Bulut Bilişim Kapsamında Ortaya ÇıNabileceN Hukukî Sorunlar

6th INTERNATIONAL
INFORMATION SECURITY & CRYPTOLOGY
CONFERENCE
6. ULUSLARARASI
%é/*é*µ9(1/éçéYH.5é372/2-é
.21)(5$16,
%XOXW%LOLúLP .DSVDPÕQGD2UWD\DdÕNDELOHFHN
Hukukî Sorunlar
00UVHO%DúJO, Oumout Chouseinoglou
g]HW²%XOXW %LOLúLP %% VD÷ODGÕ÷Õ KL]PHWOHU LOH LúOHWPH ve
ELUH\OHULQLú\DSPDYHELOJLSD\ODúPD modeline yeni bir boyut
getirmektedir%%¶LQVD÷ODGÕ÷Õfayda YHIÕUVDWODUGDQGROD\ÕEX
WHNQRORML\H JHoLú NDoÕQÕOPD]GÕU. Fakat bu JHoLú, BB hizmet
VD÷OD\ÕFÕODUÕ YH NXOODQÕFÕODU \|QQGHQ o|]POHQPHVL JHUHNHQ
oRN FLGGL VRUXQODUÕ GD EHUDEHULQGH JHWLUPHNWHGLU %unlar
DUDVÕQGD %%¶LQKXNXNv boyutu ve RUWD\DoÕNDQ YHoÕNDELOHFHN
KXNXNv VRUXQODU JHOPHNWHGLU Bu bildiriGH |QFHOLNOH BB
V|]OHúPHOHULQLQ \DSÕOPDVÕ DúDPDVÕQGD NDUúÕODúÕODQ KXNXNv
VRUXQODU HOH DOÕQPDNWDGÕU Daha sonra ise, %%V|]OHúPHOHULQLQ
hukukv QLWHOL÷L YH X\JXODQPDVÕ DúDPDVÕQGD RUWD\D oÕNDQ
hukukv VRUXnlar incelenmektedir. S|]OHúPHQLQ VRQD HUPHVL
DúDPDVÕQGD YHULOHULQ JHUL YHrilmesi ile ilgili ihtimaller ve BB
V|]OHúPHOHULQH KDQJL KXNXNXQ X\JXODQDFD÷Õ NRQXODUÕ ise son
E|OPGHWDUWÕúÕOPDNWDGÕU.
Anahtar Kelimeler² %XOXW ELOLúLP KXNXNX %XOXW ELOLúLP
V|]OHúPHOHUL %XOXW ELOLúLP JHQHO LúOHP NRúXOODUÕ, Yasal
G]HQOHPHLKWL\DoODUÕ
Abstract² Cloud Computing (CC) with the services that it
offers brings a new dimension to the business conducting and
information sharing model of businesses and individuals.
Considering the advantages and opportunities that CC
provides the transition to this technology is inevitable.
However, this transition, with respect to CC service providers
and users, brings many important complications that need to
be resolved. Among these, the legal dimension of CC and the
legal problems that exist and may arise in CC can be listed.
This paper firstly addresses the legal issues that are
encountered while forming CC contracts, followed by the legal
character of CC contracts and the legal issues that arise during
their execution. The paper concludes with discussions on the
possibilities regarding the return of data at the termination of
CC contracts and the conflict of laws.
