F - G - H - I - K | Kalkınma Bankası

F

FIREWALL

In response to the escalating prevalence of cybercrimes, security systems such as firewalls—commonly referred to as "firewalls"—constitute a pivotal defensive barrier for computer networks. A comprehensive understanding of "What is a firewall?" enables organizations to employ a diverse array of operational capabilities, including both software- and hardware-based solutions. Firewalls function by monitoring incoming and outgoing network traffic on a device and thoroughly scanning for signs of malicious activity. Upon detecting any potentially harmful threats, a firewall promptly blocks such traffic from accessing its intended target. Not only computers but also web servers, mobile devices, and IoT devices can benefit from firewall protection. Therefore, a firewall is indispensable for any device that connects to the internet.

What Does Firewall Mean?

A firewall is a device or software that acts as a barrier against traffic originating from external sources such as the internet. Firewalls implemented across networks prevent cyber threats, such as unauthorized access to the network and its connected systems. Modern technology features analytical capabilities that can stop advanced cyberattacks, including malware, ransomware, and suspicious emails. The Wi-Fi router connecting a home network to the Internet Service Provider (ISP) provides baseline firewall protection. Determined attackers armed with next-generation ransomware can easily bypass firewalls that merely monitor ports and communication protocols. The optimal protection for networks consists of dedicated firewalls that deliver comprehensive safeguarding against all classes of attacks. These products, which can be deployed as software or hardware, monitor all communication ports for unauthorized entry attempts and keep user data secure.

What Features Should a Firewall Have for Maximum Protection?

The more advanced a firewall is, the more proficient it is at stopping emerging cyber threats. Next-generation firewall applications provide end-to-end comprehensive protection using critical tools such as ZBF, VPN, and IPS. Zone-Based Firewall (ZBF) enables the designation of zones that may require distinct traffic control policies for each segment of the network. Virtual Private Network (VPN) Management facilitates the seamless integration of remote, secure access to a private network over a public or shared network. The Intrusion Prevention System (IPS)—or Intrusion Detection System—is an integrated function that halts attacks by identifying known vulnerability exploitation profiles and stopping them before they happen. Application control functionality defines firewall policies based on web-based applications for social media and micro-applications. Web control functionality manages URL filtering, IP addresses, and domains, allowing policies to regulate access to services based on individual or group identity. Administrators can establish policies to permit or block access based on category or even reputation.

G

H

HACKING

Hacking has emerged as a widely recognized term with the increasing integration of technology into various aspects of daily life. It has the potential to expose individuals or organizations to significant challenges by compromising sensitive data or rendering systems nonfunctional. By understanding "What is hacking?", you can minimize the risk of being hacked.

What Does Hacking Mean?

In Turkish, hacking is translated as "computer piracy", a generic term for all methods used to exploit vulnerabilities in computer systems. Hacking can be executed through various techniques, and its underlying motivations vary significantly:

Accessing untrusted websites or utilizing unlicensed software can lead to the installation of integrated keyloggers. This enables attackers to monitor every character entered on your keyboard, facilitating the acquisition of passwords and unauthorized access to your computer systems or web properties.
Brute force attacks deploy specialized software to systematically guess user passwords. Common passwords such as "password" or "12345" are tested initially, followed by algorithmically generated iterations.
DDoS is an attack vector directed against websites, wherein bot users are routed through diverse IP addresses to flood the target server with sudden requests, ultimately causing the site to crash.
Phishing is a methodology designed to extract confidential information by deploying deceptive user interfaces. For instance, clicking a link delivered via social media or email redirects you to an interface mirroring a platform you routinely use; entering your credentials on this fraudulent page automatically compromises your information to the attacker.

