{"id":4258,"date":"2024-10-09T19:56:38","date_gmt":"2024-10-09T16:56:38","guid":{"rendered":"https:\/\/buqnet.com.tr\/?page_id=4258"},"modified":"2024-10-09T20:05:05","modified_gmt":"2024-10-09T17:05:05","slug":"siber-guvenlik","status":"publish","type":"page","link":"https:\/\/buqnet.com.tr\/?page_id=4258","title":{"rendered":"Siber G\u00fcvenlik"},"content":{"rendered":"\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-1 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"338\" data-id=\"4268\" src=\"https:\/\/buqnet.com.tr\/wp-content\/uploads\/2024\/10\/siberguvenlik-1.png\" alt=\"siber g\u00fcvenlik\nsiber g\u00fcvenlik b\u00f6l\u00fcm\u00fc\nsiber g\u00fcvenlik nedir\nsiber g\u00fcvenlik s\u0131ralama\nsiber g\u00fcvenlik taban puanlar\u0131\nsiber g\u00fcvenlik uzman\u0131 maa\u015f\nsiber g\u00fcvenlik maa\u015flar\u0131\nsiber g\u00fcvenlik uzman\u0131\nsiber g\u00fcvenlik uzman\u0131 nas\u0131l olunur\nsiber g\u00fcvenlik i\u015f ilanlar\u0131\nsiber g\u00fcvenlik analistli\u011fi ve operat\u00f6rl\u00fc\u011f\u00fc\nsiber g\u00fcvenlik e\u011fitimi\nsiber g\u00fcvenlik y\u00fcksek lisans\nsiber g\u00fcvenlik analistli\u011fi ve operat\u00f6rl\u00fc\u011f\u00fc taban puanlar\u0131\nsiber g\u00fcvenlik m\u00fchendisli\u011fi\nsiber g\u00fcvenlik ne i\u015f yapar\nsiber g\u00fcvenlik systemalta\nsiber g\u00fcvenlik m\u00fchendisli\u011fi s\u0131ralama\nit\u00fc siber g\u00fcvenlik m\u00fchendisli\u011fi\nsiber g\u00fcvenlik maa\u015f\n\" class=\"wp-image-4268\" srcset=\"https:\/\/buqnet.com.tr\/wp-content\/uploads\/2024\/10\/siberguvenlik-1.png 900w, https:\/\/buqnet.com.tr\/wp-content\/uploads\/2024\/10\/siberguvenlik-1-300x113.png 300w, https:\/\/buqnet.com.tr\/wp-content\/uploads\/2024\/10\/siberguvenlik-1-768x288.png 768w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n<\/figure>\n\n\n\n<p>Siber G\u00fcvenlik<\/p>\n\n\n\n<p>S\u0131zma (Penetrasyon) Testi, bir sisteme, a\u011fa, ekipmana ya da ba\u015fka bir tesise yap\u0131lan sald\u0131r\u0131lar\u0131n, sistemin ya da \u201chedefin\u201d ger\u00e7ek bir sald\u0131r\u0131ya ne kadar savunmas\u0131z oldu\u011funu kan\u0131tlamak amac\u0131yla yap\u0131lan sistem ve a\u011f g\u00fcvenli\u011finin belirlenmesinde bir de\u011ferlendirme y\u00f6ntemidir.<br>&#x200d;<br>S\u0131zma Testi metodolojileri \u00e7e\u015fitli topluluklar, ilgili kurum ve kurulu\u015flar taraf\u0131ndan g\u00fcvenlik denetim testlerinin daha sa\u011fl\u0131kl\u0131 ve tekrar edilebilir sonu\u00e7lar \u00fcretilmesi i\u00e7in olu\u015fturulmu\u015f ve genel kabul g\u00f6r\u00fclm\u00fc\u015f standartlard\u0131r.<br>&#x200d;<br>\u00dclkemizde T\u00fcrk Standartlar\u0131 Enstit\u00fcs\u00fc TS-13638 uyar\u0131nca S\u0131zma Testi Standartlar\u0131 belirlenmi\u015f olup, globalde NIST-SP800-115, PTES, OSSTMM ve OWASP gibi standartlar \u00fczerinden s\u0131zma testi ve g\u00fcvenlik denetimleri metodolojik yakla\u015f\u0131mlar\u0131 temellendirilmi\u015ftir. Gais Cyber Security olarak yerel ve global standartlar \u00f6l\u00e7e\u011finde hizmetlerimizi sizlere ula\u015ft\u0131r\u0131yoruz.<br>&#x200d;<br>S\u0131zma testleri, &nbsp;BDDK, EPDK, PCI-DSS, ISO 27001, G\u00fcven Damgas\u0131, KVKK gibi \u00e7e\u015fitli g\u00fcvenlik denetimlerinin bir par\u00e7as\u0131 olmakla beraber hem periyodik olarak hem de sistem de\u011fi\u015fikliklerinden sonra zorunlu olarak yap\u0131lmas\u0131 gereken testlerdir.<\/p>\n\n\n\n<p>S\u0131zma testi bir bili\u015fim sisteminin check-up\u2019\u0131 olarak d\u00fc\u015f\u00fcn\u00fclebilir, y\u0131lda bir kez yap\u0131lmas\u0131 \u00f6nerilen s\u0131zma testi ile firman\u0131n a\u00e7\u0131klar\u0131 tespit edilir.