Index Terms² Cloud computing law, Cloud computing
contracts, Standardized terms of contract in cloud computing
I. Gø5øù
ULUT ELOLúLP %% RUWD\D \HQL oÕNPDNWD RODQ ELU
WHNQRORML RODUDN úLUNHWOHULQ YH ELUH\OHULQ Lú \DSPDVÕQD,
kaynak ve sermayelHULQLQ NRUXQPDVÕ YH VDNODQPDVÕ
DODQODUÕQD yeni boyutlar getirmekte olup, GQ\D oDSÕQGD
ticareti ve ticarî LúOHWPHOHUL tekraUúHNLOOHndirecek DUDoODUGDQ
ELUL ROGX÷X LGGLD HGLOPHNWHGLU [1]. BB hizmetini sunan ve
DODQNXUXOXúODUÕQ|OoHNHNRQRPLOHULQGHQID\GDODQPDVÕYH bu
sayede úLUNHWOHULQ WHPHO \HWNLQOLNOHULQH RGDNODQPDODUÕQÕ
VD÷ODPDVÕQGDQ GROD\Õ, \DNÕQ JHOHFHNWH NXUXOXúODUÕQ bü\N
oranda %%¶H JHoLú \DSDFD÷Õ |QJ|UOPHNWHGLU [2]. Fakat bu
B
00 %DúJO%DúNHQW hQLYHUVLWHVL+XNXN )DNOWHVL $QNDUD 7UNL\H
(tel: +90 312 246 66 66; e-posta: [email protected]).
2 &KRXVHLQRJORX %DúNHQW hQLYHUVLWHVL øVWDWLVWLN YH %LOJLVD\DU
%LOLPOHUL%|OP$QNDUD7UNL\HH-posta: [email protected]).
Proceedings/Bildiriler Kitabı
210
\HQL \DSÕ YH KL]PHW DQOD\ÕúÕQD JHoLú, VWQGH GúQOPHVL
YH o|]POHQPHVL JHUHNHQ ELUoRN NRQXyu beraberinde
getirmektedir. Bunlardan bir tanesi de BB¶LQ KXNXNv
boyutudur.
BB¶LQNDEXOJ|UPHNWHROan JHQHOKL]PHW\DSÕVÕNDWPDQOÕ
ELU PLPDUL ROXS EX NDWPDQODUÕQÕQ WDPDPÕ hizmet olarak
NDEXO HGLOPHNWHGLU ;DD6 YH VÕUDVÕ LOH Hizmet olarak
<D]ÕOÕPODU6DDV+L]PHWRODUDk Platform (PaaS) ve Hizmet
RODUDN $OW\DSÕ ,DD6 úHNOLQGH VÕUDODQPDNWDGÕUODU [3, 4, 5].
,DD6 WP EXOXW KL]PHWOHULQLQ temeli olup, PaaS onun, SaaS
de 3DD6¶ÕQ VWQH NXUXOXGXU [4]. SaaS birden fazla
PúWHUL\H D\QÕ DQGD GHVWHN YHUHELOHFHN úHNLOGH RUWDN
kaynaklar, \D]ÕOÕPODUÕQ YH DOWWD \DWDQ YHULWDEDQÕQÕQ bir
JHUoHNOHúLPLQLQ oDOÕúPDVÕ úHNOLQGH WDQÕPODQPDNWDGÕU. PaaS
KL]PHW \DSÕVÕ ile, %% KL]PHW VXQXFXODUÕ uygulama
JHOLúWLULFLOHUH JHOLúWLUPH VUHFLQLQ \DúDP G|QJV
sistemlerini YH RUWDPODUÕQÕ JHOLúWLUPH WHVW HWPH kurulum,
