{"id":16671,"date":"2026-10-09T17:39:31","date_gmt":"2026-10-09T14:39:31","guid":{"rendered":"https:\/\/www.ihs.com.tr\/blog\/?p=16671"},"modified":"2026-10-09T17:39:31","modified_gmt":"2026-10-09T14:39:31","slug":"http-flood-nedir","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/","title":{"rendered":"HTTP Flood Nedir? Web Trafi\u011fini Taklit Eden Zombi A\u011flar Limitleri Nas\u0131l A\u015far?"},"content":{"rendered":"<p>Siber sald\u0131r\u0131lar, dijital d\u00fcnyan\u0131n karma\u015f\u0131kl\u0131\u011f\u0131 artt\u0131k\u00e7a daha sofistike ve tespit edilmesi zor hale gelmektedir. Bu sald\u0131r\u0131 t\u00fcrlerinden biri olan HTTP Flood, \u00f6zellikle web sunucular\u0131n\u0131 ve uygulamalar\u0131n\u0131 hedef alarak, me\u015fru kullan\u0131c\u0131 trafi\u011fini taklit etme yetene\u011fiyle \u00f6ne \u00e7\u0131kar. Sald\u0131rganlar, binlerce farkl\u0131 konumdan gelen ve ger\u00e7ek kullan\u0131c\u0131 isteklerinden ay\u0131rt edilemeyen HTTP istekleri g\u00f6ndererek sunucu kaynaklar\u0131n\u0131 t\u00fcketir ve hizmetleri eri\u015filemez hale getirir. Bu makalede, HTTP Flood sald\u0131r\u0131lar\u0131n\u0131n ne oldu\u011funu, nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ve bu sald\u0131r\u0131lar\u0131n arkas\u0131ndaki &#8220;zombi a\u011flar\u0131n&#8221; geleneksel g\u00fcvenlik \u00f6nlemlerini nas\u0131l a\u015ft\u0131\u011f\u0131n\u0131 detayl\u0131 bir \u015fekilde inceleyece\u011fiz. Ayr\u0131ca, bu t\u00fcr geli\u015fmi\u015f tehditlere kar\u015f\u0131 korunma y\u00f6ntemlerini ve profesyonel \u00e7\u00f6z\u00fcmlerin \u00f6nemini ele alaca\u011f\u0131z.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7erik Tablosu<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6ace4de8ed06f\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\" id=\"ez-toc-cssicon-toggle-item-6ace4de8ed06f\" aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#DDoS-Saldirilarina-Genel-Bakis-ve-HTTP-Floodun-Yeri\" >DDoS Sald\u0131r\u0131lar\u0131na Genel Bak\u0131\u015f ve HTTP Flood&#8217;un Yeri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Dagitik-Hizmet-Engelleme-DDoS-Saldirilari-Nedir\" >Da\u011f\u0131t\u0131k Hizmet Engelleme (DDoS) Sald\u0131r\u0131lar\u0131 Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Saldiri-Katmanlari-Ag-Tasima-ve-Uygulama-Katmani\" >Sald\u0131r\u0131 Katmanlar\u0131: A\u011f, Ta\u015f\u0131ma ve Uygulama Katman\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#HTTP-Flood-Uygulama-Katmani-Layer-7-Saldirilarinin-Bir-Turu\" >HTTP Flood: Uygulama Katman\u0131 (Layer 7) Sald\u0131r\u0131lar\u0131n\u0131n Bir T\u00fcr\u00fc<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#HTTP-Flood-Saldirisinin-Anatomisi\" >HTTP Flood Sald\u0131r\u0131s\u0131n\u0131n Anatomisi<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#HTTP-Protokolunun-Temelleri-GET-ve-POST-Istekleri\" >HTTP Protokol\u00fcn\u00fcn Temelleri: GET ve POST \u0130stekleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#HTTP-Flood-Saldirisi-Nasil-Calisir\" >HTTP Flood Sald\u0131r\u0131s\u0131 Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#HTTP-GET-Flood-Saldirisi\" >HTTP GET Flood Sald\u0131r\u0131s\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#HTTP-POST-Flood-Saldirisi\" >HTTP POST Flood Sald\u0131r\u0131s\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Diger-Ag-Katmani-DDoS-Saldirilarindan-Farklari\" >Di\u011fer A\u011f Katman\u0131 DDoS Sald\u0131r\u0131lar\u0131ndan Farklar\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Zombi-Aglar-Botnetler-Saldirinin-Arkasindaki-Guc\" >Zombi A\u011flar (Botnetler): Sald\u0131r\u0131n\u0131n Arkas\u0131ndaki G\u00fc\u00e7<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Botnet-Nedir-ve-Nasil-Olusturulur\" >Botnet Nedir ve Nas\u0131l Olu\u015fturulur?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Zombi-Cihazlar-ve-Ele-Gecirilme-Yontemleri\" >Zombi Cihazlar ve Ele Ge\u00e7irilme Y\u00f6ntemleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Komuta-ve-Kontrol-C-C-Sunucularinin-Rolu\" >Komuta ve Kontrol (C&#038;C) Sunucular\u0131n\u0131n Rol\u00fc<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#HTTP-Flood-Saldirilarinda-Botnetlerin-Kullanim-Amaci\" >HTTP Flood Sald\u0131r\u0131lar\u0131nda Botnetlerin Kullan\u0131m Amac\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Limitleri-Asmak-Zombi-Aglar-Mesru-Trafigi-Nasil-Taklit-Eder\" >Limitleri A\u015fmak: Zombi A\u011flar Me\u015fru Trafi\u011fi Nas\u0131l Taklit Eder?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Geleneksel-Koruma-Yontemleri-ve-Sinirlari-IP-Tabanli-Rate-Limiting\" >Geleneksel Koruma Y\u00f6ntemleri ve S\u0131n\u0131rlar\u0131: IP Tabanl\u0131 Rate Limiting<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Dusuk-ve-Yavas-Low-and-Slow-Saldiri-Taktikleri\" >D\u00fc\u015f\u00fck ve Yava\u015f (Low and Slow) Sald\u0131r\u0131 Taktikleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Gercek-Kullanici-Davranislarinin-Simulasyonu\" >Ger\u00e7ek Kullan\u0131c\u0131 Davran\u0131\u015flar\u0131n\u0131n Sim\u00fclasyonu<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Dagitik-Yapi-Binlerce-Farkli-IP-Adresinden-Gelen-Isteklerle-Tespitin-Zorlastirilmasi\" >Da\u011f\u0131t\u0131k Yap\u0131: Binlerce Farkl\u0131 IP Adresinden Gelen \u0130steklerle Tespitin Zorla\u015ft\u0131r\u0131lmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Sifreli-Trafik-HTTPS-Kullanarak-Icerik-Denetiminden-Kacinma\" >\u015eifreli Trafik (HTTPS) Kullanarak \u0130\u00e7erik Denetiminden Ka\u00e7\u0131nma<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#HTTP-Flood-Saldirilarinin-Hedef-Sistemler-Uzerindeki-Etkileri\" >HTTP Flood Sald\u0131r\u0131lar\u0131n\u0131n Hedef Sistemler \u00dczerindeki Etkileri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Sunucu-Kaynaklarinin-CPU-RAM-Tuketilmesi\" >Sunucu Kaynaklar\u0131n\u0131n (CPU, RAM) T\u00fcketilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Veritabani-Baglantilarinin-Doldurulmasi\" >Veritaban\u0131 Ba\u011flant\u0131lar\u0131n\u0131n Doldurulmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Web-Sitesi-ve-Uygulamalarin-Erisilemez-Hale-Gelmesi\" >Web Sitesi ve Uygulamalar\u0131n Eri\u015filemez Hale Gelmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Is-Surekliligi-ve-Finansal-Kayiplar\" >\u0130\u015f S\u00fcreklili\u011fi ve Finansal Kay\u0131plar<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#HTTP-Flood-Saldirilarini-Tespit-Etme-ve-Onleme-Yontemleri\" >HTTP Flood Sald\u0131r\u0131lar\u0131n\u0131 Tespit Etme ve \u00d6nleme Y\u00f6ntemleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Anomali-Tespiti-Trafik-Desenlerindeki-Degisimleri-Izleme\" >Anomali Tespiti: Trafik Desenlerindeki De\u011fi\u015fimleri \u0130zleme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Insan-ve-Bot-Ayrimi-CAPTCHA-ve-JavaScript-Challenge-Testleri\" >\u0130nsan ve Bot Ayr\u0131m\u0131: CAPTCHA ve JavaScript Challenge Testleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Web-Uygulama-Guvenlik-Duvari-WAF-Kullanimi-ve-Kural-Setleri\" >Web Uygulama G\u00fcvenlik Duvar\u0131 (WAF) Kullan\u0131m\u0131 ve Kural Setleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-31\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Icerik-Dagitim-Agi-CDN-ile-Yuku-Dagitma-ve-Filtreleme\" >\u0130\u00e7erik