{"id":6490,"date":"2019-10-03T12:08:20","date_gmt":"2019-10-03T09:08:20","guid":{"rendered":"https:\/\/www.kaspersky.com.tr\/blog\/?p=6490"},"modified":"2019-11-15T14:23:47","modified_gmt":"2019-11-15T11:23:47","slug":"fairy-tales-seven-young-goats","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.tr\/blog\/fairy-tales-seven-young-goats\/6490\/","title":{"rendered":"Yedi K\u00fc\u00e7\u00fck O\u011flak ve \u00e7ok fakt\u00f6rl\u00fc kimlik do\u011frulama"},"content":{"rendered":"<p>Atalar\u0131m\u0131z\u0131n bilgisayarlar\u0131 yoktu ama \u00e7ocuklar\u0131 korumak konusunda engin tecr\u00fcbe ve bilgileri vard\u0131. Man-in-the-Middle sald\u0131r\u0131lar\u0131n\u0131, tokala\u015fmalar\u0131 ve oltalama sald\u0131r\u0131lar\u0131n\u0131 a\u00e7\u0131klamak i\u00e7in k\u0131lavuz olarak <a href=\"https:\/\/www.kaspersky.com.tr\/blog\/fairy-tales-red-hood\/6458\/\" target=\"_blank\" rel=\"noopener\"><em>K\u0131rm\u0131z\u0131 Ba\u015fl\u0131kl\u0131 K\u0131z <\/em>masal\u0131ndan yararlanm\u0131\u015ft\u0131k<\/a>. Gelin \u015fimdi de iki fakt\u00f6rl\u00fc kimlik do\u011frulama (2FA) ve biyometrik g\u00fcvenlikten bahsedelim. Bu kez, k\u0131smen daha az bilinen <em>Kurt ve Yedi K\u00fc\u00e7\u00fck O\u011flak<\/em>. adl\u0131 masal\u0131 temel alaca\u011f\u0131z.<\/p>\n<h2>Kurt ve Yedi K\u00fc\u00e7\u00fck O\u011flak<\/h2>\n<p>Kimlik do\u011frulama konsepti, <a href=\"https:\/\/www.wikizeroo.org\/index.php?q=aHR0cHM6Ly90ci53aWtpcGVkaWEub3JnL3dpa2kvS3VydF92ZV83X0slQzMlQkMlQzMlQTclQzMlQkNrX08lQzQlOUZsYWs\" target=\"_blank\" rel=\"noopener nofollow\"><em>Kurt ve Yedi K\u00fc\u00e7\u00fck O\u011flak<\/em><\/a> masal\u0131nda a\u00e7\u0131k bir \u015fekilde \u00f6rneklendiriliyor. Bilmeyenler i\u00e7in, masalda bir anne ve yedi \u00e7ocu\u011fundan olu\u015fan bir ke\u00e7i ailesi vard\u0131r. Anne yiyecek bulmaya gitmeden \u00f6nce, \u00e7ocuklar\u0131na kurtu i\u00e7eri almamalar\u0131n\u0131 (yoksa onlar\u0131 yiyece\u011fini) tembihler, kurtu sesinden ve k\u00fcrk\u00fcn\u00fcn renginden nas\u0131l ay\u0131rt edebileceklerini \u00f6\u011fretir. Anne gider ve bir s\u00fcre sonra kurt, kap\u0131lar\u0131n\u0131 \u00e7alar. \u00c7ocuklar\u0131n sesinin \u00e7ok kal\u0131n oldu\u011funu s\u00f6ylemesi \u00fczerine, sesini anne ke\u00e7inin sesine benzeterek \u00e7ocuklar\u0131 kand\u0131r\u0131r. Ancak o\u011flaklar, kap\u0131n\u0131n alt\u0131ndan bakmay\u0131 ak\u0131l eder ve kurtun koyu renkli t\u00fcylerle kapl\u0131 ayaklar\u0131n\u0131 g\u00f6r\u00fcr. Tabii yine i\u00e7eri almazlar. Bunun \u00fczerine kurt ayaklar\u0131na un serperek anne ke\u00e7inin ayaklar\u0131 gibi beyaz g\u00f6r\u00fcnmelerini sa\u011flar. Bunun sonucunda o\u011flaklar ikna olur (ve kurt da onlar\u0131 yer). A\u015fa\u011f\u0131daki videoda masal\u0131n tamam\u0131n\u0131 izleyebilirsiniz:<\/p>\n<p><span class=\"embed-youtube\" style=\"text-align:center; display: block;\"><iframe class=\"youtube-player\" type=\"text\/html\" width=\"640\" height=\"390\" src=\"https:\/\/www.youtube.com\/embed\/Mhr7EVFjkXk?version=3&amp;rel=1&amp;fs=1&amp;showsearch=0&amp;showinfo=1&amp;iv_load_policy=1&amp;wmode=transparent\" frameborder=\"0\" allowfullscreen=\"true\"><\/iframe><\/span><\/p>\n<p>G\u00fcn\u00fcm\u00fczde siber su\u00e7lular kurbanlar\u0131n\u0131 yemeye kalk\u0131\u015fmad\u0131\u011f\u0131na g\u00f6re biz, yani kurtun ke\u00e7ilerin evine girmeye \u00e7al\u0131\u015fti\u011fi ilk k\u0131s\u0131mla ilgilenece\u011fiz. Gelin masalda olan bitenin ad\u0131m ad\u0131m \u00fczerinden ge\u00e7elim.