vb. VXQPDNWDGÕU IaaS KL]PHW \DSÕVÕ, NXOODQÕFÕODUÕQ
NXOODQGÕNoD |GedL÷L ELU |GHPH úHNOL VXQPDNWD ROXS, hizmet
alan LúOHWPHOHULQ kendi bilgi teknolojileri sistemlerini
NXUPDN YH EDNÕPÕQÕ \DSPDN LoLQ \DWÕUÕP \DSPD LKWL\DFÕQÕ
RUWDGDQ NDOGÕUPDNWDGÕU %|\OHOLNOH KL]PHW DOÕPÕQÕQ
EDúODPDVÕQGDQ VRQUDNL teknolojiN JHOLúPHOHULQ Ge
NXOODQÕODbilmesi VD÷ODQPDNWDGÕU
%% KL]PHWOHUL YH KL]PHW \DSÕODUÕ G|UW IDUNOÕ kurulum ve
GD÷ÕWÕP PRGHOL LOH sunulPDNWDGÕU [5]. Sadece bir
RUJDQL]DV\RQLoLQLúOHWLOLSELUNXUXOXú\DGDELUoQFúDKÕV
WDUDIÕQGDQ \|QHWLOPHNWH RODQ g]HO BB, DOW\DSÕQÕQ ELUoRN
RUJDQL]DV\RQ WDUDIÕQGDQ SD\ODúÕOGÕ÷Õ YH JYHQOLN
JHUHNVLQLPOHUL NXUDOODU KHGHIOHU YE RUWDN HQGLúHOHULQ |]HO
bir toplXOXN WDUDIÕQGDQ GHVWHNOHQGL÷L Topluluk BB, NLúLOHU
veya LúOHWPHOHUH DoÕN ROXS ELU NXUXP WDUDIÕQGan hizmet
WLFDUHWL\DSÕOPDNWDRODQHalk BB, ve \XNDUÕGDEDKVHGLOPHNWH
RODQ LNL YH\D GDKD ID]OD GD÷ÕWÕP DOW \DSÕVÕQÕQ EHUDEHU
NXOODQÕOPDVÕúHNOLQGHWDQÕPODQDQMelez BB.
5LPDO YG¶QLQ [4] WDQÕPODGÕ÷Õ ]HUH %%¶GH mimari
gereksinimler temel olarak; %% VD÷OD\ÕFÕODUÕ %% hizmeti
alan LúOHWPHOHU ve BB NXOODQÕFÕODUÕ úHNOLQGH oH
D\UÕOPDNWDGÕU +L]PHW VD÷OD\ÕFÕ DoÕVÕQGDQ VDQDOODúWÕUÕOPÕú
ve dinamik hizmetler sunabilmHNLoLQ, DOW\DSÕve hizmetleri
destekleyecek nitelikte VW VHYL\HGH HWNLQ ELU KL]PHW
DOW\DSÕVÕQD LKWL\Do GX\XOPDNWDGÕU %% KL]PHWL DODQ
LúOHWPHOHU EHGHOLQL |GHGLNOHUL hizmetleri; hizmet kalitesi,
KL]PHWVHYL\HOHULPDKUHPL\HWX\XPOXOXNODUYHULPONL\HWL
YH YHUL PRELOLWHVL JLEL NRQXODUOD GH÷HUOHQGLUPHNWHGLUOHU
.XOODQÕFÕ JHUHNVLQLPOHUL, EDúDUÕOÕELU BB EHQLPVHQPHVLLoLQ
|QHPOL EDúND ELU |QNRúXOdur. $\UÕFD %%¶LQ JYHQ-temelli
ROPDVÕzorunlu ELU|]HOOLNRODUDNWDQÕPODQPDNWDGÕU hoQF
NLúLOHU veya kurumlaUWDUDIÕQGDQ\|QHWLOHQYHFR÷UDILRODUDN
uzak VXQXFXODUGD EXOXQDQ ELOLúLP VLVWHPOHULQH, oR÷XQOXNOD
