{"id":16565,"date":"2026-09-17T17:02:59","date_gmt":"2026-09-17T14:02:59","guid":{"rendered":"https:\/\/www.ihs.com.tr\/blog\/?p=16565"},"modified":"2026-09-17T17:02:59","modified_gmt":"2026-09-17T14:02:59","slug":"ping-of-death-olum-pingi-nedir","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/","title":{"rendered":"Ping of Death (\u00d6l\u00fcm Pingi) Nedir? Standart \u00dczerinde Paketler \u0130\u015fletim Sistemini Nas\u0131l Dondurur?"},"content":{"rendered":"<p>Ping of Death (PoD) veya T\u00fcrk\u00e7e ad\u0131yla \u00d6l\u00fcm Pingi, siber g\u00fcvenlik d\u00fcnyas\u0131n\u0131n en eski ve en bilinen hizmet reddi (Denial of Service &#8211; DoS) sald\u0131r\u0131lar\u0131ndan biridir. Ad\u0131 korkutucu gelse de, modern bili\u015fim altyap\u0131lar\u0131 i\u00e7in art\u0131k b\u00fcy\u00fck \u00f6l\u00e7\u00fcde tarihsel bir tehdit olarak kabul edilir. Ancak bu sald\u0131r\u0131n\u0131n \u00e7al\u0131\u015fma mekanizmas\u0131, a\u011f protokollerinin ve i\u015fletim sistemlerinin zafiyetlerinin nas\u0131l istismar edilebilece\u011fine dair temel ve son derece \u00f6\u011fretici bir \u00f6rnek sunar. Temelde, hedef sisteme kas\u0131tl\u0131 olarak standart boyut s\u0131n\u0131rlar\u0131n\u0131 a\u015fan, bozuk bir IP paketi g\u00f6ndererek sistemin bu paketi i\u015fleyememesine, donmas\u0131na veya \u00e7\u00f6kmesine neden olma prensibine dayan\u0131r. Bu makalede, Ping of Death sald\u0131r\u0131s\u0131n\u0131n teknik detaylar\u0131n\u0131, a\u011f protokollerinin nas\u0131l manip\u00fcle edildi\u011fini ve g\u00fcn\u00fcm\u00fcz sistemlerinin bu t\u00fcr tehditlere kar\u015f\u0131 nas\u0131l korundu\u011funu derinlemesine inceleyece\u011fiz.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7erik Tablosu<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6aac07df075bc\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\" id=\"ez-toc-cssicon-toggle-item-6aac07df075bc\" aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Ping-ve-ICMP-Protokolunun-Temelleri\" >Ping ve ICMP Protokol\u00fcn\u00fcn Temelleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Ping-Komutu-Nedir-ve-Ag-Teshisinde-Nasil-Kullanilir\" >Ping Komutu Nedir ve A\u011f Te\u015fhisinde Nas\u0131l Kullan\u0131l\u0131r?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#ICMP-Internet-Control-Message-Protocol-Paketlerinin-Yapisi-ve-Gorevleri\" >ICMP (Internet Control Message Protocol) Paketlerinin Yap\u0131s\u0131 ve G\u00f6revleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Ping-of-Death-Olum-Pingi-Saldirisina-Giris\" >Ping of Death (\u00d6l\u00fcm Pingi) Sald\u0131r\u0131s\u0131na Giri\u015f<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Saldirinin-Arkasindaki-Teknik-Mekanizmalar\" >Sald\u0131r\u0131n\u0131n Arkas\u0131ndaki Teknik Mekanizmalar<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#IP-Paketi-Yapisi-ve-Maksimum-Iletim-Birimi-MTU-Kavrami\" >IP Paketi Yap\u0131s\u0131 ve Maksimum \u0130letim Birimi (MTU) Kavram\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#IP-Paket-Parcalama-Fragmentation-Islemi-Neden-Gereklidir\" >IP Paket Par\u00e7alama (Fragmentation) \u0130\u015flemi Neden Gereklidir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Hedef-Sistemde-Paketlerin-Yeniden-Birlestirilmesi-Reassembly-Sureci\" >Hedef Sistemde Paketlerin Yeniden Birle\u015ftirilmesi (Reassembly) S\u00fcreci<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Ping-of-Death-Saldirisi-Adim-Adim-Nasil-Calisir\" >Ping of Death Sald\u0131r\u0131s\u0131 Ad\u0131m Ad\u0131m Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Standart-Boyut-Sinirini-Asan-Bir-ICMP-Echo-Request-Paketi-Olusturma\" >Standart Boyut S\u0131n\u0131r\u0131n\u0131 A\u015fan Bir ICMP Echo Request Paketi Olu\u015fturma<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Buyuk-Paketin-Agda-Iletilebilmek-Icin-Birden-Fazla-Parcaya-Bolunmesi\" >B\u00fcy\u00fck Paketin A\u011fda \u0130letilebilmek \u0130\u00e7in Birden Fazla Par\u00e7aya B\u00f6l\u00fcnmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Hedef-Sistemin-Parcalanmis-Paketleri-Almasi-ve-Birlestirmeye-Calismasi\" >Hedef Sistemin Par\u00e7alanm\u0131\u015f Paketleri Almas\u0131 ve Birle\u015ftirmeye \u00c7al\u0131\u015fmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Yeniden-Birlestirilen-Paketin-Maksimum-Boyutu-Asmasi-Sonucu-Olusan-Hatalar\" >Yeniden Birle\u015ftirilen Paketin Maksimum Boyutu A\u015fmas\u0131 Sonucu Olu\u015fan Hatalar<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Bellek-Tasmasi-Buffer-Overflow-ve-Isletim-Sisteminin-Tepkisi\" >Bellek Ta\u015fmas\u0131 (Buffer Overflow) ve \u0130\u015fletim Sisteminin Tepkisi<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Saldirinin-Sonuclari-ve-Etkileri\" >Sald\u0131r\u0131n\u0131n Sonu\u00e7lar\u0131 ve Etkileri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Hedef-Sistemin-Kilitlenmesi-veya-Cokmesi-System-Crash\" >Hedef Sistemin Kilitlenmesi veya \u00c7\u00f6kmesi (System Crash)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Mavi-Ekran-Hatasi-Blue-Screen-of-Death-%E2%80%93-BSOD-Gibi-Kritik-Sistem-Hatalari\" >Mavi Ekran Hatas\u0131 (Blue Screen of Death &#8211; BSOD) Gibi Kritik Sistem Hatalar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Hizmet-Reddi-Denial-of-Service-%E2%80%93-DoS-Durumunun-Ortaya-Cikmasi\" >Hizmet Reddi (Denial of Service &#8211; DoS) Durumunun Ortaya \u00c7\u0131kmas\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Tarihsel-Surecte-Savunmasiz-Sistemler-ve-Gunumuzdeki-Durum\" >Tarihsel S\u00fcre\u00e7te Savunmas\u0131z Sistemler ve G\u00fcn\u00fcm\u00fczdeki Durum<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Ping-of-Death-Saldirisindan-Etkilenen-Eski-Isletim-Sistemleri-Windows-95-NT-Erken-Linux-Surumleri\" >Ping of Death Sald\u0131r\u0131s\u0131ndan Etkilenen Eski \u0130\u015fletim Sistemleri (Windows 95, NT, Erken Linux S\u00fcr\u00fcmleri)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Modern-Isletim-Sistemlerinin-Bu-Zafiyete-Karsi-Aldigi-Onlemler\" >Modern \u0130\u015fletim Sistemlerinin Bu Zafiyete Kar\u015f\u0131 Ald\u0131\u011f\u0131 \u00d6nlemler<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Ag-Cihazlarinin-Router-Switch-Saldiriya-Karsi-Rolu-ve-Savunmalari\" >A\u011f Cihazlar\u0131n\u0131n (Router, Switch) Sald\u0131r\u0131ya Kar\u015f\u0131 Rol\u00fc ve Savunmalar\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Ping-of-Death-ve-Benzeri-Parcalama-Tabanli-Saldirilar\" >Ping of Death ve Benzeri Par\u00e7alama Tabanl\u0131 Sald\u0131r\u0131lar<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Teardrop-Saldirisi-ve-Parca-Cakismalari\" >Teardrop