{"id":44807,"date":"2021-08-16T08:56:53","date_gmt":"2021-08-16T05:56:53","guid":{"rendered":"https:\/\/www.turhost.com/blog\/?p=44807"},"modified":"2023-07-18T16:47:54","modified_gmt":"2023-07-18T13:47:54","slug":"ortadaki-adam-mitm-saldirisi-nedir","status":"publish","type":"post","link":"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/","title":{"rendered":"Ortadaki Adam (MitM) Sald\u0131r\u0131s\u0131 Nedir?"},"content":{"rendered":"\n

Ortadaki Adam (MitM) Sald\u0131r\u0131s\u0131 Nedir? sorusu b\u00fcy\u00fck veri ihlallerine neden olabilen ciddi siber sald\u0131r\u0131lara kar\u015f\u0131 haz\u0131rl\u0131kl\u0131 olman\u0131z\u0131 sa\u011flayabilir.<\/p>\n\n\n\n

MITM Nedir?<\/h2>\n\n\n\n

Ad\u0131ndan da anla\u015f\u0131laca\u011f\u0131 gibi, ortadaki adam (Man In The Middle) sald\u0131r\u0131s\u0131, k\u00f6t\u00fc niyetli birinin iki taraf aras\u0131ndaki ileti\u015fime gizlice dahil oldu\u011fu en eski siber sald\u0131r\u0131 t\u00fcr\u00fcd\u00fcr. <\/p>\n\n\n\n

MITM, kurban taraf\u0131ndan iletilen verilerin okunmas\u0131na hatta de\u011fi\u015ftirilmesine olanak tan\u0131r. Sald\u0131rgan kendi bilgisayar\u0131 ile kurban\u0131n bilgisayar\u0131 aras\u0131nda olu\u015fturdu\u011fu gizli, s\u00f6zde, sahte bir ba\u011flant\u0131 sayesinde bunu ba\u015far\u0131r.<\/p>\n\n\n\n

MITM sald\u0131r\u0131s\u0131n\u0131n amac\u0131, ki\u015fisel verileri, \u015fifreleri, banka bilgilerini ele ge\u00e7irmek veya taraflardan birini taklit etmektir. Bu eylemler, ne yaz\u0131k ki oturum a\u00e7ma bilgilerinin de\u011fi\u015ftirilmesini veya bir para transferinin ba\u015flat\u0131lmas\u0131n\u0131 i\u00e7erebilir. \u00d6rne\u011fin, bankac\u0131l\u0131k i\u015flemlerinde bir sald\u0131rgan, bir kullan\u0131c\u0131n\u0131n transfer yapt\u0131\u011f\u0131n\u0131 g\u00f6rebilir ve hedef hesap numaras\u0131n\u0131 veya g\u00f6nderilen tutar\u0131 de\u011fi\u015ftirebilir. <\/p>\n\n\n\n

Bazen ortadaki adama, ortadaki maymun (monkey in the middle), ortadaki canavar (monster in the middle), ortadaki makine (machine in the middle) veya ortadaki ki\u015fi (person in the middle) de denir. <\/p>\n\n\n\n

Artan i\u015f mobilitesi, a\u00e7\u0131k Wi-Fi kullan\u0131m\u0131 ve savunmas\u0131z IoT cihazlar\u0131n\u0131n yayg\u0131nla\u015fmas\u0131 MitM sald\u0131r\u0131lar\u0131n\u0131n artmas\u0131na yol a\u00e7an geli\u015fmeler olarak s\u0131ralanabilir. Kablosuz a\u011flar\u0131n benimsenmesini sald\u0131rganlar veri \u00e7almak ve kurulu\u015flara s\u0131zmak i\u00e7in bir f\u0131rsat olarak g\u00f6rmektedir. Son birka\u00e7 y\u0131lda Nesnelerin \u0130nterneti (IoT) cihazlar\u0131n\u0131n kullan\u0131m\u0131n\u0131n \u00f6nemli \u00f6l\u00e7\u00fcde artmas\u0131, hen\u00fcz yeterli g\u00fcvenlik standartlar\u0131na sahip olmayan bu cihazlar\u0131 MitM sald\u0131r\u0131lar\u0131na kar\u015f\u0131 savunmas\u0131z k\u0131lmaktad\u0131r. Sald\u0131rganlar, di\u011fer teknikleri uygulayabilmek i\u00e7in IoT cihazlar\u0131n\u0131 \u015firketlerin a\u011f\u0131na girmenin bir yolu olarak kullanmaktad\u0131r. <\/p>\n\n\n\n

MitM Neden Tehlikeli?<\/h2>\n\n\n
\n
\"MITM
Artan i\u015f mobilitesi, a\u00e7\u0131k Wi-Fi kullan\u0131m\u0131 ve savunmas\u0131z IoT cihazlar\u0131n\u0131n yayg\u0131nla\u015fmas\u0131 MitM sald\u0131r\u0131lar\u0131n\u0131n artmas\u0131na yol a\u00e7an geli\u015fmelerdir.<\/figcaption><\/figure>\n<\/div>\n\n\n

