{"id":476853,"date":"2023-08-09T09:04:34","date_gmt":"2023-08-09T09:04:34","guid":{"rendered":""},"modified":"2023-09-05T11:13:35","modified_gmt":"2023-09-05T11:13:35","slug":"discretionary-access-control","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/tr\/wiki\/discretionary-access-control\/","title":{"rendered":"Iste\u011fe ba\u011fl\u0131 eri\u015fim kontrol\u00fc"},"content":{"rendered":"

\u0130ste\u011fe Ba\u011fl\u0131 Eri\u015fim Kontrol\u00fc (DAC), veri veya kayna\u011f\u0131n sahibi taraf\u0131ndan belirlenen bir eri\u015fim politikas\u0131 sa\u011flayan bir t\u00fcr eri\u015fim kontrol sistemidir. Sahibin, di\u011fer kullan\u0131c\u0131lara veya i\u015flemlere eri\u015fim izni verme veya reddetme yetkisi vard\u0131r.<\/p>\n

\u0130ste\u011fe Ba\u011fl\u0131 Eri\u015fim Denetiminin Do\u011fu\u015fu ve Evrimi<\/h2>\n

\u0130ste\u011fe Ba\u011fl\u0131 Eri\u015fim Kontrol\u00fc kavram\u0131, payla\u015f\u0131lan bilgi i\u015flem sistemlerinin ilk g\u00fcnlerine, \u00f6zellikle 1960'larda geli\u015ftirilen Multics (\u00c7ok Y\u00f6nl\u00fc Bilgi ve Bilgi \u0130\u015flem Hizmeti) sistemine kadar uzan\u0131r. Multics sistemi, daha sonra modern eri\u015fim kontrol sistemleri i\u00e7in ilham kayna\u011f\u0131 haline gelen ilkel bir DAC bi\u00e7imini i\u00e7eriyordu. DAC, Amerika Birle\u015fik Devletleri Savunma Bakanl\u0131\u011f\u0131'n\u0131n 1980'lerde DAC dahil olmak \u00fczere \u00e7e\u015fitli g\u00fcvenlik kontrol d\u00fczeylerini tan\u0131mlayan \u201cTuruncu Kitab\u0131\u201dn\u0131n yay\u0131mlanmas\u0131yla resmile\u015ftirilmi\u015f bir kavram haline geldi.<\/p>\n

\u0130ste\u011fe Ba\u011fl\u0131 Eri\u015fim Kontrol\u00fc Anlay\u0131\u015f\u0131n\u0131n Geni\u015fletilmesi<\/h2>\n

\u0130ste\u011fe Ba\u011fl\u0131 Eri\u015fim Kontrol\u00fc, iste\u011fe ba\u011fl\u0131 ayr\u0131cal\u0131klar ilkelerine dayanmaktad\u0131r. Bu, veriye veya kayna\u011fa sahip olan birey veya kurulu\u015fun, bu veriye veya kayna\u011fa kimin eri\u015febilece\u011fine karar verme yetkisine sahip oldu\u011fu anlam\u0131na gelir. Bu kontrol hem okuma hem de yazma izinlerini kapsayabilir. DAC alt\u0131nda, bir kullan\u0131c\u0131n\u0131n veya kullan\u0131c\u0131 grubunun belirli bir kaynak \u00fczerinde sahip oldu\u011fu eri\u015fim t\u00fcr\u00fcn\u00fc belirten bir eri\u015fim kontrol listesi (ACL) tutulur.<\/p>\n

\u0130ste\u011fe Ba\u011fl\u0131 Eri\u015fim Denetiminin \u0130\u00e7 Yap\u0131s\u0131 ve \u0130\u015fleyi\u015fi<\/h2>\n

DAC modeli \u00f6ncelikle iki temel bile\u015fene dayan\u0131r: Eri\u015fim Kontrol Listeleri (ACL'ler) ve yetenek tablolar\u0131. ACL'ler her kaynak veya nesneyle ili\u015fkilidir ve verilen izinlerle birlikte konular\u0131n (kullan\u0131c\u0131lar veya i\u015flemler) bir listesini i\u00e7erir. \u00d6te yandan, yetenek tablolar\u0131 belirli bir \u00f6znenin eri\u015febilece\u011fi nesnelerin bir listesini tutar.<\/p>\n