Da\u011f\u0131t\u0131m A\u011f\u0131 (CDN) ile Y\u00fck\u00fc Da\u011f\u0131tma ve Filtreleme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-32\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Gelismis-Log-Analizi-ve-Davranissal-Modelleme\" >Geli\u015fmi\u015f Log Analizi ve Davran\u0131\u015fsal Modelleme<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-33\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#HTTP-Flood-Korumasi-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\" >HTTP Flood Korumas\u0131 \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-34\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Katman-7-Korumasinda-Uzmanlasmis-Altyapi\" >Katman 7 Korumas\u0131nda Uzmanla\u015fm\u0131\u015f Altyap\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-35\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Anlik-Tehdit-Tespiti-ve-Akilli-Filtreleme-Teknolojileri\" >Anl\u0131k Tehdit Tespiti ve Ak\u0131ll\u0131 Filtreleme Teknolojileri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-36\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Olceklenebilir-ve-Kesintisiz-Koruma-Kapasitesi\" >\u00d6l\u00e7eklenebilir ve Kesintisiz Koruma Kapasitesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-37\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#724-Guvenlik-Operasyon-Merkezi-SOC-Destegi\" >7\/24 G\u00fcvenlik Operasyon Merkezi (SOC) Deste\u011fi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-38\" href=\"https:\/\/www.ihs.com.tr\/blog\/http-flood-nedir\/#Proaktif-Savunma-Stratejileri-ve-Detayli-Raporlama\" >Proaktif Savunma Stratejileri ve Detayl\u0131 Raporlama<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"DDoS-Saldirilarina-Genel-Bakis-ve-HTTP-Floodun-Yeri\"><\/span>DDoS Sald\u0131r\u0131lar\u0131na Genel Bak\u0131\u015f ve HTTP Flood&#8217;un Yeri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Modern siber tehditler aras\u0131nda en yayg\u0131n ve y\u0131k\u0131c\u0131 olanlardan biri Da\u011f\u0131t\u0131k Hizmet Engelleme (DDoS) sald\u0131r\u0131lar\u0131d\u0131r. Bu sald\u0131r\u0131lar, hedef sistemlerin kaynaklar\u0131n\u0131 t\u00fcketerek veya a\u011f ba\u011flant\u0131lar\u0131n\u0131 doyurarak me\u015fru kullan\u0131c\u0131lar\u0131n hizmetlere eri\u015fimini engellemeyi ama\u00e7lar. DDoS sald\u0131r\u0131lar\u0131n\u0131n karma\u015f\u0131kl\u0131\u011f\u0131n\u0131 ve HTTP Flood&#8217;un bu ekosistemdeki yerini anlamak i\u00e7in sald\u0131r\u0131 katmanlar\u0131n\u0131 bilmek \u00f6nemlidir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Dagitik-Hizmet-Engelleme-DDoS-Saldirilari-Nedir\"><\/span>Da\u011f\u0131t\u0131k Hizmet Engelleme (DDoS) Sald\u0131r\u0131lar\u0131 Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Da\u011f\u0131t\u0131k Hizmet Engelleme (DDoS), tek bir hedefe (genellikle bir web sunucusu, web sitesi veya a\u011f altyap\u0131s\u0131) birden \u00e7ok ele ge\u00e7irilmi\u015f bilgisayar sistemi veya cihaz \u00fczerinden e\u015f zamanl\u0131 olarak yap\u0131lan bir siber sald\u0131r\u0131 t\u00fcr\u00fcd\u00fcr. Bu sald\u0131r\u0131lar\u0131n temel amac\u0131, hedef sistemin ta\u015f\u0131yabilece\u011finden \u00e7ok daha fazla istek veya veri g\u00f6ndererek onu a\u015f\u0131r\u0131 y\u00fcklemek ve sonu\u00e7 olarak hizmet veremez duruma getirmektir. Bu durum, web sitesinin yava\u015flamas\u0131na, tamamen eri\u015filemez hale gelmesine ve i\u015f s\u00fcreklili\u011finin ciddi \u015fekilde sekteye u\u011framas\u0131na neden olur. Sald\u0131r\u0131n\u0131n &#8220;da\u011f\u0131t\u0131k&#8221; olmas\u0131, trafi\u011fin binlerce, hatta milyonlarca farkl\u0131 kaynaktan gelmesi anlam\u0131na gelir, bu da sald\u0131r\u0131y\u0131 tespit etmeyi ve engellemeyi olduk\u00e7a zorla\u015ft\u0131r\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Saldiri-Katmanlari-Ag-Tasima-ve-Uygulama-Katmani\"><\/span>Sald\u0131r\u0131 Katmanlar\u0131: A\u011f, Ta\u015f\u0131ma ve Uygulama Katman\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Siber g\u00fcvenlik uzmanlar\u0131, DDoS sald\u0131r\u0131lar\u0131n\u0131 daha iyi s\u0131n\u0131fland\u0131rmak ve anlamak i\u00e7in genellikle OSI (Open Systems Interconnection) modelini referans al\u0131rlar. Bu modeldeki katmanlar, sald\u0131r\u0131lar\u0131n hedeflerini ve y\u00f6ntemlerini belirler. DDoS sald\u0131r\u0131lar\u0131 genellikle \u00fc\u00e7 ana katmanda yo\u011funla\u015f\u0131r:<\/p>\n<ul>\n<li><strong>A\u011f Katman\u0131 (Layer 3):<\/strong> Bu katmandaki sald\u0131r\u0131lar, a\u011f altyap\u0131s\u0131n\u0131 hedef al\u0131r. ICMP Flood ve IP Fragmentation gibi sald\u0131r\u0131lar, y\u00f6nlendiricilerin ve anahtarlar\u0131n kapasitesini a\u015farak a\u011f\u0131n genel performans\u0131n\u0131 d\u00fc\u015f\u00fcrmeyi hedefler.<\/li>\n<li><strong>Ta\u015f\u0131ma Katman\u0131 (Layer 4):<\/strong> Bu katman, sunucular aras\u0131ndaki ba\u011flant\u0131 durumlar\u0131n\u0131 y\u00f6netir. SYN Flood ve UDP Flood gibi pop\u00fcler sald\u0131r\u0131lar, sunucunun ba\u011flant\u0131 tablosunu (connection table) doldurarak yeni me\u015fru ba\u011flant\u0131lar\u0131n kurulmas\u0131n\u0131 engeller. Ama\u00e7, sunucunun a\u011f kaynaklar\u0131n\u0131 t\u00fcketmektir.<\/li>\n<li><strong>Uygulama Katman\u0131 (Layer 7):<\/strong> En sofistike sald\u0131r\u0131lar\u0131n ger\u00e7ekle\u015fti\u011fi katmand\u0131r. Bu katmanda hedef, do\u011frudan web sunucusunda \u00e7al\u0131\u015fan uygulamalard\u0131r (\u00f6rn. Apache, Nginx) veya veritabanlar\u0131d\u0131r. Sald\u0131r\u0131lar, me\u015fru kullan\u0131c\u0131 trafi\u011fi gibi g\u00f6r\u00fcnen HTTP\/HTTPS istekleri \u00fczerinden ger\u00e7ekle\u015ftirilir.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"HTTP-Flood-Uygulama-Katmani-Layer-7-Saldirilarinin-Bir-Turu\"><\/span>HTTP Flood: Uygulama Katman\u0131 (Layer 7) Sald\u0131r\u0131lar\u0131n\u0131n Bir T\u00fcr\u00fc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>HTTP Flood, Uygulama Katman\u0131 (Layer 7) sald\u0131r\u0131lar\u0131n\u0131n en yayg\u0131n ve etkili t\u00fcrlerinden biridir. Bu sald\u0131r\u0131, a\u011f veya ta\u015f\u0131ma katman\u0131ndaki sald\u0131r\u0131lar\u0131n aksine, sunucunun a\u011f bant geni\u015fli\u011fini de\u011fil, do\u011frudan i\u015flemci (CPU) ve bellek (RAM) gibi kaynaklar\u0131n\u0131 hedef al\u0131r. Sald\u0131rganlar, standart web trafi\u011fi gibi g\u00f6r\u00fcnen \u00e7ok say\u0131da HTTP GET veya POST iste\u011fi g\u00f6nderir. Her bir istek, sunucunun bir web sayfas\u0131n\u0131 olu\u015fturmas\u0131, veritaban\u0131ndan veri \u00e7ekmesi veya bir komut dosyas\u0131n\u0131 \u00e7al\u0131\u015ft\u0131rmas\u0131 gibi i\u015flemleri tetikler. D\u00fc\u015f\u00fck bant geni\u015fli\u011fi ile bile ger\u00e7ekle\u015ftirilebilen bu sald\u0131r\u0131lar, sunucu kaynaklar\u0131n\u0131 h\u0131zla t\u00fcketerek sistemi yava\u015flat\u0131r ve sonunda tamamen hizmet d\u0131\u015f\u0131 b\u0131rak\u0131r. Me\u015fru trafikle olan benzerli\u011fi nedeniyle tespiti ve \u00f6nlenmesi di\u011fer katmanlardaki sald\u0131r\u0131lara g\u00f6re \u00e7ok daha zordur.