Sald\u0131rganlar\u0131n, ara sunucular olu\u015fturarak, kurbanlar\u0131n bir ileti\u015fimde ger\u00e7ek tarafla konu\u015ftuklar\u0131na inanmas\u0131n\u0131 sa\u011flayabildi\u011fi bu sald\u0131r\u0131 t\u00fcr\u00fc genellikle bireyleri hedef alsa da i\u015fletmeler ve b\u00fcy\u00fck kurulu\u015flar i\u00e7in de \u00f6nemli endi\u015fe kayna\u011f\u0131d\u0131r. Bilgisayar korsanlar\u0131; ortak bir eri\u015fim noktas\u0131n\u0131, mesajla\u015fma hizmetlerini, dosya depolama sistemlerini veya uzaktan \u00e7al\u0131\u015fma uygulamalar\u0131n\u0131 i\u015fletmelerin a\u011flar\u0131na giri\u015f yolu olarak kullan\u0131labilmektedir.<\/p>\n\n\n\n

Genellikle casusluk veya finansal kazan\u00e7 elde etme amac\u0131yla kullan\u0131lan man-in-the-middle sad\u0131r\u0131lar\u0131, i\u015f s\u00fcre\u00e7lerine zarar vermek ve kurbanlar a\u00e7\u0131s\u0131ndan kaos yaratmak i\u00e7in de ger\u00e7ekle\u015ftirilir. Sald\u0131rganlar, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n kurbanlar\u0131n mobil cihazlar\u0131na g\u00f6nderilmesini sa\u011flayabilir, trafi\u011fi \u015fifreleyemedikleri g\u00f6z \u00f6n\u00fcne al\u0131nd\u0131\u011f\u0131nda, mobil cihazlar bu senaryoya duyarl\u0131d\u0131r.<\/p>\n\n\n\n

Ayr\u0131ca bir MitM sald\u0131r\u0131s\u0131nda vir\u00fcsl\u00fc bilgisayarlara yasal olmayan SSL sertifikalar\u0131 y\u00fcklenebilir ve kurban\u0131n cihaz\u0131ndan ekran g\u00f6r\u00fcnt\u00fcleri al\u0131nabilir. <\/p>\n\n\n\n

Son zamanlarda finans d\u00fcnyas\u0131nda heyecan yaratan kripto paralar (Cryptocurrency) a\u00e7\u0131s\u0131ndan da ortadaki adam sald\u0131r\u0131lar\u0131 g\u00fcvenlik sorunlar\u0131 yaratabilir.<\/p>\n\n\n\n

Ortadaki Adam Sald\u0131r\u0131s\u0131 Nas\u0131l Ger\u00e7ekle\u015ftirilir?<\/h2>\n\n\n
\n
\"Ortadaki
Siber su\u00e7lular, bir Wi-Fi y\u00f6nlendirici arac\u0131l\u0131\u011f\u0131yla ya da alan ad\u0131 sistemi (DNS) sunucular\u0131n\u0131 manip\u00fcle etmek gibi yollarla eri\u015fim elde ettikleri a\u011fda g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 bulmaya \u00e7al\u0131\u015f\u0131r.<\/figcaption><\/figure>\n<\/div>\n\n\n

Gizli bir dinleme say\u0131lan, ger\u00e7ek zamanl\u0131 konu\u015fmalar\u0131 ve veri aktar\u0131m\u0131n\u0131 a\u00e7\u0131\u011fa \u00e7\u0131karan ortadaki adam sald\u0131r\u0131lar\u0131 bir t\u00fcr oturum ka\u00e7\u0131rmad\u0131r ve Sidejacking, Evil Twin, sniffing<\/strong> gibi formlara b\u00fcr\u00fcn\u00fcr.<\/p>\n\n\n\n

Sniffing’de sald\u0131rgan, verilere m\u00fcdahale etmek i\u00e7in bir yaz\u0131l\u0131m kullan\u0131r. Sald\u0131rganlar\u0131n bilgisayarlara enjekte etti\u011fi k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m kendisini otomatik olarak taray\u0131c\u0131ya y\u00fckleyebilir. Sidejacking oturum a\u00e7ma bilgilerini \u00e7almaya ve bir kullan\u0131c\u0131 oturumunu ele ge\u00e7irmeye odaklan\u0131r. Evil Twin’de ise sald\u0131rgan me\u015fru bir Wi-Fi a\u011f\u0131n\u0131 \u00e7o\u011faltarak ger\u00e7ek a\u011fda oturum a\u00e7t\u0131\u011f\u0131na inanan kullan\u0131c\u0131lar\u0131n verilerini ele ge\u00e7irir. Siber korsanlar\u0131n, kullan\u0131c\u0131 a\u011f\u0131na m\u00fcdahale amac\u0131yla kulland\u0131klar\u0131 en yayg\u0131n y\u00f6ntemlerden biri k\u00f6t\u00fc niyetli Wi-Fi eri\u015fim noktalar\u0131n\u0131 \u00fccretsiz olarak halka a\u00e7\u0131k hale getirmektir.<\/p>\n\n\n\n