úLUNHW PúWHUL YH oDOÕúDQ YHULOHULQGHn Lú LOH LOJLOL bil-
20-21 September /Eylül 2013 | Ankara / TURKEY
6th INTERNATIONAL
INFORMATION SECURITY & CRYPTOLOGY
CONFERENCE
yaplardan ve fiNUv PONL\HW KDNODUÕQGDQ ROXúDQ bilgi
\Õ÷ÕQODUÕQÕ emanet etmek, EXQODU ]HULQGH PHQIDDWOHUL
EXOXQDQODU \|QQGHQ GH÷LúLN ER\XWODUGD ND\JÕODUÕQ RUWD\D
oÕNPDVÕQD QHGHQROPDNWDGÕU [4]. Bundan GROD\ÕSaaS, PaaS
ve IaaS hizmet \DSÕODUÕ IDUNOÕnitelikte JYHQOLN|QOHPOHULQH
ihtiyaç duyPDNWDGÕUODU
%%¶QLQ KXNXNL ER\XWX LOH LOJLOL \D\ÕQODU VÕQÕUOÕ VD\ÕGD
olup, bu konuda mevcut olan D]VD\ÕGDNL DUDúWÕUPDODUNRQX
KDNNÕQGD GDKD ID]OD oDOÕúPD \DSÕOPDVÕ JHUHNWL÷LQL DoÕNoD
ortaya koymaNWDGÕU6XEDVKLQLYH.DYLWKD [6], SaaS hizmet
\DSÕVÕQGD ROXúDELOHFHN YHUL LKODOOHUL YH X\JXODPD
SUREOHPOHULQLQ \RO DoDELOHFH÷L KXNXNL VRUXQODUGDQ \DVDO
EHOLUVL]OLNOHULQ KL]PHW VD÷OD\ÕFÕODUÕQ KL]PHW DOÕFÕODUD
VD÷ODGÕ÷Õ JYHQOLN ER\XWXQXQ YH úHNOLQLQ WDP
anODúÕODPDGÕ÷ÕQGDQ EDKVHWPHNWHGLUOHU Kerr ve Teng [7]
ABD YH$YUXSD%LUOL÷Lhukukunu temel alarak, |]HOKXNXN
hükümleri NDSVDPÕQGD, %% V|]OHúPHOHULQH X\JXODQDELOHFHN
V|]OHúPHGHQ GR÷DQ VRUXPOXOXN YH KDNODUÕ NÕVDFD
incelemekte, hizmet seviyesi anODúPDODUÕQGD DoÕN ROPD\DQ
hukukî ve ahlakî NRQXODUD GH÷LQPHNWHGLUOHU dDOÕúPDODUÕQÕQ
VRQXFX RODUDN V|]OHúPH YH KL]PHW VHYL\HVL DQODúPDODUÕQÕQ
WHNWLSROPDPDVÕQGDQGROD\Õ%%KL]PHWLDODQODUÕQV|]OHúPH
\NPOON ]LQFLULQGH %% KL]PHW VD÷OD\ÕFÕODUÕQÕQ YH GL÷HU
WHGDULNoLOHULQ QH NDGDU VRUXPOXOXN VWOHQGLNOHUL
GR÷UXOWXVXQGD ULVNH PDUX] NDOGÕNODUÕQÕ EHOLUWPHNWHGLUOHU
Yazarlara [7] J|UH %% KL]PHW VD÷OD\ÕFÕODUÕ V|]OHúPH YH
KL]PHW VHYL\HVL DQODúPDODUÕQGD VWQ NRQXPGD ROGXNODUÕ
LoLQ E\N LúOHWPHOHU JLEL SD]DUOÕN JF ROPDyan
.2%ø¶OHULQ \DSÕODFDN V|]OHúPHOHUGH GH]DYDQWDMOÕ NRQXPGD
olDFDNODUÕQÕ LGGLD HWPHNWHGLUOHU øVYLoUH 0KHQGLVOLN
