan\u0131l\u0131r ve ayn\u0131 zamanda bir y\u00fckseltme sald\u0131r\u0131s\u0131 vekt\u00f6r\u00fc olabilir. Sald\u0131rganlar, internet \u00fczerindeki a\u00e7\u0131k NTP sunucular\u0131na, kurban\u0131n IP&#8217;siyle sahtelenmi\u015f k\u00fc\u00e7\u00fck istekler g\u00f6nderir. \u00d6zellikle, son 600 istemcinin listesini d\u00f6nd\u00fcren &#8220;monlist&#8221; komutu gibi b\u00fcy\u00fck yan\u0131tlar \u00fcreten komutlar kullan\u0131l\u0131r. Sunucunun bu iste\u011fe verdi\u011fi yan\u0131t, orijinal istekten katbekat b\u00fcy\u00fck oldu\u011fu i\u00e7in, kurban b\u00fcy\u00fck bir NTP trafi\u011fi seli alt\u0131nda kal\u0131r.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>Sald\u0131r\u0131 T\u00fcr\u00fc<\/th>\n<th>Kullan\u0131lan Protokol<\/th>\n<th>Y\u00fckseltici (Arac\u0131)<\/th>\n<th>Temel Mekanizma<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Smurf Sald\u0131r\u0131s\u0131<\/strong><\/td>\n<td>ICMP (Ping)<\/td>\n<td>Y\u00f6nlendirilmi\u015f yay\u0131na izin veren a\u011flar<\/td>\n<td>Sahte ICMP yank\u0131 iste\u011fi, a\u011fdaki t\u00fcm cihazlardan kurbana ICMP yank\u0131 cevab\u0131 olarak d\u00f6ner.<\/td>\n<\/tr>\n<tr>\n<td><strong>Fraggle Sald\u0131r\u0131s\u0131<\/strong><\/td>\n<td>UDP (Echo)<\/td>\n<td>Y\u00f6nlendirilmi\u015f yay\u0131na izin veren a\u011flar<\/td>\n<td>Smurf ile ayn\u0131d\u0131r, ancak ICMP yerine UDP paketleri kullan\u0131l\u0131r.<\/td>\n<\/tr>\n<tr>\n<td><strong>DNS Y\u00fckseltme<\/strong><\/td>\n<td>DNS (UDP)<\/td>\n<td>A\u00e7\u0131k DNS \u00c7\u00f6z\u00fcmleyicileri<\/td>\n<td>K\u00fc\u00e7\u00fck bir DNS sorgusu, sunucudan kurbana b\u00fcy\u00fck bir DNS yan\u0131t\u0131 olarak d\u00f6ner.<\/td>\n<\/tr>\n<tr>\n<td><strong>NTP Y\u00fckseltme<\/strong><\/td>\n<td>NTP (UDP)<\/td>\n<td>A\u00e7\u0131k NTP Sunucular\u0131<\/td>\n<td>K\u00fc\u00e7\u00fck bir NTP komutu (\u00f6rn: monlist), sunucudan kurbana b\u00fcy\u00fck bir veri paketi olarak d\u00f6ner.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"Smurf-Saldirilarina-Karsi-Korunmak-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\"><\/span>Smurf Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Korunmak \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Smurf gibi y\u0131k\u0131c\u0131 DDoS sald\u0131r\u0131lar\u0131, i\u015fletmenizin dijital varl\u0131\u011f\u0131n\u0131 saniyeler i\u00e7inde fel\u00e7 edebilir. Online hizmetlerinizin s\u00fcreklili\u011fi, m\u00fc\u015fteri memnuniyeti ve marka itibar\u0131n\u0131z i\u00e7in proaktif ve profesyonel bir koruma kalkan\u0131na sahip olmak bir l\u00fcks de\u011fil, zorunluluktur. \u0130HS Telekom, bu zorlu siber tehditlere kar\u015f\u0131 en geli\u015fmi\u015f \u00e7\u00f6z\u00fcmleri sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yuksek-Kapasiteli-ve-Katmanli-DDoS-Koruma-Altyapisi\"><\/span>Y\u00fcksek Kapasiteli ve Katmanl\u0131 DDoS Koruma Altyap\u0131s\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130HS Telekom, en b\u00fcy\u00fck ve en karma\u015f\u0131k DDoS sald\u0131r\u0131lar\u0131n\u0131 bile absorbe edebilecek \u015fekilde tasarlanm\u0131\u015f, terabit seviyesinde global bir a\u011f kapasitesine sahiptir. Katmanl\u0131 g\u00fcvenlik mimarimiz, sald\u0131r\u0131 trafi\u011fini hedefinize ula\u015fmadan \u00f6nce a\u011f\u0131n farkl\u0131 seviyelerinde (Network, Transport, Application) tespit edip engeller. Bu, Smurf sald\u0131r\u0131lar\u0131n\u0131n yaratt\u0131\u011f\u0131 devasa trafik selinin altyap\u0131n\u0131za zarar vermesini \u00f6nler.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Anormal-Trafigi-Otomatik-Olarak-Tespit-Eden-ve-Temizleyen-Akilli-Sistemler\"><\/span>Anormal Trafi\u011fi Otomatik Olarak Tespit Eden ve Temizleyen Ak\u0131ll\u0131 Sistemler<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Geli\u015fmi\u015f tehdit alg\u0131lama sistemlerimiz, a\u011f trafi\u011finizi s\u00fcrekli olarak analiz eder ve normal davran\u0131\u015f profillerinden en ufak sapmalar\u0131 bile an\u0131nda tespit eder. Bir Smurf sald\u0131r\u0131s\u0131n\u0131n habercisi olan anormal ICMP yo\u011funlu\u011fu gibi belirtiler alg\u0131land\u0131\u011f\u0131nda, koruma mekanizmalar\u0131m\u0131z otomatik olarak devreye girer. Sald\u0131r\u0131 trafi\u011fi, &#8220;temizleme merkezlerimize&#8221; (scrubbing centers) y\u00f6nlendirilir, burada zararl\u0131 paketler filtrelenirken, me\u015fru kullan\u0131c\u0131 trafi\u011finin kesintisiz olarak sunucular\u0131n\u0131za ula\u015fmas\u0131 sa\u011flan\u0131r. Bu s\u00fcre\u00e7te <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/\" target=\"_blank\">hosting<\/a> hizmetiniz etkilenmez.