How to Protect Against Hacking

Despite the deployment of a myriad of sophisticated hacking techniques, adherence to fundamental security protocols safeguards you against the majority of threats:

The most critical guideline to observe is to refrain from utilizing pirated or unauthorized software. Unlicensed programs downloaded from the internet frequently introduce malware onto your device.
Make sure that your passwords are as lengthy as possible and incorporate a combination of letters, numbers, and special characters. Avoid including personal identifiers such as your first name, surname, or date of birth.
Do not open emails or messages originating from unknown or unverified sources.
Maintain your websites exclusively with reputable hosting providers and verify the regular updating of all installed software.
Pay close attention to the permissions requested by applications and plugins during installation. Opt for secure alternatives rather than programs that require excessive access permissions and compromise your security.

HACKER

The rapid evolution of technology has led to a notable increase in the number of individuals seeking to exploit system vulnerabilities, thereby elevating cybersecurity to a paramount concern within the industry. However, the term "hacker" is often oversimplified, with a single perspective portraying hackers as malicious actors who breach security systems.

What Does Hacker Mean?

The term “hacker” is a generic name for individuals who gain unauthorized access to computer systems, known in Turkish as "bilgisayar korsanı" (computer pirate). However, not all hackers possess malicious intent; many apply their technical expertise for constructive purposes. Computer hackers specialize in identifying vulnerabilities within systems and exploiting these to gain access. They employ various methodologies to achieve this, with a primary focus on exploiting password weaknesses. Research indicates that nearly 40% of individuals worldwide use similar or weak passwords. Hackers may also leverage software vectors such as trojan horses, viruses, and worms. Malicious hackers frequently operate within the Dark Web, engaging in the theft of user credit card information for unauthorized transactions, compromise sensitive documents that violate personal privacy to carry out cyber extortion, orchestrating campaigns aimed at damaging institutional reputations, or selling classified state secrets to foreign entities. Historically, the hacker community has functioned as a distinct subculture, wherein knowledge is acquired primarily through experiential learning. In contrast, ethical hackers typically graduate from computer and software engineering programs in universities, cultivating their expertise within structured professional frameworks.

What Are the Types of Hackers?

It is misleading to assume that all hackers are exclusively malicious. Hackers can be classified into distinct categories based on metaphorical hat colors, playing a significant role in the evolution of technology:

Black-Hat Hackers aim to generate personal financial gain through hacking operations. They routinely compromise corporate networks and monetize stolen data for profit.
White-Hat Hackers, also known as ethical hackers, conduct their operations within legal frameworks, identifying system weaknesses to help organizations reinforce their security postures.
Grey-Hat Hackers are positioned between ethical and black-hat hackers. Grey-hat hackers infiltrate system infrastructure without authorization to uncover security flaws, then demand money in exchange for disclosing the details of the vulnerability.
Increasing in prevalence in recent years, hacktivists leverage hacking techniques to propagate social, political, or ideological worldviews to a broad audience, frequently seizing high-traffic web properties to broadcast their messages.

HACKERSPACE

A hackerspace, also referred to as a hacklab, incubator, or hackspace, is a versatile workspace designed for individuals who share common interests, typically centered around technology. This physical venue facilitates programmers, coders, developers, and anyone with similar interests gather, work, share skills, and engage in creative problem-solving. Understanding "What is a hackerspace?" and how it differs from other working groups can help you integrate into a community that aligns with your lifestyle.

What Does Hackerspace Mean?

Contrary to common misconceptions, a hackerspace is not a gaming arena, a casual social environment, or a collective of malicious computer pirates. The term "hack" in this context is not associated with negative implications; rather, it signifies invention, innovation, and experimentation. Most hackerspaces function as non-profit organizations. The movement originated in Germany in the 1990s, with C-base, a non-profit organization established to promote knowledge and skills related to computer software, hardware, and data networks. The proliferation of this movement to the United States and other countries was notably catalyzed by the presentation of the C-base hackspace at the Chaos Communication Camp—an international gathering of hackers held every four years by the Chaos Computer Club. In 2006, Paul Bohm established hackerspace.org, a wiki-based website that maintains a directory of hackerspaces and outlines guidelines for starting and operating one. Today, over 2,400 hackerspaces are operating across six continents.

