{"id":29680,"date":"2025-06-04T16:58:01","date_gmt":"2025-06-04T15:58:01","guid":{"rendered":"https:\/\/vanleeuwenlawfirm.eu\/tr\/?p=29680"},"modified":"2025-06-04T16:59:35","modified_gmt":"2025-06-04T15:59:35","slug":"veri-guvenligi","status":"publish","type":"post","link":"https:\/\/vanleeuwenlawfirm.eu\/tr\/teknoloji-ve-dijital\/siber-ve-veri-sorusturmalari\/siber-guvenlik-savunmasi-ve-muhendisligi\/veri-guvenligi\/","title":{"rendered":"Veri G\u00fcvenli\u011fi"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Siber Savunma ve M\u00fchendislik (Cyber Defence & Engineering – CDE) kapsam\u0131ndaki veri g\u00fcvenli\u011fi, doland\u0131r\u0131c\u0131l\u0131k risk y\u00f6netiminin temelini olu\u015fturur. Bu alan, finansal ve itibari zararlar\u0131 \u00f6nlemek amac\u0131yla kritik i\u015f verilerinin yetkisiz eri\u015fim, de\u011fi\u015ftirme ve kay\u0131plara kar\u015f\u0131 korunmas\u0131na odaklan\u0131r. Giderek karma\u015f\u0131kla\u015fan ortamlarda, sald\u0131r\u0131lar daha sofistike hale gelirken, i\u00e7 tehditler de artmaktad\u0131r. Bu nedenle, \u00e7ok katmanl\u0131 bir g\u00fcvenlik mimarisi uygulan\u0131r; teknik kontroller, politikalar ve fark\u0131ndal\u0131k art\u0131r\u0131c\u0131 faaliyetler bir arada kullan\u0131l\u0131r. Verilerin s\u0131n\u0131fland\u0131r\u0131lmas\u0131 ve \u015fifrelenmesi ile geli\u015fmi\u015f tespit ve kay\u0131t sistemleriyle veri ak\u0131\u015f\u0131n\u0131n izlenmesi kritik \u00f6neme sahiptir. Ama\u00e7, verilerin gizlili\u011fini, b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc ve eri\u015filebilirli\u011fini sa\u011flamak, b\u00f6ylece t\u00fcm organizasyon seviyelerinde finansal yanl\u0131\u015f y\u00f6netim, doland\u0131r\u0131c\u0131l\u0131k, r\u00fc\u015fvet, kara para aklama, yolsuzluk ve uluslararas\u0131 yapt\u0131r\u0131m ihlallerine kar\u015f\u0131 g\u00fc\u00e7l\u00fc bir koruma sa\u011flamakt\u0131r.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Finansal Yanl\u0131\u015f Y\u00f6netim<\/h4>

Veri g\u00fcvenli\u011fi ba\u011flam\u0131nda finansal yanl\u0131\u015f y\u00f6netim, k\u00f6t\u00fc niyetli akt\u00f6rlerin \u015fifrelenmemi\u015f veri depolar\u0131na veya yedek kopyalar\u0131na eri\u015fim sa\u011flayarak finansal raporlar ve nakit ak\u0131\u015f\u0131 gibi hassas finansal veri setlerinde manip\u00fclasyon yapmas\u0131yla ortaya \u00e7\u0131kar. Rol tabanl\u0131 eri\u015fim kontrol\u00fc (RBAC) ve \u00f6znitelik tabanl\u0131 eri\u015fim kontrol\u00fc (ABAC) gibi s\u0131k\u0131 eri\u015fim kontrolleri, yaln\u0131zca belirli kullan\u0131c\u0131lar ve uygulamalara okuma ve yazma haklar\u0131 vererek bu riski azalt\u0131r. Verilerin hem dinlenme hem de iletim halindeyken AES-256 ve TLS 1.3 gibi standart algoritmalarla \u015fifrelenmesi, ele ge\u00e7irilen dosyalar\u0131n k\u00f6t\u00fcye kullan\u0131lmas\u0131n\u0131 \u00f6nler. Anahtarlar\u0131n d\u00fczenli olarak de\u011fi\u015ftirilmesi ve donan\u0131m g\u00fcvenlik mod\u00fclleri (HSM) ile kriptografik anahtarlar i\u00e7in ekstra koruma sa\u011flan\u0131r. Yedekleme ortamlar\u0131nda de\u011fi\u015fmezlik (immutability) ayarlar\u0131n\u0131n uygulanmas\u0131, verilerin de\u011fi\u015ftirilemez hale gelmesini sa\u011flar ve b\u00f6ylece doland\u0131r\u0131c\u0131l\u0131k durumlar\u0131nda her zaman geri y\u00fckleme ve denetim imkan\u0131 sunar.<\/p>