Sald\u0131r\u0131s\u0131 ve Par\u00e7a \u00c7ak\u0131\u015fmalar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Diger-ICMP-Tabanli-DoS-Saldirilari-Orn-Smurf-Attack\" >Di\u011fer ICMP Tabanl\u0131 DoS Sald\u0131r\u0131lar\u0131 (\u00d6rn: Smurf Attack)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Parcalama-Fragmentation-Zafiyetlerinin-Genel-Guvenlik-Riski\" >Par\u00e7alama (Fragmentation) Zafiyetlerinin Genel G\u00fcvenlik Riski<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Ping-of-Death-Saldirisina-Karsi-Korunma-ve-Onleme-Yontemleri\" >Ping of Death Sald\u0131r\u0131s\u0131na Kar\u015f\u0131 Korunma ve \u00d6nleme Y\u00f6ntemleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Guvenlik-Duvari-Firewall-ile-Bozuk-veya-Anormal-ICMP-Paketlerini-Filtreleme\" >G\u00fcvenlik Duvar\u0131 (Firewall) ile Bozuk veya Anormal ICMP Paketlerini Filtreleme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Saldiri-Tespit-ve-Onleme-Sistemlerinin-IDSIPS-Kullanimi\" >Sald\u0131r\u0131 Tespit ve \u00d6nleme Sistemlerinin (IDS\/IPS) Kullan\u0131m\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Isletim-Sistemi-ve-Ag-Donanimlarini-Guncel-Tutmanin-Onemi\" >\u0130\u015fletim Sistemi ve A\u011f Donan\u0131mlar\u0131n\u0131 G\u00fcncel Tutman\u0131n \u00d6nemi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-31\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Gelen-Paket-Boyutlarini-Dogrulayan-Ag-Politikalari\" >Gelen Paket Boyutlar\u0131n\u0131 Do\u011frulayan A\u011f Politikalar\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-32\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Ag-Guvenligi-ve-DDoS-Korumasi-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\" >A\u011f G\u00fcvenli\u011fi ve DDoS Korumas\u0131 \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-33\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Gelismis-Tehdit-Algilama-Sistemleri-ve-Katmanli-Guvenlik-Altyapisi\" >Geli\u015fmi\u015f Tehdit Alg\u0131lama Sistemleri ve Katmanl\u0131 G\u00fcvenlik Altyap\u0131s\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-34\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Yuksek-Kapasiteli-Ag-Uzerinden-Trafik-Filtreleme-Hizmetleri\" >Y\u00fcksek Kapasiteli A\u011f \u00dczerinden Trafik Filtreleme Hizmetleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-35\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#Anormal-Paketlere-ve-DDoS-Saldirilarina-Karsi-Proaktif-Koruma\" >Anormal Paketlere ve DDoS Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Proaktif Koruma<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-36\" href=\"https:\/\/www.ihs.com.tr\/blog\/ping-of-death-olum-pingi-nedir\/#724-Izleme-ve-Uzman-Guvenlik-Ekibi-Destegi\" >7\/24 \u0130zleme ve Uzman G\u00fcvenlik Ekibi Deste\u011fi<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Ping-ve-ICMP-Protokolunun-Temelleri\"><\/span>Ping ve ICMP Protokol\u00fcn\u00fcn Temelleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Ping of Death sald\u0131r\u0131s\u0131n\u0131n nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 anlamak i\u00e7in \u00f6ncelikle bu sald\u0131r\u0131n\u0131n temelini olu\u015fturan iki \u00f6nemli kavrama yak\u0131ndan bakmak gerekir: Ping komutu ve ICMP protokol\u00fc. Bu ara\u00e7lar, a\u011f y\u00f6neticilerinin ve kullan\u0131c\u0131lar\u0131n a\u011f ba\u011flant\u0131lar\u0131n\u0131 test etmek i\u00e7in her g\u00fcn kulland\u0131\u011f\u0131 temel bile\u015fenlerdir, ancak k\u00f6t\u00fc niyetli ki\u015filer taraf\u0131ndan birer siber silaha d\u00f6n\u00fc\u015ft\u00fcr\u00fclebilirler.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ping-Komutu-Nedir-ve-Ag-Teshisinde-Nasil-Kullanilir\"><\/span>Ping Komutu Nedir ve A\u011f Te\u015fhisinde Nas\u0131l Kullan\u0131l\u0131r?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Ping, bir bilgisayardan ba\u015fka bir bilgisayara veya a\u011f cihaz\u0131na (sunucu, router vb.) k\u00fc\u00e7\u00fck bir veri paketi g\u00f6ndererek aradaki ba\u011flant\u0131n\u0131n durumunu kontrol eden bir a\u011f te\u015fhis arac\u0131d\u0131r. &#8220;Ping atmak&#8221; olarak bilinen bu i\u015flem, temel olarak \u015fu sorulara cevap arar: &#8220;Hedef sistem ayakta m\u0131 ve ula\u015f\u0131labilir mi?&#8221; ve &#8220;Paketlerin hedefe ula\u015f\u0131p geri d\u00f6nmesi ne kadar s\u00fcr\u00fcyor?&#8221;. Ping komutu, hedef sisteme bir &#8220;Echo Request&#8221; (Yank\u0131 \u0130ste\u011fi) paketi g\u00f6nderir. Hedef sistem bu paketi ald\u0131\u011f\u0131nda, bir &#8220;Echo Reply&#8221; (Yank\u0131 Cevab\u0131) paketi ile yan\u0131t verir. Bu s\u00fcre\u00e7, a\u011fdaki gecikme (latency) s\u00fcresini \u00f6l\u00e7mek ve paket kayb\u0131 olup olmad\u0131\u011f\u0131n\u0131 anlamak i\u00e7in kritik \u00f6neme sahiptir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"ICMP-Internet-Control-Message-Protocol-Paketlerinin-Yapisi-ve-Gorevleri\"><\/span>ICMP (Internet Control Message Protocol) Paketlerinin Yap\u0131s\u0131 ve G\u00f6revleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Ping komutunun i\u015flevselli\u011fi, \u0130nternet Kontrol Mesaj Protokol\u00fc (ICMP) sayesinde m\u00fcmk\u00fcnd\u00fcr. ICMP, IP (\u0130nternet Protokol\u00fc) a\u011flar\u0131nda hata raporlama ve kontrol mesajlar\u0131 iletmek i\u00e7in tasarlanm\u0131\u015f bir destek protokol\u00fcd\u00fcr. \u00d6rne\u011fin, bir paketin hedefe ula\u015famamas\u0131, hedefin me\u015fgul olmas\u0131 veya bir rota \u00fczerinde \u00e7ok fazla atlama (hop) olmas\u0131 gibi durumlar ICMP mesajlar\u0131 ile kaynak sisteme bildirilir. Ping komutunun kulland\u0131\u011f\u0131 &#8220;Echo Request&#8221; ve &#8220;Echo Reply&#8221; mesajlar\u0131 da ICMP protokol\u00fcn\u00fcn en yayg\u0131n kullan\u0131lan mesaj t\u00fcrlerindendir. Bu paketler, a\u011fdaki cihazlar\u0131n durumunu ve eri\u015filebilirli\u011fini kontrol etmek i\u00e7in temel bir mekanizma sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ping-of-Death-Olum-Pingi-Saldirisina-Giris\"><\/span>Ping of Death (\u00d6l\u00fcm Pingi) Sald\u0131r\u0131s\u0131na Giri\u015f<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Ping of Death sald\u0131r\u0131s\u0131, ICMP protokol\u00fcn\u00fcn bu me\u015fru kullan\u0131m\u0131n\u0131 k\u00f6t\u00fcye kullan\u0131r. Sald\u0131rgan, normalde a\u011f kurallar\u0131n\u0131n izin verdi\u011finden \u00e7ok daha b\u00fcy\u00fck, kas\u0131tl\u0131 olarak bozulmu\u015f bir ICMP &#8220;Echo Request&#8221; paketi olu\u015fturur. Bu devasa paket, do\u011frudan g\u00f6nderilemedi\u011fi i\u00e7in a\u011f \u00fczerinde par\u00e7alara ayr\u0131l\u0131r. Hedef sistem, bu par\u00e7alar\u0131 ald\u0131\u011f\u0131nda yeniden birle\u015ftirmeye \u00e7al\u0131\u015f\u0131r. Ancak birle\u015ftirme i\u015flemi tamamland\u0131\u011f\u0131nda ortaya \u00e7\u0131kan paketin boyutu, i\u015fletim sisteminin bellek arabelleklerinin (buffer) kald\u0131rabilece\u011finden \u00e7ok daha b\u00fcy\u00fck olur. Bu durum, bellek ta\u015fmas\u0131na (buffer overflow) yol a\u00e7arak sistemin donmas\u0131na, \u00e7\u00f6kmesine veya yeniden ba\u015flamas\u0131na neden olur. K\u0131sacas\u0131, a\u011f te\u015fhisi i\u00e7in tasarlanm\u0131\u015f zarars\u0131z bir ara\u00e7, sistemin kaynaklar\u0131n\u0131 t\u00fcketerek onu devre d\u0131\u015f\u0131 b\u0131rakan bir silaha d\u00f6n\u00fc\u015f\u00fcr.