{"id":8689,"date":"2016-10-11T15:15:53","date_gmt":"2016-10-11T13:15:53","guid":{"rendered":"https:\/\/ihs.com.tr\/blog\/?p=8689"},"modified":"2019-01-18T15:02:31","modified_gmt":"2019-01-18T13:02:31","slug":"ssl-ile-ilgili-yanlis-bilinen-efsaneler","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/ssl-ile-ilgili-yanlis-bilinen-efsaneler\/","title":{"rendered":"SSL \u0130le \u0130lgili Yanl\u0131\u015f Bilinen Efsaneler"},"content":{"rendered":"

Secure Socket Layer (SSL) ve Transport Layer Security (TLS) i\u00e7erisinde gizlenmi\u015f olan g\u00fcvenlik tehditleriyle ba\u015fa \u00e7\u0131kma konusunda kendine gere\u011finden fazla g\u00fcvenen g\u00fcvenlik profesyonellerinin say\u0131s\u0131 g\u00fcn ge\u00e7tik\u00e7e daha da artmakta. Cyber Edge\u2019in yay\u0131nlad\u0131\u011f\u0131 2016 Siber Tehdit G\u00fcvenlik Raporu\u2019na g\u00f6re g\u00fcvenlik profesyonellerinin %85\u2019i \u00e7al\u0131\u015ft\u0131klar\u0131 kurumlar\u0131n bu meseleyi ba\u015ftan halletmi\u015f oldu\u011funu d\u00fc\u015f\u00fcn\u00fcyor. Ancak, Gartner\u2019a g\u00f6re ise yeni nesil g\u00fcvenlik duvarlar\u0131n\u0131n ve birle\u015fik tehdit y\u00f6netimi \u00e7\u00f6z\u00fcmlerinin yaln\u0131zca %20\u2019si SSL trafi\u011fini tam olarak tespit edebiliyor. Di\u011fer yandan, Blue Coat Labs son iki y\u0131lda SSL kullanan k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m say\u0131s\u0131nda da ciddi bir art\u0131\u015f tespit ettiklerini ifade ediyor. Blue Coat Labs\u2019in bulgular\u0131na g\u00f6re Ocak 2014\u2019le Eyl\u00fcl 2015 aras\u0131nda k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m ailesinden 500\u2019\u00fcn \u00fczerinde k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m \u00f6rne\u011fi her ay SSL kullanmaya devam etmi\u015f. 2015\u2019in son \u00fc\u00e7 ay\u0131nda ise bu rakam bir anda 29.000\u2019e \u00e7\u0131km\u0131\u015f. Benzer bir durum C&C sunucular\u0131 i\u00e7in de ge\u00e7erli. Blue Coat 2014\u2019\u00fcn \u00fc\u00e7\u00fcnc\u00fc \u00e7eyre\u011finde yakla\u015f\u0131k 1000 C&C sunucusunun SSL kulland\u0131\u011f\u0131n\u0131 tespit etmi\u015f. Bu rakam 2015\u2019in \u00fc\u00e7\u00fcnc\u00fc \u00e7eyre\u011fi itibar\u0131yla 200.000\u2019in \u00fczerine \u00e7\u0131km\u0131\u015f.<\/span><\/p>\n

\"SSL<\/a><\/p>\n

SSL trafi\u011fi ve k\u00f6r noktalar\u0131 hakk\u0131nda s\u00fcregelen \u015fehir efsanelerinin baz\u0131lar\u0131 ise \u015funlar:<\/span><\/p>\n

– Efsane 1:<\/strong> SSL taraf\u0131ndan korunan trafik g\u00fcvenli trafiktir. Yanl\u0131\u015f. Hackerlar kriptolanm\u0131\u015f belgeler\u00a0i\u00e7erisinde gizlenmi\u015f tehditleri \u00e7ok severler ve SSL\u2019in istismar ama\u00e7l\u0131 kullan\u0131m\u0131 SSL\u2019in kendisinden \u00e7ok daha h\u0131zl\u0131 bir \u015fekilde artmakta. Gartner\u2019\u0131n 2013 tarihli g\u00fcvenlik raporuna g\u00f6re 2017 y\u0131l\u0131nda ticari kurulu\u015flar\u0131 hedef alan a\u011f sald\u0131r\u0131lar\u0131n\u0131n yar\u0131s\u0131ndan fazlas\u0131 SSL kullan\u0131larak yap\u0131lacak.<\/span><\/p>\n

– Efsane 2:<\/strong> SSL\/TLS kullan\u0131m\u0131 sabit miktarda kalmakta. Yanl\u0131\u015f. NSS Labs yine 2013 tarihli bir raporunda SSL trafi\u011finde her y\u0131l %20\u2019lik bir art\u0131\u015f olaca\u011f\u0131n\u0131 tahmin etmi\u015fti. Ticari kurulu\u015flar\u0131n bulut<\/a> hizmetlerine ve mobil uygulamalara ge\u00e7mesi bu art\u0131\u015f\u0131n daha da fazla ivme kazanaca\u011f\u0131na i\u015faret etmekte. SSL’le desteklenmi\u015f her sekt\u00f6rden m\u00fc\u015fteri ve ortaklar bu y\u00f6ntemin giderek artan bir \u015fekilde yay\u0131ld\u0131\u011f\u0131n\u0131 ve h\u0131zl\u0131 bir \u015fekilde geli\u015fti\u011fini do\u011fruluyor.<\/span><\/p>\n

– Efsane 3:<\/strong> Yap\u0131lmas\u0131 gereken tek \u015fey istenmeyen web sitelerini engellemek. Yanl\u0131\u015f. Tehditlerin b\u00fcy\u00fck bir k\u0131sm\u0131 esasen yasal web sitelerinden gelmekte. Yine bir\u00e7ok tehdit kurulu\u015flar\u0131n kendi b\u00fcnyesinde olu\u015farak sistemlerin i\u00e7ine s\u0131zmakta. Dolay\u0131s\u0131yla ileti\u015fimin g\u00fcvenli\u011fini sa\u011flamak ve sistemlerin \u00e7al\u0131\u015f\u0131rl\u0131\u011f\u0131n\u0131 s\u00fcrd\u00fcrmek i\u00e7in eri\u015fim engellemek tek ba\u015f\u0131na yeterli bir \u00f6nlem de\u011fil; ayn\u0131 zamanda sisteme giren ve sistemden \u00e7\u0131kan SSL trafi\u011fini de s\u00fcrekli olarak denetlemek b\u00fcy\u00fck \u00f6nem te\u015fkil etmekte.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Secure Socket Layer (SSL) ve Transport Layer Security (TLS) i\u00e7erisinde gizlenmi\u015f olan g\u00fcvenlik tehditleriyle ba\u015fa \u00e7\u0131kma konusunda kendine gere\u011finden fazla g\u00fcvenen g\u00fcvenlik…<\/p>\n","protected":false},"author":3,"featured_media":8691,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,400],"tags":[],"class_list":["post-8689","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-haberler","category-ssl-sertifikasi"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/8689","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=8689"}],"version-history":[{"count":4,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/8689\/revisions"}],"predecessor-version":[{"id":9448,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/8689\/revisions\/9448"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/8691"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=8689"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=8689"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=8689"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}