%LOLPOHUL $NDGHPLVL WDUDIÕQGDQ \D\ÕQODQPÕú RODQ tarihli raporda [8] øVYLoUH NDQXQODUÕ oHUoHYHVLQGH %%
incelenmekte, B% V|]OHúPHOHUL LOH ilgili hukukî NRQXODUÕQ
VLVWHPDWLNELUúHNLOGHKL]PHW\DSÕVÕQDGD÷ÕWÕPPRGHOLQHYH
HPDQHW HGLOPLú ELOJLQLQ QLWHOLNOHUL JLEL QRNWDODUD RGDNODQDn
|]HOOHúWLULOPLú ELU EDNÕú DoÕVÕ LOH HOH DOÕQPDVÕ JHUHNWL÷L
belirtilmektedir. Yazarlar [8] \DSÕODQ V|]OHúPHOHULn
“P]DNHUH\HNDSDOÕ\Õ÷ÕQVWDQGDUWúDUWODU´ROGX÷XQXDQFDN
EHOOLELULúOHP KDFPLQLQ VWQGHRODQ V|]OHúPHOHUGHKL]PHW
DODQODUÕQ |]HOOHúWLULOPLú maddeler isteyebildiklerinden
EDKVHGLS \DVDO G]HQOHPHOHULQ %% KL]PHW DOÕFÕODUÕQÕ
NRUX\DFDNQLWHOLNWHROPDVÕJHUHNWL÷LQHGH÷LQPHNWHdirler. Bu
oDOÕúPDODU KDULFLQGH $YXVWUDO\D KNPHWL %LOJL <|QHWLP
2ILVL¶QLQ \ÕOÕQGD \D\ÕPODPÕú ROGX÷X UDSRUGD [9], BB
LOHLOJLOLKXNXNLNRQXODUELOJLQLQVDNODQPDVÕYHPDKUHPL\HWL
\DVDO \NPOONOHU SHUIRUPDQV \|QHWLPL V|]OHúPenin
VRQODQGÕUÕOPDVÕ YH LKWLODI o|]POHPH DQD EDúOÕNODUÕ DOWÕQGD
LQFHOHQPHNWHWDUDIODUDUDVÕQGD\DSÕODFDNRODQV|]OHúPHOHULQ
|QHPLQH|]HOOLNOHGH÷LQLOPHNWHGLU
%X oDOÕúPDGD KL]PHW VD÷OD\ÕFÕODU LOH NXOODQÕFÕODU
DUDVÕQGDNL
KXNXNv
LOLúNL
NRQXODUÕQD
J|UH
de÷HUOHQGLULOmektedir%X\DNODúÕPGDIDDOL\HWLQNDSVDPÕQÕQ
oR÷XQOXNODELUONHLOHVÕQÕUOÕROPDPDVÕGDKDGR÷UXELULIDGH
LOH IDDOL\HW DODQÕ VÕQÕUODUÕQÕQ FR÷UDIL \|QGHQ WDP RODUDN
WDQÕPODQDPDPDVÕ HWNLOL ROPXúWXU %X GXUXPGD WDUDIODU
DUDVÕQGDNL V|]OHúPH\H X\gulanacak hukukun belirlenmesi
|QHP WDúÕPDNWDGÕU gWH \DQGDQ WDUDIODU DUDVÕQGDNL
V|]OHúPHQLQKXNXNvQLWHOL÷LQLQEHOLUOHQPHVLNODVLNV|]OHúPH
WLSOHULQLQ XQVXUODUÕQD WDP RODUDN X\PDGÕ÷Õ LoLQ VRUXQ
yaratabilmektedir. )DUNOÕ BB hizmet \DSÕODUÕ J|] |QQGH
tutXOGX÷XQGD LVH ELUGHQ oRN V|]OHúPHQLQ YH\D ELUGHQ oRN
20-21 September /Eylül 2013 | Ankara / TURKEY
6. ULUSLARARASI
%é/*é*µ9(1/éçéYH.5é372/2-é
.21)(5$16,
V|]OHúPH WLSLQHDLW|]HOOLNOHULQWDUDIODUDUDVÕQGDYDUROGX÷X