Eri\u015fim i\u00e7in bir istek yap\u0131ld\u0131\u011f\u0131nda DAC sistemi, istek sahibinin kayna\u011fa eri\u015fmesine izin verilip verilmedi\u011fini belirlemek i\u00e7in ACL'yi veya yetenek tablosunu kontrol eder. ACL veya yetenek tablosu eri\u015fim izni veriyorsa istek onaylan\u0131r. Aksi takdirde reddedilir.<\/p>\n

\u0130ste\u011fe Ba\u011fl\u0131 Eri\u015fim Denetiminin Temel \u00d6zellikleri<\/h2>\n
    \n
  1. Sahibi Taraf\u0131ndan Belirlenen Eri\u015fim<\/strong>: Verinin veya kayna\u011f\u0131n sahibi, ona kimlerin eri\u015febilece\u011fini belirler.<\/li>\n
  2. Eri\u015fim Kontrol Listeleri<\/strong>: ACL, her kullan\u0131c\u0131n\u0131n veya kullan\u0131c\u0131 grubunun ne t\u00fcr eri\u015fime sahip oldu\u011funu belirler.<\/li>\n
  3. Yetenek Tablolar\u0131<\/strong>: Bu tablolar bir kullan\u0131c\u0131n\u0131n veya kullan\u0131c\u0131 grubunun eri\u015febilece\u011fi kaynaklar\u0131 listeler.<\/li>\n
  4. Esneklik<\/strong>: Sahipler izinleri gerekti\u011fi gibi kolayca de\u011fi\u015ftirebilir.<\/li>\n
  5. Ge\u00e7i\u015fli Eri\u015fim Kontrol\u00fc<\/strong>: Bir kullan\u0131c\u0131n\u0131n bir kayna\u011fa eri\u015fimi varsa, potansiyel olarak ba\u015fka bir kullan\u0131c\u0131ya da eri\u015fim izni verebilir.<\/li>\n<\/ol>\n

    \u0130ste\u011fe Ba\u011fl\u0131 Eri\u015fim Kontrol\u00fc T\u00fcrleri<\/h2>\n

    DAC \u00e7e\u015fitli \u015fekillerde uygulanabilse de en yayg\u0131n iki yakla\u015f\u0131m ACL'ler ve yetenek listeleridir.<\/p>\n\n\n\n\n\n\n
    Yakla\u015fmak<\/th>\nTan\u0131m<\/th>\n<\/tr>\n<\/thead>\n
    Eri\u015fim Kontrol Listeleri (ACL'ler)<\/td>\nACL'ler bir nesneye (\u00f6rne\u011fin bir dosyaya) ba\u011fl\u0131d\u0131r ve hangi kullan\u0131c\u0131lar\u0131n nesneye eri\u015febilece\u011fini ve \u00fczerinde hangi i\u015flemleri ger\u00e7ekle\u015ftirebilece\u011fini belirtir.<\/td>\n<\/tr>\n
    Yetenek Listeleri<\/td>\nYetenek listeleri kullan\u0131c\u0131ya ba\u011fl\u0131d\u0131r ve kullan\u0131c\u0131n\u0131n hangi nesnelere eri\u015febilece\u011fini ve bu nesneler \u00fczerinde hangi i\u015flemleri ger\u00e7ekle\u015ftirebilece\u011fini belirtir.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    \u0130ste\u011fe Ba\u011fl\u0131 Eri\u015fim Kontrol\u00fc Uygulamas\u0131, Zorluklar\u0131 ve \u00c7\u00f6z\u00fcmleri<\/h2>\n

    DAC, Windows ve UNIX gibi \u00e7o\u011fu i\u015fletim sistemi ve dosya sisteminde yayg\u0131n olarak kullan\u0131l\u0131r ve kullan\u0131c\u0131lar\u0131n dosyalar\u0131 ve kaynaklar\u0131 se\u00e7ilen ki\u015fi veya gruplarla payla\u015fmas\u0131na olanak tan\u0131r.<\/p>\n

    DAC ile ilgili en b\u00fcy\u00fck zorluklardan biri, bir program\u0131n istemeden eri\u015fim haklar\u0131n\u0131 s\u0131zd\u0131rabilece\u011fi "kar\u0131\u015f\u0131k vekil sorunu"dur. \u00d6rne\u011fin, bir kullan\u0131c\u0131 daha fazla eri\u015fim hakk\u0131na sahip bir program\u0131 kendi ad\u0131na bir eylem ger\u00e7ekle\u015ftirmesi i\u00e7in kand\u0131rabilir. Bu sorun, dikkatli programlama ve sistem ayr\u0131cal\u0131klar\u0131n\u0131n do\u011fru kullan\u0131m\u0131yla azalt\u0131labilir.<\/p>\n