MITM sald\u0131r\u0131lar\u0131 genellikle iki a\u015famadan olu\u015fur: m\u00fcdahale (Interception)<\/strong> ve \u015fifre \u00e7\u00f6zme (Decryption)<\/strong>. M\u00fcdahale a\u015famas\u0131nda, siber su\u00e7lular, bir Wi-Fi y\u00f6nlendirici arac\u0131l\u0131\u011f\u0131yla ya da alan ad\u0131 sistemi (DNS) sunucular\u0131n\u0131 manip\u00fcle etmek gibi yollarla eri\u015fim elde ettikleri a\u011fda g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 ve olas\u0131 giri\u015f noktalar\u0131n\u0131 bulmaya \u00e7al\u0131\u015f\u0131r. <\/p>\n\n\n\n

MITM sald\u0131r\u0131lar\u0131n\u0131n ikinci a\u015famas\u0131 olan \u015fifre \u00e7\u00f6zme, \u00e7al\u0131nan verilerin \u015fifresinin \u00e7\u00f6z\u00fclerek siber su\u00e7lular taraf\u0131ndan anla\u015f\u0131l\u0131r hale getirilmesini kapsar. \u015eifresi \u00e7\u00f6z\u00fclen veriler; kimlik h\u0131rs\u0131zl\u0131\u011f\u0131, yetkisiz sat\u0131n almalar veya doland\u0131r\u0131c\u0131l\u0131k ama\u00e7l\u0131 banka faaliyetlerinde kullan\u0131labilir. <\/p>\n\n\n\n

MITM Sald\u0131r\u0131 Y\u00f6ntemleri<\/h2>\n\n\n\n

Siber su\u00e7lular\u0131n, MITM sald\u0131r\u0131lar\u0131n\u0131 ger\u00e7ekle\u015ftirmek i\u00e7in kulland\u0131\u011f\u0131 en bilinen teknikler aras\u0131nda bir kullan\u0131c\u0131y\u0131 bilinen bir hedeften sahte bir web sitesine y\u00f6nlendirmek, Wi-Fi eri\u015fim noktas\u0131n\u0131n sim\u00fclasyonu, ki\u015fisel bilgiler i\u00e7eren taray\u0131c\u0131 \u00e7erezlerini \u00e7almak gibi \u00e7ok \u00e7e\u015fitli taktikler s\u00f6z konusudur.<\/p>\n\n\n\n

Replay Sald\u0131r\u0131s\u0131<\/h3>\n\n\n\n
\"IP<\/figure>\n\n\n\n

Yeniden y\u00fcr\u00fctme, tekrar oynatma anlam\u0131na gelen replay sald\u0131r\u0131lar\u0131nda, t\u00fcm verilerinize sahip olan sald\u0131rgan\u0131n, \u00f6nceden yapt\u0131\u011f\u0131n\u0131z bir i\u015flemi yinelemesi m\u00fcmk\u00fcnd\u00fcr. <\/p>\n\n\n\n

E-mail Hijacking<\/h3>\n\n\n\n

Siber su\u00e7lular, bankalar\u0131n e-posta mesajlar\u0131n\u0131 taklit ederek kurban\u0131n oturum a\u00e7ma ve banka kart\u0131 bilgilerini elde etmeye \u00e7al\u0131\u015f\u0131r. Siber su\u00e7lular bazen de bankalar\u0131n ve di\u011fer finansal kurumlar\u0131n e-posta hesaplar\u0131n\u0131 hedefler. Eri\u015fim sa\u011fland\u0131ktan sonra kurum ile m\u00fc\u015fterileri aras\u0131ndaki i\u015flemleri izleyebilirler. Sald\u0131rganlar daha sonra bankan\u0131n e-posta adresini taklit edebilir ve m\u00fc\u015fterilere kendi talimatlar\u0131n\u0131 g\u00f6nderebilir. <\/p>\n\n\n\n

DNS Zehirlenmesi<\/h3>\n\n\n
\n
\"MITM
Siber su\u00e7lular, taray\u0131c\u0131n\u0131z\u0131, g\u00fcvenilir bir web sitesini ziyaret etmedi\u011fi halde, buna inand\u0131rabilirler, sahte web sitesiyle olan etkile\u015fimlerinizi izleyebilir ve payla\u015ft\u0131\u011f\u0131n\u0131z ki\u015fisel bilgileri \u00e7alabilirler.<\/figcaption><\/figure>\n<\/div>\n\n\n