How to Use a Hackerspace?

A hackerspace can be used to collaborate on a product or technology. Bringing their unique skill sets, each member of a hackerspace collaborate to advance a product or technology. For example, in a hackerspace dedicated to developing 3D printers, you may find specialists in 3D printing, electronics, computer programming, and 3D development. The terms hackerspace and makerspace are often used interchangeably. However, a makerspace is a collaborative workspace housed within a school, library, or separate public or private facility. The primary distinction between a makerspace and a hackerspace lies in their organizational structure. A makerspace typically operates as a component within a larger organization, while a hackerspace functions as an independent entity. Furthermore, makerspaces generally focus on creating tangible, physical objects, with members hailing from entirely distinct vocational fields, such as carpentry, metalworking, or textile technology. In contrast, hackerspaces concentrate more heavily on technological innovation and feature members such as web developers, coders, and programmers.

HACKTIVISM

Hacktivism is a term frequently encountered in the modern technological age, referring to the practice of conveying political and social messages through designated websites of institutions, governments, corporations, and individuals. This practice typically involves breaching the security protocols of the targeted sites, executed without the knowledge or consent of the site owners. Often classified as computer piracy, hacktivism typically distinguishes itself from black-hat hacking by engaging in these activities not to cause harm but to communicate a specific message. Nevertheless, it is important to recognize that depending on the nature of attacks, hacktivists may still cause significant losses.

What is Hacktivism?

Operating in a manner analogous to contemporary physical activists, hacktivists prefer the digital domain over physical protests to convey their messages to broad audiences. Often referred to as cyber-anarchists, these individuals advocate for the open dissemination of information regarding events that impact broad populations or society as a whole. However, such actions, executed under this rationale, can result in significant disruptions on a global scale, including slowdowns or complete outages of critical services, the unauthorized leakage of substantial amounts of personal user data, or extensive data loss. While hacktivists embrace the concept that advanced communication channels can mobilize large groups of individuals to address global issues, their activities are categorized as cybercrimes because they do not conform to the legal frameworks that govern physical activism.

What Are the Consequences of Hacktivism?

Hacktivists may employ a variety of methodologies and tools to effectively communicate their intended messages and carry out their actions. Globally prevalent attack vectors frequently include:

Doxing
DDoS Attacks
Data Breaches
Vandalism / Hijacking

These attack vectors can lead to severely detrimental outcomes for vulnerable computer systems lacking sufficient security measures, presenting significant challenges for both institutions and individuals, with complexity varying by scale and methodology. Therefore, implementing protective measures against such attacks is essential. Defense measures include the enforcement of stringent password and firewall criteria, as well as the avoidance of unlicensed software. For larger organizations, it is imperative to deploy more comprehensive safeguards to mitigate cyber threats and hazards, including those posed by hacktivism. This ensures effective security against cyberattacks and helps prevent disruptions to operational workflows within these entities.

HASH

A hash, often referred to as a "hash function," serves as a unique identifier for any fragment of content within cryptography. This function converts plaintext data of arbitrary length into a uniquely formatted ciphertext of fixed length. At its core, a hash function serves to verify that the recipient receives the transmitted data without corruption or alteration. Understanding the concept of "What is a hash?" enables a deeper comprehension of cryptographic systems.

What Does Hash Mean?

A hash function is a rigorous mathematical process that plays a critical role in public-key cryptography. Hash functions are prevalent in various digital environments, ranging from signing software applications on mobile devices to protecting website links used to transmit sensitive information online. One of the primary advantages of cryptographic hash functions is their ability to ensure data integrity. Currently, numerous websites allow users to store passwords, thereby eliminating the need to remember credentials for each login session. However, storing plaintext passwords on a public server poses significant security risks, making this information vulnerable to cybercriminals. As a result, websites use hashed passwords. Functioning as an encryption tool, hashing enables secure authentication and maintains data integrity across digital channels. Overall, this process assists users in several key areas:

Securely storing passwords within a database
Preserving data integrity (across diverse applications) by identifying when data has been modified
Enabling secure authentication
Organizing content and files to maximize operational efficiency

How Does a Hash Function Operate?