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"HTTP-Flood-Saldirisinin-Anatomisi\"><\/span>HTTP Flood Sald\u0131r\u0131s\u0131n\u0131n Anatomisi<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>HTTP Flood sald\u0131r\u0131lar\u0131n\u0131n nas\u0131l i\u015fledi\u011fini tam olarak anlamak i\u00e7in \u00f6ncelikle HTTP protokol\u00fcn\u00fcn temellerini ve bu sald\u0131r\u0131y\u0131 di\u011fer DDoS t\u00fcrlerinden ay\u0131ran \u00f6zellikleri bilmek gerekir. Bu sald\u0131r\u0131lar, web sunucular\u0131n\u0131n en temel i\u015flevlerini k\u00f6t\u00fcye kullanarak onlar\u0131 etkisiz hale getirir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"HTTP-Protokolunun-Temelleri-GET-ve-POST-Istekleri\"><\/span>HTTP Protokol\u00fcn\u00fcn Temelleri: GET ve POST \u0130stekleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>HTTP (Hypertext Transfer Protocol), web taray\u0131c\u0131lar\u0131 ile web sunucular\u0131 aras\u0131nda ileti\u015fim kurmak i\u00e7in kullan\u0131lan temel protokold\u00fcr. Bu ileti\u015fimin en yayg\u0131n iki y\u00f6ntemi GET ve POST istekleridir.<\/p>\n<ul>\n<li><strong>GET \u0130stekleri:<\/strong> Bir sunucudan veri talep etmek i\u00e7in kullan\u0131l\u0131r. \u00d6rne\u011fin, bir web sayfas\u0131n\u0131, bir resmi veya bir dosyay\u0131 g\u00f6r\u00fcnt\u00fclemek istedi\u011finizde taray\u0131c\u0131n\u0131z sunucuya bir GET iste\u011fi g\u00f6nderir. Bu istekler genellikle statik i\u00e7erikler i\u00e7in kullan\u0131l\u0131r ve parametreler URL \u00fczerinden g\u00f6nderilir.<\/li>\n<li><strong>POST \u0130stekleri:<\/strong> Bir sunucuya veri g\u00f6ndermek i\u00e7in kullan\u0131l\u0131r. Bir ileti\u015fim formunu doldurdu\u011funuzda, bir kullan\u0131c\u0131 giri\u015fi yapt\u0131\u011f\u0131n\u0131zda veya bir dosyay\u0131 sunucuya y\u00fckledi\u011finizde taray\u0131c\u0131n\u0131z bir POST iste\u011fi g\u00f6nderir. Bu istekler, sunucuda daha fazla i\u015flem g\u00fcc\u00fc gerektiren dinamik i\u015flemleri tetikler.<\/li>\n<\/ul>\n<p>HTTP Flood sald\u0131rganlar\u0131, bu iki istek t\u00fcr\u00fcn\u00fc de kullanarak hedeflerini zay\u0131flatmay\u0131 ama\u00e7lar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"HTTP-Flood-Saldirisi-Nasil-Calisir\"><\/span>HTTP Flood Sald\u0131r\u0131s\u0131 Nas\u0131l \u00c7al\u0131\u015f\u0131r?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir HTTP Flood sald\u0131r\u0131s\u0131, hedeflenen web sunucusuna veya uygulamas\u0131na \u00e7ok say\u0131da g\u00f6r\u00fcn\u00fc\u015fte me\u015fru HTTP iste\u011fi g\u00f6ndererek \u00e7al\u0131\u015f\u0131r. Sald\u0131r\u0131n\u0131n temel prensibi, sunucunun her bir iste\u011fi i\u015flemek i\u00e7in harcad\u0131\u011f\u0131 kaynaklar\u0131 (CPU, RAM, veritaban\u0131 ba\u011flant\u0131lar\u0131) istismar etmektir. Sald\u0131r\u0131, genellikle binlerce ele ge\u00e7irilmi\u015f cihazdan olu\u015fan bir botnet (zombi a\u011f\u0131) taraf\u0131ndan da\u011f\u0131t\u0131k bir \u015fekilde ger\u00e7ekle\u015ftirilir. Bu sayede sald\u0131r\u0131 trafi\u011fi, tek bir kaynaktan geliyormu\u015f gibi g\u00f6r\u00fcnmez ve tespit edilmesi zorla\u015f\u0131r. Sunucu, bu sahte istekleri ger\u00e7ek kullan\u0131c\u0131 isteklerinden ay\u0131rt edemez ve hepsini i\u015flemeye \u00e7al\u0131\u015f\u0131r. Kaynaklar t\u00fckendi\u011finde ise me\u015fru kullan\u0131c\u0131lara hizmet veremez hale gelir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"HTTP-GET-Flood-Saldirisi\"><\/span>HTTP GET Flood Sald\u0131r\u0131s\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bu sald\u0131r\u0131 t\u00fcr\u00fcnde, sald\u0131rganlar hedef sunucuya \u00e7ok say\u0131da GET iste\u011fi g\u00f6nderir. Genellikle, sunucuda en fazla kaynak t\u00fcketen URL&#8217;ler hedeflenir. \u00d6rne\u011fin, b\u00fcy\u00fck boyutlu resimler, karma\u015f\u0131k veritaban\u0131 sorgular\u0131 gerektiren arama sonu\u00e7lar\u0131 sayfalar\u0131 veya PDF dosyalar\u0131 gibi i\u00e7erikler tekrar tekrar istenir. Her bir istek, sunucunun diskten veri okumas\u0131na, bellekte i\u015flem yapmas\u0131na ve a\u011f \u00fczerinden veri g\u00f6ndermesine neden olur. Yeterli say\u0131da istek g\u00f6nderildi\u011finde, sunucunun kaynaklar\u0131 h\u0131zla t\u00fckenir ve web sitesi yava\u015flar veya tamamen eri\u015filemez hale gelir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"HTTP-POST-Flood-Saldirisi\"><\/span>HTTP POST Flood Sald\u0131r\u0131s\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>HTTP POST Flood sald\u0131r\u0131lar\u0131, genellikle GET sald\u0131r\u0131lar\u0131ndan daha etkilidir \u00e7\u00fcnk\u00fc sunucu taraf\u0131nda daha fazla i\u015flem g\u00fcc\u00fc gerektirirler. Bu sald\u0131r\u0131da, botnet&#8217;ler, bir kullan\u0131c\u0131 giri\u015f formu, arama kutusu veya veri y\u00fckleme alan\u0131 gibi POST iste\u011fi kabul eden bir u\u00e7 noktaya s\u00fcrekli olarak veri g\u00f6nderir. Sunucu, gelen her bir POST verisini i\u015flemek, do\u011frulamak ve genellikle bir veritaban\u0131na yazmak zorundad\u0131r. Bu i\u015flemler, GET isteklerine k\u0131yasla \u00e7ok daha fazla CPU ve veritaban\u0131 kayna\u011f\u0131 t\u00fcketir. Bu nedenle, daha az say\u0131da POST iste\u011fi ile sunucuyu hizmet d\u0131\u015f\u0131 b\u0131rakmak m\u00fcmk\u00fcn olabilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Diger-Ag-Katmani-DDoS-Saldirilarindan-Farklari\"><\/span>Di\u011fer A\u011f Katman\u0131 DDoS Sald\u0131r\u0131lar\u0131ndan Farklar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>HTTP Flood sald\u0131r\u0131lar\u0131n\u0131, SYN Flood veya UDP Flood gibi a\u011f ve ta\u015f\u0131ma katman\u0131 sald\u0131r\u0131lar\u0131ndan ay\u0131ran temel farklar vard\u0131r. Bu farklar, hem sald\u0131r\u0131n\u0131n do\u011fas\u0131n\u0131 hem de savunma stratejilerini belirler.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>\u00d6zellik<\/th>\n<th>HTTP Flood (Layer 7)<\/th>\n<th>A\u011f\/Ta\u015f\u0131ma Katman\u0131 Sald\u0131r\u0131lar\u0131 (Layer 3\/4)<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Hedef<\/strong><\/td>\n<td>Web sunucusu uygulamas\u0131 (Apache, Nginx vb.), veritaban\u0131. CPU ve RAM gibi sunucu kaynaklar\u0131.<\/td>\n<td>A\u011f altyap\u0131s\u0131 (y\u00f6nlendiriciler, anahtarlar) ve sunucunun a\u011f ba\u011flant\u0131 kapasitesi.<\/td>\n<\/tr>\n<tr>\n<td><strong>Y\u00f6ntem<\/strong><\/td>\n<td>Me\u015fru g\u00f6r\u00fcnen HTTP GET\/POST istekleri g\u00f6nderir.<\/td>\n<td>B\u00fcy\u00fck hacimli bozuk veya sahte paketler (SYN, UDP, ICMP) g\u00f6nderir.<\/td>\n<\/tr>\n<tr>\n<td><strong>Gereken Bant Geni\u015fli\u011fi<\/strong><\/td>\n<td>D\u00fc\u015f\u00fck. Az trafikle y\u00fcksek etki yarat\u0131labilir.<\/td>\n<td>\u00c7ok y\u00fcksek. Genellikle Gbps veya Tbps seviyesinde bant geni\u015fli\u011fi gerekir.<\/td>\n<\/tr>\n<tr>\n<td><strong>Tespit Zorlu\u011fu<\/strong><\/td>\n<td>Y\u00fcksek. Sald\u0131r\u0131 trafi\u011fi, ger\u00e7ek kullan\u0131c\u0131 trafi\u011finden zor ay\u0131rt edilir.<\/td>\n<td>D\u00fc\u015f\u00fck. Anormal paket t\u00fcrleri ve y\u00fcksek trafik hacmi kolayca tespit edilebilir.<\/td>\n<\/tr>\n<tr>\n<td><strong>Korunma Y\u00f6ntemi<\/strong><\/td>\n<td>Web Uygulama G\u00fcvenlik Duvar\u0131 (WAF), CAPTCHA, davran\u0131\u015f analizi.<\/td>\n<td>IP tabanl\u0131 engelleme (blackholing), rate limiting, a\u011f donan\u0131mlar\u0131.