DNS sahtekarl\u0131\u011f\u0131 (DNS Spoofing) ad\u0131yla da kar\u015f\u0131m\u0131za \u00e7\u0131kan bu sald\u0131r\u0131larda, siber su\u00e7lular sunucuya eri\u015fir ve web sitesi adres kayd\u0131n\u0131 kendi web sitesi kay\u0131tlar\u0131yla e\u015fle\u015fecek \u015fekilde de\u011fi\u015ftirir. Sald\u0131rganlar ula\u015fmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131z web sitesiyle ayn\u0131 g\u00f6r\u00fcnen ancak benzer bir URL’ye sahip kendi web sitelerini olu\u015ftururlar. B\u00f6ylece sald\u0131rganlar kullan\u0131c\u0131lar\u0131 ziyaret etmeyi planlad\u0131klar\u0131 ger\u00e7ek web sitesi yerine sahte bir web sitesine y\u00f6nlendirir. \u00d6rne\u011fin, Kiril alfabesinden harfleri kullanarak taray\u0131c\u0131n\u0131z\u0131, g\u00fcvenilir bir web sitesini ziyaret etmedi\u011fi halde, buna inand\u0131rabilirler. <\/p>\n\n\n\n

Ama\u00e7 kullan\u0131c\u0131n\u0131n, me\u015fru web uygulamas\u0131yla ileti\u015fim kurdu\u011funu d\u00fc\u015f\u00fcnmesini sa\u011flamak ve banka kart\u0131 bilgileri gibi hassas verileri ele ge\u00e7irmektir. Sahte web sitesiyle olan etkile\u015fimlerinizi izleyen ve payla\u015ft\u0131\u011f\u0131n\u0131z ki\u015fisel bilgileri \u00e7alan korsanlar, kimlik av\u0131 e-postalar\u0131 gibi hedefli sald\u0131r\u0131lar\u0131 ba\u015flatmak i\u00e7in kullanabilecekleri oturum a\u00e7ma bilgilerini elde etmi\u015f olur.<\/p>\n\n\n\n

Wi-Fi Dinleme (Wi-Fi Eavesdropping)<\/h3>\n\n\n\n

Sald\u0131rganlar, mevcut bir Wi-Fi ba\u011flant\u0131s\u0131ndaki g\u00fcvenlik a\u00e7\u0131\u011f\u0131ndan yararlanmak yerine kendi a\u011flar\u0131n\u0131 kurabilir. B\u00f6ylece bir kullan\u0131c\u0131, doland\u0131r\u0131c\u0131n\u0131n Wi-Fi a\u011f\u0131na ba\u011fland\u0131\u011f\u0131nda sald\u0131rgan kullan\u0131c\u0131n\u0131n \u00e7evrimi\u00e7i etkinli\u011fini izleyebilir, oturum a\u00e7ma ve banka kart\u0131 gibi bilgilerini ele ge\u00e7irebilir. Bazen sald\u0131rgan, ‘Evil Twin’ olarak da adland\u0131r\u0131lan internet etkin noktas\u0131n\u0131 \u00e7o\u011falt\u0131r.<\/p>\n\n\n\n

ARP Spoofing<\/h3>\n\n\n\n

Bu t\u00fcr bir sald\u0131r\u0131, ARP protokol\u00fcn\u00fc kullanan bir yerel alan a\u011f\u0131nda ger\u00e7ekle\u015ftirilir. ARP, Adres \u00c7\u00f6z\u00fcmleme Protokol\u00fc anlam\u0131na gelir. ARP zehirlenmesi olarak da bilinen bu sald\u0131r\u0131larda, ARP paketleri sald\u0131rgan\u0131n cihaz\u0131na veri g\u00f6ndermeye zorlan\u0131r. Sald\u0131r\u0131, \u00e7ok say\u0131da zorunlu ARP iste\u011fi olu\u015fturur. Kullan\u0131c\u0131 bir istek g\u00f6nderdi\u011finde, sald\u0131rgan cihaz gibi davranarak sahte bir yan\u0131t g\u00f6nderir.<\/p>\n\n\n\n

SSL Hijacking<\/h3>\n\n\n
\n
\"HTTPS
SSL S\u0131y\u0131rma olarak da bilinen SSL Ele Ge\u00e7irme sald\u0131r\u0131s\u0131nda; g\u00f6nderici ve al\u0131c\u0131 aras\u0131nda g\u00fcvenli bir ba\u011flant\u0131 var gibi g\u00f6r\u00fcnse de sald\u0131rgan oturumu kontrol etmektedir.<\/figcaption><\/figure>\n<\/div>\n\n\n

SSL, taray\u0131c\u0131n\u0131z ve web sunucusu aras\u0131nda \u015fifreli ba\u011flant\u0131 olmas\u0131n\u0131 sa\u011flayan bir g\u00fcvenlik protokol\u00fcd\u00fcr, G\u00fcvenli Yuva Katman\u0131 anlam\u0131na gelir. Bir web sitesinin orijinal olup olmad\u0131\u011f\u0131n\u0131 anlaman\u0131n genel kural\u0131, taray\u0131c\u0131n\u0131n adres \u00e7ubu\u011funda kilit simgesinin bulunmas\u0131d\u0131r. E\u011fer bir i\u015fletmenin web sitesinde oldu\u011funuzdan emin olmak isterseniz bu kilit simgesine t\u0131klayarak \u015firketin ad\u0131n\u0131 kontrol edebilirsiniz.<\/p>\n\n\n\n