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"724-Gorev-Yapan-Guvenlik-Operasyon-Merkezi-SOC-Destegi\"><\/span>7\/24 G\u00f6rev Yapan G\u00fcvenlik Operasyon Merkezi (SOC) Deste\u011fi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Otomatik sistemlerimizin yan\u0131 s\u0131ra, alan\u0131nda uzman siber g\u00fcvenlik analistlerinden olu\u015fan G\u00fcvenlik Operasyon Merkezimiz (SOC) 7 g\u00fcn 24 saat g\u00f6revinin ba\u015f\u0131ndad\u0131r. SOC ekibimiz, olas\u0131 tehditleri proaktif olarak izler, sald\u0131r\u0131 an\u0131nda manuel m\u00fcdahalelerde bulunur ve sistemlerinizin her zaman g\u00fcvende oldu\u011fundan emin olur. \u0130htiya\u00e7 an\u0131nda do\u011frudan bir uzmana ula\u015fman\u0131n g\u00fcvencesini ya\u015fars\u0131n\u0131z. Ayn\u0131 zamanda <a href=\"https:\/\/www.ihs.com.tr\/blog\/vds-nedir-nasil-kullanilir-vpsten-farklari-nelerdir\/\" target=\"_blank\">VDS<\/a> ya da <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vps-server.html\" target=\"_blank\">VPS<\/a> gibi sanal sunucu hizmetleriniz i\u00e7in de bu destekten yararlanabilirsiniz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Saldiri-Aninda-ve-Sonrasinda-Detayli-Raporlama-ve-Analiz-Hizmetleri\"><\/span>Sald\u0131r\u0131 An\u0131nda ve Sonras\u0131nda Detayl\u0131 Raporlama ve Analiz Hizmetleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u015eeffafl\u0131k, g\u00fcvenlik hizmetimizin temel bir par\u00e7as\u0131d\u0131r. Bir sald\u0131r\u0131 s\u0131ras\u0131nda ve sonras\u0131nda, sald\u0131r\u0131n\u0131n boyutu, t\u00fcr\u00fc, kaynaklar\u0131 ve al\u0131nan \u00f6nlemler hakk\u0131nda size detayl\u0131 raporlar sunar\u0131z. Bu analizler, altyap\u0131n\u0131z\u0131n zay\u0131f noktalar\u0131n\u0131 anlaman\u0131za ve gelecekteki g\u00fcvenlik stratejilerinizi daha bilin\u00e7li bir \u015fekilde planlaman\u0131za olanak tan\u0131r. Kapsaml\u0131 bir <a href=\"https:\/\/www.ihs.com.tr\/ssl\/\" target=\"_blank\">SSL sertifikas\u0131<\/a> hizmeti ile de sitenizin g\u00fcvenli\u011fini art\u0131rabilirsiniz. Ayr\u0131ca, yeni bir proje i\u00e7in <a href=\"https:\/\/www.ihs.com.tr\/domain\/alan-adi-domain-tescili.html\" target=\"_blank\">domain sorgulama<\/a> yaparak do\u011fru <a href=\"https:\/\/www.ihs.com.tr\/blog\/domain-nedir-ne-ise-yarar\/\" target=\"_blank\">alan ad\u0131<\/a> se\u00e7imi de g\u00fcvenli\u011fin ilk ad\u0131m\u0131d\u0131r. \u00d6zellikle <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/wordpress-hosting.html\" target=\"_blank\">wordpress hosting<\/a> gibi pop\u00fcler platformlar i\u00e7in \u00f6zel g\u00fcvenlik \u00f6nlemleri al\u0131nmas\u0131 \u00f6nemlidir.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Smurf sald\u0131r\u0131s\u0131, siber sald\u0131rganlar\u0131n hedef ald\u0131klar\u0131 bir sistemin internet altyap\u0131s\u0131n\u0131 kas\u0131tl\u0131 olarak hizmet veremeyecek duruma getirmek i\u00e7in kulland\u0131klar\u0131 eski ancak hala etkili&hellip;<\/p>\n","protected":false},"author":3,"featured_media":16506,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[466],"tags":[],"class_list":["post-16505","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bilgi-guvenligi"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16505","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=16505"}],"version-history":[{"count":1,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16505\/revisions"}],"predecessor-version":[{"id":16507,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16505\/revisions\/16507"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/16506"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=16505"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=16505"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=16505"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}