<\/p>\n<p>1. Anne ke\u00e7i, \u00e7ocuklar\u0131na yabanc\u0131lara kap\u0131y\u0131 a\u00e7mamalar\u0131n\u0131 tembih eder ve ormana gider.<br>\n2. Kurt, kap\u0131lar\u0131na gelir, anneleri oldu\u011funu s\u00f6yler ve kendisini i\u00e7eri almalar\u0131n\u0131 ister. O\u011flaklar, gelen sesin annelerine ait olmad\u0131\u011f\u0131n\u0131 hemen anlar ve kap\u0131y\u0131 a\u00e7maz.<\/p>\n<p>Bu, biyometrik kimlik do\u011frulamaya bir \u00f6rnektir. Kurt s\u00f6ylenecek do\u011fru \u015feyleri (parola) \u00f6\u011frenmi\u015f olsa dahi, do\u011fru kelimeleri bilmek yeterli de\u011fildir. Bu durumda ke\u00e7ilerin evine girmek i\u00e7in, istenmeyen \u201ckullan\u0131c\u0131\u201d, <a href=\"https:\/\/www.wikizeroo.org\/index.php?q=aHR0cHM6Ly9lbi53aWtpcGVkaWEub3JnL3dpa2kvU3BlYWtlcl9yZWNvZ25pdGlvbg\" target=\"_blank\" rel=\"noopener nofollow\">ses do\u011frulamas\u0131ndan<\/a> ge\u00e7mek zorundad\u0131r. Bu da ikinci fakt\u00f6rd\u00fcr.<\/p>\n<p>3. Kurt, sesini de\u011fi\u015ftirerek yumu\u015fat\u0131r (kulland\u0131\u011f\u0131 y\u00f6ntem anlat\u0131c\u0131dan anlat\u0131c\u0131ya farkl\u0131l\u0131k g\u00f6sterir). Sesini yumu\u015fatt\u0131ktan sonra, ses do\u011frulamas\u0131ndan ba\u015far\u0131yla ge\u00e7er. Ancak o\u011flaklar kap\u0131n\u0131n alt\u0131ndan gri kurtun pen\u00e7esini g\u00f6r\u00fcr ve i\u00e7eri girmesine yine izin vermezler.<\/p>\n<p>Di\u011fer bir deyi\u015fle, eve girmek i\u00e7in parolay\u0131 bilmek yeterli de\u011fildir, hatta ses kontrol\u00fcnden ge\u00e7mek bile i\u015fe yaramaz. Ayn\u0131 zamanda do\u011fru <s>parmak izi<\/s> pen\u00e7e de gereklidir. Bu da temelde bir di\u011fer biyometrik fakt\u00f6rd\u00fcr. Ev sahibinin sesini taklit etmeyi becerse bile, sadece ek bir ay\u0131rt edici \u00f6zelli\u011fe sahip kullan\u0131c\u0131n\u0131n girmesine izin verilir.<\/p>\n<p>4. Kurt, un yard\u0131m\u0131yla pen\u00e7elerini de gizler ve tekrar eri\u015fim sa\u011flamaya \u00e7al\u0131\u015f\u0131r \u2014 ve bu kez ba\u015far\u0131r.<\/p>\n<p>Bu da, bilgisayar korsanlar\u0131n\u0131n \u00e7ok fakt\u00f6rl\u00fc kimlik do\u011frulamay\u0131 atlatma hilelerine g\u00fczel bir \u00f6rnektir. Bu masalda biyometrik ses ve pen\u00e7e verileri taklit edilmi\u015ftir. Bu gibi senaryolar olduk\u00e7a ger\u00e7ektir ve ger\u00e7ek d\u00fcnyada <a href=\"https:\/\/www.kaspersky.com\/blog\/synthetic-voice-phone-fraud\/18034\/\" target=\"_blank\" rel=\"noopener nofollow\">doland\u0131r\u0131c\u0131lar taraf\u0131ndan kullan\u0131lmaktad\u0131r<\/a>. Bu masal, \u00e7ocuklara \u00e7ok fakt\u00f6rl\u00fc kimlik do\u011frulamay\u0131 a\u00e7\u0131klamaya yard\u0131mc\u0131 olmakla kalmay\u0131p, ayn\u0131 zamanda biyometrik g\u00fcvenli\u011fin g\u00f6r\u00fcnd\u00fc\u011f\u00fc kadar g\u00fcvenilir olmayabilece\u011fini de g\u00f6steriyor.<\/p>\n<h2>\u00c7ocuklar i\u00e7in siber g\u00fcvenlik masallar\u0131<\/h2>\n<p>G\u00f6rece\u011finiz \u00fczere masallar, \u00e7ocu\u011funuz i\u00e7in d\u00f6rt d\u00f6rtl\u00fck bir siber g\u00fcvenlik k\u0131lavuzu olabilir. Do\u011fru paralelli\u011fi kurun yeter, uzun a\u00e7\u0131klamalara ve istisnas\u0131z yasaklamalara gerek kalmayacakt\u0131r. Eminiz <em><a href=\"https:\/\/www.kaspersky.com.tr\/blog\/fairy-tales-red-hood\/6458\/\" target=\"_blank\" rel=\"noopener\">K\u0131rm\u0131z\u0131 Ba\u015fl\u0131kl\u0131 