Doland\u0131r\u0131c\u0131l\u0131k<\/h4>

Kimlik bilgisi doldurma (credential stuffing), oturum ka\u00e7\u0131rma (session hijacking) ve API manip\u00fclasyonu gibi geli\u015fmi\u015f doland\u0131r\u0131c\u0131l\u0131k teknikleri, entegre bir veri koruma sistemi gerektirir. Ger\u00e7ek zamanl\u0131 korelasyon yapabilen G\u00fcvenlik Bilgileri ve Olay Y\u00f6netimi (SIEM) sistemleri, ola\u011fand\u0131\u015f\u0131 kal\u0131plar\u0131n\u2014\u00f6rne\u011fin b\u00fcy\u00fck veri transferleri veya al\u0131\u015f\u0131lmad\u0131k istekler\u2014h\u0131zla tespit edilmesini sa\u011flar. Veri Kayb\u0131n\u0131 \u00d6nleme (DLP) ara\u00e7lar\u0131, i\u00e7eri\u011fi ba\u011flam ve meta veriye g\u00f6re analiz ederek gizli bilgileri otomatik olarak s\u0131n\u0131fland\u0131r\u0131r ve \u015f\u00fcpheli transferleri izole eder. Tehdit \u0130stihbarat\u0131 (Threat Intelligence) verileri, IoC (compromise indicators) ve IoA (attack indicators) gibi g\u00f6stergelerle g\u00fcnl\u00fckleri zenginle\u015ftirerek doland\u0131r\u0131c\u0131l\u0131k zincirlerini ortaya \u00e7\u0131karan adli analizlere imkan tan\u0131r.<\/p>

R\u00fc\u015fvet<\/h4>

Veri g\u00fcvenli\u011fi, s\u00f6zle\u015fmeler ve faturalarla ilgili t\u00fcm sistemlerde kapsaml\u0131 denetim izleri olu\u015fturarak dijital yolsuzluk uygulamalar\u0131n\u0131 engeller. Yetkilendirilmi\u015f defter (permissioned blockchain) gibi de\u011fi\u015ftirilemez kay\u0131t teknolojileri, s\u00f6zle\u015fme belgelerindeki her de\u011fi\u015fikli\u011fin kesin olarak kaydedilmesini garanti eder. \u00c7ok fakt\u00f6rl\u00fc kimlik do\u011frulama (MFA) ve co\u011frafi s\u0131n\u0131rlamalar (geofencing) ile zaman s\u0131n\u0131rlamalar\u0131 gibi ba\u011flamsal eri\u015fim kontrolleri, hassas verilere yetkisiz eri\u015fim veya m\u00fcdahaleyi engeller. Otomatik uyumluluk kontrolleri, \u00f6nceden tan\u0131mlanm\u0131\u015f kurallar do\u011frultusunda \u00f6deme i\u015flemlerini s\u00fcrekli do\u011frular; \u00f6rne\u011fin, tedarik\u00e7i e\u015fik de\u011ferleri ve profilleri. Uyumsuzluk tespit edildi\u011finde, t\u00fcm ilgili veri ak\u0131\u015flar\u0131 bloke edilir ve ayr\u0131nt\u0131l\u0131 bir adli rapor olu\u015fturulur.<\/p>