<\/p>\n\n\n\n<p>S\u0131zma Testi A\u015famalar\u0131<\/p>\n\n\n\n<p><strong>1. Bilgi Toplama<br>&#x200d;<\/strong><br>Bilgi toplama kapsaml\u0131 bir g\u00fcvenlik de\u011ferlendirmesi yapabilmek i\u00e7in hedef hakk\u0131nda olas\u0131 t\u00fcm bilgileri toplamak i\u00e7in kullan\u0131lan evredir. \u0130nternet \u00fczerinden teknik (whois\/dns sorgular\u0131) ve teknik olmayan (arama motorlar\u0131, haber gruplar\u0131, e-posta listeleri sosyal a\u011flar vb.) y\u00f6ntemler kullan\u0131larak, hedef \u015firket veya sistem hakk\u0131nda bilgi sa\u011flanabilir. Bu safhan\u0131n amac\u0131 m\u00fcmk\u00fcn olan her sald\u0131r\u0131 yolunu ke\u015ffederek hedef ve uygulamalar\u0131n\u0131n kapsaml\u0131 bir g\u00f6r\u00fcn\u00fcm\u00fcn\u00fc elde etmektir. Bu sayede hedef \u00fczerinde bilgi g\u00fcvenli\u011fiyle ilgili her vekt\u00f6r\u00fcn test edilebilmesine olanak sa\u011flan\u0131r. Bu ad\u0131m metodolojinin genellikle g\u00f6z ard\u0131 edilen ilk ve en \u00f6nemli ad\u0131mlar\u0131ndan biridir. Di\u011fer t\u00fcm a\u015famalarda olabildi\u011fince kapsaml\u0131 ilerlenmesini sa\u011flar.<\/p>\n\n\n\n<p>&#x200d;<strong>2. Network Haritalama<\/strong><\/p>\n\n\n\n<p>Birinci b\u00f6l\u00fcm\u00fcn ard\u0131ndan hedefle ilgili t\u00fcm olas\u0131 bilgiler edinildi\u011finde, hedef network ve kaynaklar\u0131n\u0131 analiz etmek i\u00e7in daha teknik bir yakla\u015f\u0131m uygulan\u0131r. Network haritalama aktif bir bilgi toplama a\u015famas\u0131d\u0131r. Bu evrede ama\u00e7; hedef sistemin muhtemel bir network topolojisinin \u00fcretmek ve network yap\u0131s\u0131n\u0131n detayland\u0131r\u0131lmas\u0131d\u0131r. Bu a\u015famada; &nbsp;hedef sistem \u00fczerinde port ve servis taramas\u0131, a\u00e7\u0131k sistemlerin belirlenmesi, a\u00e7\u0131k sistemler \u00fczerindeki a\u00e7\u0131k portlar\u0131n ve servislerin belirlenmesi, sistemler \u00fczerinde hangi i\u015fletim sistemlerinin ve servislerin \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131n belirlenmesi, i\u015fletim sistemlerine, servislere ve uygulamalara ait versiyon bilgilerinin tespiti, sistemlerde kullan\u0131lan donan\u0131m\/yaz\u0131l\u0131mlar\u0131n ve versiyonlar\u0131n\u0131n tespit edilmesi, Router, Firewall, IPS gibi a\u011f cihazlar\u0131n\u0131n tespiti ger\u00e7ekle\u015ftirilerek detayl\u0131 bir network haritas\u0131 \u00e7\u0131kar\u0131l\u0131r. Network haritalama bilgi toplama a\u015famas\u0131ndan elde edilen bilgilerin do\u011frulanmas\u0131na yard\u0131mc\u0131 olarak, hedef sistemler ile ilgili baz\u0131 bilgi elde edilmesini sa\u011flayacakt\u0131r.<\/p>\n\n\n\n<p>&#x200d;<strong>3. S\u0131n\u0131fland\u0131rma<\/strong><\/p>\n\n\n\n<p>Bu a\u015famada bir \u00f6nceki ad\u0131mda canl\u0131 oldu\u011fu tespit edilen sistemler \u00fczerinde TCP\/UDP port tarama i\u015flemi ger\u00e7ekle\u015ftirilir. A\u00e7\u0131k oldu\u011fu tespit edilen portlar\u0131 hangi servislerin kulland\u0131\u011f\u0131, bu servislerin hangi \u00fcreticiye ait servisler oldu\u011fu, versiyonlar\u0131 gibi bilgiler \u201cbanner grabbing\u201d olarak adland\u0131r\u0131lan y\u00f6ntem ile \u00f6\u011frenilir ve manuel testler ile bu bilgilerin do\u011frulu\u011fundan emin olunduktan sonra bu bilgiler \u0131\u015f\u0131\u011f\u0131nda zafiyet veritabanlar\u0131 taran\u0131r ve bilinen zafiyetler sonraki a\u015famalarda kullan\u0131lmak \u00fczere not al\u0131n\u0131r.