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"Zombi-Aglar-Botnetler-Saldirinin-Arkasindaki-Guc\"><\/span>Zombi A\u011flar (Botnetler): Sald\u0131r\u0131n\u0131n Arkas\u0131ndaki G\u00fc\u00e7<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>HTTP Flood gibi sofistike ve da\u011f\u0131t\u0131k sald\u0131r\u0131lar\u0131n arkas\u0131ndaki temel itici g\u00fc\u00e7, &#8220;botnet&#8221; olarak bilinen zombi bilgisayar a\u011flar\u0131d\u0131r. Bu devasa a\u011flar, sald\u0131rganlara hem anonimlik hem de ezici bir trafik olu\u015fturma kapasitesi sa\u011flar, bu da onlar\u0131 siber g\u00fcvenli\u011fin en b\u00fcy\u00fck tehditlerinden biri haline getirir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Botnet-Nedir-ve-Nasil-Olusturulur\"><\/span>Botnet Nedir ve Nas\u0131l Olu\u015fturulur?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Botnet, &#8220;robot&#8221; ve &#8220;network&#8221; kelimelerinin birle\u015fiminden olu\u015fur ve siber su\u00e7lular taraf\u0131ndan uzaktan kontrol edilen, internete ba\u011fl\u0131 binlerce veya milyonlarca ele ge\u00e7irilmi\u015f cihazdan olu\u015fan bir a\u011fd\u0131r. Bu a\u011fdaki her bir cihaza &#8220;bot&#8221; veya &#8220;zombi&#8221; denir. Sald\u0131rganlar (botmaster&#8217;lar), bu cihazlar\u0131 k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar (malware) arac\u0131l\u0131\u011f\u0131yla enfekte ederek kontrol alt\u0131na al\u0131r. Bir botnet olu\u015fturma s\u00fcreci genellikle \u015fu ad\u0131mlar\u0131 i\u00e7erir: cihazlar\u0131n g\u00fcvenlik a\u00e7\u0131klar\u0131ndan yararlanarak enfekte edilmesi, enfekte edilen cihazlar\u0131n bir komuta ve kontrol sunucusuna ba\u011flanmas\u0131 ve son olarak botmaster&#8217;\u0131n bu sunucu \u00fczerinden t\u00fcm botlara komut g\u00f6ndermesi.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Zombi-Cihazlar-ve-Ele-Gecirilme-Yontemleri\"><\/span>Zombi Cihazlar ve Ele Ge\u00e7irilme Y\u00f6ntemleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir botnet&#8217;in par\u00e7as\u0131 olabilecek cihaz yelpazesi olduk\u00e7a geni\u015ftir. Geleneksel olarak masa\u00fcst\u00fc bilgisayarlar ve sunucular hedef al\u0131nsa da g\u00fcn\u00fcm\u00fczde Nesnelerin \u0130nterneti (IoT) cihazlar\u0131n\u0131n yayg\u0131nla\u015fmas\u0131yla birlikte g\u00fcvenlik kameralar\u0131, ak\u0131ll\u0131 TV&#8217;ler, modemler, dijital video kaydediciler (DVR) ve hatta ak\u0131ll\u0131 ev aletleri gibi zay\u0131f g\u00fcvenlikli cihazlar da botnet&#8217;lerin bir par\u00e7as\u0131 haline gelmektedir. Cihazlar\u0131n ele ge\u00e7irilmesinde kullan\u0131lan yayg\u0131n y\u00f6ntemler \u015funlard\u0131r:<\/p>\n<ul>\n<li><strong>K\u00f6t\u00fc Ama\u00e7l\u0131 Yaz\u0131l\u0131mlar:<\/strong> Kullan\u0131c\u0131lar\u0131n bilmeden indirdi\u011fi vir\u00fcsler, trojanlar veya solucanlar arac\u0131l\u0131\u011f\u0131yla cihazlara s\u0131z\u0131l\u0131r.<\/li>\n<li><strong>Phishing (Oltalama):<\/strong> Sahte e-postalar veya web siteleri arac\u0131l\u0131\u011f\u0131yla kullan\u0131c\u0131lar\u0131n kimlik bilgileri \u00e7al\u0131n\u0131r ve bu bilgilerle sistemlere eri\u015fim sa\u011flan\u0131r.<\/li>\n<li><strong>Yaz\u0131l\u0131m G\u00fcvenlik A\u00e7\u0131klar\u0131:<\/strong> G\u00fcncellenmemi\u015f i\u015fletim sistemleri, web taray\u0131c\u0131lar\u0131 veya di\u011fer yaz\u0131l\u0131mlardaki bilinen g\u00fcvenlik a\u00e7\u0131klar\u0131 istismar edilir.<\/li>\n<li><strong>Zay\u0131f Parolalar:<\/strong> Fabrika ayarlar\u0131nda b\u0131rak\u0131lm\u0131\u015f veya kolay tahmin edilebilir parolalara sahip cihazlar, kaba kuvvet (brute-force) sald\u0131r\u0131lar\u0131yla kolayca ele ge\u00e7irilir.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"Komuta-ve-Kontrol-C-C-Sunucularinin-Rolu\"><\/span>Komuta ve Kontrol (C&#038;C) Sunucular\u0131n\u0131n Rol\u00fc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Komuta ve Kontrol (Command and Control &#8211; C&#038;C veya C2) sunucusu, botnet&#8217;in beyni olarak i\u015flev g\u00f6r\u00fcr. Botmaster, t\u00fcm zombi cihazlara komutlar\u0131 bu merkezi sunucu \u00fczerinden g\u00f6nderir. Enfekte olmu\u015f her bot, periyodik olarak C&#038;C sunucusuna ba\u011flanarak yeni bir talimat olup olmad\u0131\u011f\u0131n\u0131 kontrol eder. Botmaster, &#8220;T\u00fcm botlar \u015fu IP adresine HTTP GET iste\u011fi g\u00f6nder&#8221; gibi bir komut verdi\u011finde, C&#038;C sunucusu bu komutu a\u011fdaki t\u00fcm botlara iletir ve sald\u0131r\u0131 an\u0131nda ba\u015flar. C&#038;C sunucular\u0131, sald\u0131rganlar\u0131n kimli\u011fini gizlemek i\u00e7in genellikle ele ge\u00e7irilmi\u015f ba\u015fka sunucular \u00fczerinde veya anonim <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/\" target=\"_blank\">hosting<\/a> hizmetlerinde bar\u0131nd\u0131r\u0131l\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"HTTP-Flood-Saldirilarinda-Botnetlerin-Kullanim-Amaci\"><\/span>HTTP Flood Sald\u0131r\u0131lar\u0131nda Botnetlerin Kullan\u0131m Amac\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Botnet&#8217;ler, HTTP Flood sald\u0131r\u0131lar\u0131n\u0131 son derece etkili ve tehlikeli k\u0131lan birka\u00e7 temel avantaj sa\u011flar. Bu avantajlar, sald\u0131r\u0131n\u0131n hem g\u00fcc\u00fcn\u00fc hem de gizlili\u011fini art\u0131r\u0131r.<\/p>\n<ul>\n<li><strong>Da\u011f\u0131t\u0131k Yap\u0131:<\/strong> Sald\u0131r\u0131, binlerce farkl\u0131 IP adresinden geldi\u011fi i\u00e7in, geleneksel IP tabanl\u0131 engelleme y\u00f6ntemleri yetersiz kal\u0131r. Her bir botun g\u00f6nderdi\u011fi trafik miktar\u0131 d\u00fc\u015f\u00fck oldu\u011fundan, tek tek botlar\u0131 tespit etmek neredeyse imkans\u0131zd\u0131r.<\/li>\n<li><strong>B\u00fcy\u00fck \u00d6l\u00e7ekli Trafik:<\/strong> Milyonlarca zombi cihazdan olu\u015fan bir botnet, en g\u00fc\u00e7l\u00fc sunucular\u0131 bile a\u015f\u0131r\u0131 y\u00fckleyecek kadar b\u00fcy\u00fck bir HTTP istek hacmi olu\u015fturabilir.<\/li>\n<li><strong>Me\u015fru Trafik Taklidi:<\/strong> Botnet&#8217;ler, ger\u00e7ek kullan\u0131c\u0131 davran\u0131\u015flar\u0131n\u0131 taklit edecek \u015fekilde programlanabilir. Bu sayede, sald\u0131r\u0131 trafi\u011fi normal web trafi\u011fi aras\u0131nda kamufle olur ve g\u00fcvenlik sistemlerini atlat\u0131r.<\/li>\n<li><strong>Anonimlik:<\/strong> Sald\u0131rgan, sald\u0131r\u0131y\u0131 do\u011frudan kendi sisteminden de\u011fil, binlerce arac\u0131 cihaz \u00fczerinden ger\u00e7ekle\u015ftirdi\u011fi i\u00e7in kimli\u011fini ve konumunu gizlemesi \u00e7ok daha kolayd\u0131r.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Limitleri-Asmak-Zombi-Aglar-Mesru-Trafigi-Nasil-Taklit-Eder\"><\/span>Limitleri A\u015fmak: Zombi A\u011flar Me\u015fru Trafi\u011fi Nas\u0131l Taklit Eder?