SSL S\u0131y\u0131rma olarak da bilinen bu MITM t\u00fcr\u00fcnde g\u00f6nderici ve al\u0131c\u0131 aras\u0131nda g\u00fcvenli bir ba\u011flant\u0131 var gibi g\u00f6r\u00fcnse de sald\u0131rgan oturumu kontrol etmektedir. Sald\u0131rgan, m\u00fcdahale yoluyla uygulaman\u0131n veya web sitesinin \u015fifrelenmemi\u015f s\u00fcr\u00fcm\u00fcn\u00fc kullan\u0131c\u0131ya g\u00f6nderir. <\/p>\n\n\n\n

Man-in-the-Browser<\/h3>\n\n\n\n

Taray\u0131c\u0131daki adam (MitB) sald\u0131r\u0131s\u0131 olarak adland\u0131r\u0131lan bu sald\u0131r\u0131lar; bir taray\u0131c\u0131 ve bir web sunucusu aras\u0131nda g\u00f6nderilen verileri de\u011fi\u015ftirmek i\u00e7in Truva atlar\u0131n\u0131n kullan\u0131ld\u0131\u011f\u0131 siber tehditlerdir. Taray\u0131c\u0131daki adam sald\u0131r\u0131s\u0131, a\u011f d\u00fczeyinden ziyade uygulama d\u00fczeyinde m\u00fcdahale ile \u00f6zde\u015ftir.<\/p>\n\n\n\n

Kimlik av\u0131 sald\u0131r\u0131lar\u0131n\u0131n aksine, kullan\u0131c\u0131n\u0131n k\u00f6t\u00fc ama\u00e7l\u0131 bir web sitesini ziyaret etmesi gerekmez. Bunun yerine, kullan\u0131c\u0131 me\u015fru bir web sitesini ziyaret eder, ancak ger\u00e7ekte g\u00f6rd\u00fckleri sald\u0131rgan taraf\u0131ndan kontrol edilir.<\/p>\n\n\n\n

Taray\u0131c\u0131daki adam sald\u0131r\u0131lar\u0131 ile bir web sitesinin g\u00f6r\u00fcn\u00fcm\u00fc de\u011fi\u015ftirilebilir, kullan\u0131c\u0131 taraf\u0131ndan g\u00f6nderilen bilgiler de\u011fi\u015ftirilebilir, oturum ger\u00e7ek zamanl\u0131 olarak ele ge\u00e7irilebilir.<\/p>\n\n\n\n

Bu sald\u0131r\u0131larda trojan (Truva At\u0131), uyumlu oldu\u011fu web sitelerinin bir listesine sahiptir. Kullan\u0131c\u0131 listedekilerden birini ziyaret edene kadar, sald\u0131r\u0131 pasiftir. Listedeki \u00f6rne\u011fin bir banka web sitesini ziyaret ederseniz yazd\u0131\u011f\u0131n\u0131z her \u015fey kaydedilir ve transfer etti\u011finiz para sand\u0131\u011f\u0131n\u0131z ki\u015fiye de\u011fil sald\u0131rgan\u0131n banka hesab\u0131na g\u00f6nderilir. \u00dcstelik sald\u0131rgan miktar\u0131 ve bankan\u0131z\u0131n transferin ba\u015far\u0131l\u0131 oldu\u011funa dair mesaj\u0131n\u0131 de\u011fi\u015ftirebilir; ne sizin ne de bankan\u0131z\u0131n bir sorundan \u015f\u00fcphelenmek i\u00e7in herhangi bir nedeni yoktur!<\/p>\n\n\n\n

Taray\u0131c\u0131 \u00c7erezlerini \u00c7almak<\/h3>\n\n\n\n

Taray\u0131c\u0131 tan\u0131mlama bilgisi, bir web sitesinin bilgisayar\u0131n\u0131zda saklad\u0131\u011f\u0131 k\u00fc\u00e7\u00fck bir veri par\u00e7as\u0131d\u0131r. \u00d6rne\u011fin, \u00e7evrimi\u00e7i bir sat\u0131c\u0131, girdi\u011finiz ki\u015fisel bilgileri ve se\u00e7ti\u011finiz al\u0131\u015fveri\u015f sepeti \u00f6\u011felerini bir tan\u0131mlama bilgisinde saklayabilir, b\u00f6ylece siteyi tekrar ziyaret etti\u011finizde bu bilgileri yeniden girmeniz gerekmez. Siber su\u00e7lular bu taray\u0131c\u0131 \u00e7erezlerini ele ge\u00e7irerek, parolalar\u0131n\u0131z ve adresiniz gibi hassas bilgilerinize eri\u015febilir.<\/p>\n\n\n\n

MITM Sald\u0131r\u0131lar\u0131ndan Korunma Y\u00f6ntemleri<\/h2>\n\n\n\n
\"Man-in-the-Browser,
H\u0131zla geli\u015fen dijital d\u00fcnyada, hassas bilgilerin gizlili\u011fini ve b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc tehlikeye atabilecek siber tehdit t\u00fcrlerini anlamak ve uygun \u00f6nlemleri almak son derece \u00f6nemlidir.<\/figcaption><\/figure>\n\n\n\n

