{"id":22006,"date":"2019-12-16T08:44:08","date_gmt":"2019-12-16T08:44:08","guid":{"rendered":"http:\/\/dev.profelis.net\/?p=15531"},"modified":"2023-02-01T10:58:00","modified_gmt":"2023-02-01T07:58:00","slug":"ayricalikli-hesap-yonetimi-ile-riski-azaltan-ve-kullanimi-kolay-cozumler","status":"publish","type":"post","link":"https:\/\/profelis.com.tr\/en\/2019\/12\/16\/ayricalikli-hesap-yonetimi-ile-riski-azaltan-ve-kullanimi-kolay-cozumler\/","title":{"rendered":"Ayr\u0131cal\u0131kl\u0131 Hesap Y\u00f6netimi ile riski azaltan ve kullan\u0131m\u0131 kolay \u00e7\u00f6z\u00fcmler"},"content":{"rendered":"<h2 style=\"font-size: 31px; text-align: left;\">yr\u0131cal\u0131kl\u0131 Hesap Y\u00f6netimi ile riski azaltan ve kullan\u0131m\u0131 kolay \u00e7\u00f6z\u00fcmler<\/h2>\n<p class=\"p1\">G\u00fcvenlik ihlallerinin \u00f6nlenmesinde, ayr\u0131cal\u0131kl\u0131 hesap y\u00f6netiminin \u00f6nemli rol\u00fc bulunur. Bu nedenle bilgi g\u00fcvenli\u011fine \u00f6nem veren kurulu\u015flar, ayr\u0131cal\u0131kl\u0131 hesaplar\u0131n y\u00f6netimini zorlu tutarlar. Ayr\u0131ca izleme yap\u0131lamamas\u0131 durumunda, betik ve uygulamalardaki g\u00f6m\u00fcl\u00fc riskler, tedarik\u00e7iler\/geli\u015ftiriciler taraf\u0131ndan yap\u0131lan d\u0131\u015f ba\u011flant\u0131lar ve dahili tehditler ayr\u0131cal\u0131kl\u0131 hesaplar\u0131n y\u00f6netimindeki zorluklar\u0131 olu\u015fturur. \u0130hlallerin arkas\u0131nda genellikle organize su\u00e7 \u00f6rg\u00fctleri yer alsa da \u015firket i\u00e7i \u00e7al\u0131\u015fanlar, ihlallerde ikinci b\u00fcy\u00fck paya sahiptir. \u00c7al\u0131nm\u0131\u015f veya zay\u0131f parola sebebiyle ger\u00e7ekle\u015fen ihlaller, t\u00fcm ihlaller i\u00e7erisinde di\u011ferlerinden daha b\u00fcy\u00fck bir orana sahiptir. Ayr\u0131cal\u0131kl\u0131 hesap y\u00f6netimindeki zorluklar i\u00e7in \u00e7\u00f6z\u00fcm hi\u00e7 ku\u015fkusuz g\u00fcvenli ve etkin y\u00f6netimdir. \u0130hlalleri \u00f6nlemenin en iyi yolu, ayr\u0131cal\u0131kl\u0131 hesaplar\u0131n aktivitelerini izlemektir. \u0130stisnas\u0131z b\u00fct\u00fcn hesap aktivitelerinin kay\u0131t edilmesi, anl\u0131k olarak izlenmesi ve ilerleyen zamanlarda ihtiya\u00e7 duyuldu\u011funda aktivite kayd\u0131n\u0131n tekrar tekrar oynat\u0131labiliyor olmas\u0131 hesap y\u00f6netimindeki en \u00f6nemli bile\u015fendir. Kullan\u0131c\u0131 eylemlerinin anl\u0131k olarak takibiyle riskli davran\u0131\u015flar\u0131n tespit edilmesi sistem g\u00fcvenli\u011fi i\u00e7in \u00f6nemlidir. \u015e\u00fcpheli bir durumda i\u015flem durdur-ma, engelleme gibi m\u00fcdahaleleri an\u0131nda uygulayabilmek gerekir. One Identity Safeguard Privileged Access Management (Ayr\u0131cal\u0131kl\u0131 Eri\u015fim Y\u00f6netimi) \u00e7\u00f6z\u00fcmleri, ayr\u0131cal\u0131kl\u0131 hesap y\u00f6netiminde ihtiya\u00e7 duyulan g\u00fcvenli ve etkin kontrol kolayl\u0131\u011f\u0131 sunar.<\/p>\n<p style=\"font-size: 31px;\">Safeguard for Privileged Passwords (SPP)<\/p>\n<p class=\"p1\">SPP ile Windows\u00ae, Linux\u00ae, macOS\u00ae tabanl\u0131 sistemler ba\u015fta olmak \u00fczere veritaban\u0131 sunucular\u0131, a\u011f \u00fcr\u00fcnleri ve pop\u00fcler sosyal medya sitelerine eri\u015fim i\u00e7in parola y\u00f6netimi kolayl\u0131kla yap\u0131l\u0131r. Ayr\u0131cal\u0131kl\u0131 parola y\u00f6netimi i\u00e7in sunulan bu \u00e7\u00f6z\u00fcmde, kullan\u0131c\u0131n\u0131n eri\u015fim yetkisi oldu\u011fu sunucular i\u00e7in parola verilirken, kritik seviyede g\u00fcvenli\u011fe sahip sunucular i\u00e7in y\u00f6netici onay\u0131 ile parola verilmesi sa\u011flanabilir. Mobil eri\u015fime a\u00e7\u0131k olan bu sistem, y\u00f6neticilerin gelen parola taleplerini mobil cihaz \u00fczerinden de onaylamas\u0131na imkan tan\u0131r. Parolas\u0131 y\u00f6netilecek sistemler el ile eklenebildi\u011fi gibi, belirli bir IP adres aral\u0131\u011f\u0131n\u0131 tarayarak otomatik olarak da eklenebilir. Ayn\u0131 \u015fekilde kullan\u0131c\u0131 hesaplar\u0131 da otomatik olarak parola y\u00f6netimine dahil edilebilir.