Kara Para Aklama<\/h4>

Veri g\u00fcvenli\u011fi stratejisi, kara para aklamay\u0131 \u00f6nlemek i\u00e7in i\u015flem kay\u0131tlar\u0131 ve API \u00e7a\u011fr\u0131lar\u0131n\u0131n izlenmesine odaklan\u0131r. A\u011f ve uygulama d\u00fczeyinde \u015fifreleme, derin paket inceleme (DPI) ile birlikte, ger\u00e7ek zamanl\u0131 olarak \u015fifreli iletimlerin anormalliklerini tespit ederek yapay olarak \u015fi\u015firilmi\u015f miktarlar\u0131 veya otomatik i\u015flem ak\u0131\u015flar\u0131n\u0131 ortaya \u00e7\u0131kar\u0131r. Makine \u00f6\u011frenimi tabanl\u0131 anomali tespit modelleri, normal kullan\u0131c\u0131 ve sistem davran\u0131\u015flar\u0131n\u0131 temel alarak sapmalar\u0131 belirler. Veriler, politik olarak tan\u0131nm\u0131\u015f ki\u015filer (PEP), yapt\u0131r\u0131m listeleri ve olumsuz medya indeksleri gibi harici kaynaklarla zenginle\u015ftirilerek her i\u015flem an\u0131nda uyumluluk a\u00e7\u0131s\u0131ndan do\u011frulan\u0131r ve risk de\u011ferlendirmeleri otomatik olarak g\u00fcncellenir.<\/p>

Yolsuzluk<\/h4>

Veri g\u00fcvenli\u011fi, t\u00fcm y\u00f6netim ve karar alma ara\u00e7lar\u0131nda s\u0131k\u0131 de\u011fi\u015fiklik y\u00f6netimi s\u00fcre\u00e7leri arac\u0131l\u0131\u011f\u0131yla yolsuzlu\u011fa kar\u015f\u0131 koyar. B\u00fct\u00fcnl\u00fck denetim sistemleri, politika ve rol yap\u0131lar\u0131na yetkisiz de\u011fi\u015fiklikleri s\u00fcrekli olarak izler ve dosya karma de\u011ferlerini g\u00fcvenilir bir temel veri taban\u0131yla kar\u015f\u0131la\u015ft\u0131r\u0131r. Sadece ekleme (append-only) modunda g\u00fcvenli kay\u0131tlar, t\u00fcm i\u015flemlerin\u2014g\u00f6r\u00fcnt\u00fcleme ve veri indirmeleri dahil\u2014kal\u0131c\u0131 izlerini sa\u011flar. Periyodik denetimler ve otomatik onay s\u00fcre\u00e7leri, \u00f6rne\u011fin dijital imzalar yoluyla, \u015feffafl\u0131k ve de\u011fi\u015ftirilemezlik garantisi sunar; b\u00f6ylece herhangi bir manip\u00fclasyon te\u015febb\u00fcs\u00fc kesin olarak ortaya \u00e7\u0131kar\u0131l\u0131r.<\/p>

Uluslararas\u0131 Yapt\u0131r\u0131m \u0130hlalleri<\/h4>

Yapt\u0131r\u0131m ihlallerini \u00f6nlemek i\u00e7in veri ak\u0131\u015f\u0131 ger\u00e7ek zamanl\u0131 olarak izlenir; t\u00fcm \u00e7\u0131k\u0131\u015f ileti\u015fimi ve i\u015flemler kontrol edilir. \u0130leri d\u00fczey proxy ve a\u011f ge\u00e7itleri, SSL\/TLS trafi\u011finin ele ge\u00e7irilerek yapt\u0131r\u0131m ve g\u00f6zetim listelerine kar\u015f\u0131 analizini yapar. Geo-IP filtreleme ve ger\u00e7ek zamanl\u0131 DNS anomali tespiti, riskli b\u00f6lgelere veya varl\u0131klara yap\u0131lan sorgular\u0131 engeller. Veri s\u0131n\u0131fland\u0131rma \u00e7er\u00e7eveleri, hassas bilgileri otomatik olarak i\u015faretler ve Veri S\u0131z\u0131nt\u0131s\u0131n\u0131 \u00d6nleme (Data Exfiltration Prevention) mod\u00fclleri, s\u0131n\u0131fland\u0131r\u0131lm\u0131\u015f verilerin yaln\u0131zca onayl\u0131 kanallarla g\u00f6nderilmesini sa\u011flar. Olas\u0131 ihlal tespit edildi\u011finde, s\u00fcre\u00e7 yasal ve uyumluluk ekiplerine eskale edilir; d\u00fczenleyicilere otomatik raporlama yap\u0131l\u0131r ve tam uyumluluk sa\u011flan\u0131r.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\r\n\r\n
\r\n \r\n
\r\n \r\n \n
\n\n
\n \n \n \r\n
\r\n \r\n
\r\n \r\n \r\n \r\n \r\n \r\n \r\n\r\n \"\"\r\n <\/span>\r\n\r\n \r\n \r\n \r\n <\/a>\r\n \r\n \r\n <\/div>\r\n \r\n \r\n<\/figure>\r\n\r\n\n
\n\n
\n\n
\r\n