<br>&#x200d;<br>Tespit edilen canl\u0131 sistemler i\u00e7inde router, switch gibi aktif a\u011f cihazlar\u0131n\u0131n yer almas\u0131 durumunda bu cihazlar \u00fczerinde \u00e7al\u0131\u015fan i\u015fletim sistemleri, bu i\u015fletim sistemlerinin versiyonlar\u0131, bu cihazlar \u00fczerindeki servisler, y\u00f6nlendirme protokolleri, y\u00f6netimsel ama\u00e7l\u0131 servisler ve versiyonlar\u0131 tespit edilmeye \u00e7al\u0131\u015f\u0131l\u0131r ve bu bilgiler \u0131\u015f\u0131\u011f\u0131nda zafiyet veritaban\u0131nda inceleme yap\u0131larak sonraki a\u015famalarda kullan\u0131lmak \u00fczere not al\u0131n\u0131r. Ayr\u0131ca bu cihazlar \u00fczerinde ko\u015fan gereksiz servislerin, \u00f6n-tan\u0131ml\u0131 kullan\u0131c\u0131 ad\u0131 veya \u015fifre bilgilerinin ya da y\u00f6netim i\u00e7in kullan\u0131lan g\u00fcvensiz protokollerin tespiti halinde bu zafiyetler yap\u0131land\u0131rma problemleri ba\u015fl\u0131\u011f\u0131 alt\u0131nda rapora yans\u0131t\u0131l\u0131r.<br>&#x200d;<br>&#x200d;<strong>4. Zafiyet Tespiti<br><br>&#x200d;<\/strong>Hedef sisteme ait bilgi toplama ve network haritas\u0131n\u0131n \u00e7\u0131kar\u0131lmas\u0131n\u0131n ard\u0131ndan, elde edilen bilgiler de\u011ferlendirilerek zafiyet analizi ger\u00e7ekle\u015ftirilir. Bu a\u015faman\u0131n amac\u0131, daha \u00f6nce elde edilen bilgileri kullanarak zafiyetlerin varl\u0131\u011f\u0131n\u0131 teknik olarak de\u011ferlendirmektir. Zafiyet tan\u0131mlamas\u0131; network, sunucular, uygulamalar ve di\u011fer bile\u015fenlerdeki zafiyetleri bulmak i\u00e7in elde edilen verileri, \u00e7\u0131kar\u0131lan network topolojisini de\u011ferlendirerek ger\u00e7ekle\u015ftirilen g\u00fcvenlik denetimini bir ad\u0131m ileriye ta\u015f\u0131r. Bu a\u015famada hedef sisteme zarar vermeyecek \u015fekilde zafiyetleri tan\u0131mlamak ve tan\u0131mlanan zafiyetleri bilinen istismarlarla s\u00f6m\u00fcrmek i\u00e7in \u00e7e\u015fitli otomatize zafiyet tarama ara\u00e7lar\u0131yla taramalar ger\u00e7ekle\u015ftirilebilir. Zafiyet tarama ara\u00e7lar\u0131n\u0131n ayarlar\u0131 \u00f6n tan\u0131ml\u0131 olarak kullan\u0131lmamakta ve hedef sisteme g\u00f6re konfig\u00fcre edilmektedir. Tarama sonu\u00e7lar\u0131 S\u0131zma Testi Uzman\u0131 taraf\u0131ndan de\u011ferlendirilerek false positive ve false negatif sonu\u00e7lar elenmektedir. Zafiyet tan\u0131mlamas\u0131 ve analizi sonucunda hedef sisteme s\u0131zma yollar\u0131 ve senaryolar\u0131 belirlenmektedir.<\/p>\n\n\n\n<p>&#x200d;<strong>5. Hak Elde Etme<\/strong><\/p>\n\n\n\n<p>Zafiyet analizi sonras\u0131 tan\u0131mlanan zafiyetler istismar edilmeye \u00e7al\u0131\u015f\u0131larak, hedef sistem ve g\u00fcvenli\u011fi \u00fczerinde denemeler ger\u00e7ekle\u015ftirilir. Hedef sistem \u00fczerindeki g\u00fcvenlik \u00f6nlemlerini a\u015f\u0131larak eri\u015fim elde edilmeye ve eri\u015fim m\u00fcmk\u00fcn oldu\u011funca ba\u011flant\u0131 (reverse, bind) sa\u011flanmaya \u00e7al\u0131\u015f\u0131l\u0131r. Tan\u0131mlanan zafiyetlerin istismar\u0131 i\u00e7in uygun PoC kodlar\u0131\/ara\u00e7lar\u0131 kullan\u0131larak veya yaz\u0131larak hedef sistem \u00fczerinden testler ger\u00e7ekle\u015ftirilir. \u0130stismar i\u00e7in kullan\u0131lacak olan exploit halka a\u00e7\u0131k kaynaklardan elde edilmi\u015fse hedef sistem \u00fczerinde kullan\u0131lmadan \u00f6nce klonlanm\u0131\u015f ortam\u0131nda test edilmekte ve hedef sisteme zarar verilecek i\u015flemlerden ka\u00e7\u0131n\u0131lmaktad\u0131r.