S\u00fcrekli geli\u015fen siber tehdit ortam\u0131nda \u00f6zellikle kurnaz ve gizli bir y\u00f6ntem ortaya \u00e7\u0131kt\u0131: S\u0131f\u0131r t\u0131klama sald\u0131r\u0131s\u0131. Bu makale, bu sald\u0131r\u0131 vekt\u00f6r\u00fcn\u00fcn inceliklerini, ge\u00e7mi\u015fini, mekanizmalar\u0131n\u0131, varyasyonlar\u0131n\u0131, kar\u015f\u0131 \u00f6nlemlerini ve proxy sunucularla potansiyel etkile\u015fimini ele al\u0131yor.<\/p>\n
S\u0131f\u0131r t\u0131klama sald\u0131r\u0131s\u0131 kavram\u0131n\u0131n k\u00f6keni, ara\u015ft\u0131rmac\u0131lar\u0131n uzaktan yararlanma tekniklerini ke\u015ffetmeye ba\u015flad\u0131klar\u0131 bilgisayar biliminin ilk g\u00fcnlerine kadar uzanabilir. Yaz\u0131l\u0131m\u0131n artan karma\u015f\u0131kl\u0131\u011f\u0131 ve geli\u015fmi\u015f sald\u0131r\u0131 y\u00f6ntemlerinin ortaya \u00e7\u0131kmas\u0131 nedeniyle terimin kendisi mobil cihazlar, \u00f6zellikle de ak\u0131ll\u0131 telefonlar alan\u0131nda \u00f6nem kazand\u0131. S\u0131f\u0131r t\u0131klama sald\u0131r\u0131s\u0131ndan belgelenen ilk s\u00f6z, 2010'lar\u0131n ortalar\u0131nda bir g\u00fcvenlik konferans\u0131nda yap\u0131lan bir sunuma atfedilebilir.<\/p>\n
S\u0131f\u0131r t\u0131klama sald\u0131r\u0131s\u0131, bir sald\u0131rgan\u0131n hedef kullan\u0131c\u0131dan herhangi bir etkile\u015fim gerektirmeden bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131ndan yararland\u0131\u011f\u0131 karma\u015f\u0131k bir izinsiz giri\u015f tekni\u011fini temsil eder. K\u00f6t\u00fc ama\u00e7l\u0131 bir ba\u011flant\u0131ya t\u0131klamak veya vir\u00fcsl\u00fc bir dosyay\u0131 indirmek gibi kullan\u0131c\u0131 eylemlerine dayanan geleneksel sald\u0131r\u0131 y\u00f6ntemlerinden farkl\u0131 olarak S\u0131f\u0131r t\u0131klama sald\u0131r\u0131lar\u0131, herhangi bir a\u00e7\u0131k kullan\u0131c\u0131 etkile\u015fimi olmaks\u0131z\u0131n yetkisiz eri\u015fime izin veren g\u00fcvenlik kusurlar\u0131ndan yararlan\u0131r.<\/p>\n
S\u0131f\u0131r T\u0131klama sald\u0131r\u0131s\u0131n\u0131n temelinde yaz\u0131l\u0131m, a\u011f protokolleri veya ileti\u015fim kanallar\u0131ndaki g\u00fcvenlik a\u00e7\u0131klar\u0131ndan yararlan\u0131lmas\u0131 yatmaktad\u0131r. Sald\u0131rganlar, \u00f6zel haz\u0131rlanm\u0131\u015f veri paketleri g\u00f6ndererek veya ileti\u015fim protokollerindeki zay\u0131fl\u0131klardan yararlanarak, hedef sistemde istenmeyen davran\u0131\u015flar\u0131 tetikleyebilir ve bu da yetkisiz eri\u015fime veya veri s\u0131z\u0131nt\u0131s\u0131na yol a\u00e7abilir.<\/p>\n
S\u0131f\u0131r t\u0131klama sald\u0131r\u0131lar\u0131 \u00e7e\u015fitli ay\u0131rt edici \u00f6zelliklere sahiptir:<\/p>\n
S\u0131f\u0131r t\u0131klama sald\u0131r\u0131lar\u0131, her biri farkl\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 hedef alan \u00e7e\u015fitli stratejileri kapsar:<\/p>\n
A\u015fa\u011f\u0131daki tablo bu sald\u0131r\u0131 t\u00fcrlerini \u00f6zetlemektedir:<\/p>\n