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Saldirinin-Arkasindaki-Teknik-Mekanizmalar\"><\/span>Sald\u0131r\u0131n\u0131n Arkas\u0131ndaki Teknik Mekanizmalar<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Ping of Death sald\u0131r\u0131s\u0131n\u0131n etkinli\u011fi, internetin temelini olu\u015fturan IP (\u0130nternet Protokol\u00fc) paketlerinin yap\u0131s\u0131 ve a\u011flar aras\u0131 veri iletiminin nas\u0131l i\u015fledi\u011fiyle do\u011frudan ilgilidir. Sald\u0131r\u0131n\u0131n nas\u0131l m\u00fcmk\u00fcn oldu\u011funu anlamak i\u00e7in IP paketi, MTU, par\u00e7alama (fragmentation) ve yeniden birle\u015ftirme (reassembly) gibi kavramlar\u0131 bilmek zorunludur. Bu mekanizmalar, verilerin a\u011f \u00fczerinde verimli bir \u015fekilde ta\u015f\u0131nmas\u0131n\u0131 sa\u011flamak i\u00e7in tasarlanm\u0131\u015f olsa da, ayn\u0131 zamanda istismara a\u00e7\u0131k zafiyetler de bar\u0131nd\u0131rabilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"IP-Paketi-Yapisi-ve-Maksimum-Iletim-Birimi-MTU-Kavrami\"><\/span>IP Paketi Yap\u0131s\u0131 ve Maksimum \u0130letim Birimi (MTU) Kavram\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130nternet \u00fczerinden g\u00f6nderilen her veri, IP paketi ad\u0131 verilen k\u00fc\u00e7\u00fck birimlere b\u00f6l\u00fcn\u00fcr. Her IP paketinin bir ba\u015fl\u0131\u011f\u0131 (header) ve bir veri y\u00fck\u00fc (payload) vard\u0131r. Ba\u015fl\u0131k, paketin kayna\u011f\u0131, hedefi, boyutu ve di\u011fer kontrol bilgilerini i\u00e7erir. IP protokol\u00fcn\u00fcn (IPv4) teorik olarak izin verdi\u011fi maksimum paket boyutu 65,535 baytt\u0131r. Ancak, verilerin ge\u00e7ti\u011fi fiziksel a\u011flar\u0131n (Ethernet, Wi-Fi vb.) her birinin ta\u015f\u0131yabilece\u011fi maksimum bir paket boyutu s\u0131n\u0131r\u0131 vard\u0131r. Bu s\u0131n\u0131ra Maksimum \u0130letim Birimi (Maximum Transmission Unit &#8211; MTU) denir. \u00d6rne\u011fin, standart bir Ethernet a\u011f\u0131n\u0131n MTU de\u011feri genellikle 1500 baytt\u0131r. Bu, 65,535 baytl\u0131k teorik s\u0131n\u0131rdan \u00e7ok daha d\u00fc\u015f\u00fckt\u00fcr.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"IP-Paket-Parcalama-Fragmentation-Islemi-Neden-Gereklidir\"><\/span>IP Paket Par\u00e7alama (Fragmentation) \u0130\u015flemi Neden Gereklidir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir IP paketinin boyutu, ge\u00e7mesi gereken a\u011f segmentinin MTU de\u011ferinden b\u00fcy\u00fckse, bu paketin o a\u011fdan ge\u00e7ebilmesi i\u00e7in daha k\u00fc\u00e7\u00fck par\u00e7alara b\u00f6l\u00fcnmesi gerekir. Bu i\u015fleme IP paket par\u00e7alama (fragmentation) denir. \u00d6rne\u011fin, 6000 baytl\u0131k bir paket, MTU de\u011feri 1500 olan bir Ethernet a\u011f\u0131ndan ge\u00e7erken, her biri 1500 bayttan k\u00fc\u00e7\u00fck d\u00f6rt veya daha fazla par\u00e7aya (fragment) ayr\u0131l\u0131r. Her bir par\u00e7a, orijinal paketin bir par\u00e7as\u0131 oldu\u011funu belirten ve yeniden birle\u015ftirme i\u00e7in gerekli bilgileri i\u00e7eren kendi IP ba\u015fl\u0131\u011f\u0131na sahip olur. Par\u00e7alama, farkl\u0131 a\u011f teknolojilerinin birbiriyle uyumlu \u00e7al\u0131\u015fmas\u0131n\u0131 sa\u011flayan temel bir mekanizmad\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Hedef-Sistemde-Paketlerin-Yeniden-Birlestirilmesi-Reassembly-Sureci\"><\/span>Hedef Sistemde Paketlerin Yeniden Birle\u015ftirilmesi (Reassembly) S\u00fcreci<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Par\u00e7alanm\u0131\u015f IP paketleri hedefe ula\u015ft\u0131\u011f\u0131nda, hedef sistemin i\u015fletim sistemi bu par\u00e7alar\u0131 tekrar bir araya getirerek orijinal paketi olu\u015fturmal\u0131d\u0131r. Bu s\u00fcrece yeniden birle\u015ftirme (reassembly) denir. \u0130\u015fletim sistemi, her bir par\u00e7an\u0131n IP ba\u015fl\u0131\u011f\u0131ndaki kimlik ve ofset (offset) bilgilerini kullanarak par\u00e7alar\u0131 do\u011fru s\u0131raya koyar. T\u00fcm par\u00e7alar al\u0131nd\u0131\u011f\u0131nda, orijinal b\u00fcy\u00fck paket yeniden olu\u015fturulur ve \u00fcst katman protokollerine (TCP, UDP veya bu durumda ICMP) i\u015flenmek \u00fczere teslim edilir. Ping of Death sald\u0131r\u0131s\u0131, tam olarak bu yeniden birle\u015ftirme s\u00fcrecindeki bir zafiyeti hedefler.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Ping-of-Death-Saldirisi-Adim-Adim-Nasil-Calisir\"><\/span>Ping of Death Sald\u0131r\u0131s\u0131 Ad\u0131m Ad\u0131m Nas\u0131l \u00c7al\u0131\u015f\u0131r?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Ping of Death sald\u0131r\u0131s\u0131, a\u011f protokollerinin kurallar\u0131n\u0131 manip\u00fcle ederek hedef sistemin \u00e7\u00f6kmesine neden olan zekice tasarlanm\u0131\u015f bir s\u00fcre\u00e7tir. Sald\u0131r\u0131, me\u015fru a\u011f trafi\u011fi gibi g\u00f6r\u00fcnen ancak yap\u0131s\u0131 itibar\u0131yla k\u00f6t\u00fc niyetli olan paketler g\u00f6ndererek, hedef sistemin kendi i\u00e7 mekanizmalar\u0131n\u0131 kendisine kar\u015f\u0131 kullanmas\u0131n\u0131 sa\u011flar. \u0130\u015fte bu sald\u0131r\u0131n\u0131n ad\u0131m ad\u0131m i\u015fleyi\u015fi.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Standart-Boyut-Sinirini-Asan-Bir-ICMP-Echo-Request-Paketi-Olusturma\"><\/span>Standart Boyut S\u0131n\u0131r\u0131n\u0131 A\u015fan Bir ICMP Echo Request Paketi Olu\u015fturma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131n\u0131n ilk ad\u0131m\u0131, normalin \u00e7ok \u00fczerinde bir boyuta sahip bir ICMP Echo Request paketi olu\u015fturmakt\u0131r. IP protokol\u00fc, bir paketin toplam boyutunun en fazla 65,535 bayt olabilece\u011fini belirtir. Sald\u0131rgan, \u00f6zel ara\u00e7lar kullanarak bu s\u0131n\u0131rdan daha b\u00fcy\u00fck, \u00f6rne\u011fin 65,540 baytl\u0131k, kas\u0131tl\u0131 olarak bozuk bir paket yarat\u0131r. Bu paket, tek par\u00e7a halinde hi\u00e7bir a\u011fdan g\u00f6nderilemez \u00e7\u00fcnk\u00fc hem IP standard\u0131n\u0131 ihlal eder hem de yayg\u0131n a\u011flar\u0131n MTU (Maksimum \u0130letim Birimi) de\u011ferinden \u00e7ok daha b\u00fcy\u00fckt\u00fcr.