MitM sald\u0131r\u0131lar\u0131 fidye yaz\u0131l\u0131m\u0131 veya kimlik av\u0131 sald\u0131r\u0131lar\u0131 kadar yayg\u0131n olmasa da giderek karma\u015f\u0131kl\u0131\u011f\u0131 artan ve tespit edilmeleri zorla\u015fan siber tehditler aras\u0131nda yer almaktad\u0131r. \u015eirketlerin ve bireylerin MitM sald\u0131r\u0131lar\u0131n\u0131 \u00f6nlemek ad\u0131na atabilece\u011fi ad\u0131mlar\u0131 \u015fu \u015fekilde s\u0131ralayabiliriz:<\/p>\n\n\n\n

    \n
  • Sald\u0131r\u0131lar\u0131n \u00e7o\u011fu k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlara dayand\u0131\u011f\u0131ndan vir\u00fcsten koruma yaz\u0131l\u0131m\u0131<\/strong> y\u00fcklemeniz, MITM sald\u0131r\u0131lar\u0131n\u0131 tespit etmek i\u00e7in tasarlanan ara\u00e7lardan ve kapsaml\u0131 tehdit izleme ve alg\u0131lama \u00e7\u00f6z\u00fcmlerinden yararlanman\u0131z \u00f6nerilir. G\u00fcvenlik yaz\u0131l\u0131m\u0131n\u0131n g\u00fcncellemelerine de dikkat edilmelidir.<\/li>\n\n\n\n
  • \u00d6zel Wi-Fi<\/strong> a\u011flar\u0131n\u0131n kullan\u0131lmas\u0131, Wi-Fi’nin gizlice dinlenmesini \u00f6nleyebilmektedir. <\/li>\n\n\n\n
  • A\u011f g\u00fcvenli\u011fi <\/strong>a\u00e7\u0131s\u0131ndan herhangi bir ola\u011fand\u0131\u015f\u0131 davran\u0131\u015f\u0131 tespit etmek veya tan\u0131mlamak i\u00e7in trafik kal\u0131plar\u0131 arada bir analiz edilmelidir. A\u011f kullan\u0131c\u0131lar\u0131n\u0131n g\u00fc\u00e7l\u00fc parolalar se\u00e7mesi ve bunlar\u0131 d\u00fczenli olarak de\u011fi\u015ftirmesi sa\u011flanmal\u0131d\u0131r. Potansiyel ihlallerin kontrol alt\u0131na al\u0131nd\u0131\u011f\u0131ndan emin olmak i\u00e7in a\u011f\u0131 b\u00f6l\u00fcmlere ay\u0131rmak \u00f6nerilir.<\/li>\n\n\n\n
  • Sald\u0131r\u0131lar\u0131 \u00f6nlemek i\u00e7in, \u00e7ift g\u00fcvenlikli ileti\u015fim d\u00fc\u015f\u00fcn\u00fclmeli, m\u00fcmk\u00fcn olan her yerde \u00e7ok fakt\u00f6rl\u00fc kimlik do\u011frulama <\/strong>etkinle\u015ftirilmelidir. <\/li>\n\n\n\n
  • Web trafi\u011finizi \u015fifrelemek i\u00e7in Sanal \u00d6zel A\u011f (VPN<\/strong>) kullanmak, MITM sald\u0131r\u0131lar\u0131n\u0131 \u00f6nlemeye yard\u0131mc\u0131 olabilir. VPN’ler verileri \u0130nternet \u00fczerinden iletilirken \u015fifreler. Bu sizi MITM sald\u0131r\u0131lar\u0131na kar\u015f\u0131 a\u015f\u0131lmaz, ancak doland\u0131r\u0131c\u0131lar\u0131n hayat\u0131n\u0131 biraz daha zorla\u015ft\u0131r\u0131r ve daha kolay bir hedef aramalar\u0131na neden olabilir.<\/li>\n\n\n\n
  • \u015eirket \u00e7al\u0131\u015fanlar\u0131na en yayg\u0131n siber sald\u0131r\u0131 teknikleri ve halka a\u00e7\u0131k Wi-Fi a\u011flar\u0131n\u0131n riskleri gibi konularda e\u011fitim<\/strong> vermelidir.<\/li>\n\n\n\n
  • Sald\u0131rganlardan gelen parolan\u0131z\u0131 veya oturum a\u00e7ma bilgilerinizi g\u00fcncellemenizi isteyen kimlik av\u0131<\/strong> e-postalar\u0131na kar\u015f\u0131 dikkatli olunmal\u0131d\u0131r. <\/li>\n\n\n\n
  • Evde kulland\u0131\u011f\u0131n\u0131z Wi-Fi a\u011f\u0131n\u0131z\u0131n g\u00fcvenli\u011fi i\u00e7in zaman zaman t\u00fcm ba\u011fl\u0131 ayg\u0131tlardaki t\u00fcm varsay\u0131lan kullan\u0131c\u0131 adlar\u0131n\u0131 ve parolalar\u0131 g\u00fc\u00e7l\u00fc, benzersiz parolalar<\/strong> ile g\u00fcncellemeniz tavsiye edilir.<\/li>\n<\/ul>\n\n\n\n