<\/p>\n\n\n\n<p><strong>S\u0131zma Testi T\u00fcrleri<\/strong><\/p>\n\n\n\n\r\n\r\n\t\t\t<div class=\"wp-block-safirtema-sorucevap\">\r\n\t\t\t\t<div class=\"question\"><span class=\"safiricon icon\"><svg class=\"safiricon-soru\"><use href=\"#safiricon-soru\"><\/use><\/svg><\/span><span class=\"text\">Kablosuz A\u011f S\u0131zma Testi<\/span><div class=\"openclose\"><span class=\"themeicon icon\"><svg class=\"themeicon-arrow\"><use href=\"#safiricon-tema--arrow\"><\/use><\/svg><\/span><\/div><\/div>\r\n\t\t\t\t<div class=\"answer\">Kablosuz a\u011flar; Restoran, kafe ve havaalan\u0131 gibi bir \u00e7ok alanda yayg\u0131n olarak kullan\u0131lmaktad\u0131r. Kablosuz a\u011f (WiFi) g\u00fcvenli\u011fi, siber su\u00e7lular\u0131n \u00e7evrimi\u00e7i ortamlarda kulland\u0131\u011f\u0131n\u0131z verilere eri\u015fmesini engellemek i\u00e7in al\u0131nan \u00f6nlemlerin b\u00fct\u00fcn\u00fcd\u00fcr. Bu test ile hedef sisteme ait kablosuz a\u011flar ( SSID ) ile, gizli durumdaki kablosuz a\u011flar (Hidden SSID ) tespit edilir.<\/p>\n\n\n\n<p>Kablosuz A\u011f (WiFi) S\u0131zma Testi S\u00fcreci<\/p>\n\n\n\n<p>Rogue Access point\u2019ler olup olmad\u0131\u011f\u0131 kontrol edilir..<\/p>\n\n\n\n<p>Kablosuz a\u011fda kullan\u0131lan \u015fifreleme y\u00f6ntemleri belirlenip, bu a\u011fa ba\u011fl\u0131 mobil cihazlar bulunur ve kablosuz a\u011fa ba\u011fl\u0131 sistemler \u00fczerinden bilgi toplama \u00e7al\u0131\u015fmalar\u0131 yap\u0131l\u0131r.<br>&#x200d;<\/p>\n\n\n\n<p>Access Point cihaz\u0131 IP adresi ara\u015ft\u0131r\u0131l\u0131r, bu cihaz\u0131n y\u00f6netim ara birimine y\u00f6nelik g\u00fcvenlik testleri ve kimlik do\u011frulama (open \/ shared) denetimleri yap\u0131l\u0131r.<br>&#x200d;<\/p>\n\n\n\n<p>A\u011fa ba\u011fl\u0131 istemcilerin IP adresleri ve i\u015fletim istemleri belirlenir.<br>&#x200d;<\/p>\n\n\n\n<p>MAC adresi filtreleme belirlenir, MAC adres filtreleme \u00f6zelli\u011fini atlama ve Hotspot atlatma testleri yap\u0131l\u0131r.<br>&#x200d;<\/p>\n\n\n\n<p>Authentication token hijacking yap\u0131l\u0131r.<br>&#x200d;<\/p>\n\n\n\n<p>Monitor modda a\u011fa ba\u011fl\u0131 istemcilerin trafi\u011fini izleme (client isolation mode ) testleri, a\u011fa ba\u011fl\u0131 istemcilere y\u00f6nelik MITM testleri ve a\u011fa ba\u011fl\u0131 istemcilerin sistemlerini ele ge\u00e7irme ( fake upgrade ) testleri ger\u00e7ekle\u015ftirilir.<br>&#x200d;<\/p>\n\n\n\n<p>A\u011fa ba\u011fl\u0131 istemcilerden WEP \/ WPA anahtar\u0131 alma denemeleri yap\u0131l\u0131r.<br>&#x200d;<\/p>\n\n\n\n<p>WPA \/ WPA2 anahtar\u0131 elde etme giri\u015fimleri denetlenir.<br>&#x200d;<\/p>\n\n\n\n<p>WEP anahtar\u0131 k\u0131rma i\u00e7in trafik toplama ve istemcinin ba\u011flant\u0131s\u0131 olmayan WEP a\u011flarda trafik \u00fcretimi yap\u0131l\u0131r.<br>&#x200d;<\/p>\n\n\n\n<p>WEP \/ WPA \/ WPA2 anahtar\u0131 k\u0131rma testleri yap\u0131l\u0131r.<br>&#x200d;<\/p>\n\n\n\n<p>MAC korumas\u0131 a\u015fma testleri, WPA cracking i\u00e7in hadshake mesajlar\u0131n\u0131 yakalama denemesi yap\u0131l\u0131r.<br>&#x200d;<\/p>\n\n\n\n<p>WPS destekli kablosuz a\u011flara y\u00f6nelik ke\u015fif \u00e7al\u0131\u015fmalar\u0131 yap\u0131l\u0131r ve PIN numaras\u0131 testleri ger\u00e7ekle\u015ftirilir.<br>&#x200d;<\/p>\n\n\n\n<p>WPS kullan\u0131lan Access Pointlere ait WPA anahtar\u0131 k\u0131rma denenir.<br>&#x200d;<\/p>\n\n\n\n<p>Sahte ba\u011flant\u0131 istekleri g\u00f6ndererek ba\u011flant\u0131 limitleri zorlan\u0131r.<br>&#x200d;<\/p>\n\n\n\n<p>Wifi kullanc\u0131lar\u0131na ait hassas bilgilerin elde edilmesi denenir.<\/p>\n\n\n\n<p>A\u011fa ba\u011fl\u0131 kablosuz istemcilere de-authentication sald\u0131r\u0131lar\u0131 ve de-assicate sald\u0131r\u0131lar\u0131 ger\u00e7ekle\u015ftirilir.