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Buyuk-Paketin-Agda-Iletilebilmek-Icin-Birden-Fazla-Parcaya-Bolunmesi\"><\/span>B\u00fcy\u00fck Paketin A\u011fda \u0130letilebilmek \u0130\u00e7in Birden Fazla Par\u00e7aya B\u00f6l\u00fcnmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131rgan taraf\u0131ndan olu\u015fturulan bu devasa paket, hedef sisteme g\u00f6nderilmek \u00fczere a\u011fa b\u0131rak\u0131ld\u0131\u011f\u0131nda, ilk kar\u015f\u0131la\u015ft\u0131\u011f\u0131 a\u011f cihaz\u0131 (genellikle bir router) taraf\u0131ndan par\u00e7alara ayr\u0131l\u0131r. \u00d6rne\u011fin, MTU de\u011feri 1500 bayt olan bir a\u011fda, 65,540 baytl\u0131k bir paket yakla\u015f\u0131k 45-50 k\u00fc\u00e7\u00fck par\u00e7aya b\u00f6l\u00fcn\u00fcr. Bu par\u00e7alar\u0131n her biri, MTU s\u0131n\u0131r\u0131na uygun ge\u00e7erli birer IP paketi gibi g\u00f6r\u00fcn\u00fcr. Her par\u00e7a, orijinal pakete ait oldu\u011funu belirten kimlik bilgilerini ta\u015f\u0131r, b\u00f6ylece hedef sistem onlar\u0131 birle\u015ftirebilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Hedef-Sistemin-Parcalanmis-Paketleri-Almasi-ve-Birlestirmeye-Calismasi\"><\/span>Hedef Sistemin Par\u00e7alanm\u0131\u015f Paketleri Almas\u0131 ve Birle\u015ftirmeye \u00c7al\u0131\u015fmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Hedef sistemin a\u011f kart\u0131, bu par\u00e7alanm\u0131\u015f paketleri tek tek al\u0131r. \u0130\u015fletim sisteminin a\u011f y\u0131\u011f\u0131n\u0131 (network stack), gelen bu par\u00e7alar\u0131n IP ba\u015fl\u0131klar\u0131ndaki bilgilere bakarak ayn\u0131 orijinal pakete ait olduklar\u0131n\u0131 anlar. Bunun \u00fczerine, t\u00fcm par\u00e7alar gelene kadar bunlar\u0131 bellekte ge\u00e7ici bir alanda (buffer) biriktirmeye ba\u015flar. Bu noktaya kadar her \u015fey normal bir paket yeniden birle\u015ftirme s\u00fcreci gibi i\u015fler.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yeniden-Birlestirilen-Paketin-Maksimum-Boyutu-Asmasi-Sonucu-Olusan-Hatalar\"><\/span>Yeniden Birle\u015ftirilen Paketin Maksimum Boyutu A\u015fmas\u0131 Sonucu Olu\u015fan Hatalar<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131n\u0131n kilit noktas\u0131 buras\u0131d\u0131r. Hedef sistem, t\u00fcm par\u00e7alar\u0131 birle\u015ftirdi\u011finde, ortaya \u00e7\u0131kan toplam paket boyutunun IP standard\u0131 olan 65,535 bayt\u0131 a\u015ft\u0131\u011f\u0131n\u0131 fark eder. Eski ve savunmas\u0131z i\u015fletim sistemleri, bu kadar b\u00fcy\u00fck bir paketi i\u015flemek i\u00e7in tasarlanmam\u0131\u015ft\u0131r. Sistem, bu beklenmedik ve kural d\u0131\u015f\u0131 durumla nas\u0131l ba\u015fa \u00e7\u0131kaca\u011f\u0131n\u0131 bilemez ve kritik hatalar vermeye ba\u015flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Bellek-Tasmasi-Buffer-Overflow-ve-Isletim-Sisteminin-Tepkisi\"><\/span>Bellek Ta\u015fmas\u0131 (Buffer Overflow) ve \u0130\u015fletim Sisteminin Tepkisi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yeniden birle\u015ftirilen devasa paket, i\u015fletim sisteminin bu veri i\u00e7in ay\u0131rd\u0131\u011f\u0131 bellek arabelle\u011fini (buffer) a\u015far ve ta\u015far. Bu duruma &#8220;bellek ta\u015fmas\u0131&#8221; (buffer overflow) denir. Bellek ta\u015fmas\u0131, son derece tehlikeli bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131d\u0131r \u00e7\u00fcnk\u00fc ta\u015fan veriler, bellekteki di\u011fer \u00f6nemli sistem verilerinin veya komutlar\u0131n\u0131n \u00fczerine yaz\u0131labilir. Bu durum, sistemin karars\u0131zla\u015fmas\u0131na, programlar\u0131n \u00e7\u00f6kmesine ve en k\u00f6t\u00fc senaryoda i\u015fletim sisteminin tamamen kilitlenmesine veya beklenmedik bir \u015fekilde yeniden ba\u015flamas\u0131na (crash) yol a\u00e7ar. Sonu\u00e7 olarak, hedef sistem hizmet veremez hale gelir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Saldirinin-Sonuclari-ve-Etkileri\"><\/span>Sald\u0131r\u0131n\u0131n Sonu\u00e7lar\u0131 ve Etkileri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Ping of Death sald\u0131r\u0131s\u0131 ba\u015far\u0131l\u0131 oldu\u011funda, hedef sistem \u00fczerindeki etkileri genellikle ani ve y\u0131k\u0131c\u0131d\u0131r. Sald\u0131r\u0131, donan\u0131m kaynaklar\u0131n\u0131 do\u011frudan hedef almasa da, i\u015fletim sisteminin temel a\u011f ve bellek y\u00f6netimi i\u015flevlerindeki bir zafiyeti istismar ederek sistemin genel i\u015fleyi\u015fini durma noktas\u0131na getirir. Bu etkiler, basit bir hizmet kesintisinden kal\u0131c\u0131 veri kayb\u0131 riskine kadar uzanabilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Hedef-Sistemin-Kilitlenmesi-veya-Cokmesi-System-Crash\"><\/span>Hedef Sistemin Kilitlenmesi veya \u00c7\u00f6kmesi (System Crash)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131n\u0131n en yayg\u0131n ve anl\u0131k sonucu, hedef sistemin tamamen yan\u0131t vermez hale gelmesi, yani &#8220;kilitlenmesi&#8221; veya &#8220;donmas\u0131d\u0131r&#8221;. Bellek ta\u015fmas\u0131 (buffer overflow) nedeniyle, i\u015fletim sisteminin \u00e7ekirde\u011fi (kernel) karars\u0131z bir duruma girer. Bu durumda, fare imleci hareket etmeyebilir, klavye komutlar\u0131 alg\u0131lanmaz ve ekrandaki g\u00f6r\u00fcnt\u00fc donar. Sistemin bu durumdan kurtulmas\u0131 i\u00e7in genellikle fiziksel olarak yeniden ba\u015flat\u0131lmas\u0131 (hard reset) gerekir. Bu durum, kritik hizmetler sunan bir <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/\" target=\"_blank\">sunucu<\/a> i\u00e7in kabul edilemez bir kesinti anlam\u0131na gelir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Mavi-Ekran-Hatasi-Blue-Screen-of-Death-%E2%80%93-BSOD-Gibi-Kritik-Sistem-Hatalari\"><\/span>Mavi Ekran Hatas\u0131 (Blue Screen of Death &#8211; BSOD) Gibi Kritik Sistem Hatalar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u00d6zellikle eski Windows i\u015fletim sistemlerinde, Ping of Death sald\u0131r\u0131s\u0131 me\u015fhur &#8220;Mavi Ekran Hatas\u0131&#8221; (Blue Screen of Death &#8211; BSOD) ile sonu\u00e7lan\u0131rd\u0131. Bu ekran, i\u015fletim sisteminin kurtar\u0131lamaz bir kritik hata ile kar\u015f\u0131la\u015ft\u0131\u011f\u0131n\u0131 ve g\u00fcvenli\u011fi sa\u011flamak i\u00e7in t\u00fcm i\u015flemleri