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>HTTP Flood sald\u0131r\u0131lar\u0131n\u0131n en endi\u015fe verici y\u00f6n\u00fc, geleneksel g\u00fcvenlik duvarlar\u0131 ve basit koruma mekanizmalar\u0131n\u0131 atlatma yetene\u011fidir. Sald\u0131rganlar, botnet&#8217;leri (zombi a\u011flar) s\u0131radan bir kullan\u0131c\u0131n\u0131n web&#8217;de gezinme davran\u0131\u015f\u0131n\u0131 neredeyse m\u00fckemmel bir \u015fekilde taklit edecek \u015fekilde programlayarak bu ba\u015far\u0131y\u0131 elde ederler. Bu durum, sald\u0131r\u0131 trafi\u011fini me\u015fru isteklerden ay\u0131rmay\u0131 son derece zorla\u015ft\u0131r\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Geleneksel-Koruma-Yontemleri-ve-Sinirlari-IP-Tabanli-Rate-Limiting\"><\/span>Geleneksel Koruma Y\u00f6ntemleri ve S\u0131n\u0131rlar\u0131: IP Tabanl\u0131 Rate Limiting<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>En temel DDoS koruma y\u00f6ntemlerinden biri olan IP tabanl\u0131 rate limiting (h\u0131z s\u0131n\u0131rlama), belirli bir zaman diliminde tek bir IP adresinden gelebilecek istek say\u0131s\u0131n\u0131 k\u0131s\u0131tlar. \u00d6rne\u011fin, bir IP adresinin saniyede 10&#8217;dan fazla istek g\u00f6ndermesine izin vermez. Bu y\u00f6ntem, tek bir kaynaktan gelen basit sald\u0131r\u0131lara kar\u015f\u0131 etkili olsa da, botnet&#8217;ler taraf\u0131ndan y\u00f6netilen da\u011f\u0131t\u0131k HTTP Flood sald\u0131r\u0131lar\u0131 kar\u015f\u0131s\u0131nda tamamen etkisizdir. \u00c7\u00fcnk\u00fc bir botnet, binlerce, hatta milyonlarca farkl\u0131 IP adresi kullan\u0131r ve her bir IP&#8217;den gelen istek say\u0131s\u0131, belirlenen limitin \u00e7ok alt\u0131nda kal\u0131r. B\u00f6ylece, toplamda sunucuyu \u00e7\u00f6kertecek kadar b\u00fcy\u00fck bir trafik olu\u015fmas\u0131na ra\u011fmen, her bir zombi cihaz &#8220;me\u015fru&#8221; bir kullan\u0131c\u0131 gibi g\u00f6r\u00fcn\u00fcr ve h\u0131z s\u0131n\u0131rlamas\u0131na tak\u0131lmaz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Dusuk-ve-Yavas-Low-and-Slow-Saldiri-Taktikleri\"><\/span>D\u00fc\u015f\u00fck ve Yava\u015f (Low and Slow) Sald\u0131r\u0131 Taktikleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131rganlar\u0131n kulland\u0131\u011f\u0131 bir di\u011fer sofistike taktik ise &#8220;Low and Slow&#8221; (D\u00fc\u015f\u00fck ve Yava\u015f) sald\u0131r\u0131lard\u0131r. Bu y\u00f6ntemde, botnet&#8217;teki zombiler, hedef sunucuya \u00e7ok yava\u015f bir \u015fekilde, uzun aral\u0131klarla ve eksik HTTP istekleri g\u00f6nderir. Ama\u00e7, sunucunun ba\u011flant\u0131s\u0131n\u0131 m\u00fcmk\u00fcn oldu\u011funca uzun s\u00fcre me\u015fgul etmektir. \u00d6rne\u011fin, bir bot bir HTTP iste\u011fi ba\u015flat\u0131r ancak verinin tamam\u0131n\u0131 g\u00f6ndermeyi kas\u0131tl\u0131 olarak geciktirir. Sunucu, iste\u011fin tamamlanmas\u0131n\u0131 beklerken bir ba\u011flant\u0131y\u0131 ve ilgili kaynaklar\u0131 (bellek, i\u015flemci zaman\u0131) a\u00e7\u0131k tutmak zorunda kal\u0131r. Binlerce bot bunu ayn\u0131 anda yapt\u0131\u011f\u0131nda, sunucunun t\u00fcm mevcut ba\u011flant\u0131 yuvalar\u0131 dolar ve yeni me\u015fru kullan\u0131c\u0131lar i\u00e7in yer kalmaz. Bu sald\u0131r\u0131 t\u00fcr\u00fc, trafik hacmi \u00e7ok d\u00fc\u015f\u00fck oldu\u011fu i\u00e7in anomali tespit sistemleri taraf\u0131ndan fark edilmeyebilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Gercek-Kullanici-Davranislarinin-Simulasyonu\"><\/span>Ger\u00e7ek Kullan\u0131c\u0131 Davran\u0131\u015flar\u0131n\u0131n Sim\u00fclasyonu<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Botnet&#8217;ler, basit istekler g\u00f6ndermenin \u00e7ok \u00f6tesine ge\u00e7erek ger\u00e7ek bir kullan\u0131c\u0131n\u0131n taray\u0131c\u0131s\u0131n\u0131n davran\u0131\u015flar\u0131n\u0131 taklit ederler. Bu, tespit edilmelerini neredeyse imkans\u0131z hale getirir.<\/p>\n<h4>Rastgele ve Ge\u00e7erli User-Agent Ba\u015fl\u0131klar\u0131 Kullan\u0131m\u0131<\/h4>\n<p>Her HTTP iste\u011fi, iste\u011fi yapan istemci (taray\u0131c\u0131, mobil uygulama vb.) hakk\u0131nda bilgi i\u00e7eren bir &#8220;User-Agent&#8221; ba\u015fl\u0131\u011f\u0131 ta\u015f\u0131r. Basit botlar genellikle ayn\u0131 veya sahte bir User-Agent kullan\u0131rken, geli\u015fmi\u015f botnet&#8217;ler, ger\u00e7ekte var olan binlerce farkl\u0131 taray\u0131c\u0131 (Chrome, Firefox, Safari) ve i\u015fletim sistemi (Windows, macOS, Android, iOS) s\u00fcr\u00fcm\u00fcne ait ge\u00e7erli User-Agent ba\u015fl\u0131klar\u0131ndan olu\u015fan bir liste kullan\u0131r. Bu istekler, sanki farkl\u0131 cihaz ve taray\u0131c\u0131lardan gelen binlerce ger\u00e7ek kullan\u0131c\u0131ya aitmi\u015f gibi g\u00f6r\u00fcn\u00fcr.<\/p>\n<h4>Farkl\u0131 Referrer Adresleri G\u00f6nderme<\/h4>\n<p>Referrer ba\u015fl\u0131\u011f\u0131, bir kullan\u0131c\u0131n\u0131n bir web sayfas\u0131na hangi link \u00fczerinden geldi\u011fini belirtir. Geli\u015fmi\u015f botlar, isteklerine hedef siteyle veya pop\u00fcler arama motorlar\u0131yla (\u00f6rn. Google, Bing) ili\u015fkili, mant\u0131kl\u0131 ve rastgele Referrer ba\u015fl\u0131klar\u0131 ekler. Bu, trafi\u011fin organik arama sonu\u00e7lar\u0131ndan veya ba\u015fka sitelerdeki linklerden geliyormu\u015f gibi g\u00f6r\u00fcnmesini sa\u011flar ve davran\u0131\u015fsal analiz sistemlerini yan\u0131lt\u0131r.<\/p>\n<h4>\u00c7erez (Cookie) ve Oturum (Session) Y\u00f6netimini Taklit Etme<\/h4>\n<p>Modern web siteleri, kullan\u0131c\u0131lar\u0131 tan\u0131mak ve oturumlar\u0131n\u0131 s\u00fcrd\u00fcrmek i\u00e7in \u00e7erezler (cookies) kullan\u0131r. Geli\u015fmi\u015f botnet&#8217;ler, sunucudan gelen \u00e7erezleri kabul edip sonraki isteklerde geri g\u00f6nderebilirler. Bu sayede, bir oturum ba\u015flatm\u0131\u015f ve site i\u00e7inde gezinen ger\u00e7ek bir kullan\u0131c\u0131 gibi davran\u0131rlar. Bu durum, yaln\u0131zca \u00e7erez deste\u011fi olmayan istemcileri engelleyen basit bot koruma sistemlerini kolayca atlatmalar\u0131n\u0131 sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Dagitik-Yapi-Binlerce-Farkli-IP-Adresinden-Gelen-Isteklerle-Tespitin-Zorlastirilmasi\"><\/span>Da\u011f\u0131t\u0131k Yap\u0131: Binlerce Farkl\u0131 IP Adresinden Gelen \u0130steklerle Tespitin Zorla\u015ft\u0131r\u0131lmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Daha \u00f6nce de belirtildi\u011fi gibi, bir botnet&#8217;in en b\u00fcy\u00fck g\u00fcc\u00fc da\u011f\u0131t\u0131k yap\u0131s\u0131d\u0131r. Sald\u0131r\u0131 trafi\u011fi tek bir merkezden de\u011fil, co\u011frafi olarak d\u00fcnyan\u0131n d\u00f6rt bir yan\u0131na da\u011f\u0131lm\u0131\u015f binlerce farkl\u0131 IP adresinden gelir. Bu, sald\u0131r\u0131n\u0131n kayna\u011f\u0131n\u0131 belirlemeyi ve engellemeyi son derece zorla\u015ft\u0131r\u0131r. Tek bir IP adresini engellemek anlams\u0131zd\u0131r \u00e7\u00fcnk\u00fc binlerce ba\u015fka IP adresi sald\u0131r\u0131ya devam etmektedir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sifreli-Trafik-HTTPS-Kullanarak-Icerik-Denetiminden-Kacinma\"><\/span>\u015eifreli Trafik (HTTPS) Kullanarak \u0130\u00e7erik Denetiminden Ka\u00e7\u0131nma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>G\u00fcn\u00fcm\u00fczde web trafi\u011finin b\u00fcy\u00fck bir k\u0131sm\u0131 <a href=\"https:\/\/www.ihs.com.tr\/ssl\/\" target=\"_blank\">SSL<\/a>\/TLS ile \u015fifrelenmekte ve HTTPS \u00fczerinden iletilmektedir. Sald\u0131rganlar da bu durumu kendi lehlerine kullan\u0131r. HTTPS \u00fczerinden g\u00f6nderilen HTTP Flood istekleri \u015fifreli oldu\u011fu i\u00e7in, geleneksel a\u011f g\u00fcvenlik cihazlar\u0131 (firewall&#8217;lar) paketin i\u00e7eri\u011fini inceleyemez. \u0130ste\u011fin zararl\u0131 olup olmad\u0131\u011f\u0131n\u0131 anlamak i\u00e7in trafi\u011fin \u015fifresinin \u00e7\u00f6z\u00fclmesi (SSL Decryption\/Inspection) gerekir. Bu i\u015flem, g\u00fcvenlik cihazlar\u0131 i\u00e7in ek bir y\u00fck olu\u015fturur ve maliyetli olabilir. Sald\u0131rganlar, \u015fifreli trafik kullanarak i\u00e7erik tabanl\u0131 denetimlerden ve filtrelerden ka\u00e7\u0131nmay\u0131 hedefler.