Spam e-postalar\u0131 tespit etmek i\u00e7in bir\u00e7ok teknoloji kullan\u0131yoruz. Bunlar; \u00fcstbilgiler, metin, g\u00f6rseller ve ba\u011flant\u0131lar gibi bir mesaj\u0131n her k\u0131sm\u0131n\u0131 analiz eder. Ancak e-posta \u00fcr\u00fcnlerimizin \u00f6ncelik verdi\u011fi ilk konu, \u201cG\u00f6nderen\u201d alan\u0131d\u0131r. Adres, reddedilenler listemizde zaten bulunan bir etki alan\u0131 i\u00e7eriyorsa, karar vermek kolayd\u0131r. Ancak spam g\u00f6nderenler bu i\u015fin p\u00fcf noktalar\u0131n\u0131 iyi biliyorlar; bu nedenle, tek bir sald\u0131r\u0131 kampanyas\u0131ndan g\u00f6nderilen e-postalar\u0131n bile tamamen farkl\u0131 adreslerden gelmesini sa\u011flamak i\u00e7in alan adlar\u0131n\u0131 end\u00fcstriyel \u00f6l\u00e7ekte kaydettiriyorlar. Belli ki bunu kendi elleriyle yapm\u0131yorlar. Bu s\u00fcre\u00e7 uzun zamand\u0131r otomatikle\u015ftirilmi\u015f durumda ve sald\u0131rganlar\u0131n kulland\u0131\u011f\u0131 algoritmalar, birka\u00e7 dakika i\u00e7inde \u00e7ok say\u0131da alan ad\u0131n\u0131 kaydettirebilmekte. Ancak her alan ad\u0131n\u0131n bir isme ihtiyac\u0131 vard\u0131r ve her biri i\u00e7in benzersiz bir tane bulmak m\u00fcmk\u00fcn de\u011fildir. Bu nedenle, spam g\u00f6nderenler, tarih ve saat, s\u00f6zde rasgele say\u0131lar vb. temelinde k\u00fc\u00e7\u00fck farkl\u0131l\u0131klar i\u00e7eren benzer adlar olu\u015fturan etki alan\u0131 olu\u015fturma algoritmalar\u0131 (DGA\u2019lar) kullan\u0131rlar.<\/p>\n
Asl\u0131nda, bu t\u00fcr postalar\u0131 engellemek i\u00e7in reddedilenler listenizde her adresin bulunmas\u0131 gerekmez. Kaspersky olarak s\u00fcre\u00e7leri otomatikle\u015ftirmede de iyiyiz. Bir s\u00fcredir, e-posta \u00e7\u00f6z\u00fcmlerimizde DGA\u2019lar taraf\u0131ndan olu\u015fturulan alan adlar\u0131n\u0131 tespit eden ve tek bir kural ile t\u00fcm grubu devre d\u0131\u015f\u0131 b\u0131rakan bir teknoloji yer al\u0131yor. Bu teknolojinin nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 a\u00e7\u0131klayay\u0131m.<\/p>\n
Teknolojilerimizden herhangi biri bir e-postay\u0131 spam olarak i\u015faretledi\u011fi anda, s\u00f6z konusu adres daha ayr\u0131nt\u0131l\u0131 bir incelemeye tabi tutulur. Bir dizi kriteri kar\u015f\u0131l\u0131yorsa, s\u00f6z konusu alan ad\u0131, \u201czararl\u0131\u201d olarak de\u011ferlendirdi\u011fimiz alan adlar\u0131ndan olu\u015fan veri taban\u0131m\u0131za eklenir. Bu alan adlar\u0131n\u0131 benzerliklerine g\u00f6re kar\u015f\u0131la\u015ft\u0131ran, k\u00fcmeler halinde grupland\u0131ran ve t\u00fcm k\u00fcmeyi engelleyen k\u0131sa ama kapsaml\u0131 bir kural olu\u015fturan bir s\u0131n\u0131fland\u0131r\u0131c\u0131 zinciri geli\u015ftirdik. E-posta koruma \u00e7\u00f6z\u00fcmlerimiz, bir g\u00fcncellemeyle birlikte bu kural\u0131 al\u0131r. O andan itibaren, bu adrese uyan herhangi bir alan ad\u0131ndan g\u00f6nderilen t\u00fcm e-postalar\u0131 engeller, bu alan adlar\u0131 spam sald\u0131r\u0131 kampanyalar\u0131nda hen\u00fcz hi\u00e7 kullan\u0131lmam\u0131\u015f olsa bile.<\/p>\n
\u0130\u015fte ger\u00e7ek hayattan bir \u00f6rnek. Diyelim ki s\u0131n\u0131fland\u0131r\u0131c\u0131, toplad\u0131\u011f\u0131 \u201ck\u00f6t\u00fc\u201d alan adlar\u0131 koleksiyonunda birbirine benzeyen birka\u00e7 alan ad\u0131n\u0131 i\u015faretliyor:<\/p>\n
Bu durumda hepsini yakalamak i\u00e7in tek bir kural yeterlidir: @sxkjc[a-z0-9]\\.asia\\b<\/p>\n
