Proceedings/Bildiriler Kitabı. Cain & Abel September /Eylül 2013 Ankara / TURKEY 6. ULUSLARARASI

Transkript

1 Yerel 1 2 Abstract The increase of the quantity and the value of the information committed via the internet, establishing a connection with the whole world in a very short period of time has attracted the attention of criminals and directed them to the internet. The criminals adapting to this new world quickly developed themselves in the field of technology rapidly, and began to commit crimes, which are normally too difficult to commit in normal ways, through the internet easily. These crimes called as cyber-crimes are intruding or attacking to a system or any informatic device by the person or persons in virtual platform. In this paper study is presented a sample attack was carried out on the local area network. Then the attacker was detected through IP. Index Terms - Intrusion Detection Systems, Computer Network Security, Cyber Crime, Information Security. Özet- k Bu makale yerel alan bir Anahtar Kelimeler -,. I. Teknoloji - kurulan bu sistemlerin, ndan ]-[3] ; zekeriyagunduz@gmail.com ) 2 ( resuldas@gmail.com), hlike, Bu maka ARP Poisoning (ARP zehirlemesi) espit edilen ve belirtilen. II. in genellikle bu, sistemdeki eksiklikl, ya da veri Bilgi ra bile sistemde de 6]. Cain & Abel ve Brute Force (kaba kuvvet) ve Cryptanalysis. ARP Poisoning September /Eylül 2013 Ankara / TURKEY

2 e bile ARP Poisoning [7]. Kurban Switch Hedef Wireshark protokol incelenen, Ethereal [8]. S s (Smurf sal, Ping Flood s, SYN Flood s gibi), Spoofing s (ICQ Spoofing, DNS Spoofing, IP Spoofing, Spoofing gibi) b QL Injection, Sniffing, ARP Poisoning, DNS Poisoning ve DNS Cache Poisoning olarak nternet gibi zordur. Ancak yerel a ve kolay bir yerel ARP Poisoning 1 Poisoning, IP adresini ve MAC adresini gateway gibi broadcast,, takip edebilir [6]. Kurban al r an Switch al r an 1. ARP poisoning [6] Hedef III. YEREL ALAN IN UYGULAMASI kadar kolay olan bu bile Microsoft Cain & Able ARP Poisoning Wireshark Poisoning, 2 ve September /Eylül 2013 Ankara / TURKEY 305

3 as A. Poisoning IP nu ARP Poisoning ARP Poisoning temelli Uygulamada ve elde edilmes 1) 2) 3) durumlar. 4) 3 de nlar; 1. s 2. s 3. s password 4. s 3, ele Bu da, ortadaki adam (Man in the Middle) Poisoning tespit n alt nin. 4. Wireshark ile s IP adresinin tespiti 5 n - AFIFE-PC September /Eylül 2013 Ankara / TURKEY

4 6 s 5. tespiti, ni bilm 1) yerel alan olunarak istenilen 2) HTTPS zordur. 3) 4) edilmesi 5) Cain & Able 6) 7) 7 e https. 7. HTTPS p IV., al gelebilir. lerinde var olan server, switch, hub gibi ve verilen September /Eylül 2013 Ankara / TURKEY 307

5 belirtilebilir: 1) analiz belirlenmelidir. 2) 3) 4) wireshark gibi. 5) 6) og ana 7) IDS/IPS gibi 8) takip edilmelidir. 9) a 10) 11) yetkilendirmelerine dikkat edilmelidir. 12) Router ve firewall gibi a cihazlar - 13) Sunucu, router, firewall, switch gibi verilmemelidir. 14) IP temelli 15) otokolleri son kkat etmelidir: 1) dikkatli 2) 3) 4) dosyalar indirilmemelidir. 5) 6) geleb 7) hissetmemelidir. 8) 9) ndeki larda [10]. 10), 11) 12) 13) dosya indirme 14) olan ortamlarda internet -ticaret 15) 16) -posta eklentileri okunmadan ve uygulamalar sonucunda d gerekmektedir [11]. B bilgilerden ziyade fikirler KAYNAKLAR [1] Sempozyumu, Ankara, [2] Canbek, G., [3] Conference on Information Security and Cryptology), 17- a. [4] [5] [6] [7] Internet: September /Eylül 2013 Ankara / TURKEY

6 [8] Internet: [9] [10], A., Karacan, H., ri Information Security and Cryptology), 17- Ankara. [11], Symposium on Digital Forensics Sempozyumu), 20- Turkey. M. Zekeriya GÜNDÜZ, Elektronik ve - i - Enformatik b September /Eylül 2013 Ankara / TURKEY 309