<\/div>\r\n\t\t\t<\/div>\r\n\r\n\t\t\n\n\n\n\r\n\r\n\t\t\t<div class=\"wp-block-safirtema-sorucevap\">\r\n\t\t\t\t<div class=\"question\"><span class=\"safiricon icon\"><svg class=\"safiricon-soru\"><use href=\"#safiricon-soru\"><\/use><\/svg><\/span><span class=\"text\">Mobil Uygulama S\u0131zma Testi<\/span><div class=\"openclose\"><span class=\"themeicon icon\"><svg class=\"themeicon-arrow\"><use href=\"#safiricon-tema--arrow\"><\/use><\/svg><\/span><\/div><\/div>\r\n\t\t\t\t<div class=\"answer\">Mobil uygulamalar\u0131n her ge\u00e7en g\u00fcn artmas\u0131yla mobil uygulama s\u0131zma testi \u00f6nem kazanmaktad\u0131r.<br>&#x200d;Yap\u0131lan ara\u015ft\u0131rmalar, d\u00fcnya \u00e7ap\u0131nda 5,19 milyardan fazla insan\u0131n cep telefonu kulland\u0131\u011f\u0131n\u0131 ve kullan\u0131c\u0131 say\u0131s\u0131n\u0131n son bir y\u0131l i\u00e7inde 124 milyon (% 2,4) artt\u0131\u011f\u0131n\u0131 g\u00f6stermektedir.<br>&#x200d;Mobil uygulamalar i\u00e7erisinde kredi kart\u0131 verilerinden t\u0131bbi verilere kadar bir \u00e7ok hassas bilgi saklanmaktad\u0131r ve i\u015flenmektedir.<br>&#x200d;Kullan\u0131c\u0131 say\u0131s\u0131n\u0131n art\u0131\u015f\u0131 ile beraber uygulama ve uygulama i\u00e7erisindeki mod\u00fcller sald\u0131rganlar\u0131n hedefi haline gelmi\u015ftir.<br>&#x200d;Bu test ile mobil uygulamadaki zafiyetler tespit edilip raporlanarak uygulamaya \u00f6zel olarak s\u0131zma testi ger\u00e7ekle\u015ftirilir.<\/div>\r\n\t\t\t<\/div>\r\n\r\n\t\t\n\n\n\n\r\n\r\n\t\t\t<div class=\"wp-block-safirtema-sorucevap\">\r\n\t\t\t\t<div class=\"question\"><span class=\"safiricon icon\"><svg class=\"safiricon-soru\"><use href=\"#safiricon-soru\"><\/use><\/svg><\/span><span class=\"text\">\u0130\u00e7 A\u011f S\u0131zma Testi<\/span><div class=\"openclose\"><span class=\"themeicon icon\"><svg class=\"themeicon-arrow\"><use href=\"#safiricon-tema--arrow\"><\/use><\/svg><\/span><\/div><\/div>\r\n\t\t\t\t<div class=\"answer\">\u0130\u00e7 a\u011f testi kurum i\u00e7erisinde Wi-Fi a\u011f\u0131 veya Ethernet ba\u011flant\u0131s\u0131 \u00fczerinden i\u00e7 a\u011fa eri\u015fim sa\u011flay\u0131p a\u011f i\u00e7erisinde bulunan t\u00fcm cihazlara eri\u015filerek kurum i\u00e7erisindeki t\u00fcm cihazlar\u0131 g\u00fcvenlik testine tabii tutar.<br>&#x200d;Test edilen sistemler aras\u0131nda i\u00e7 a\u011fda bulunan sunucu ve istemci bilgisayarlar\u0131 haricinde; VPN sistemleri, i\u00e7erik filtreleme sistemleri, yaz\u0131c\u0131lar, parmak izi okuyucu cihazlar, kartl\u0131 ge\u00e7i\u015f sistemleri, kameralar vb. a\u011f i\u00e7erisinde kar\u015f\u0131la\u015f\u0131labilecek t\u00fcm sistemler test edilmektedir.<br>&#x200d;Bununla birlikte kablosuz a\u011f s\u0131zma testleri, son kullan\u0131c\u0131 bilgisayar testleri, g\u00fcvenlik \u00fcr\u00fcnleri yap\u0131land\u0131rma testleri de kapsam dahilindedir.<br>&#x200d;Hizmeti alacak kurumun ko\u015fullar\u0131 g\u00f6z \u00f6n\u00fcnde bulundurularak SPK, BDDK, EPDK uyumlu s\u0131zma testleri ve raporlama s\u00fcre\u00e7leri ger\u00e7ekle\u015ftirilebilmektedir.<br>&#x200d;Yine kurumun talebine g\u00f6re yeni COVID-19 normallerine uygun olarak, kurumun tahsis etti\u011fi VPN servisi ile kurum i\u00e7erisinde fiziksel olarak bulunmadan i\u00e7 a\u011f testleri ger\u00e7ekle\u015ftirilebilir.