\r\n \r\n \u00d6nleme\r\n <\/a>\r\n<\/h2><\/div>\n <\/div>\n\n<\/div>\n\n\n \n <\/div>\n\n<\/article>\n
\n\n
\n \n \n \r\n
\r\n \r\n
\r\n \r\n \r\n \r\n \r\n \r\n \r\n\r\n \"\"\r\n <\/span>\r\n\r\n \r\n \r\n \r\n <\/a>\r\n \r\n \r\n <\/div>\r\n \r\n \r\n<\/figure>\r\n\r\n\n
\n\n
\n\n
\r\n

\r\n \r\n Tespit\r\n <\/a>\r\n<\/h2><\/div>\n <\/div>\n\n<\/div>\n\n\n \n <\/div>\n\n<\/article>\n
\n\n
\n \n \n \r\n
\r\n \r\n
\r\n \r\n \r\n \r\n \r\n \r\n \r\n\r\n \"\"\r\n <\/span>\r\n\r\n \r\n \r\n \r\n <\/a>\r\n \r\n \r\n <\/div>\r\n \r\n \r\n<\/figure>\r\n\r\n\n
\n\n
\n\n
\r\n

\r\n \r\n Ara\u015ft\u0131rma\r\n <\/a>\r\n<\/h2><\/div>\n <\/div>\n\n<\/div>\n\n\n \n <\/div>\n\n<\/article>\n
\n\n
\n \n \n \r\n
\r\n \r\n
\r\n \r\n \r\n \r\n \r\n \r\n \r\n\r\n \"\"\r\n <\/span>\r\n\r\n \r\n \r\n \r\n <\/a>\r\n \r\n \r\n <\/div>\r\n \r\n \r\n<\/figure>\r\n\r\n\n
\n\n
\n\n
\r\n

\r\n \r\n Yan\u0131t\r\n <\/a>\r\n<\/h2><\/div>\n <\/div>\n\n<\/div>\n\n\n \n <\/div>\n\n<\/article>\n
\n\n
\n \n \n \r\n
\r\n \r\n
\r\n \r\n \r\n \r\n \r\n \r\n \r\n\r\n \"\"\r\n <\/span>\r\n\r\n \r\n \r\n \r\n <\/a>\r\n \r\n \r\n <\/div>\r\n \r\n \r\n<\/figure>\r\n\r\n\n
\n\n
\n\n
\r\n

\r\n \r\n Dan\u0131\u015fmanl\u0131k\r\n <\/a>\r\n<\/h2><\/div>\n <\/div>\n\n<\/div>\n\n\n \n <\/div>\n\n<\/article>\n
\n\n
\n \n \n \r\n
\r\n \r\n
\r\n \r\n \r\n \r\n \r\n \r\n \r\n\r\n \"\"\r\n <\/span>\r\n\r\n \r\n \r\n \r\n <\/a>\r\n \r\n \r\n <\/div>\r\n \r\n \r\n<\/figure>\r\n\r\n\n
\n\n
\n\n
\r\n