Analizimize<\/a> g\u00f6re, ge\u00e7en y\u0131l g\u00f6nderilen e-postalar\u0131n %44,9\u2019u spamdi. \u0130stenmeyen ve talep edilmemi\u015f e-postalar, \u00e7al\u0131\u015fanlar\u0131n dikkatini da\u011f\u0131t\u0131r, \u00e7al\u0131\u015fma s\u00fcresi kayb\u0131na yol a\u00e7ar ve gelen kutular\u0131n\u0131 bo\u015f yere doldurur. Baz\u0131 durumlarda doland\u0131r\u0131c\u0131l\u0131k, kimlik av\u0131 veya k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m i\u00e7erikleri de bar\u0131nd\u0131r\u0131rlar. Kurumsal m\u00fc\u015fterileri bu yo\u011fun tehdit dalgas\u0131ndan korumak amac\u0131yla, kurumsal e-posta g\u00fcvenli\u011fi<\/a> \u00e7\u00f6z\u00fcmlerimizde s\u00fcrekli olarak geli\u015ftirdi\u011fimiz spam \u00f6nleme teknolojileri bulunmaktad\u0131r. Buna, DGA\u2019lar taraf\u0131ndan olu\u015fturulan alan adlar\u0131n\u0131 engellemek i\u00e7in yukar\u0131da a\u00e7\u0131klanan teknoloji de dahildir.<\/p>\n\n","protected":false},"excerpt":{"rendered":" Spam g\u00f6nderenler, g\u00fcvenlik \u00e7\u00f6z\u00fcmlerini atlatmak i\u00e7in neredeyse birbirinin ayn\u0131s\u0131 olan y\u00fczlerce alan ad\u0131n\u0131 otomatik olarak kaydettiriyor. Biz de bu alan adlar\u0131n\u0131 otomatik olarak engelleyebiliriz.<\/p>\n","protected":false},"author":2598,"featured_media":15044,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1726,1194,1727],"tags":[2889,1921,240,878],"class_list":["post-15043","post","type-post","status-publish","format-standard","has-post-thumbnail","category-enterprise","category-business","category-smb","tag-alan-adlari","tag-e-posta","tag-spam","tag-teknoloji"],"hreflang":[{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/dga-algorithm-detection-technology\/15043\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/dga-algorithm-detection-technology\/31168\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/dga-algorithm-detection-technology\/26199\/"},{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/dga-algorithm-detection-technology\/13794\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/dga-algorithm-detection-technology\/31008\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/dga-algorithm-detection-technology\/42900\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/dga-algorithm-detection-technology\/56597\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/dga-algorithm-detection-technology\/31165\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/dga-algorithm-detection-technology\/36909\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/dga-algorithm-detection-technology\/36581\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.tr\/blog\/tag\/spam\/","name":"spam"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/15043","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/users\/2598"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=15043"}],"version-history":[{"count":4,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/15043\/revisions"}],"predecessor-version":[{"id":15047,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/15043\/revisions\/15047"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media\/15044"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=15043"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=15043"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=15043"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}