durdurdu\u011funu g\u00f6steren bir hata mesaj\u0131d\u0131r. Benzer \u015fekilde, Linux ve di\u011fer UNIX tabanl\u0131 sistemlerde bu durum &#8220;kernel panic&#8221; olarak adland\u0131r\u0131l\u0131r. Her iki senaryoda da sistem, daha fazla hasar\u0131 \u00f6nlemek i\u00e7in kendini an\u0131nda kapat\u0131r ve genellikle hata hakk\u0131nda teknik bilgiler i\u00e7eren bir d\u00f6k\u00fcm dosyas\u0131 olu\u015fturur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Hizmet-Reddi-Denial-of-Service-%E2%80%93-DoS-Durumunun-Ortaya-Cikmasi\"><\/span>Hizmet Reddi (Denial of Service &#8211; DoS) Durumunun Ortaya \u00c7\u0131kmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Nihayetinde, Ping of Death sald\u0131r\u0131s\u0131n\u0131n amac\u0131 bir hizmet reddi (Denial of Service &#8211; DoS) durumu yaratmakt\u0131r. Sistem kilitlendi\u011finde, \u00e7\u00f6kt\u00fc\u011f\u00fcnde veya yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda, \u00fczerinde \u00e7al\u0131\u015fan t\u00fcm hizmetler (web sitesi, e-posta sunucusu, veritaban\u0131 vb.) eri\u015filemez hale gelir. Bu, me\u015fru kullan\u0131c\u0131lar\u0131n sisteme veya sundu\u011fu hizmetlere ula\u015fmas\u0131n\u0131 engeller. Sald\u0131r\u0131 tek bir kaynaktan yap\u0131ld\u0131\u011f\u0131 i\u00e7in DoS olarak s\u0131n\u0131fland\u0131r\u0131l\u0131r. E\u011fer bu t\u00fcr sald\u0131r\u0131lar binlerce farkl\u0131 kaynaktan ayn\u0131 anda yap\u0131lsayd\u0131, bu bir Da\u011f\u0131t\u0131k Hizmet Reddi (<a href=\"https:\/\/www.ihs.com.tr\/blog\/ddos-saldirilarinin-ortalama-boyutu-yuzde-52-artti\/\" target=\"_blank\">DDoS<\/a>) sald\u0131r\u0131s\u0131 olurdu. Ping of Death, basit ama etkili bir \u015fekilde hedef sistemin kaynaklar\u0131n\u0131 t\u00fcketmek yerine, onu do\u011frudan devre d\u0131\u015f\u0131 b\u0131rakarak hizmet kesintisine yol a\u00e7ar.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Tarihsel-Surecte-Savunmasiz-Sistemler-ve-Gunumuzdeki-Durum\"><\/span>Tarihsel S\u00fcre\u00e7te Savunmas\u0131z Sistemler ve G\u00fcn\u00fcm\u00fczdeki Durum<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Ping of Death, 1990&#8217;lar\u0131n ortalar\u0131nda ortaya \u00e7\u0131kt\u0131\u011f\u0131nda internet d\u00fcnyas\u0131nda b\u00fcy\u00fck bir etki yaratm\u0131\u015ft\u0131. O d\u00f6nemin i\u015fletim sistemleri ve a\u011f altyap\u0131lar\u0131, bu t\u00fcr sofistike manip\u00fclasyonlara kar\u015f\u0131 haz\u0131rl\u0131kl\u0131 de\u011fildi. Ancak zamanla, hem yaz\u0131l\u0131m geli\u015ftiricileri hem de donan\u0131m \u00fcreticileri bu zafiyete kar\u015f\u0131 etkili \u00f6nlemler geli\u015ftirdi ve sald\u0131r\u0131 b\u00fcy\u00fck \u00f6l\u00e7\u00fcde etkisiz hale getirildi.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ping-of-Death-Saldirisindan-Etkilenen-Eski-Isletim-Sistemleri-Windows-95-NT-Erken-Linux-Surumleri\"><\/span>Ping of Death Sald\u0131r\u0131s\u0131ndan Etkilenen Eski \u0130\u015fletim Sistemleri (Windows 95, NT, Erken Linux S\u00fcr\u00fcmleri)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131n\u0131n ilk ortaya \u00e7\u0131kt\u0131\u011f\u0131 d\u00f6nemde, piyasadaki bir\u00e7ok pop\u00fcler i\u015fletim sistemi bu zafiyete kar\u015f\u0131 savunmas\u0131zd\u0131. Bunlar\u0131n ba\u015f\u0131nda Microsoft&#8217;un Windows 95 ve Windows NT i\u015fletim sistemleri geliyordu. Ayr\u0131ca, ilk Linux \u00e7ekirdek s\u00fcr\u00fcmleri, Novell NetWare, IBM AIX ve hatta baz\u0131 Mac OS s\u00fcr\u00fcmleri de bu sald\u0131r\u0131dan etkilenebiliyordu. Bu sistemlerin ortak zay\u0131fl\u0131\u011f\u0131, IP paketlerini yeniden birle\u015ftirme s\u00fcrecinde toplam boyutu \u00f6nceden kontrol etmemeleriydi. Par\u00e7alar\u0131 birle\u015ftirdikten sonra ortaya \u00e7\u0131kan devasa paketin neden oldu\u011fu bellek ta\u015fmas\u0131, bu sistemlerin \u00e7\u00f6kmesine neden oluyordu.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Modern-Isletim-Sistemlerinin-Bu-Zafiyete-Karsi-Aldigi-Onlemler\"><\/span>Modern \u0130\u015fletim Sistemlerinin Bu Zafiyete Kar\u015f\u0131 Ald\u0131\u011f\u0131 \u00d6nlemler<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Zafiyetin ke\u015ffedilmesinin ard\u0131ndan i\u015fletim sistemi geli\u015ftiricileri h\u0131zla harekete ge\u00e7ti. G\u00fcn\u00fcm\u00fczdeki t\u00fcm modern i\u015fletim sistemleri (Windows, macOS, Linux, Android, iOS vb.) Ping of Death sald\u0131r\u0131s\u0131na kar\u015f\u0131 korunmal\u0131d\u0131r. Al\u0131nan temel \u00f6nlem olduk\u00e7a basittir: \u0130\u015fletim sisteminin a\u011f y\u0131\u011f\u0131n\u0131, par\u00e7alanm\u0131\u015f IP paketlerini yeniden birle\u015ftirmeden *\u00f6nce*, bu par\u00e7alar\u0131n ba\u015fl\u0131klar\u0131ndaki ofset ve uzunluk bilgilerini analiz eder. Bu analizle, birle\u015ftirilecek olan nihai paketin toplam boyutunu hesaplar. E\u011fer hesaplanan boyut, IP protokol\u00fcn\u00fcn izin verdi\u011fi maksimum s\u0131n\u0131r olan 65,535 bayt\u0131 a\u015f\u0131yorsa, sistem bu paketleri birle\u015ftirmeyi reddeder ve genellikle sessizce atar (discard). Bu basit ama etkili kontrol, bellek ta\u015fmas\u0131n\u0131n ve sistem \u00e7\u00f6kmesinin \u00f6n\u00fcne ge\u00e7er.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ag-Cihazlarinin-Router-Switch-Saldiriya-Karsi-Rolu-ve-Savunmalari\"><\/span>A\u011f Cihazlar\u0131n\u0131n (Router, Switch) Sald\u0131r\u0131ya Kar\u015f\u0131 Rol\u00fc ve Savunmalar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130\u015fletim sistemlerine ek olarak, modern a\u011f altyap\u0131 cihazlar\u0131 da bu t\u00fcr sald\u0131r\u0131lara kar\u015f\u0131 bir savunma katman\u0131 olu\u015fturur. G\u00fcn\u00fcm\u00fczdeki geli\u015fmi\u015f g\u00fcvenlik duvarlar\u0131 (firewall&#8217;lar), y\u00f6nlendiriciler (router&#8217;lar) ve hatta baz\u0131 ak\u0131ll\u0131 anahtarlar (switch&#8217;ler), a\u011f trafi\u011fini derinlemesine inceleme (Deep Packet Inspection &#8211; DPI) yetene\u011fine sahiptir. Bu cihazlar, anormal veya bozuk yap\u0131daki IP paketlerini tespit edebilir. Ping of Death sald\u0131r\u0131s\u0131nda kullan\u0131lan par\u00e7alanm\u0131\u015f paketlerin, yeniden birle\u015ftirildi\u011finde yasa d\u0131\u015f\u0131 bir boyuta ula\u015faca\u011f\u0131n\u0131 anlayan bir a\u011f cihaz\u0131, bu paketleri hedef sisteme hi\u00e7 ula\u015fmadan engelleyebilir ve filtreleyebilir. Bu, a\u011f d\u00fczeyinde proaktif bir koruma sa\u011flar.