<\/p>\n<p style=\"font-size: 31px;\">Safeguard for Privileged Sessions (SPS)<\/p>\n<p class=\"p1\">SPS ile SSH, RDP, Telnet, HTTP(S), VNC, Citrix protokolleri \u00fczerinden ger\u00e7ekle\u015ftirilen ba\u011flant\u0131lar\u0131 <i>ajans\u0131z <\/i>olarak kaydetmeye ve y\u00f6netmeye olanak sa\u011flar. Uzaktan eri\u015fimlerde ba\u011flant\u0131 kanal kontrol\u00fc, belirli kimlik do\u011frulama metodlar\u0131n\u0131 zorlama, ek eri\u015fim kontrol\u00fc (gateway &amp; four-eyes) ve i\u00e7erik izleme politikalar\u0131 uygulanabilir. Ba\u011flant\u0131larda \u00e7al\u0131\u015ft\u0131r\u0131lan komutlara, ekran i\u00e7eri\u011fine, ekranda kredi kart\u0131 numaras\u0131na ve pencere ba\u015fl\u0131\u011f\u0131na g\u00f6re filtreleme yaparak an\u0131nda ba\u011flant\u0131y\u0131 durdurma, detayl\u0131 kay\u0131t etme, y\u00f6neticiye bildirimde bulunma gibi i\u015flemleri kolayl\u0131kla yapar.<\/p>\n<p style=\"font-size: 31px;\">Safeguard for Privileged Analytics (SPA)<\/p>\n<p class=\"p1\">SPA, ayr\u0131cal\u0131kl\u0131 kullan\u0131c\u0131lar\u0131n temel davran\u0131\u015f kal\u0131plar\u0131n\u0131 olu\u015fturmaya yard\u0131mc\u0131 bir \u00e7\u00f6z\u00fcmd\u00fcr. Bu teknoloji ile kullan\u0131c\u0131lar\u0131n dijital izlerini toplayarak ola\u011fan davran\u0131\u015flar ve riskli olaylar ger\u00e7ek zamanl\u0131 olarak tan\u0131mlan\u0131r. Kullan\u0131c\u0131lar\u0131n ola\u011fan dav-ran\u0131\u015flar\u0131; tipik giri\u015f zaman\u0131, eri\u015filen sunucular ve uygulamalar, klavye dinamikleri analizleri gibi olay kay\u0131t verilerine dayal\u0131 davran\u0131\u015f bilgisine ve ger\u00e7ekle\u015ftirilen etkinlik, karakteristik fare hareketleri gibi oturum verilerini i\u00e7eren davran\u0131\u015fsal bilgilere dayanarak tan\u0131mlanmaktad\u0131r. Kullan\u0131c\u0131n\u0131n ola\u011fan hareketleri d\u0131\u015f\u0131da bir i\u015flem ger\u00e7ekle\u015fti\u011finde \u00f6nceden belirlenmi\u015f i\u015flemlerden (ba\u011flant\u0131y\u0131 durdurma, y\u00f6neticiye bilgi g\u00f6nderme, vb.) biri uygulanmaktad\u0131r.<\/p>","protected":false},"excerpt":{"rendered":"<p>yr\u0131cal\u0131kl\u0131 Hesap Y\u00f6netimi ile riski azaltan ve kullan\u0131m\u0131 kolay \u00e7\u00f6z\u00fcmler G\u00fcvenlik ihlallerinin \u00f6nlenmesinde, ayr\u0131cal\u0131kl\u0131 hesap y\u00f6netiminin \u00f6nemli rol\u00fc bulunur. Bu nedenle bilgi g\u00fcvenli\u011fine \u00f6nem veren kurulu\u015flar, ayr\u0131cal\u0131kl\u0131 hesaplar\u0131n y\u00f6netimini zorlu tutarlar. Ayr\u0131ca izleme yap\u0131lamamas\u0131 durumunda, betik ve uygulamalardaki g\u00f6m\u00fcl\u00fc riskler,&#8230;<\/p>","protected":false},"author":9,"featured_media":14925,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[76,45],"tags":[61],"class_list":["post-22006","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","category-yazi","tag-linux"],"_links":{"self":[{"href":"https:\/\/profelis.com.tr\/en\/wp-json\/wp\/v2\/posts\/22006","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/profelis.com.tr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/profelis.com.tr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/profelis.com.tr\/en\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/profelis.com.tr\/en\/wp-json\/wp\/v2\/comments?post=22006"}],"version-history":[{"count":0,"href":"https:\/\/profelis.com.tr\/en\/wp-json\/wp\/v2\/posts\/22006\/revisions"}],"wp:attachment":[{"href":"https:\/\/profelis.com.tr\/en\/wp-json\/wp\/v2\/media?parent=22006"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/profelis.com.tr\/en\/wp-json\/wp\/v2\/categories?post=22006"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/profelis.com.tr\/en\/wp-json\/wp\/v2\/tags?post=22006"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}