\r\n \r\n Dava\r\n <\/a>\r\n<\/h2><\/div>\n <\/div>\n\n<\/div>\n\n\n \n <\/div>\n\n<\/article>\n
\n\n
\n \n \n \r\n
\r\n \r\n
\r\n \r\n \r\n \r\n \r\n \r\n \r\n\r\n \"\"\r\n <\/span>\r\n\r\n \r\n \r\n \r\n <\/a>\r\n \r\n \r\n <\/div>\r\n \r\n \r\n<\/figure>\r\n\r\n\n
\n\n
\n\n
\r\n

\r\n \r\n M\u00fczakere\r\n <\/a>\r\n<\/h2><\/div>\n <\/div>\n\n<\/div>\n\n\n \n <\/div>\n\n<\/article> \r\n \r\n <\/div>\r\n \r\n \r\n<\/div>\r\n\r\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Siber Savunma ve M\u00fchendislik (Cyber Defence & Engineering – CDE) kapsam\u0131ndaki veri g\u00fcvenli\u011fi, doland\u0131r\u0131c\u0131l\u0131k risk y\u00f6netiminin temelini olu\u015fturur. Bu alan, finansal ve itibari zararlar\u0131 \u00f6nlemek amac\u0131yla kritik i\u015f verilerinin yetkisiz eri\u015fim, de\u011fi\u015ftirme ve kay\u0131plara kar\u015f\u0131 korunmas\u0131na odaklan\u0131r. Giderek karma\u015f\u0131kla\u015fan ortamlarda, sald\u0131r\u0131lar daha sofistike hale gelirken, i\u00e7 tehditler de artmaktad\u0131r. Bu nedenle, \u00e7ok katmanl\u0131 bir g\u00fcvenlik mimarisi uygulan\u0131r; teknik kontroller, politikalar ve fark\u0131ndal\u0131k art\u0131r\u0131c\u0131 faaliyetler bir arada kullan\u0131l\u0131r. Verilerin s\u0131n\u0131fland\u0131r\u0131lmas\u0131 ve \u015fifrelenmesi ile geli\u015fmi\u015f tespit ve kay\u0131t sistemleriyle veri ak\u0131\u015f\u0131n\u0131n izlenmesi kritik \u00f6neme sahiptir. Ama\u00e7, verilerin gizlili\u011fini, b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc ve eri\u015filebilirli\u011fini sa\u011flamak, b\u00f6ylece t\u00fcm organizasyon seviyelerinde finansal yanl\u0131\u015f y\u00f6netim, doland\u0131r\u0131c\u0131l\u0131k, r\u00fc\u015fvet, kara<\/p>\n","protected":false},"author":1,"featured_media":28953,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[173],"tags":[],"class_list":["post-29680","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-siber-guvenlik-savunmasi-ve-muhendisligi"],"acf":[],"_links":{"self":[{"href":"https:\/\/vanleeuwenlawfirm.eu\/tr\/wp-json\/wp\/v2\/posts\/29680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vanleeuwenlawfirm.eu\/tr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vanleeuwenlawfirm.eu\/tr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vanleeuwenlawfirm.eu\/tr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vanleeuwenlawfirm.eu\/tr\/wp-json\/wp\/v2\/comments?post=29680"}],"version-history":[{"count":4,"href":"https:\/\/vanleeuwenlawfirm.eu\/tr\/wp-json\/wp\/v2\/posts\/29680\/revisions"}],"predecessor-version":[{"id":29684,"href":"https:\/\/vanleeuwenlawfirm.eu\/tr\/wp-json\/wp\/v2\/posts\/29680\/revisions\/29684"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vanleeuwenlawfirm.eu\/tr\/wp-json\/wp\/v2\/media\/28953"}],"wp:attachment":[{"href":"https:\/\/vanleeuwenlawfirm.eu\/tr\/wp-json\/wp\/v2\/media?parent=29680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vanleeuwenlawfirm.eu\/tr\/wp-json\/wp\/v2\/categories?post=29680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vanleeuwenlawfirm.eu\/tr\/wp-json\/wp\/v2\/tags?post=29680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}