{"id":50479,"date":"2025-05-21T14:56:24","date_gmt":"2025-05-21T11:56:24","guid":{"rendered":"https:\/\/wise.tv\/?p=50479"},"modified":"2026-06-17T11:39:21","modified_gmt":"2026-06-17T08:39:21","slug":"siber-savunmada-hata-toleransi-ve-insanin-rolu-ne-olmali","status":"publish","type":"post","link":"https:\/\/wise.tv\/tr\/siber-savunmada-hata-toleransi-ve-insanin-rolu-ne-olmali\/","title":{"rendered":"Siber Savunmada Hata Tolerans\u0131 ve \u0130nsan\u0131n Rol\u00fc Ne Olmal\u0131?"},"content":{"rendered":"<blockquote><p>Garanti BBVA Siber Savunma Teknolojileri Y\u00f6neticisi Nejla Seyhan Susam, siber savunmada hata tolerans\u0131 ve insan\u0131n rol\u00fc ne olmal\u0131 hakk\u0131nda konu\u015ftu. Susam \u015funlar\u0131 s\u00f6yledi:<\/p>\n<p>G\u00fcn\u00fcm\u00fczde yapay zeka asl\u0131nda genel teknoloji kullan\u0131m\u0131n\u0131 d\u00fc\u015f\u00fcnd\u00fc\u011f\u00fcm\u00fcz zaman verimlilikle \u00e7ok i\u00e7 i\u00e7e ge\u00e7mi\u015f bir kavram ama g\u00fcvenli\u011fe geldi\u011finiz zaman bu biraz de\u011fi\u015fiyor. Bir tane \u00f6rnekle asl\u0131nda giri\u015f yapmak isterim bu soruya. 2020&#8217;de bakt\u0131\u011f\u0131m\u0131z zaman ortalama &#8221;breakout time&#8221; yani bir sald\u0131rgan\u0131n sisteme eri\u015ftikten sonraki ilk yatay hareket s\u00fcresi asl\u0131nda 9 saat iken 2025&#8217;te bu s\u00fcre 29 dakikaya kadar d\u00fc\u015fm\u00fc\u015f durumda. Ayn\u0131 zamanda buradaki en k\u0131sa s\u00fcre 27 saniye olarak \u00f6l\u00e7\u00fclm\u00fc\u015f ve ilk eri\u015fimden sonraki ilk data s\u0131z\u0131nt\u0131s\u0131n\u0131n ba\u015flamas\u0131 4 dakikaya kadar d\u00fc\u015fm\u00fc\u015f. Yani bu bize g\u00f6steriyor ki asl\u0131nda sald\u0131rganlar &#8221;AI&#8221;\u0131 h\u0131zlanmak i\u00e7in kullan\u0131yorlar ve savunma taraf\u0131nda da &#8221;AI&#8221; asl\u0131nda bir silahlanma yar\u0131\u015f\u0131 gibi. Sald\u0131rganlar ne kadar h\u0131zlan\u0131rlarsa savunma taraf\u0131nda da o kadar h\u0131zlanmak durumunday\u0131z. Dolay\u0131s\u0131yla &#8221;SOC&#8217;de &#8221;AI&#8221;\u0131n kullan\u0131m\u0131n\u0131n en \u00f6nemli kriteri h\u0131z\u0131 artt\u0131rmas\u0131. Hem alarm incelemede, \u00f6nceliklenmede, &#8221;false- positive&#8221; ay\u0131klamada, &#8221;detection&#8221;da ve response asl\u0131nda h\u0131z\u0131n\u0131n art\u0131rmas\u0131 &#8221;SOC&#8221; de en \u00f6nemli kavram bizim a\u00e7\u0131m\u0131zdan. H\u0131zla birlikte asl\u0131nda analistin do\u011fru karar vermesi de kritik bir ba\u011flam. H\u0131zla birlikte yanl\u0131\u015f karar verirseniz yan\u0131t s\u00fcreniz eskisine oranla daha da artabiliyor. Dolay\u0131s\u0131yla do\u011fru kaynaklar\u0131 kullanarak do\u011fru triyajla do\u011fru verileri birle\u015ftirerek korelerek do\u011fru karar \u00fcretmek h\u0131zl\u0131 s\u00fcrede \u00e7ok \u00f6nemli. Burada da asl\u0131nda insan\u0131n rol\u00fc devreye giriyor. Ne kadar otomatize etsek de, ne kadar &#8221;AI&#8221;y\u0131 kullansak da yanl\u0131\u015f bir karar ald\u0131\u011f\u0131m\u0131z zaman insan sezgisiyle, insan d\u00fc\u015f\u00fcncesiyle, analiziyle yer almadan yanl\u0131\u015f bir karar ald\u0131\u011f\u0131m\u0131zda bunun sonu\u00e7lar\u0131 \u00e7ok daha k\u00f6t\u00fc olabiliyor. Diyelim ki bir sistemde tehdit alarm\u0131 olu\u015ftu ve bu tehdide kar\u015f\u0131 bir aksiyon ald\u0131n\u0131z. Bu aksiyonda da \u00e7ok kritik bir servis &#8221;user&#8221;unu &#8221;disable&#8221; ettiniz ya da o &#8221;host&#8221;u izole ettiniz. Buradaki ciddi bir maddi kay\u0131p olu\u015fabilir. Dolay\u0131s\u0131yla burada h\u0131z\u0131 artt\u0131r\u0131rken do\u011fru karar\u0131 da g\u00f6z \u00f6n\u00fcnde bulundurmak, insan fakt\u00f6r\u00fcn\u00fc bunun i\u00e7ine dahil etmek kritik. Riskin daha az, hata tolerans\u0131n\u0131n daha y\u00fcksek oldu\u011fu noktalarda tekrar eden i\u015flerde &#8221;AI&#8221;y\u0131 kullanmak, riskin daha y\u00fcksek, hata tolerans\u0131n\u0131n daha d\u00fc\u015f\u00fck oldu\u011fu ve maddi kayb\u0131n da y\u00fcksek olaca\u011f\u0131 noktalarda insan\u0131 s\u00fcrece dahil etmek, &#8221;on the loop&#8221; olarak kullanmak \u00e7ok daha kritik.<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"Garanti BBVA Siber Savunma Teknolojileri Y\u00f6neticisi Nejla Seyhan Susam, siber savunmada hata tolerans\u0131 ve insan\u0131n rol\u00fc ne olmal\u0131 [&hellip;]\n","protected":false},"author":1852,"featured_media":51314,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[6935,6852,6844],"tags":[7055],"class_list":["post-50479","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","category-risk-yonetimi","category-guvenlik-mimarisi","tag-garanti-bbva"],"acf":[],"_links":{"self":[{"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/posts\/50479","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/users\/1852"}],"replies":[{"embeddable":true,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/comments?post=50479"}],"version-history":[{"count":0,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/posts\/50479\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/media\/51314"}],"wp:attachment":[{"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/media?parent=50479"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/categories?post=50479"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/tags?post=50479"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}