    Bir ba\u015fka sorun da, bir kayna\u011fa eri\u015fimi olan kullan\u0131c\u0131lar\u0131n bu eri\u015fimi ba\u015fkalar\u0131na da verme potansiyeli oldu\u011fundan, eri\u015fim haklar\u0131n\u0131n h\u0131zl\u0131 ve kontrols\u00fcz yay\u0131lma potansiyelidir. Bu sorun, uygun e\u011fitim ve \u00f6\u011fretimin yan\u0131 s\u0131ra bu t\u00fcr yay\u0131lmay\u0131 s\u0131n\u0131rlamak i\u00e7in sistem d\u00fczeyindeki kontrollerle \u00e7\u00f6z\u00fclebilir.<\/p>\n

    \u0130ste\u011fe Ba\u011fl\u0131 Eri\u015fim Denetiminin Benzer Terimlerle Kar\u015f\u0131la\u015ft\u0131r\u0131lmas\u0131<\/h2>\n\n\n\n\n\n\n\n
    Terim<\/th>\nTan\u0131m<\/th>\n<\/tr>\n<\/thead>\n
    \u0130ste\u011fe Ba\u011fl\u0131 Eri\u015fim Kontrol\u00fc (DAC)<\/td>\nSahipler, verileri ve kaynaklar\u0131 \u00fczerinde tam kontrole sahiptir.<\/td>\n<\/tr>\n
    Zorunlu Eri\u015fim Kontrol\u00fc (MAC)<\/td>\nMerkezi bir politika, eri\u015fimi s\u0131n\u0131fland\u0131rma d\u00fczeylerine g\u00f6re k\u0131s\u0131tlar.<\/td>\n<\/tr>\n
    Rol Tabanl\u0131 Eri\u015fim Kontrol\u00fc (RBAC)<\/td>\nEri\u015fim, kullan\u0131c\u0131n\u0131n kurulu\u015f i\u00e7indeki rol\u00fcne g\u00f6re belirlenir.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    \u0130ste\u011fe Ba\u011fl\u0131 Eri\u015fim Kontrol\u00fcyle \u0130lgili Gelecek Perspektifleri ve Teknolojiler<\/h2>\n

    DAC'nin gelece\u011fi, bulut tabanl\u0131 platformlar\u0131n ve Nesnelerin \u0130nterneti (IoT) cihazlar\u0131n\u0131n artan pop\u00fclaritesiyle birlikte geli\u015fecek gibi g\u00f6r\u00fcn\u00fcyor. \u0130zinler \u00fczerinde daha ayr\u0131nt\u0131l\u0131 kontrol sa\u011flayan ayr\u0131nt\u0131l\u0131 eri\u015fim kontrol\u00fcn\u00fcn daha yayg\u0131n hale gelmesi bekleniyor. Ayr\u0131ca makine \u00f6\u011frenimi ve yapay zeka teknolojileri ilerledik\u00e7e \u00f6\u011frenebilen ve de\u011fi\u015fen eri\u015fim ihtiya\u00e7lar\u0131na uyum sa\u011flayabilen DAC sistemlerini de g\u00f6rebiliriz.<\/p>\n

    Proxy Sunucular\u0131 ve \u0130ste\u011fe Ba\u011fl\u0131 Eri\u015fim Kontrol\u00fc<\/h2>\n

    Proxy sunucular\u0131, web kaynaklar\u0131na eri\u015fimi kontrol etmek i\u00e7in DAC ilkelerini kullanabilir. \u00d6rne\u011fin bir \u015firket, belirli web sitelerine veya web tabanl\u0131 hizmetlere eri\u015fime izin vermeden \u00f6nce kullan\u0131c\u0131n\u0131n kimli\u011fini ve rol\u00fcn\u00fc kontrol eden bir proxy sunucusu kurabilir. Bu, yaln\u0131zca yetkili personelin belirli \u00e7evrimi\u00e7i kaynaklara eri\u015febilmesini sa\u011flayarak ek bir g\u00fcvenlik katman\u0131 sa\u011flar.<\/p>\n