<\/div>\r\n\t\t\t<\/div>\r\n\r\n\t\t\n\n\n\n\r\n\r\n\t\t\t<div class=\"wp-block-safirtema-sorucevap\">\r\n\t\t\t\t<div class=\"question\"><span class=\"safiricon icon\"><svg class=\"safiricon-soru\"><use href=\"#safiricon-soru\"><\/use><\/svg><\/span><span class=\"text\">D\u0131\u015f A\u011f S\u0131zma Testi<\/span><div class=\"openclose\"><span class=\"themeicon icon\"><svg class=\"themeicon-arrow\"><use href=\"#safiricon-tema--arrow\"><\/use><\/svg><\/span><\/div><\/div>\r\n\t\t\t\t<div class=\"answer\">Bir kurumun d\u0131\u015far\u0131ya a\u00e7\u0131k envanteri tehdit potansiyeli ve eri\u015fim y\u00fczeyi en y\u00fcksek olan aland\u0131r.<br>&#x200d;D\u0131\u015f a\u011f s\u0131zma testi kurumlar\u0131n d\u0131\u015far\u0131dan eri\u015filebilen envanteri \u00fczerinde yap\u0131lan global standartlara uygun ger\u00e7ekle\u015ftirilen testleri i\u00e7erir.<br>&#x200d;D\u0131\u015f envanter kapsam\u0131nda web uygulamalar\u0131, mobil uygulamalar, di\u011fer hizmetler ve bu hizmetlerin kurulu oldu\u011fu d\u0131\u015far\u0131ya a\u00e7\u0131k sunucular gibi d\u0131\u015far\u0131ya a\u00e7\u0131k t\u00fcm envanterler \u00fczerinde testler yap\u0131l\u0131r.<br>&#x200d;Yine kurum ile belirlenen kapsam sonucunda yukar\u0131da belirtilen testlerin yan\u0131nda Sosyal M\u00fchendislik ve Stres Testleri de ger\u00e7ekle\u015ftirilmektedir.<\/div>\r\n\t\t\t<\/div>\r\n\r\n\t\t\n\n\n\n\r\n\r\n\t\t\t<div class=\"wp-block-safirtema-sorucevap\">\r\n\t\t\t\t<div class=\"question\"><span class=\"safiricon icon\"><svg class=\"safiricon-soru\"><use href=\"#safiricon-soru\"><\/use><\/svg><\/span><span class=\"text\">\u00d6deme Altyap\u0131s\u0131 S\u0131zma Testi<\/span><div class=\"openclose\"><span class=\"themeicon icon\"><svg class=\"themeicon-arrow\"><use href=\"#safiricon-tema--arrow\"><\/use><\/svg><\/span><\/div><\/div>\r\n\t\t\t\t<div class=\"answer\">\u00d6deme altyap\u0131lar\u0131 tehdit potansiyelinin y\u00fcksek oldu\u011fu, fraud vakalar\u0131n\u0131n s\u0131kl\u0131kla kar\u015f\u0131la\u015f\u0131ld\u0131\u011f\u0131 \u00f6nemli bir aland\u0131r.<br>&#x200d;Sald\u0131rganlar altyap\u0131lar \u00fczerindeki zafiyetleri s\u00f6m\u00fcrerek kurumu mali zarara u\u011fratabilirler.<br>&#x200d;Gais Cyber Security Red Team ekibi \u00f6deme altyap\u0131lar\u0131 \u00fczerinde BDDK ve SPK uyumlu bir \u015fekilde g\u00fcvenlik testlerini ger\u00e7ekle\u015ftirir. Testler s\u0131ras\u0131nda altyap\u0131 \u00fczerinde fiyat manip\u00fclasyonu, altyap\u0131ya m\u00fcdahale gibi \u00f6nemli konu ba\u015fl\u0131klar\u0131n\u0131n da aralar\u0131nda oldu\u011fu \u00f6zel bir kapsam listesi ile g\u00fcvenlik testleri ger\u00e7ekle\u015ftirilir.<\/div>\r\n\t\t\t<\/div>\r\n\r\n\t\t\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Siber G\u00fcvenlik S\u0131zma (Penetrasyon) Testi, bir sisteme, a\u011fa, ekipmana ya da ba\u015fka bir tesise yap\u0131lan sald\u0131r\u0131lar\u0131n, sistemin ya da \u201chedefin\u201d ger\u00e7ek bir sald\u0131r\u0131ya ne kadar savunmas\u0131z oldu\u011funu kan\u0131tlamak amac\u0131yla yap\u0131lan sistem ve a\u011f g\u00fcvenli\u011finin belirlenmesinde bir de\u011ferlendirme y\u00f6ntemidir.&#x200d;S\u0131zma Testi metodolojileri \u00e7e\u015fitli topluluklar, ilgili kurum ve kurulu\u015flar taraf\u0131ndan g\u00fcvenlik denetim testlerinin daha sa\u011fl\u0131kl\u0131 ve tekrar edilebilir [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-4258","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Siber G\u00fcvenlik - 7\/24 Buqnet Bilgisayar Yaz\u0131l\u0131m ve Donan\u0131m Hizmetleri<\/title>\n<meta name=\"description\" content=\"IT Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Dan\u0131\u015fmanl\u0131k, Bak\u0131m Anla\u015fmas\u0131, Bili\u015fim Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Servisi, Server