When a message is hashed, an arbitrary-length data sequence is transformed into a fixed-length output. In specific hashing methodologies, original input data is partitioned into smaller blocks of uniform size. If a given block lacks sufficient data to meet the standard dimension, padding (ones and zeros) is applied to fill the space. Subsequently, these individual data blocks are processed through a hashing algorithm, yielding a resulting hash value output. When storing passwords on an online server, a unique, randomized value is appended to the message before hashing. Introducing even a single character completely alters the final hash value. For instance, executing a short text excerpt through a 256-bit hash algorithm generates an output string resembling “48HCA16A3391B34044FAA46492D116B4D4F61F56352E1E1A01E3201B234509A2”.

HTTPS

Internet security is maintained through various protocols that classify websites as either secure or insecure. The question "What is HTTPS?" is critical for both users and website administrators. HTTPS (Hypertext Transfer Protocol Secure) is the secure version of HTTP (Hypertext Transfer Protocol). While HTTP is the protocol used to transfer data over the web via a client-server (web browser-web server) model, HTTPS encrypts all data transmitted between the browser and the server using an encryption protocol called Transport Layer Security (TLS), which succeeded the Secure Sockets Layer (SSL). This encryption renders data unreadable until decrypted by the site owner, allowing users to securely share sensitive data, such as passwords and personal information, over the internet or a network.

What Does HTTPS Mean?

HTTPS and HTTP are the same protocol. The core difference is that HTTPS incorporates an additional encryption layer (SSL/TLS). HTTP websites transition to HTTPS by obtaining an SSL certificate, sometimes referred to as a security or digital certificate. An SSL certificate is a small data file that protects the transfer of sensitive data between a web browser and a web server. It encrypts this information during transmission, rendering it unreadable. The certificate contains a public key that enables users to securely transmit sensitive data from their web browsers, while the site owner possesses a private key that decrypts this information upon its arrival at the server. This public-private key pairing ensures a secure connection.

How to Identify a Secure Site

Given that HTTPS is the safest method for protecting user-sensitive information, it is now the preferred protocol for all web activities. Advanced web functionality, user experience, and data security provide significant benefits to both users and site owners. Since most browsers support HTTPS connections, distinguishing between secure and insecure websites has become a straightforward process. The easiest way to determine whether a website uses HTTP or HTTPS is to inspect the browser's address bar: HTTP sites display http://, whereas HTTPS sites display https://. Furthermore, HTTPS websites feature a padlock icon on the left side of the address bar, indicating the presence of a valid security certificate. Clicking this icon opens further certificate details, including confirmation messages, the issuing organization, and the certificate's expiration date. Most leading browsers, such as Google Chrome, warn users when navigating to an HTTP page through a warning screen or pop-up message. It is important to note that website security checks are often integrated features, allowing users to verify a site’s security status using antivirus software.

IDENTITY THEFT

The widespread adoption of digital devices across various aspects of modern life has led to a significant rise in identity theft incidents. Criminals exploit stolen identities to perpetrate a range of offenses, rendering this issue an exceedingly pressing security concern. What, then, is identity theft, and how can one protect against it?

What Does Identity Theft Mean?

Identity theft denotes the unauthorized acquisition and use of personal data, encompassing a wide range of operational scope. Thieves may steal your identity details to open accounts and execute unauthorized purchases in your name. Furthermore, they may gain access to your bank accounts or medical history. The repercussions of identity theft can result in significant financial and psychological harm to victims, posing a considerable issue faced by millions of individuals worldwide every year.