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Ping-of-Death-ve-Benzeri-Parcalama-Tabanli-Saldirilar\"><\/span>Ping of Death ve Benzeri Par\u00e7alama Tabanl\u0131 Sald\u0131r\u0131lar<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Ping of Death, IP paket par\u00e7alama (fragmentation) mekanizmas\u0131ndaki zafiyetleri istismar eden sald\u0131r\u0131lar\u0131n ilk ve en \u00fcnl\u00fc \u00f6rne\u011fidir. Ancak bu sald\u0131r\u0131, par\u00e7alama s\u00fcrecinin k\u00f6t\u00fcye kullan\u0131labilece\u011fi tek yol de\u011fildir. Zamanla, benzer mant\u0131\u011fa dayanan fakat farkl\u0131 teknikler kullanan ba\u015fka sald\u0131r\u0131 t\u00fcrleri de geli\u015ftirilmi\u015ftir. Bu sald\u0131r\u0131lar, a\u011f g\u00fcvenli\u011finde par\u00e7alama i\u015flemlerinin ne kadar hassas bir konu oldu\u011funu g\u00f6stermektedir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Teardrop-Saldirisi-ve-Parca-Cakismalari\"><\/span>Teardrop Sald\u0131r\u0131s\u0131 ve Par\u00e7a \u00c7ak\u0131\u015fmalar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Teardrop sald\u0131r\u0131s\u0131, Ping of Death gibi, par\u00e7alanm\u0131\u015f IP paketlerini hedef al\u0131r ancak farkl\u0131 bir zafiyetten yararlan\u0131r. Bu sald\u0131r\u0131da, sald\u0131rgan taraf\u0131ndan g\u00f6nderilen par\u00e7alanm\u0131\u015f paketlerin ba\u015fl\u0131klar\u0131ndaki ofset (offset) bilgileri kas\u0131tl\u0131 olarak birbiriyle \u00e7ak\u0131\u015facak \u015fekilde (overlapping) manip\u00fcle edilir. \u00d6rne\u011fin, birinci paket 0-100 bayt aral\u0131\u011f\u0131n\u0131, ikinci paket ise normalde 101&#8217;den ba\u015flamas\u0131 gerekirken 50-150 aral\u0131\u011f\u0131n\u0131 ta\u015f\u0131d\u0131\u011f\u0131n\u0131 iddia eder. Hedef sistem bu \u00e7ak\u0131\u015fan par\u00e7alar\u0131 yeniden birle\u015ftirmeye \u00e7al\u0131\u015ft\u0131\u011f\u0131nda, i\u015fletim sisteminin a\u011f y\u0131\u011f\u0131n\u0131 bu durumu nas\u0131l y\u00f6netece\u011fini bilemez ve bir hataya neden olur. T\u0131pk\u0131 Ping of Death gibi, bu durum da eski sistemlerde donma veya \u00e7\u00f6kmeyle sonu\u00e7lanabilirdi.<\/p>\n<div class=\"karsilastirma\">\n<table border=\"1\" cellpadding=\"5\" cellspacing=\"0\" style=\"width:100%; border-collapse: collapse;\">\n<thead>\n<tr>\n<th style=\"background-color:#f2f2f2; text-align:left;\">\u00d6zellik<\/th>\n<th style=\"background-color:#f2f2f2; text-align:left;\">Ping of Death Sald\u0131r\u0131s\u0131<\/th>\n<th style=\"background-color:#f2f2f2; text-align:left;\">Teardrop Sald\u0131r\u0131s\u0131<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><b>Hedeflenen Zafiyet<\/b><\/td>\n<td>Yeniden birle\u015ftirilen paketin maksimum IP boyutunu (65,535 bayt) a\u015fmas\u0131.<\/td>\n<td>Par\u00e7alanm\u0131\u015f paketlerin ofset bilgilerinin birbiriyle \u00e7ak\u0131\u015fmas\u0131 (overlapping fragments).<\/td>\n<\/tr>\n<tr>\n<td><b>Sald\u0131r\u0131 Mekanizmas\u0131<\/b><\/td>\n<td>B\u00fcy\u00fck boyutlu tek bir mant\u0131ksal paketin par\u00e7alar\u0131n\u0131 g\u00f6nderir.<\/td>\n<td>K\u00fc\u00e7\u00fck ama \u00e7ak\u0131\u015fan ofsetlere sahip birden fazla manip\u00fcle edilmi\u015f par\u00e7a g\u00f6nderir.<\/td>\n<\/tr>\n<tr>\n<td><b>Sonu\u00e7<\/b><\/td>\n<td>Bellek ta\u015fmas\u0131 (Buffer Overflow) sonucu sistemin \u00e7\u00f6kmesi veya kilitlenmesi.<\/td>\n<td>Paket yeniden birle\u015ftirme mant\u0131\u011f\u0131ndaki hata nedeniyle sistemin \u00e7\u00f6kmesi veya kilitlenmesi.<\/td>\n<\/tr>\n<tr>\n<td><b>G\u00fcn\u00fcm\u00fczdeki Durumu<\/b><\/td>\n<td>Modern i\u015fletim sistemleri ve a\u011f cihazlar\u0131 taraf\u0131ndan tamamen engellenir.<\/td>\n<td>Modern i\u015fletim sistemleri ve a\u011f cihazlar\u0131 taraf\u0131ndan tamamen engellenir.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h3><span class=\"ez-toc-section\" id=\"Diger-ICMP-Tabanli-DoS-Saldirilari-Orn-Smurf-Attack\"><\/span>Di\u011fer ICMP Tabanl\u0131 DoS Sald\u0131r\u0131lar\u0131 (\u00d6rn: Smurf Attack)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>ICMP protokol\u00fc, Ping of Death d\u0131\u015f\u0131nda ba\u015fka hizmet reddi sald\u0131r\u0131lar\u0131na da ilham vermi\u015ftir. Bunlar\u0131n en bilinenlerinden biri Smurf Attack&#8217;t\u0131r. Bu sald\u0131r\u0131da, sald\u0131rgan ICMP &#8220;Echo Request&#8221; paketleri g\u00f6nderir, ancak kaynak IP adresi olarak kendi adresini de\u011fil, kurban\u0131n (hedef sistemin) IP adresini yazar (IP spoofing). Bu sahte paket, bir a\u011fdaki t\u00fcm cihazlara yay\u0131n (broadcast) adresi \u00fczerinden g\u00f6nderilir. A\u011fa ba\u011fl\u0131 t\u00fcm cihazlar, bu iste\u011fe yan\u0131t olarak ICMP &#8220;Echo Reply&#8221; paketlerini, paketin kayna\u011f\u0131 olarak g\u00f6rd\u00fckleri kurban sisteme g\u00f6nderir. Sonu\u00e7 olarak, tek bir sahte istek y\u00fczlerce veya binlerce yan\u0131ta d\u00f6n\u00fc\u015f\u00fcr ve hedef sistem bu yo\u011fun trafik alt\u0131nda ezilerek hizmet veremez hale gelir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Parcalama-Fragmentation-Zafiyetlerinin-Genel-Guvenlik-Riski\"><\/span>Par\u00e7alama (Fragmentation) Zafiyetlerinin Genel G\u00fcvenlik Riski<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Ping of Death ve Teardrop gibi sald\u0131r\u0131lar, IP paket par\u00e7alama mekanizmas\u0131n\u0131n do\u011fas\u0131 gere\u011fi bir g\u00fcvenlik riski ta\u015f\u0131d\u0131\u011f\u0131n\u0131 g\u00f6stermi\u015ftir. Par\u00e7alama, a\u011f cihazlar\u0131n\u0131n ve g\u00fcvenlik duvarlar\u0131n\u0131n paket i\u00e7eri\u011fini tam olarak analiz etmesini zorla\u015ft\u0131rabilir. Sald\u0131rganlar, k\u00f6t\u00fc ama\u00e7l\u0131 kodlar\u0131 veya sald\u0131r\u0131 desenlerini k\u00fc\u00e7\u00fck par\u00e7alara b\u00f6lerek sald\u0131r\u0131 tespit sistemlerini (IDS) atlatmaya \u00e7al\u0131\u015fabilirler. Bu nedenle, a\u011f g\u00fcvenli\u011fi uzmanlar\u0131 ve sistem y\u00f6neticileri, par\u00e7alanm\u0131\u015f trafi\u011fi do\u011fru bir \u015fekilde birle\u015ftirip analiz edebilen ve bu t\u00fcr anormallikleri tespit edebilen geli\u015fmi\u015f g\u00fcvenlik \u00e7\u00f6z\u00fcmlerine her zaman ihtiya\u00e7 duyar. Her ne kadar bu spesifik sald\u0131r\u0131lar art\u0131k tarihsel kalsa da, temel ald\u0131klar\u0131 prensipler yeni nesil sald\u0131r\u0131 teknikleri i\u00e7in bir temel olu\u015fturmaya devam etmektedir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Ping-of-Death-Saldirisina-Karsi-Korunma-ve-Onleme-Yontemleri\"><\/span>Ping of Death Sald\u0131r\u0131s\u0131na Kar\u015f\u0131 Korunma ve \u00d6nleme Y\u00f6ntemleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Ping of Death sald\u0131r\u0131s\u0131 g\u00fcn\u00fcm\u00fczde b\u00fcy\u00fck \u00f6l\u00e7\u00fcde