Hizmeti\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/buqnet.com.tr\/?page_id=4258\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Siber G\u00fcvenlik - 7\/24 Buqnet Bilgisayar Yaz\u0131l\u0131m ve Donan\u0131m Hizmetleri\" \/>\n<meta property=\"og:description\" content=\"IT Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Dan\u0131\u015fmanl\u0131k, Bak\u0131m Anla\u015fmas\u0131, Bili\u015fim Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Servisi, Server Hizmeti\" \/>\n<meta property=\"og:url\" content=\"https:\/\/buqnet.com.tr\/?page_id=4258\" \/>\n<meta property=\"og:site_name\" content=\"7\/24 Buqnet Bilgisayar Yaz\u0131l\u0131m ve Donan\u0131m Hizmetleri\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-09T17:05:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/buqnet.com.tr\/wp-content\/uploads\/2024\/10\/siberguvenlik-1.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data1\" content=\"9 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/buqnet.com.tr\\\/?page_id=4258\",\"url\":\"https:\\\/\\\/buqnet.com.tr\\\/?page_id=4258\",\"name\":\"Siber G\u00fcvenlik - 7\\\/24 Buqnet Bilgisayar Yaz\u0131l\u0131m ve Donan\u0131m Hizmetleri\",\"isPartOf\":{\"@id\":\"http:\\\/\\\/buqnet.com.tr\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/buqnet.com.tr\\\/?page_id=4258#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/buqnet.com.tr\\\/?page_id=4258#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/buqnet.com.tr\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/siberguvenlik-1.png\",\"datePublished\":\"2024-10-09T16:56:38+00:00\",\"dateModified\":\"2024-10-09T17:05:05+00:00\",\"description\":\"IT Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Dan\u0131\u015fmanl\u0131k, Bak\u0131m Anla\u015fmas\u0131, Bili\u015fim Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Servisi, Server Hizmeti\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/buqnet.com.tr\\\/?page_id=4258#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/buqnet.com.tr\\\/?page_id=4258\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\\\/\\\/buqnet.com.tr\\\/?page_id=4258#primaryimage\",\"url\":\"https:\\\/\\\/buqnet.com.tr\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/siberguvenlik-1.png\",\"contentUrl\":\"https:\\\/\\\/buqnet.com.tr\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/siberguvenlik-1.png\",\"width\":900,\"height\":338},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/buqnet.com.tr\\\/?page_id=4258#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"http:\\\/\\\/buqnet.com.tr\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Siber G\u00fcvenlik\"}]},{\"@type\":\"WebSite\",\"@id\":\"http:\\\/\\\/buqnet.com.tr\\\/#website\",\"url\":\"http:\\\/\\\/buqnet.com.tr\\\/\",\"name\":\"Buqnet Bilgisayar Sistem Teknolojileri\",\"description\":\"IT Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Dan\u0131\u015fmanl\u0131k, Bak\u0131m Anla\u015fmas\u0131, Bili\u015fim Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Servisi, Server Hizmeti\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"http:\\\/\\\/buqnet.com.tr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Siber G\u00fcvenlik - 7\/24 Buqnet Bilgisayar Yaz\u0131l\u0131m ve Donan\u0131m Hizmetleri","description":"IT Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Dan\u0131\u015fmanl\u0131k, Bak\u0131m Anla\u015fmas\u0131, Bili\u015fim Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Servisi, Server