K\u0131z<\/a> ile Kurt ve Yedi K\u00fc\u00e7\u00fck O\u011flak masallar\u0131, k\u00f6t\u00fc niyetli hileler ve dijital d\u00fcnyada kendinizi nas\u0131l koruyaca\u011f\u0131n\u0131z hakk\u0131nda hayati dersler \u00e7\u0131karabilece\u011finiz tek masallar de\u011fildir. Haz\u0131r ba\u015flam\u0131\u015fken, \u00e7ocu\u011funuzun en sevdi\u011fi \u00e7izgi filmlere bir bak\u0131n \u2014 belki onlar i\u00e7inde de gizliden gizliye (\u015fayet a\u00e7\u0131k bir \u015fekilde de\u011filse) siber g\u00fcvenlikle ilgili olanlar vard\u0131r, ne dersiniz?<\/em><\/p>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"safe-kids\">\n","protected":false},"excerpt":{"rendered":"<p>Kurt ve Yedi K\u00fc\u00e7\u00fck O\u011flak masal\u0131na siber g\u00fcvenlik a\u00e7\u0131s\u0131ndan bakal\u0131m<\/p>\n","protected":false},"author":700,"featured_media":6491,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1351],"tags":[1624,2028,661,2027,744,2026,2016,1525],"class_list":{"0":"post-6490","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-threats","8":"tag-2fa","9":"tag-biyometri","10":"tag-cocuklar","11":"tag-cok-faktorlu-kimlik-dogrulama","12":"tag-guvenlik","13":"tag-iki-faktorlu-kimlik-dogrulama","14":"tag-masallar","15":"tag-parolalar"},"hreflang":[{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/fairy-tales-seven-young-goats\/6490\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/fairy-tales-seven-young-goats\/16683\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/fairy-tales-seven-young-goats\/14075\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/fairy-tales-seven-young-goats\/18651\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/fairy-tales-seven-young-goats\/16723\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/fairy-tales-seven-young-goats\/15454\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/fairy-tales-seven-young-goats\/19346\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/fairy-tales-seven-young-goats\/28725\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/fairy-tales-seven-young-goats\/12338\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/fairy-tales-seven-young-goats\/11293\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/fairy-tales-seven-young-goats\/20271\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/fairy-tales-seven-young-goats\/24230\/"},{"hreflang":"nl","url":"https:\/\/www.kaspersky.nl\/blog\/fairy-tales-seven-young-goats\/24853\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/fairy-tales-seven-young-goats\/23468\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/fairy-tales-seven-young-goats\/23312\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.tr\/blog\/tag\/cocuklar\/","name":"\u00e7ocuklar"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/6490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/users\/700"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=6490"}],"version-history":[{"count":4,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/6490\/revisions"}],"predecessor-version":[{"id":6721,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/6490\/revisions\/6721"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media\/6491"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=6490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=6490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=6490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}