tarihsel bir tehdit olsa da, bu sald\u0131r\u0131ya kar\u015f\u0131 geli\u015ftirilen savunma mekanizmalar\u0131, genel a\u011f g\u00fcvenli\u011fi altyap\u0131s\u0131n\u0131n temel ta\u015flar\u0131n\u0131 olu\u015fturmaktad\u0131r. Bu y\u00f6ntemler, sadece Ping of Death&#8217;i de\u011fil, ayn\u0131 zamanda benzer mant\u0131kla \u00e7al\u0131\u015fan bir\u00e7ok di\u011fer a\u011f tabanl\u0131 sald\u0131r\u0131y\u0131 da engellemek i\u00e7in kritik \u00f6neme sahiptir. Katmanl\u0131 bir g\u00fcvenlik yakla\u015f\u0131m\u0131, bu t\u00fcr tehditlere kar\u015f\u0131 en etkili korumay\u0131 sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenlik-Duvari-Firewall-ile-Bozuk-veya-Anormal-ICMP-Paketlerini-Filtreleme\"><\/span>G\u00fcvenlik Duvar\u0131 (Firewall) ile Bozuk veya Anormal ICMP Paketlerini Filtreleme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>En temel ve etkili savunma hatt\u0131 g\u00fcvenlik duvar\u0131d\u0131r (<a href=\"https:\/\/www.ihs.com.tr\/blog\/firewall-nedir-ne-ise-yarar\/\" target=\"_blank\">Firewall<\/a>). Modern g\u00fcvenlik duvarlar\u0131, a\u011fa giren ve \u00e7\u0131kan her paketi inceleyerek \u00f6nceden tan\u0131mlanm\u0131\u015f kurallara g\u00f6re filtreler. Ping of Death&#8217;e kar\u015f\u0131 bir g\u00fcvenlik duvar\u0131 \u015fu \u015fekilde yap\u0131land\u0131r\u0131labilir:<\/p>\n<ul>\n<li><b>Par\u00e7a Kontrol\u00fc:<\/b> G\u00fcvenlik duvar\u0131, par\u00e7alanm\u0131\u015f paketleri ge\u00e7ici olarak birle\u015ftirir ve toplam boyutunu kontrol eder. E\u011fer boyut 65,535 bayt\u0131 a\u015f\u0131yorsa, bu paketleri hedef sisteme ula\u015fmadan engeller.<\/li>\n<li><b>Anormal ICMP Engelleme:<\/b> G\u00fcvenlik duvarlar\u0131, belirli t\u00fcrdeki veya belirli boyutlar\u0131n \u00fczerindeki ICMP paketlerini tamamen engelleyecek \u015fekilde ayarlanabilir. Gerekli de\u011filse, d\u0131\u015f a\u011fdan gelen ICMP Echo Request paketlerine izin vermemek de bir se\u00e7enektir.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"Saldiri-Tespit-ve-Onleme-Sistemlerinin-IDSIPS-Kullanimi\"><\/span>Sald\u0131r\u0131 Tespit ve \u00d6nleme Sistemlerinin (IDS\/IPS) Kullan\u0131m\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131 Tespit Sistemleri (IDS) ve Sald\u0131r\u0131 \u00d6nleme Sistemleri (IPS), a\u011f trafi\u011fini s\u00fcrekli olarak izleyerek bilinen sald\u0131r\u0131 imzalar\u0131n\u0131 ve anormal davran\u0131\u015flar\u0131 arar.<\/p>\n<ul>\n<li><b>IDS (Intrusion Detection System):<\/b> Ping of Death veya Teardrop gibi par\u00e7alama tabanl\u0131 bir sald\u0131r\u0131n\u0131n belirtilerini (\u00f6rne\u011fin, \u00e7ak\u0131\u015fan ofsetler veya yasa d\u0131\u015f\u0131 toplam boyut) tespit etti\u011finde sistem y\u00f6neticisine bir uyar\u0131 (alert) g\u00f6nderir.<\/li>\n<li><b>IPS (Intrusion Prevention System):<\/b> IDS&#8217;nin bir ad\u0131m \u00f6tesine ge\u00e7er. Bir sald\u0131r\u0131 tespit etti\u011finde sadece uyar\u0131 g\u00f6ndermekle kalmaz, ayn\u0131 zamanda bu k\u00f6t\u00fc niyetli trafi\u011fi proaktif olarak engeller. Bu, sald\u0131r\u0131n\u0131n hedefine ula\u015fmas\u0131n\u0131 \u00f6nler.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"Isletim-Sistemi-ve-Ag-Donanimlarini-Guncel-Tutmanin-Onemi\"><\/span>\u0130\u015fletim Sistemi ve A\u011f Donan\u0131mlar\u0131n\u0131 G\u00fcncel Tutman\u0131n \u00d6nemi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Ping of Death&#8217;in ge\u00e7mi\u015fte ba\u015far\u0131l\u0131 olmas\u0131n\u0131n ana nedeni, eski i\u015fletim sistemlerindeki zafiyetlerdi. G\u00fcvenli\u011fin en temel kural\u0131, t\u00fcm yaz\u0131l\u0131m ve donan\u0131mlar\u0131 g\u00fcncel tutmakt\u0131r. \u0130\u015fletim sistemi \u00fcreticileri ve a\u011f cihaz\u0131 sat\u0131c\u0131lar\u0131, ke\u015ffedilen yeni zafiyetlere kar\u015f\u0131 d\u00fczenli olarak g\u00fcvenlik yamalar\u0131 ve g\u00fcncellemeler yay\u0131nlar. Bu g\u00fcncellemeleri zaman\u0131nda uygulamak, bilinen sald\u0131r\u0131 vekt\u00f6rlerine kar\u015f\u0131 sistemlerinizi ve a\u011f\u0131n\u0131z\u0131 koruman\u0131n en basit ve en etkili yoludur. Modern bir i\u015fletim sistemi, varsay\u0131lan olarak Ping of Death&#8217;e kar\u015f\u0131 zaten korumal\u0131d\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Gelen-Paket-Boyutlarini-Dogrulayan-Ag-Politikalari\"><\/span>Gelen Paket Boyutlar\u0131n\u0131 Do\u011frulayan A\u011f Politikalar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kurumsal a\u011flarda, a\u011f y\u00f6neticileri taraf\u0131ndan belirlenen kat\u0131 politikalar da \u00f6nemli bir koruma katman\u0131 sa\u011flar. Bu politikalar, a\u011f \u00fczerindeki cihazlar\u0131n (router, switch) davran\u0131\u015f\u0131n\u0131 tan\u0131mlar. \u00d6rne\u011fin, bir politika, par\u00e7alanm\u0131\u015f ve yeniden birle\u015ftirildi\u011finde standartlar\u0131 ihlal eden herhangi bir paketin a\u011f\u0131n s\u0131n\u0131r\u0131nda (edge router) an\u0131nda d\u00fc\u015f\u00fcr\u00fclmesini zorunlu k\u0131labilir. Bu, k\u00f6t\u00fc niyetli trafi\u011fin i\u00e7 a\u011fa s\u0131zmas\u0131n\u0131 en ba\u015f\u0131ndan engelleyerek merkezi bir koruma sunar. Bu t\u00fcr politikalar, otomatize edilmi\u015f ve tutarl\u0131 bir savunma mekanizmas\u0131 olu\u015fturur.<\/p>\n<div class=\"karsilastirma\">\n<table border=\"1\" cellpadding=\"5\" cellspacing=\"0\" style=\"width:100%; border-collapse: collapse;\">\n<thead>\n<tr>\n<th style=\"background-color:#f2f2f2; text-align:left;\">Korunma Y\u00f6ntemi<\/th>\n<th style=\"background-color:#f2f2f2; text-align:left;\">\u00c7al\u0131\u015fma Prensibi<\/th>\n<th style=\"background-color:#f2f2f2; text-align:left;\">Uygulama Alan\u0131<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><b>\u0130\u015fletim Sistemi G\u00fcncellemeleri<\/b><\/td>\n<td>Yeniden birle\u015ftirme \u00f6ncesi toplam paket boyutunu kontrol ederek zafiyeti ortadan kald\u0131r\u0131r.<\/td>\n<td>Sunucular, istemciler (PC, laptop), mobil cihazlar.<\/td>\n<\/tr>\n<tr>\n<td><b>G\u00fcvenlik Duvar\u0131 (Firewall)<\/b><\/td>\n<td>Anormal ve bozuk IP\/ICMP paketlerini a\u011f s\u0131n\u0131r\u0131nda filtreler ve engeller.<\/td>\n<td>A\u011f \u00e7evresi (perimeter), sunucu segmentleri.<\/td>\n<\/tr>\n<tr>\n<td><b>Sald\u0131r\u0131 \u00d6nleme Sistemi (IPS)<\/b><\/td>\n<td>Bilinen sald\u0131r\u0131 imzalar\u0131n\u0131 ve anormal trafik desenlerini tan\u0131yarak proaktif olarak engeller.<\/td>\n<td>A\u011f trafi\u011finin kritik izleme noktalar\u0131.