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>Sald\u0131r\u0131 Tekni\u011fi<\/th>\n<th>Geleneksel Sald\u0131r\u0131 (Basit Bot)<\/th>\n<th>Geli\u015fmi\u015f HTTP Flood (Botnet)<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>IP Kayna\u011f\u0131<\/strong><\/td>\n<td>Tek veya birka\u00e7 IP adresi<\/td>\n<td>Binlerce\/Milyonlarca da\u011f\u0131t\u0131k IP adresi<\/td>\n<\/tr>\n<tr>\n<td><strong>\u0130stek H\u0131z\u0131<\/strong><\/td>\n<td>Y\u00fcksek h\u0131zda (rate-limiting ile kolayca engellenir)<\/td>\n<td>D\u00fc\u015f\u00fck ve yava\u015f, limitlerin alt\u0131nda<\/td>\n<\/tr>\n<tr>\n<td><strong>User-Agent<\/strong><\/td>\n<td>Sabit veya sahte User-Agent<\/td>\n<td>Rastgele ve ge\u00e7erli binlerce User-Agent<\/td>\n<\/tr>\n<tr>\n<td><strong>Oturum Y\u00f6netimi<\/strong><\/td>\n<td>\u00c7erez (cookie) deste\u011fi yok<\/td>\n<td>\u00c7erez ve oturumlar\u0131 taklit edebilir<\/td>\n<\/tr>\n<tr>\n<td><strong>Protokol<\/strong><\/td>\n<td>Genellikle \u015fifresiz HTTP<\/td>\n<td>\u015eifreli HTTPS kullanarak denetimden ka\u00e7ar<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"HTTP-Flood-Saldirilarinin-Hedef-Sistemler-Uzerindeki-Etkileri\"><\/span>HTTP Flood Sald\u0131r\u0131lar\u0131n\u0131n Hedef Sistemler \u00dczerindeki Etkileri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>HTTP Flood sald\u0131r\u0131lar\u0131, yaln\u0131zca bir web sitesinin ge\u00e7ici olarak \u00e7evrimd\u0131\u015f\u0131 kalmas\u0131na neden olmaz; ayn\u0131 zamanda hedef sistemin altyap\u0131s\u0131nda ciddi kaynak t\u00fckenmesine, i\u015f s\u00fcre\u00e7lerinde aksamalara ve \u00f6nemli finansal kay\u0131plara yol a\u00e7abilir. Bu sald\u0131r\u0131lar\u0131n etkileri, hedefin altyap\u0131s\u0131n\u0131n her katman\u0131nda hissedilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sunucu-Kaynaklarinin-CPU-RAM-Tuketilmesi\"><\/span>Sunucu Kaynaklar\u0131n\u0131n (CPU, RAM) T\u00fcketilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>HTTP Flood sald\u0131r\u0131lar\u0131n\u0131n birincil hedefi, web sunucusunun i\u015flemci (CPU) ve bellek (RAM) kaynaklar\u0131d\u0131r. Gelen her bir me\u015fru g\u00f6r\u00fcn\u00fcml\u00fc HTTP iste\u011fi, sunucunun bir dizi i\u015flem yapmas\u0131n\u0131 gerektirir: iste\u011fi ayr\u0131\u015ft\u0131rmak, ilgili dosyalar\u0131 diskten okumak, PHP veya ASP.NET gibi sunucu tarafl\u0131 kodlar\u0131 \u00e7al\u0131\u015ft\u0131rmak, veritaban\u0131na ba\u011flanmak ve sonu\u00e7lar\u0131 bir HTML sayfas\u0131 olarak derlemek. Sald\u0131r\u0131 s\u0131ras\u0131nda saniyede binlerce istek geldi\u011finde, sunucunun CPU&#8217;su %100 kullan\u0131m seviyesine ula\u015f\u0131r ve belle\u011fi (RAM) tamamen dolar. Kaynaklar t\u00fckendi\u011finde, sunucu yeni gelen isteklere yan\u0131t veremez hale gelir, yava\u015flar ve sonunda \u00e7\u00f6kebilir. Bu durum, sadece web sitesini de\u011fil, ayn\u0131 <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/\" target=\"_blank\">sunucu<\/a> \u00fczerinde \u00e7al\u0131\u015fan di\u011fer hizmetleri de etkileyebilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Veritabani-Baglantilarinin-Doldurulmasi\"><\/span>Veritaban\u0131 Ba\u011flant\u0131lar\u0131n\u0131n Doldurulmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Modern web uygulamalar\u0131n\u0131n \u00e7o\u011fu, i\u00e7eriklerini ve kullan\u0131c\u0131 verilerini bir veritaban\u0131nda (MySQL, PostgreSQL, MSSQL vb.) saklar. Bir\u00e7ok HTTP iste\u011fi, sayfay\u0131 olu\u015fturmak i\u00e7in veritaban\u0131ndan veri \u00e7ekmeyi gerektirir. Veritaban\u0131 sunucular\u0131, ayn\u0131 anda belirli say\u0131da istemci ba\u011flant\u0131s\u0131n\u0131 y\u00f6netecek \u015fekilde yap\u0131land\u0131r\u0131lm\u0131\u015ft\u0131r (connection pool). HTTP POST Flood sald\u0131r\u0131lar\u0131 veya dinamik sayfalar\u0131 hedef alan GET Flood sald\u0131r\u0131lar\u0131, s\u00fcrekli olarak yeni veritaban\u0131 sorgular\u0131 olu\u015fturur. Bu durum, veritaban\u0131n\u0131n t\u00fcm mevcut ba\u011flant\u0131 havuzunu doldurur. Ba\u011flant\u0131 havuzu doldu\u011funda, yeni me\u015fru istekler veritaban\u0131na eri\u015femez ve hata mesajlar\u0131 al\u0131r. Sonu\u00e7 olarak, web sitesinin i\u00e7eri\u011fi y\u00fcklenemez ve uygulama i\u015flevsiz hale gelir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Web-Sitesi-ve-Uygulamalarin-Erisilemez-Hale-Gelmesi\"><\/span>Web Sitesi ve Uygulamalar\u0131n Eri\u015filemez Hale Gelmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yukar\u0131da bahsedilen kaynak t\u00fcketiminin nihai sonucu, web sitesinin veya uygulaman\u0131n me\u015fru kullan\u0131c\u0131lar i\u00e7in tamamen eri\u015filemez hale gelmesidir. Kullan\u0131c\u0131lar siteye girmeye \u00e7al\u0131\u015ft\u0131klar\u0131nda ya \u00e7ok uzun y\u00fckleme s\u00fcreleriyle kar\u015f\u0131la\u015f\u0131rlar, ya &#8220;503 Service Unavailable&#8221; gibi sunucu hata mesajlar\u0131 al\u0131rlar ya da taray\u0131c\u0131lar\u0131 &#8220;ba\u011flant\u0131 zaman a\u015f\u0131m\u0131na u\u011frad\u0131&#8221; hatas\u0131 verir. Bu durum, \u00f6zellikle e-ticaret siteleri, online hizmet platformlar\u0131 ve haber portallar\u0131 gibi s\u00fcrekli eri\u015filebilirlik gerektiren i\u015fletmeler i\u00e7in felaket niteli\u011findedir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Is-Surekliligi-ve-Finansal-Kayiplar\"><\/span>\u0130\u015f S\u00fcreklili\u011fi ve Finansal Kay\u0131plar<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir web sitesinin eri\u015filemez olmas\u0131n\u0131n do\u011frudan ve dolayl\u0131 bir\u00e7ok maliyeti vard\u0131r. Bu etkiler, sald\u0131r\u0131n\u0131n s\u00fcresine ve hedeflenen i\u015fletmenin t\u00fcr\u00fcne ba\u011fl\u0131 olarak b\u00fcy\u00fck \u00f6l\u00e7\u00fcde de\u011fi\u015febilir:<\/p>\n<ul>\n<li><strong>Do\u011frudan Gelir Kayb\u0131:<\/strong> E-ticaret siteleri i\u00e7in, kapal\u0131 kald\u0131klar\u0131 her dakika potansiyel sat\u0131\u015flar\u0131n kaybedilmesi anlam\u0131na gelir. Benzer \u015fekilde, reklam geliri elde eden siteler de trafik kayb\u0131 nedeniyle finansal zarara u\u011frar.<\/li>\n<li><strong>Marka \u0130tibar\u0131 ve M\u00fc\u015fteri G\u00fcveni Kayb\u0131:<\/strong> S\u00fcrekli olarak eri\u015filemeyen veya yava\u015f \u00e7al\u0131\u015fan bir site, profesyonellikten uzak bir imaj \u00e7izer. M\u00fc\u015fteriler, hizmetin g\u00fcvenilmez oldu\u011funu d\u00fc\u015f\u00fcnerek rakiplere y\u00f6nelebilir ve geri d\u00f6nmeyebilirler.<\/li>\n<li><strong>Operasyonel Maliyetler:<\/strong> Sald\u0131r\u0131y\u0131 tespit etmek, analiz etmek ve hafifletmek i\u00e7in harcanan zaman ve kaynaklar (IT personelinin mesaisi, acil durum m\u00fcdahale hizmetleri vb.) ciddi operasyonel maliyetler yarat\u0131r.<\/li>\n<p> &#8211; <strong>SEO Performans\u0131n\u0131n D\u00fc\u015fmesi:<\/strong> Uzun s\u00fcreli eri\u015fim sorunlar\u0131, arama motoru botlar\u0131n\u0131n siteyi tarayamamas\u0131na neden olabilir. Bu durum, arama motoru s\u0131ralamalar\u0131nda ge\u00e7ici veya kal\u0131c\u0131 d\u00fc\u015f\u00fc\u015flere yol a\u00e7arak organik trafik kayb\u0131na neden olabilir.