J|]OHPOHQPHNWHGLU
%% LOLúNLVL WDUDIODU DUDVÕQGD \DSÕODQ ELU V|]OHúPH\H
GD\DQÕU +HU V|]OHúPHGH ROGX÷X JLEL %% V|]OHúPHOHUL GH
geçerlilik úDUWODUÕ yerine getirilerek NXUXOPDOÕGÕU %% \DSÕVÕ
JHUH÷L EHOLUOL ELU VUH LoLQ YDUOÕ÷ÕQÕ VUGUU YH genellikle
VUHNOL ERUo LOLúNLVL QLWHOL÷LQGHGLU %X \]GHQ WDUDIODUÕQ
V|]OHúPHGHQ ND\QDNODQDQ VRPXW ERUoODUÕ GÕúÕQGD KXNXN
DQODPÕQGD ³L\LQL\HWOL´ olmalDUÕ GUVWON NXUDOÕQD X\JXQ
GDYUDQPDODUÕ \DVDO ELU \NPOONWU bu yükümlülük
|]HOOLNOH V|]OHúPH LOH DoÕNoD Gzenlenmeyen konularda
|QHP WDúÕPDNWDGÕU <LQH V|]OHúPHQLQ VRQD HUPHVLQGH
WDUDIODUÕQ GXUXPX, |]HOOLNOH saklanan verilerin iadesi
borcunda oldX÷X JLEL PDGGL PDOODUGDQ WDPDPHQ IDUNOÕ ELU
\DSÕ J|VWHUPHNWHGLU 7HPPX] WDULKLQGH \UUO÷H
JLUHQ 7UN %RUoODU .DQXQX (TBK) [10] YH 7UN 7LFDUHW
Kanunu (TTK) [11]%%V|]OHúPHOHULQHGHX\JXODQDELOHFHN
|QHPOLNXUDOODUD\HUYHUPLúWLU
Bildirinin ikLQFL E|OPQGH %% V|]OHúPHOHULQLQ
\DSÕOPDVÕ DúDPDVÕQGD NDUúÕODúÕODQ KXNXNv sorunlar ele
DOÕQPDNWD YH WHPHO |]HOOLNOHUL LOH LQFHOHQPHNWHGLU hoQF
b|OPGH%%V|]OHúPHOHULQLQKXNXNv QLWHOL÷LYHX\JXODQPDVÕ
DúDPDVÕQGD RUWD\D oÕNDQ KXNXNv VRUXQODUD G|UGQF
E|OPGH LVH V|]OHúPHQLQ VRQD HUPHVL DúDPDVÕQGDNL
VRUXQODUD GH÷LQLOPHNWHGLU %HúLQFL E|OPGH %%
V|]OHúPHOHULQH KDQJL KXNXNXQ X\JXODQDFD÷Õ NRQXVX
WDUWÕúÕOPDNWDGÕU. 6RQ E|OPGH oDOÕúPDGD YDUÕOPÕú RODQ
VRQXoODUELUEWQRODUDNGH÷HUOHQGLULOPHNWHGLU
II. BB Sg=/(ù0(6ø1ø1YAPILMASI Aù$0$6,1'$.øH8.8.ø
SORUNLAR
6|]OHúPH|]JUO÷LONHVLX\DUÕQFDs|]OHúPHQLQLoHUL÷LQL
ve VUHVLQL WDUDIODU istedikleri gibi belirleyebilirler. ùHNLO
\|QQGHQ LVH DQFDN .DQXQGD |QJ|UOHQ úHNOH
uyXOPDPDVÕQÕQ \DSWÕUÕPÕ ³NHVLQ KNPV]ON”tür
(TBK.m.12) [10]. %% V|]OHúPHVL LVH NDQXQOD |]HO RODUDN
G]HQOHQPHPLúWLU WHNQRORMLN RODUDN ³katmanODUGDQ ROXúDQ
ELU KL]PHW \DSÕVÕ´ |]HOOL÷L J|VWHUPHVLQH NDUúÕOÕN VDOW