    Ayr\u0131ca taray\u0131c\u0131lar\u0131n g\u00fcncelli\u011fi, SSL\/TLS kullanmak, HTTPS’e sahip olmayan web sitelerini ziyaret etmekten ka\u00e7\u0131nmak (ba\u011flant\u0131lara g\u00fcvenmek yerine web adresini manuel olarak yazarak HTTPS sahtekarl\u0131\u011f\u0131n\u0131 \u00f6nleyebilirsiniz); masa\u00fcst\u00fc ba\u011flant\u0131lar\u0131ndan cep telefonlar\u0131na hatta IOT cihazlar\u0131na yay\u0131lan MITM sald\u0131r\u0131lar\u0131n\u0131 \u00f6nlemek ad\u0131na yard\u0131mc\u0131 olabilir.<\/p>\n\n\n\n

    \u00d6zet<\/h2>\n\n\n\n

    MiTM, bir a\u011fa ba\u011flanan davetsiz misafir olarak tan\u0131mlanabilir, sald\u0131rganlar ger\u00e7ek zamanl\u0131 veri aktar\u0131m\u0131ndan yararlanmay\u0131 hedefler. Oturum a\u00e7ma bilgilerini \u00e7almak, kurban\u0131 g\u00f6zetlemek veya ileti\u015fimi sabote edip verileri de\u011fi\u015ftirmek i\u00e7in MitM sald\u0131r\u0131lar\u0131 kullan\u0131lmaktad\u0131r. Ba\u015far\u0131l\u0131 bir \u015fekilde uyguland\u0131\u011f\u0131nda en y\u0131k\u0131c\u0131 siber tehditler aras\u0131na girebilen bu sald\u0131r\u0131larda hacker, kurbanlar\u0131 k\u00f6t\u00fc niyetli web sayfalar\u0131na g\u00f6ndermek i\u00e7in trafi\u011fi de y\u00f6nlendirebilir.<\/p>\n\n\n\n