<\/li>\n<\/ul>\n<p>Sonu\u00e7 olarak, bir HTTP Flood sald\u0131r\u0131s\u0131n\u0131n etkileri, basit bir teknik sorunun \u00e7ok \u00f6tesine ge\u00e7erek bir i\u015fletmenin finansal sa\u011fl\u0131\u011f\u0131n\u0131, itibar\u0131n\u0131 ve uzun vadeli ba\u015far\u0131s\u0131n\u0131 tehdit edebilir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"HTTP-Flood-Saldirilarini-Tespit-Etme-ve-Onleme-Yontemleri\"><\/span>HTTP Flood Sald\u0131r\u0131lar\u0131n\u0131 Tespit Etme ve \u00d6nleme Y\u00f6ntemleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>HTTP Flood sald\u0131r\u0131lar\u0131n\u0131n me\u015fru trafi\u011fi taklit etme yetene\u011fi, onlar\u0131 tespit etmeyi ve \u00f6nlemeyi zorla\u015ft\u0131r\u0131r. Ancak modern siber g\u00fcvenlik teknolojileri, davran\u0131\u015fsal analiz ve \u00e7ok katmanl\u0131 savunma stratejileri kullanarak bu sofistike tehditlere kar\u015f\u0131 etkili bir koruma sa\u011flayabilir. Ama\u00e7, otomatize edilmi\u015f bot trafi\u011fini ger\u00e7ek insan kullan\u0131c\u0131lardan ay\u0131rt etmektir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Anomali-Tespiti-Trafik-Desenlerindeki-Degisimleri-Izleme\"><\/span>Anomali Tespiti: Trafik Desenlerindeki De\u011fi\u015fimleri \u0130zleme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Anomali tespiti, bir web sitesinin normal trafik profilini (baseline) olu\u015fturarak bu profilin d\u0131\u015f\u0131na \u00e7\u0131kan ola\u011fand\u0131\u015f\u0131 aktiviteleri belirlemeye dayan\u0131r. Geli\u015fmi\u015f g\u00fcvenlik sistemleri, belirli bir zaman dilimindeki ortalama istek say\u0131s\u0131, en \u00e7ok ziyaret edilen sayfalar, co\u011frafi konum da\u011f\u0131l\u0131m\u0131 ve tipik kullan\u0131c\u0131 davran\u0131\u015flar\u0131 gibi metrikleri s\u00fcrekli olarak izler. Bir HTTP Flood sald\u0131r\u0131s\u0131 ba\u015flad\u0131\u011f\u0131nda, saniyedeki istek say\u0131s\u0131nda ani bir art\u0131\u015f, belirli bir sayfaya y\u00f6nelik orant\u0131s\u0131z talep veya al\u0131\u015f\u0131lmad\u0131k co\u011frafi konumlardan gelen yo\u011fun trafik gibi anormallikler tespit edilebilir. Bu tespit, otomatik olarak savunma mekanizmalar\u0131n\u0131 tetikleyebilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Insan-ve-Bot-Ayrimi-CAPTCHA-ve-JavaScript-Challenge-Testleri\"><\/span>\u0130nsan ve Bot Ayr\u0131m\u0131: CAPTCHA ve JavaScript Challenge Testleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131 trafi\u011fini me\u015fru kullan\u0131c\u0131 trafi\u011finden ay\u0131rman\u0131n en etkili yollar\u0131ndan biri, gelen iste\u011fin bir insan taraf\u0131ndan m\u0131 yoksa bir bot taraf\u0131ndan m\u0131 yap\u0131ld\u0131\u011f\u0131n\u0131 do\u011frulamakt\u0131r.<\/p>\n<ul>\n<li><strong>CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart):<\/strong> \u015e\u00fcpheli g\u00f6r\u00fcnen trafi\u011fi, \u00e7\u00f6zmesi insan i\u00e7in kolay ancak \u00e7o\u011fu bot i\u00e7in zor olan bir teste (\u00f6rne\u011fin, resimdeki harfleri yazma, belirli nesneleri se\u00e7me) y\u00f6nlendirir. Testi ge\u00e7emeyen istekler engellenir. Bu y\u00f6ntem etkili olsa da, kullan\u0131c\u0131 deneyimini olumsuz etkileyebilir.<\/li>\n<li><strong>JavaScript Challenge:<\/strong> Bu y\u00f6ntemde, \u015f\u00fcpheli istemciye k\u00fc\u00e7\u00fck bir JavaScript kodu g\u00f6nderilir ve taray\u0131c\u0131s\u0131n\u0131n bu kodu \u00e7\u00f6zmesi beklenir. Ger\u00e7ek kullan\u0131c\u0131lar\u0131n modern taray\u0131c\u0131lar\u0131 bu testi saniyeler i\u00e7inde fark edilmeden ge\u00e7er. Ancak \u00e7o\u011fu basit DDoS botu JavaScript i\u015fleme yetene\u011fine sahip olmad\u0131\u011f\u0131ndan bu testi ge\u00e7emez ve engellenir. Bu y\u00f6ntem, kullan\u0131c\u0131 deneyimini CAPTCHA&#8217;ya g\u00f6re daha az etkiler.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"Web-Uygulama-Guvenlik-Duvari-WAF-Kullanimi-ve-Kural-Setleri\"><\/span>Web Uygulama G\u00fcvenlik Duvar\u0131 (WAF) Kullan\u0131m\u0131 ve Kural Setleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Web Uygulama G\u00fcvenlik Duvar\u0131 (WAF), HTTP trafi\u011fini uygulama katman\u0131nda (Layer 7) analiz eden ve k\u00f6t\u00fc ama\u00e7l\u0131 istekleri engelleyen kritik bir g\u00fcvenlik bile\u015fenidir. Bir WAF, HTTP Flood sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koymak i\u00e7in \u00e7e\u015fitli teknikler kullan\u0131r:<\/p>\n<ul>\n<li><strong>Davran\u0131\u015fsal Analiz:<\/strong> Bir IP adresinin istek yapma s\u0131kl\u0131\u011f\u0131, gezdi\u011fi sayfalar ve oturum s\u00fcresi gibi davran\u0131\u015flar\u0131n\u0131 analiz ederek anormal aktiviteleri belirler.<\/li>\n<li><strong>\u0130mza Tabanl\u0131 Engelleme:<\/strong> Bilinen botnet&#8217;lere ait User-Agent dizelerini veya IP adreslerini i\u00e7eren kara listelere dayal\u0131 kurallar uygular.<\/li>\n<li><strong>Geli\u015fmi\u015f H\u0131z S\u0131n\u0131rlama (Rate Limiting):<\/strong> Sadece IP adresine de\u011fil, ayn\u0131 zamanda oturum (session) veya kullan\u0131c\u0131 kimli\u011fi gibi daha gran\u00fcler seviyelerde h\u0131z s\u0131n\u0131rlama politikalar\u0131 uygular.<\/li>\n<li><strong>Co\u011frafi Engelleme:<\/strong> \u0130\u015fletmenin hizmet vermedi\u011fi \u00fclkelerden gelen yo\u011fun trafi\u011fi engelleyebilir.<\/li>\n<\/ul>\n<p>Etkili bir WAF, gelen her iste\u011fi bu ve benzeri kurallara g\u00f6re filtreleyerek sadece me\u015fru trafi\u011fin sunucuya ula\u015fmas\u0131n\u0131 sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Icerik-Dagitim-Agi-CDN-ile-Yuku-Dagitma-ve-Filtreleme\"><\/span>\u0130\u00e7erik Da\u011f\u0131t\u0131m A\u011f\u0131 (CDN) ile Y\u00fck\u00fc Da\u011f\u0131tma ve Filtreleme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130\u00e7erik Da\u011f\u0131t\u0131m A\u011f\u0131 (CDN), bir web sitesinin i\u00e7eri\u011fini (resimler, CSS, JavaScript dosyalar\u0131) co\u011frafi olarak d\u00fcnyan\u0131n farkl\u0131 yerlerinde bulunan sunucularda \u00f6nbelle\u011fe alan bir hizmettir. CDN kullanmak, HTTP Flood sald\u0131r\u0131lar\u0131na kar\u015f\u0131 iki temel avantaj sa\u011flar:<\/p>\n<ol>\n<li><strong>Y\u00fck\u00fc Da\u011f\u0131tma:<\/strong> Sald\u0131r\u0131 trafi\u011fi, tek bir sunucuya odaklanmak yerine CDN&#8217;nin k\u00fcresel a\u011f\u0131na da\u011f\u0131t\u0131l\u0131r. CDN&#8217;nin devasa altyap\u0131s\u0131, \u00e7o\u011fu Layer 7 sald\u0131r\u0131s\u0131n\u0131 absorbe etme kapasitesine sahiptir.<\/li>\n<li><strong>Kenar Sunucularda Filtreleme:<\/strong> Bir\u00e7ok modern CDN, entegre WAF ve DDoS koruma \u00f6zellikleri sunar. K\u00f6t\u00fc ama\u00e7l\u0131 trafik, daha web sunucusuna ula\u015fmadan CDN&#8217;nin kenar (edge) sunucular\u0131nda tespit edilip engellenir. Bu, sunucunuzun kaynaklar\u0131n\u0131n sadece me\u015fru trafik i\u00e7in kullan\u0131lmas\u0131n\u0131 sa\u011flar.