Ways to Protect Against Identity Theft

Identity theft involves a wide variety of sophisticated methods. Familiarizing yourself with these vectors and implementing necessary precautions can prevent significant complications in the future:

• The most important factor that facilitates identity theft is the existence of a social media profile. Platforms that enable the easy execution of social engineering tactics allow malicious actors to gather extensive personal information. This intelligence can be utilized to guess account passwords and execute identity theft. Additionally, personal details such as your date and place of birth can be used to directly compromise bank accounts. If you are using social media, omitting your real name from your profile and restricting your account visibility exclusively to trusted personal connections helps safeguard your personal data. • You must bear in mind that individuals contacting you while posing as government officials to request personal information may be attempting identity theft. When confronted with such a scenario, request the caller's institutional affiliation and independently verify their identity by contacting the official organization at its verified telephone number. • Exercise vigilance when establishing account passwords. Avoid predictable, commonly used passwords and opt for randomized character strings devoid of easily searchable patterns. Furthermore, ensure you never reuse the same password across different accounts. • Strictly refrain from opening emails originating from unknown or unverified senders. Malware downloaded onto your device through malicious payloads significantly simplifies identity theft. • Identity thieves frequently spoof the websites of trusted institutions. When users navigate to these fraudulent pages and input their credentials, their information is automatically compromised. Therefore, ensure you access web portals by typing the official domain name directly into the browser rather than relying on search engine results. • Movie and music downloading sites, as well as platforms offering cracked or free versions of licensed software, frequently bundle malicious payloads designed to compromise your device. Consequently, you are strongly advised to use exclusively licensed software programs.

IP SPOOFING

What Does HTTPS Mean?

How to Identify a Secure Site

K

KVKK

The advancement of technology has significantly facilitated access to personal information. The unauthorized acquisition of such information by malicious actors, however, can lead to substantial complications. Therefore, individuals must understand the concept of "What is KVKK?" and protect their rights.

What Does KVKK Mean?

KVKK refers to the Law on the Protection of Personal Data, which was enacted to safeguard personal data as a part of personal rights. In recognition of existing gaps in this domain, the law was amended in 2010 and is protected under Article 20 of the Constitution, officially coming into effect in April 2016. The KVKK imposes specific regulations on the processing of personal information, prohibiting arbitrary data collection, unrestricted distribution, and unauthorized sharing with third parties. This framework aims to prevent infringements on personal rights and to establish oversight mechanisms.

What Is Personal Data?

All information belonging to identified or identifiable natural entities is categorized as personal data. This includes, but is not limited to, data that enables the identification of an individual, such as name and surname, date of birth, Turkish ID number, social security number, photographs, and audio recordings, with specific evaluations made based on the circumstances of concrete events. The Personal Data Protection Law has introduced the concept of the explicit consent text. This text demonstrates that individuals authorize the processing of their personal information and define the parameters of that processing. For permission to process information to be deemed valid, it must be granted voluntarily. In accordance with the provisions of the KVKK, explicit consent may be obtained in a verbal format rather than solely in written form. However, the burden of proof rests entirely with the institution engaged in data processing. Institutions that fail to secure explicit consent for the processing of personal data may incur various legal penalties.

Who Does the Personal Data Protection Law Cover?

The Personal Data Protection Law applies to both natural persons and legal entities without exception. The law must be enforced across all private institutions and public organizations. Any individual with legal capacity falls within the scope of this law.

Exceptions to KVKK are categorized into two distinct types: full exceptions and partial exceptions. Full exceptions allow for the processing of data, contingent upon its anonymization, for purposes such as statistical analysis in family planning, as well as for scientific and artistic endeavors. Furthermore, these exceptions also apply to investigations and prosecutions necessary for judicial proceedings. Partial exceptions apply to instances where individuals voluntarily disclose their own information, the prevention of criminal activities, and the safeguarding of economic interests.