Hizmeti","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/buqnet.com.tr\/?page_id=4258","og_locale":"tr_TR","og_type":"article","og_title":"Siber G\u00fcvenlik - 7\/24 Buqnet Bilgisayar Yaz\u0131l\u0131m ve Donan\u0131m Hizmetleri","og_description":"IT Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Dan\u0131\u015fmanl\u0131k, Bak\u0131m Anla\u015fmas\u0131, Bili\u015fim Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Servisi, Server Hizmeti","og_url":"https:\/\/buqnet.com.tr\/?page_id=4258","og_site_name":"7\/24 Buqnet Bilgisayar Yaz\u0131l\u0131m ve Donan\u0131m Hizmetleri","article_modified_time":"2024-10-09T17:05:05+00:00","og_image":[{"url":"https:\/\/buqnet.com.tr\/wp-content\/uploads\/2024\/10\/siberguvenlik-1.png","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_misc":{"Tahmini okuma s\u00fcresi":"9 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/buqnet.com.tr\/?page_id=4258","url":"https:\/\/buqnet.com.tr\/?page_id=4258","name":"Siber G\u00fcvenlik - 7\/24 Buqnet Bilgisayar Yaz\u0131l\u0131m ve Donan\u0131m Hizmetleri","isPartOf":{"@id":"http:\/\/buqnet.com.tr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/buqnet.com.tr\/?page_id=4258#primaryimage"},"image":{"@id":"https:\/\/buqnet.com.tr\/?page_id=4258#primaryimage"},"thumbnailUrl":"https:\/\/buqnet.com.tr\/wp-content\/uploads\/2024\/10\/siberguvenlik-1.png","datePublished":"2024-10-09T16:56:38+00:00","dateModified":"2024-10-09T17:05:05+00:00","description":"IT Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Dan\u0131\u015fmanl\u0131k, Bak\u0131m Anla\u015fmas\u0131, Bili\u015fim Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Servisi, Server Hizmeti","breadcrumb":{"@id":"https:\/\/buqnet.com.tr\/?page_id=4258#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/buqnet.com.tr\/?page_id=4258"]}]},{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/buqnet.com.tr\/?page_id=4258#primaryimage","url":"https:\/\/buqnet.com.tr\/wp-content\/uploads\/2024\/10\/siberguvenlik-1.png","contentUrl":"https:\/\/buqnet.com.tr\/wp-content\/uploads\/2024\/10\/siberguvenlik-1.png","width":900,"height":338},{"@type":"BreadcrumbList","@id":"https:\/\/buqnet.com.tr\/?page_id=4258#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"http:\/\/buqnet.com.tr\/"},{"@type":"ListItem","position":2,"name":"Siber G\u00fcvenlik"}]},{"@type":"WebSite","@id":"http:\/\/buqnet.com.tr\/#website","url":"http:\/\/buqnet.com.tr\/","name":"Buqnet Bilgisayar Sistem Teknolojileri","description":"IT Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Dan\u0131\u015fmanl\u0131k, Bak\u0131m Anla\u015fmas\u0131, Bili\u015fim Dan\u0131\u015fmanl\u0131k Hizmetleri, Bilgisayar Servisi, Server Hizmeti","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"http:\/\/buqnet.com.tr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"}]}},"_links":{"self":[{"href":"https:\/\/buqnet.com.tr\/index.php?rest_route=\/wp\/v2\/pages\/4258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buqnet.com.tr\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/buqnet.com.tr\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/buqnet.com.tr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buqnet.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4258"}],"version-history":[{"count":7,"href":"https:\/\/buqnet.com.tr\/index.php?rest_route=\/wp\/v2\/pages\/4258\/revisions"}],"predecessor-version":[{"id":4270,"href":"https:\/\/buqnet.com.tr\/index.php?rest_route=\/wp\/v2\/pages\/4258\/revisions\/4270"}],"wp:attachment":[{"href":"https:\/\/buqnet.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}