    H\u0131zla geli\u015fen dijital d\u00fcnyada, hassas bilgilerin gizlili\u011fini ve b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc tehlikeye atabilecek siber tehdit t\u00fcrlerini anlamak son derece \u00f6nemli oldu\u011fundan Ortadaki adam (MitM) sald\u0131r\u0131s\u0131 nedir? sorusuyla uygun g\u00fcvenlik \u00f6nlemlerinin ara\u015ft\u0131r\u0131lmas\u0131 \u00f6nerilir. <\/p>\n","protected":false},"excerpt":{"rendered":"Genellikle bireyleri hedef alsa da b\u00fcy\u00fck kurulu\u015flar i\u00e7in de \u00f6nemli endi\u015fe kayna\u011f\u0131 olan MITM sald\u0131r\u0131lar\u0131n\u0131 sizin i\u00e7in ara\u015ft\u0131rd\u0131k.\n","protected":false},"author":1,"featured_media":46188,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_relevanssi_hide_post":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"42311,43938,46317,46607,44596,44232","_relevanssi_noindex_reason":"","footnotes":""},"categories":[656,654,657,655,138],"tags":[],"class_list":{"0":"post-44807","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-alpha-ssl","8":"category-comodo-ssl","9":"category-ev-ssl","10":"category-globalsign-ssl","11":"category-ipuclari"},"yoast_head":"\nOrtadaki Adam (MitM) Sald\u0131r\u0131s\u0131 Nedir? • Turhost Blog<\/title>\n<meta name=\"description\" content=\"MitM Sald\u0131r\u0131s\u0131 Nedir? sorusu b\u00fcy\u00fck veri ihlallerine neden olabilen ciddi siber sald\u0131r\u0131lara kar\u015f\u0131 haz\u0131rl\u0131kl\u0131 olman\u0131z\u0131 sa\u011flayabilir.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ortadaki Adam (MitM) Sald\u0131r\u0131s\u0131 Nedir? • Turhost Blog\" \/>\n<meta property=\"og:description\" content=\"MitM Sald\u0131r\u0131s\u0131 Nedir? sorusu b\u00fcy\u00fck veri ihlallerine neden olabilen ciddi siber sald\u0131r\u0131lara kar\u015f\u0131 haz\u0131rl\u0131kl\u0131 olman\u0131z\u0131 sa\u011flayabilir.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/\" \/>\n<meta property=\"og:site_name\" content=\"Turhost Blog\" \/>\n<meta property=\"article:published_time\" content=\"2021-08-16T05:56:53+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-07-18T13:47:54+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/07\/kapak.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"1000\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Turhost\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Turhost\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/\",\"url\":\"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/\",\"name\":\"Ortadaki Adam (MitM) Sald\u0131r\u0131s\u0131 Nedir? • Turhost Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.turhost.com/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/07\/kapak.png\",\"datePublished\":\"2021-08-16T05:56:53+00:00\",\"dateModified\":\"2023-07-18T13:47:54+00:00\",\"author\":{\"@id\":\"https:\/\/www.turhost.com/blog\/#\/schema\/person\/dd8970d865df6ed4f742fe30c308ad1c\"},\"description\":\"MitM Sald\u0131r\u0131s\u0131 Nedir? sorusu b\u00fcy\u00fck veri ihlallerine neden olabilen ciddi siber sald\u0131r\u0131lara kar\u015f\u0131 haz\u0131rl\u0131kl\u0131 olman\u0131z\u0131 sa\u011flayabilir.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/#primaryimage\",\"url\":\"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/07\/kapak.png\",\"contentUrl\":\"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/07\/kapak.png\",\"width\":1000,\"height\":1000},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\/\/www.turhost.com/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u0130pu\u00e7lar\u0131\",\"item\":\"https:\/\/www.turhost.com/blog\/ipuclari\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Ortadaki Adam (MitM) Sald\u0131r\u0131s\u0131 Nedir?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.turhost.com/blog\/#website\",\"url\":\"https:\/\/www.turhost.com/blog\/\",\"name\":\"Turhost Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.turhost.com/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.turhost.com/blog\/#\/schema\/person\/dd8970d865df6ed4f742fe30c308ad1c\",\"name\":\"Turhost\",\"sameAs\":[\"http:\/\/www.turhost.com\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ortadaki Adam (MitM) Sald\u0131r\u0131s\u0131 Nedir? • Turhost Blog","description":"MitM Sald\u0131r\u0131s\u0131 Nedir? sorusu b\u00fcy\u00fck veri ihlallerine neden olabilen ciddi siber sald\u0131r\u0131lara kar\u015f\u0131 haz\u0131rl\u0131kl\u0131 olman\u0131z\u0131 sa\u011flayabilir.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/","og_locale":"tr_TR","og_type":"article","og_title":"Ortadaki Adam (MitM) Sald\u0131r\u0131s\u0131 Nedir? • Turhost Blog","og_description":"MitM Sald\u0131r\u0131s\u0131 Nedir? sorusu b\u00fcy\u00fck veri ihlallerine neden olabilen ciddi siber sald\u0131r\u0131lara kar\u015f\u0131 haz\u0131rl\u0131kl\u0131 olman\u0131z\u0131 sa\u011flayabilir.","og_url":"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/","og_site_name":"Turhost Blog","article_published_time":"2021-08-16T05:56:53+00:00","article_modified_time":"2023-07-18T13:47:54+00:00","og_image":[{"width":1000,"height":1000,"url":"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/07\/kapak.png","type":"image\/png"}],"author":"Turhost","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Turhost","Tahmini okuma s\u00fcresi":"9 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/","url":"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/","name":"Ortadaki Adam (MitM) Sald\u0131r\u0131s\u0131 Nedir? • Turhost Blog","isPartOf":{"@id":"https:\/\/www.turhost.com/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/#primaryimage"},"image":{"@id":"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/#primaryimage"},"thumbnailUrl":"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/07\/kapak.png","datePublished":"2021-08-16T05:56:53+00:00","dateModified":"2023-07-18T13:47:54+00:00","author":{"@id":"https:\/\/www.turhost.com/blog\/#\/schema\/person\/dd8970d865df6ed4f742fe30c308ad1c"},"description":"MitM Sald\u0131r\u0131s\u0131 Nedir? sorusu b\u00fcy\u00fck veri ihlallerine neden olabilen ciddi siber sald\u0131r\u0131lara kar\u015f\u0131 haz\u0131rl\u0131kl\u0131 olman\u0131z\u0131 sa\u011flayabilir.","breadcrumb":{"@id":"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/"]}]},{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/#primaryimage","url":"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/07\/kapak.png","contentUrl":"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/07\/kapak.png","width":1000,"height":1000},{"@type":"BreadcrumbList","@id":"https:\/\/www.turhost.com/blog\/ortadaki-adam-mitm-saldirisi-nedir\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/www.turhost.com/blog\/"},{"@type":"ListItem","position":2,"name":"\u0130pu\u00e7lar\u0131","item":"https:\/\/www.turhost.com/blog\/ipuclari\/"},{"@type":"ListItem","position":3,"name":"Ortadaki Adam (MitM) Sald\u0131r\u0131s\u0131 Nedir?"}]},{"@type":"WebSite","@id":"https:\/\/www.turhost.com/blog\/#website","url":"https:\/\/www.turhost.com/blog\/","name":"Turhost Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.turhost.com/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":"Person","@id":"https:\/\/www.turhost.com/blog\/#\/schema\/person\/dd8970d865df6ed4f742fe30c308ad1c","name":"Turhost","sameAs":["http:\/\/www.turhost.com\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/posts\/44807","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/comments?post=44807"}],"version-history":[{"count":147,"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/posts\/44807\/revisions"}],"predecessor-version":[{"id":64259,"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/posts\/44807\/revisions\/64259"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/media\/46188"}],"wp:attachment":[{"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/media?parent=44807"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/categories?post=44807"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/tags?post=44807"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}