Opinnate Kurucusu ve CEO\u2019su Serkan \u00d6zden, IDC Security Road Show\u2019da yapt\u0131\u011f\u0131 “G\u00f6r\u00fcnmeyeni G\u00f6rmek” ba\u015fl\u0131kl\u0131 sunumda, firewall (g\u00fcvenlik duvar\u0131) y\u00f6netiminde s\u0131k\u00e7a g\u00f6z ard\u0131 edilen kritik konulara dikkat \u00e7ekti.<\/p>\n
Serkan \u00d6zden \u015funlar\u0131 s\u00f6yledi:<\/p>\n
\u00d6ne \u00e7\u0131kan konulardan biri, firewall \u00fczerinde geni\u015f yaz\u0131lm\u0131\u015f veya unutulmu\u015f kurallard\u0131. Bu durumu, kap\u0131lar\u0131 a\u00e7\u0131k bir binaya benzettik. B\u00f6yle bir binada muhtemelen rahat uyuyamazs\u0131n\u0131z, de\u011fil mi? Bilgi sistemleri altyap\u0131lar\u0131nda da geni\u015f veya kullan\u0131lmayan kurallar, ayn\u0131 a\u00e7\u0131k kap\u0131lar gibi tehlike olu\u015fturur. Bu nedenle, bilgi sistemlerinin g\u00fcvenli\u011finden bahsetmek pek m\u00fcmk\u00fcn de\u011fil.<\/p>\n
Bu durumu nas\u0131l bertaraf edebiliriz? Biz, Opinnate olarak pasif monitoring \u00e7\u00f6z\u00fcm\u00fcm\u00fczle bu soruna yan\u0131t veriyoruz. Pasif monitoring ile firewall \u00fczerindeki t\u00fcm trafik loglar\u0131n\u0131, Opinnate kuruldu\u011fu tarihten itibaren topluyor ve i\u015fliyoruz. Bu verileri, \u00f6zel bir formatta Big Data mimarisinde sakl\u0131yoruz. B\u00f6ylece, herhangi bir anda, ge\u00e7mi\u015f 30 g\u00fcnl\u00fck veri \u00fczerinden kural analizi yapabilir ve kurallar\u0131 daraltabilirsiniz. Bu, kural\u0131n nas\u0131l daralt\u0131labilece\u011fini ve hangilerinin ger\u00e7ekten kullan\u0131ld\u0131\u011f\u0131n\u0131 anlaman\u0131z\u0131 sa\u011flar. Bu yakla\u015f\u0131m, bina \u00f6rne\u011findeki kap\u0131 ge\u00e7i\u015f kart\u0131 vermek gibidir. Ge\u00e7mi\u015f veri \u00fczerinden bu i\u015flemi yapabilmek, bizi rakiplerimizden ay\u0131ran bir \u00f6zelliktir. Rakip \u00e7\u00f6z\u00fcmler genellikle ileri tarihli izleme yaparken, biz ge\u00e7mi\u015f veri \u00fczerinden analiz yap\u0131yoruz.<\/p>\n
Bir di\u011fer \u00f6nemli konu ise y\u0131ll\u0131k kural g\u00f6zden ge\u00e7irme \u00e7al\u0131\u015fmalar\u0131d\u0131r. Firewall y\u00f6netimi yapan bir\u00e7ok kurum bu \u00e7al\u0131\u015fmalar\u0131 yapt\u0131\u011f\u0131n\u0131 s\u00f6ylese de, ISO 27001 ve PCI gibi standartlar\u0131n beklentilerini kar\u015f\u0131lamak her zaman m\u00fcmk\u00fcn olmuyor. Biz, kural g\u00f6zden ge\u00e7irme \u00e7al\u0131\u015fmalar\u0131n\u0131n tam da denetimlerin istedi\u011fi \u015fekilde yap\u0131lmas\u0131na olanak sa\u011fl\u0131yoruz. Her bir kural i\u00e7in kural sahipli\u011fi atamas\u0131 yaparak, bu ki\u015filere y\u0131ll\u0131k periyotta otomatik mail g\u00f6nderimleri yap\u0131yoruz. Bu sayede, kurallarla ilgili aksiyon alabilir hale geliyorsunuz.<\/p>\n
Sonu\u00e7 olarak, “G\u00f6r\u00fcnmeyeni G\u00f6rmek” \u00e7er\u00e7evesinde iki farkl\u0131 konuya de\u011findik: Pasif monitoring yakla\u015f\u0131m\u0131m\u0131z ve kural g\u00f6zden ge\u00e7irme \u00e7al\u0131\u015fmalar\u0131. Bu konular, rule life cycle management ak\u0131\u015flar\u0131 \u00e7er\u00e7evesinde ele al\u0131nd\u0131. Ayr\u0131ca, Opinnate’in yeni versiyonundaki genel \u00f6zellikler ve mimari hakk\u0131nda detayl\u0131 bilgiler payla\u015ft\u0131k.<\/p>\n","protected":false},"excerpt":{"rendered":"Opinnate Kurucusu ve CEO\u2019su Serkan \u00d6zden, IDC Security Road Show\u2019da yapt\u0131\u011f\u0131 “G\u00f6r\u00fcnmeyeni G\u00f6rmek” ba\u015fl\u0131kl\u0131 sunumda, firewall (g\u00fcvenlik duvar\u0131) […]\n","protected":false},"author":670,"featured_media":48738,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[6935,6991,6868,6844],"tags":[6912],"class_list":["post-44914","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","category-ag-guvenligi","category-erisim-ve-kimlik-guvenligi","category-guvenlik-mimarisi","tag-opinnate"],"acf":[],"_links":{"self":[{"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/posts\/44914","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/users\/670"}],"replies":[{"embeddable":true,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/comments?post=44914"}],"version-history":[{"count":0,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/posts\/44914\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/media\/48738"}],"wp:attachment":[{"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/media?parent=44914"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/categories?post=44914"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/tags?post=44914"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}