<\/td>\n<\/tr>\n<tr>\n<td><b>A\u011f Politikalar\u0131<\/b><\/td>\n<td>A\u011f cihazlar\u0131n\u0131 (router vb.) standart d\u0131\u015f\u0131 paketleri iletmeyecek \u015fekilde yap\u0131land\u0131r\u0131r.<\/td>\n<td>Kurumsal a\u011f altyap\u0131s\u0131.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"Ag-Guvenligi-ve-DDoS-Korumasi-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\"><\/span>A\u011f G\u00fcvenli\u011fi ve DDoS Korumas\u0131 \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Ping of Death gibi tarihsel sald\u0131r\u0131lar bile, a\u011f altyap\u0131s\u0131n\u0131n ne kadar hassas olabilece\u011finin ve s\u00fcrekli koruma gerektirdi\u011finin bir kan\u0131t\u0131d\u0131r. G\u00fcn\u00fcm\u00fczde siber tehditler \u00e7ok daha karma\u015f\u0131k ve yayg\u0131n hale gelmi\u015ftir. \u00d6zellikle Da\u011f\u0131t\u0131k Hizmet Reddi (DDoS) sald\u0131r\u0131lar\u0131, her \u00f6l\u00e7ekteki i\u015fletme i\u00e7in ciddi bir risk olu\u015fturmaktad\u0131r. Bu noktada, g\u00fcvenilir ve uzman bir altyap\u0131 sa\u011flay\u0131c\u0131s\u0131yla \u00e7al\u0131\u015fmak, dijital varl\u0131klar\u0131n\u0131z\u0131 koruman\u0131n en etkili yoludur. \u0130HS Telekom, sundu\u011fu geli\u015fmi\u015f g\u00fcvenlik \u00e7\u00f6z\u00fcmleri ve sa\u011flam altyap\u0131s\u0131yla i\u015fletmenizin s\u00fcreklili\u011fini ve g\u00fcvenli\u011fini sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Gelismis-Tehdit-Algilama-Sistemleri-ve-Katmanli-Guvenlik-Altyapisi\"><\/span>Geli\u015fmi\u015f Tehdit Alg\u0131lama Sistemleri ve Katmanl\u0131 G\u00fcvenlik Altyap\u0131s\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130HS Telekom, sadece bilinen sald\u0131r\u0131lara kar\u015f\u0131 de\u011fil, ayn\u0131 zamanda yeni ve geli\u015fmekte olan tehditlere kar\u015f\u0131 da proaktif koruma sa\u011flar. Katmanl\u0131 g\u00fcvenlik mimarimiz, a\u011f trafi\u011fini s\u00fcrekli analiz eden geli\u015fmi\u015f tehdit alg\u0131lama sistemleri i\u00e7erir. Bu sistemler, anormal paket davran\u0131\u015flar\u0131n\u0131, k\u00f6t\u00fc ama\u00e7l\u0131 imzalar\u0131 ve \u015f\u00fcpheli trafik desenlerini an\u0131nda tespit ederek otomatik olarak m\u00fcdahale eder. B\u00f6ylece tehditler, altyap\u0131n\u0131za zarar vermeden \u00f6nce etkisiz hale getirilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yuksek-Kapasiteli-Ag-Uzerinden-Trafik-Filtreleme-Hizmetleri\"><\/span>Y\u00fcksek Kapasiteli A\u011f \u00dczerinden Trafik Filtreleme Hizmetleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Modern DDoS sald\u0131r\u0131lar\u0131, sunucular\u0131n\u0131z\u0131n ve a\u011f ba\u011flant\u0131n\u0131z\u0131n kapasitesini a\u015fan devasa boyutlarda trafik olu\u015fturmay\u0131 hedefler. \u0130HS Telekom&#8217;un y\u00fcksek kapasiteli ve yedekli a\u011f altyap\u0131s\u0131, bu t\u00fcr b\u00fcy\u00fck \u00f6l\u00e7ekli sald\u0131r\u0131lar\u0131 kar\u015f\u0131layabilecek ve filtreleyebilecek \u015fekilde tasarlanm\u0131\u015ft\u0131r. Gelen trafik, &#8220;temiz&#8221; ve &#8220;kirli&#8221; olarak ayr\u0131\u015ft\u0131r\u0131l\u0131r; me\u015fru kullan\u0131c\u0131 trafi\u011fi sunucular\u0131n\u0131za sorunsuz bir \u015fekilde ula\u015f\u0131rken, sald\u0131r\u0131 trafi\u011fi altyap\u0131m\u0131za hi\u00e7 ula\u015fmadan engellenir. Bu sayede hizmetleriniz kesintisiz \u00e7al\u0131\u015fmaya devam eder.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Anormal-Paketlere-ve-DDoS-Saldirilarina-Karsi-Proaktif-Koruma\"><\/span>Anormal Paketlere ve DDoS Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Proaktif Koruma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Ping of Death ve Teardrop gibi sald\u0131r\u0131lar, anormal paket yap\u0131lar\u0131ndan faydalan\u0131r. \u0130HS Telekom&#8217;un g\u00fcvenlik sistemleri, bu t\u00fcr standart d\u0131\u015f\u0131 ve bozuk paketleri otomatik olarak tan\u0131r ve engeller. Proaktif koruma mekanizmalar\u0131m\u0131z, sadece b\u00fcy\u00fck hacimli sald\u0131r\u0131lar\u0131 de\u011fil, ayn\u0131 zamanda protokol zafiyetlerini hedef alan daha sofistike ve d\u00fc\u015f\u00fck hacimli (low and slow) sald\u0131r\u0131lar\u0131 da etkisiz hale getirmek \u00fczere yap\u0131land\u0131r\u0131lm\u0131\u015ft\u0131r. G\u00fcvenlik, bizim i\u00e7in bir tepki de\u011fil, s\u00fcrekli bir s\u00fcre\u00e7tir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"724-Izleme-ve-Uzman-Guvenlik-Ekibi-Destegi\"><\/span>7\/24 \u0130zleme ve Uzman G\u00fcvenlik Ekibi Deste\u011fi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Siber g\u00fcvenlik, otomasyonun yan\u0131 s\u0131ra insan uzmanl\u0131\u011f\u0131 da gerektirir. \u0130HS Telekom&#8217;un 7\/24 g\u00f6rev ba\u015f\u0131nda olan uzman g\u00fcvenlik ekibi (SOC &#8211; Security Operations Center), a\u011f altyap\u0131s\u0131n\u0131 aral\u0131ks\u0131z olarak izler, olas\u0131 tehditleri analiz eder ve an\u0131nda m\u00fcdahale eder. Herhangi bir g\u00fcvenlik olay\u0131 durumunda, i\u015fletmenizin en az kesintiyle operasyonlar\u0131na devam etmesini sa\u011flamak i\u00e7in yan\u0131n\u0131zday\u0131z. G\u00fc\u00e7l\u00fc altyap\u0131m\u0131z\u0131 ve teknolojimizi, sekt\u00f6r\u00fcn en deneyimli uzmanlar\u0131n\u0131n bilgisiyle birle\u015ftirerek size u\u00e7tan uca bir g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fc sunuyoruz. <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/\" target=\"_blank\">Hosting<\/a> ve sunucu hizmetlerinizi \u0130HS Telekom&#8217;a emanet ederek, siber tehditlere kar\u015f\u0131 endi\u015felenmeden i\u015finize odaklanabilirsiniz.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ping of Death (PoD) veya T\u00fcrk\u00e7e ad\u0131yla \u00d6l\u00fcm Pingi, siber g\u00fcvenlik d\u00fcnyas\u0131n\u0131n en eski ve en bilinen hizmet reddi (Denial of Service&hellip;<\/p>\n","protected":false},"author":3,"featured_media":16566,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[466],"tags":[],"class_list":["post-16565","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bilgi-guvenligi"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16565","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=16565"}],"version-history":[{"count":1,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16565\/revisions"}],"predecessor-version":[{"id":16567,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16565\/revisions\/16567"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/16566"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=16565"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=16565"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=16565"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}