    \u0130lgili Ba\u011flant\u0131lar<\/h2>\n
      \n
    1. Bilgisayar G\u00fcvenli\u011fi: Sanat ve Bilim<\/a> Matt Bishop: Eri\u015fim kontrol\u00fc de dahil olmak \u00fczere bilgisayar g\u00fcvenli\u011fi konusunda kapsaml\u0131 bir kaynak.<\/li>\n
    2. \u0130ste\u011fe Ba\u011fl\u0131 Eri\u015fim Denetimini Anlamak ve Kullanmak<\/a>: CSO'nun DAC'yi ayr\u0131nt\u0131l\u0131 olarak inceleyen bir makalesi.<\/li>\n
    3. NIST \u00d6zel Yay\u0131n\u0131 800-12<\/a>: DAC hakk\u0131nda bir tart\u0131\u015fma da dahil olmak \u00fczere ABD Ulusal Standartlar ve Teknoloji Enstit\u00fcs\u00fc'n\u00fcn bilgisayar g\u00fcvenli\u011fi k\u0131lavuzu.<\/li>\n
    4. Eri\u015fim Kontrol Modelleri<\/a>: O'Reilly Media'n\u0131n \u00e7e\u015fitli eri\u015fim kontrol\u00fc modellerine ili\u015fkin ayr\u0131nt\u0131l\u0131 bir k\u0131lavuz.<\/li>\n
    5. DAC, MAC ve RBAC<\/a>: DAC, MAC ve RBAC modellerini kar\u015f\u0131la\u015ft\u0131ran bilimsel bir makale.<\/li>\n<\/ol>","protected":false},"featured_media":476854,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476853","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about Discretionary Access Control: A Comprehensive Guide<\/mark>","faq_items":[{"question":"What is Discretionary Access Control (DAC)?","answer":"

      Discretionary Access Control (DAC) is a type of access control system where the access policy is determined by the owner of the data or resource. The owner has the discretion to grant or deny access to other users or processes.<\/p>"},{"question":"When was Discretionary Access Control first introduced?","answer":"

      The concept of Discretionary Access Control dates back to the earliest days of shared computing systems, particularly in the Multics (Multiplexed Information and Computing Service) system developed in the 1960s. DAC became a formalized concept with the release of the United States Department of Defense's \"Orange Book\" in the 1980s.<\/p>"},{"question":"How does Discretionary Access Control work?","answer":"

      Discretionary Access Control works based on Access Control Lists (ACLs) and capability tables. When an access request is made, the DAC system checks the ACL or the capability table to verify if the requester is allowed to access the resource.<\/p>"},{"question":"What are the key features of Discretionary Access Control?","answer":"

      The key features of Discretionary Access Control include owner-determined access, the use of Access Control Lists and capability tables, flexibility in permissions, and the principle of transitive access control.<\/p>"},{"question":"What types of Discretionary Access Control exist?","answer":"

      The two most common types of Discretionary Access Control are Access Control Lists (ACLs), which are tied to an object and specify user permissions, and Capability Lists, which are tied to a user and specify what objects they can access.<\/p>"},{"question":"What are some challenges related to Discretionary Access Control, and how are they mitigated?","answer":"

      A key challenge with DAC is the \"confused deputy problem,\" where a program can unintentionally leak access rights. This can be mitigated by careful programming and proper use of system privileges. Another problem is rapid, uncontrolled propagation of access rights, which can be addressed through proper education and training, as well as system-level controls.<\/p>"},{"question":"How does Discretionary Access Control compare to similar terms like Mandatory Access Control and Role-Based Access Control?","answer":"

      While DAC allows owners total control over their data, Mandatory Access Control (MAC) uses a centralized policy to restrict access based on classification levels, and Role-Based Access Control (RBAC) determines access based on a user's role within the organization.<\/p>"},{"question":"How might Discretionary Access Control evolve in the future?","answer":"

      The future of DAC is expected to evolve with the increasing popularity of cloud-based platforms and Internet of Things (IoT) devices. Fine-grained access control and DAC systems that can learn and adapt to changing access needs may become more common.<\/p>"},{"question":"How can proxy servers use Discretionary Access Control?","answer":"

      Proxy servers can use DAC principles to control access to web resources. A company might set up a proxy server that checks the user's identity and role before allowing access to certain websites or web-based services.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/tr\/wp-json\/wp\/v2\/wiki\/476853","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/tr\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/tr\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/tr\/wp-json\/wp\/v2\/wiki\/476853\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/tr\/wp-json\/wp\/v2\/media\/476854"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/tr\/wp-json\/wp\/v2\/media?parent=476853"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}