<\/li>\n<\/ol>\n<h3><span class=\"ez-toc-section\" id=\"Gelismis-Log-Analizi-ve-Davranissal-Modelleme\"><\/span>Geli\u015fmi\u015f Log Analizi ve Davran\u0131\u015fsal Modelleme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sunucu ve WAF loglar\u0131n\u0131n d\u00fczenli olarak analiz edilmesi, sald\u0131r\u0131 desenlerini anlamak ve gelecekteki sald\u0131r\u0131lara kar\u015f\u0131 daha haz\u0131rl\u0131kl\u0131 olmak i\u00e7in hayati \u00f6nem ta\u015f\u0131r. G\u00fcvenlik uzmanlar\u0131, loglar\u0131 inceleyerek sald\u0131rganlar\u0131n hangi sayfalar\u0131 hedefledi\u011fini, hangi User-Agent&#8217;lar\u0131 kulland\u0131\u011f\u0131n\u0131 ve sald\u0131r\u0131n\u0131n kayna\u011f\u0131 olan IP bloklar\u0131n\u0131 tespit edebilir. Bu bilgiler, WAF kurallar\u0131n\u0131 daha hassas bir \u015fekilde ayarlamak ve savunma stratejilerini g\u00fc\u00e7lendirmek i\u00e7in kullan\u0131l\u0131r. Davran\u0131\u015fsal modelleme sistemleri ise makine \u00f6\u011frenimi algoritmalar\u0131 kullanarak &#8220;normal&#8221; kullan\u0131c\u0131 davran\u0131\u015f\u0131n\u0131 s\u00fcrekli olarak \u00f6\u011frenir ve bu modelden sapan her t\u00fcrl\u00fc trafi\u011fi an\u0131nda \u015f\u00fcpheli olarak i\u015faretler. <a href=\"https:\/\/www.ihs.com.tr\/blog\/web-siteniz-varsa-siber-guvenlik-riski-de-vardir\/\" target=\"_blank\">Siber g\u00fcvenlik riski<\/a> ta\u015f\u0131yan bu t\u00fcr sald\u0131r\u0131lara kar\u015f\u0131 proaktif bir savunma hatt\u0131 olu\u015fturur.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"HTTP-Flood-Korumasi-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\"><\/span>HTTP Flood Korumas\u0131 \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>HTTP Flood gibi karma\u015f\u0131k ve sinsi Layer 7 sald\u0131r\u0131lar\u0131na kar\u015f\u0131 korunmak, standart g\u00fcvenlik \u00f6nlemlerinin \u00f6tesinde, uzmanl\u0131k, geli\u015fmi\u015f teknoloji ve proaktif bir yakla\u015f\u0131m gerektirir. \u0130HS Telekom, bu zorlu siber tehditlere kar\u015f\u0131 i\u015fletmenizi g\u00fcvende tutmak i\u00e7in tasarlanm\u0131\u015f kapsaml\u0131 ve modern bir koruma altyap\u0131s\u0131 sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Katman-7-Korumasinda-Uzmanlasmis-Altyapi\"><\/span>Katman 7 Korumas\u0131nda Uzmanla\u015fm\u0131\u015f Altyap\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130HS Telekom, sadece a\u011f katman\u0131ndaki hacimsel sald\u0131r\u0131lar\u0131 de\u011fil, \u00f6zellikle HTTP Flood gibi uygulama katman\u0131 tehditlerini hedef alan uzmanla\u015fm\u0131\u015f bir savunma altyap\u0131s\u0131na sahiptir. Teknolojimiz, me\u015fru g\u00f6r\u00fcnen zararl\u0131 trafi\u011fi derinlemesine analiz ederek ger\u00e7ek kullan\u0131c\u0131lar\u0131 bot&#8217;lardan ay\u0131rt etmek \u00fczere tasarlanm\u0131\u015ft\u0131r. Bu sayede, sunucu kaynaklar\u0131n\u0131z\u0131 t\u00fcketen gizli sald\u0131r\u0131lar daha hedefinize ula\u015fmadan etkisiz hale getirilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Anlik-Tehdit-Tespiti-ve-Akilli-Filtreleme-Teknolojileri\"><\/span>Anl\u0131k Tehdit Tespiti ve Ak\u0131ll\u0131 Filtreleme Teknolojileri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Savunma sistemlerimiz, trafik desenlerinizi s\u00fcrekli olarak izleyen ve makine \u00f6\u011frenimi ile desteklenen ak\u0131ll\u0131 analiz motorlar\u0131 kullan\u0131r. Normal trafik davran\u0131\u015f\u0131ndan en ufak bir sapma bile an\u0131nda tespit edilir ve potansiyel bir tehdit olarak i\u015faretlenir. Geli\u015fmi\u015f filtreleme teknolojilerimiz, \u015f\u00fcpheli istekleri JavaScript Challenge veya daha karma\u015f\u0131k do\u011frulama y\u00f6ntemleriyle test ederek sald\u0131r\u0131 giri\u015fimlerini otomatik olarak engellerken, me\u015fru kullan\u0131c\u0131lar\u0131n\u0131z\u0131n kesintisiz bir deneyim ya\u015famas\u0131n\u0131 sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Olceklenebilir-ve-Kesintisiz-Koruma-Kapasitesi\"><\/span>\u00d6l\u00e7eklenebilir ve Kesintisiz Koruma Kapasitesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Siber sald\u0131r\u0131lar\u0131n boyutu ne olursa olsun, \u0130HS Telekom&#8217;un k\u00fcresel \u00f6l\u00e7ekte da\u011f\u0131t\u0131lm\u0131\u015f altyap\u0131s\u0131 en yo\u011fun sald\u0131r\u0131lar\u0131 bile absorbe edecek \u015fekilde tasarlanm\u0131\u015ft\u0131r. Koruma kapasitemiz, i\u015fletmenizin b\u00fcy\u00fcme h\u0131z\u0131na ve trafik hacmine g\u00f6re esnek bir \u015fekilde \u00f6l\u00e7eklenebilir. Bu sayede, en kritik anlarda bile web sitenizin ve uygulamalar\u0131n\u0131z\u0131n performans\u0131 d\u00fc\u015fmeden ve eri\u015filebilirli\u011fi kesintiye u\u011framadan \u00e7al\u0131\u015fmaya devam etmesi garanti alt\u0131na al\u0131n\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"724-Guvenlik-Operasyon-Merkezi-SOC-Destegi\"><\/span>7\/24 G\u00fcvenlik Operasyon Merkezi (SOC) Deste\u011fi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Teknoloji tek ba\u015f\u0131na yeterli de\u011fildir. \u0130HS Telekom, alan\u0131nda uzman siber g\u00fcvenlik analistlerinden olu\u015fan G\u00fcvenlik Operasyon Merkezi (SOC) ile 7\/24 proaktif izleme ve an\u0131nda m\u00fcdahale hizmeti sunar. SOC ekibimiz, olas\u0131 tehditleri s\u00fcrekli olarak takip eder, sald\u0131r\u0131 an\u0131nda durumu analiz eder ve savunma mekanizmalar\u0131n\u0131 en etkili \u015fekilde yap\u0131land\u0131rarak tehdidi h\u0131zla savu\u015fturur. Size ise i\u015finize odaklanmak kal\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Proaktif-Savunma-Stratejileri-ve-Detayli-Raporlama\"><\/span>Proaktif Savunma Stratejileri ve Detayl\u0131 Raporlama<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130HS Telekom olarak reaktif de\u011fil, proaktif bir savunma anlay\u0131\u015f\u0131n\u0131 benimsiyoruz. Global tehdit istihbarat a\u011flar\u0131ndan beslenen sistemlerimiz, yeni ortaya \u00e7\u0131kan botnet&#8217;leri ve sald\u0131r\u0131 vekt\u00f6rlerini daha size ula\u015fmadan \u00f6\u011frenir ve koruma kalkanlar\u0131m\u0131z\u0131 buna g\u00f6re g\u00fcnceller. Ayr\u0131ca, hizmetimizin bir par\u00e7as\u0131 olarak sunulan detayl\u0131 raporlama ile engellenen tehditler, trafik analizleri ve g\u00fcvenlik durumunuz hakk\u0131nda \u015feffaf bir \u015fekilde bilgilendirilirsiniz. Bu raporlar, altyap\u0131n\u0131z\u0131n ne kadar g\u00fcvende oldu\u011funu net bir \u015fekilde g\u00f6rmenizi sa\u011flar ve gelecekteki g\u00fcvenlik yat\u0131r\u0131mlar\u0131n\u0131z i\u00e7in de\u011ferli veriler sunar. Profesyonel <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vds-sunucu.html\" target=\"_blank\">VDS<\/a> \u00e7\u00f6z\u00fcmleri i\u00e7in hemen ileti\u015fime ge\u00e7in.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Siber sald\u0131r\u0131lar, dijital d\u00fcnyan\u0131n karma\u015f\u0131kl\u0131\u011f\u0131 artt\u0131k\u00e7a daha sofistike ve tespit edilmesi zor hale gelmektedir. Bu sald\u0131r\u0131 t\u00fcrlerinden biri olan HTTP Flood, \u00f6zellikle&hellip;<\/p>\n","protected":false},"author":3,"featured_media":16672,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[466],"tags":[],"class_list":["post-16671","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bilgi-guvenligi"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16671","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=16671"}],"version-history":[{"count":1,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16671\/revisions"}],"predecessor-version":[{"id":16673,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16671\/revisions\/16673"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/16672"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=16671"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=16671"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=16671"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}