Siber Saldırılardan Yeni Nesil Korunma Teknikleri
Özet
Bu çalışma, internet teknolojilerinin gelişimine paralel olarak evrimleşen siber saldırı nesillerini ve bunlara karşı geliştirilen yeni nesil korunma yöntemlerini incelemektedir. 1980'lerden günümüze uzanan süreçte siber tehditler beş farklı nesilde ele alınmıştır: Birinci nesilde bireysel bilgisayarları hedef alan basit virüslere karşı antivirüs yazılımları; ikinci nesilde internetin yaygınlaşmasıyla ortaya çıkan ağ tehditlerine karşı güvenlik duvarları (firewall); üçüncü nesilde uygulama açıklarını hedef alan saldırılara karşı saldırı tespit ve önleme sistemleri (IDS/IPS) geliştirilmiştir. 2010'lu yıllardaki dördüncü nesilde uluslararası casusluk amaçlı gelişmiş Stuxnet gibi tehditlere karşı korumalı alan (sandbox) teknolojileri devreye girerken; 2017 sonrasını kapsayan beşinci nesilde ise bulut, mobil ve IoT ağlarını hedef alan WannaCry ve NotPetya gibi çok vektörlü mega saldırılar ortaya çıkmıştır. Araştırmalara göre kurumların büyük kısmı hâlâ son nesil saldırılara karşı risk altındadır. Siber saldırılardan korunmak için ağ segmentasyonu, düzenli yama yönetimi, yetkilerin minimumda tutulması, tümleşik ve çok katmanlı bir güvenlik mimarisinin kurulması önerilmektedir. Sonuç olarak, teknik altyapılar ne kadar gelişirse gelişsin, sistemlerin en büyük zafiyetini kullanıcılar oluşturmakta ve sosyal mühendislik yöntemleri her dönemde etkinliğini korumaktadır.
This study examines the generations of cyberattacks that have evolved in parallel with the development of internet technologies and the next-generation prevention methods developed against them. In the process extending from the 1980s to the present, cyber threats are evaluated in five distinct generations: antivirus software against simple viruses targeting personal computers in the first generation; firewalls against network threats emerging with the spread of the internet in the second generation; and intrusion detection and prevention systems (IDS/IPS) against attacks targeting application vulnerabilities in the third generation. While sandbox technologies were deployed against advanced threats like Stuxnet used for international espionage in the fourth generation during the 2010s, multi-vector mega-attacks such as WannaCry and NotPetya targeting cloud, mobile, and IoT networks emerged in the fifth generation post-2017. According to research, a large majority of institutions are still at risk against these latest-generation attacks. To protect against cyberattacks, methods such as network segmentation, regular patch management, keeping user privileges to a minimum, and establishing an integrated, multi-layered security architecture are recommended. In conclusion, no matter how advanced the technical infrastructures become, users constitute the greatest vulnerability of systems, and social engineering methods maintain their effectiveness across all eras.
Referanslar
Checkpoint (2018). security report. 2018. Available Online: https://www.checkpoint. com/downloads/product- related/report/2018- security-report.pdf.
Checkpoint (2022). Check Point History. https://www.checkpoint.com/about-us/check-point-history/
Checkpoint (2022). Stepping Up to Gen V (5th Generation) of Cyber Security. https://www.checkpoint.com/downloads/product-related/brochure/gen_v_brochure-.pdf
Falliere, N., Murchu, L. O., & Chien, E. (2011). W32. stuxnet dossier. White paper, Symantec Corp., Security Response, 5(6), 29.
Greenberg, A. (2018). The untold story of NotPetya, the most devastating cyberattack in history. Wired, August, 22.
Hern, A., Gibbs, S. (2017). What is 'WanaCrypt0r 2.0' ransomware and why is it attacking the NHS?. The Guardian. Londra. ISSN 0261-3077.
Kaspersky (2022). A Brief History of Computer Viruses & What the Future Holds. https://www.kaspersky.com.tr/resource-center/threats/a-brief- history-of-computer-viruses-and-what-the-future-holds
Kushner, D. (2013). The real story of stuxnet. ieee Spectrum, 50(3), 48-53.
Leyden, J. (2003). Slammer: Why security benefits from proof of concept code". Register. Retrieved 29 November 2008.
Lika, R. A., Murugiah, D., Brohi, S. N., & Ramasamy, D. (2018, July). NotPetya: cyber attack prevention through awareness via gamification. In 2018 International Conference on Smart Computing and Electronic Enterprise (ICSCEE) (pp. 1-6). IEEE.
Maynor, D.(2011). Metasploit Toolkit for Penetration Testing, Exploit Development, and Vulnerability Research. Elsevier. p. 218. ISBN 978-0-08-054925-5.
Mcafee (2022). Eugene Kaspersky görüşleri. https://expertsmirnov.ru/tr/windows-10/evgenii-kasperskii-s-ironiei-otozvalsya-o-mcafee-kakoi-antivirus.html
McAlpine, K. B. (2018). Bits and Pieces: A history of Chiptunes. Oxford University Press, USA.
Nichols, S., Thomson, I. (2009). Top ten worst viruses. http://www.pcauthority.com.au/News/143993,top-ten-worst-viruses.aspx,
Özer, M. C. (2015). Bilgisayar müziği dillerinin tarihçesi. Ege Üniversitesi Devlet Türk Musikisi Konservatuvarı Dergisi, 6, 47-59.
Parker, R. (2018). ILOVEYOU!. Medium. Retrieved 2021-07-28.
Poulsen, K. (2000). May 4, 2000: Tainted 'Love' Infects Computers. Wired. ISSN 1059-1028. Retrieved 2021-07-28.
Serazzi, G.; Zanero, S. (2004). Computer Virus Propagation Models (PDF). In Calzarossa, Maria Carla; Gelenbe, Erol (eds.). Performance Tools and Applications to Networked Systems. Lecture Notes in Computer Science. Vol. 2965. pp. 26–50.
Spafford, E. (1988). An analysis of the worm (PDF). Purdue University. Retrieved October 30, 2019.
Wong, J. C. Solon, O. (2017). Massive ransomware cyber-attack hits 74 countries around the world. The Guardian. Londra.