³KL]PHW V|]OHúPHVL´ RODUDN GD QLWHOHQGLULOHPH] %LUGHQ oRN
V|]OHúPHQLQ XQVXUODUÕQÕ WDúÕ\DQ NHQGLQH |]J \DSÕVÕ RODQ
ELU KXNXNv LOLúNL ROGX÷X LIDGH HGLOHELOLU <D]ÕOÕ RODUDN
\DSÕODQ V|]OHúPHGH LP]D |QFHOLNOH HO \D]ÕVÕ LOH DWÕODQ
LP]DGÕU \DQL ÕVODN LP]DGÕU gWH \DQGDQ “gYHQOL
elektronik imza”HO\D]ÕVÕLOHDWÕOPÕúLP]DQÕQEWQ hukukî
VRQXoODUÕQÕ GR÷XUXU 7%..m.15) [10] (ø. [12]. Bir
V|]OHúPHQLQ JHoHUOLRODUDN NXUXOPDVÕ \DQÕQGDV|]OHúPHGHQ
ND\QDNODQDQELUKDNNÕQLVSDWHGLOPHVLGHE\N|QHPWDúÕU
%X\]GHQ\DVDO]RUXQOXOXNROPDVDELOH%%V|]OHúPHVLQLQ
\D]ÕOÕ RODUDN \DSÕOPDVÕ EDVLUHWOL ELU GDYUDQÕúWÕU YH
NDQDDWLPL]FH |]HQ \NPOO÷QQ \HULQH JHWLULOPLú
VD\ÕODELOPHVL DoÕVÕQGDQ |QHPOLGLU [13] 6|]OHúPHQLQ \D]ÕOÕ
RODUDN \DSÕOPDVÕ úDUWÕyla V|]OHúPH LOH LOJLOL EHOJHOHU
elektronik ortamda saklanabilir. Elektronik ortamdaki
veriler Hukuk Muhakemeleri Kanunu (HMK) DQODPÕQGD
“Belge”dir. +HU EHOJH ³VHQHW´ QLWHOL÷LQGH ROPDPDNOD
ELUOLNWH KDNODUÕQ LVSDWÕ \|QQGHQ |QHP WDúÕPDNWDGÕU [13,
14].
$QFDN |]HOOLNOH %% V|]OHúPHOHULQGH EDúODQJÕoWDNL
oHUoHYH DQODúPD GÕúÕQGD NDODQ oRN VD\ÕGD V|]OHúPenin
HOHNWURQLN RUWDPGD VDGHFH ³NDEXO HW accept´ WXúXQD
WÕNOD\DUDN \DSÕOGÕ÷Õ ELU JHUoHNWLU øúWH EX QRNWDGD \HQL
211
Proceedings/Bildiriler Kitabı
6th INTERNATIONAL
INFORMATION SECURITY & CRYPTOLOGY
CONFERENCE
\DVDODUDoÕVÕQGDQLNLWHPHOVRUXQRUWD\DoÕNPDNWDGÕU
a) dR÷XQOXNOD KL]PHW VD÷OD\ÕFÕQÕQ |QFHGHQ KD]ÕUODGÕ÷Õ
WÕNODPD DúDPDVÕQGD ILLOHQ RNXQXS DQODúÕOPD LPNkQÕ
EXOXQPD\DQPHWLQOHUoHUoHYHV|]OHúPHQLQELUSDUoDVÕQÕ
ROXúWXUXUODUPÕ"
b) øONVRUX\D³eYHW´ GHQHELOLUVHEXPHWLQOHUGH\D]DQúDUWODU
NDUúÕOÕNOÕ RODUDN J|UúOS NDEXO HGLOPHGHQ PXWODN
RODUDNNXOODQÕFÕODUÕED÷ODUPÕ"
<HQL NDQXQODUGD ³JHQHO LúOHP NRúXOODUÕ´ olarak
QLWHOHQGLULOHQ V|]OHúPH KNPOHUL LOH LOJLOL RODUDN |]HO
GHQHWLP NXUDOODUÕ JHWLULOPLúWLU [15, 16, 17]. Denetim
V]JHFLQGHQ JHoHPH\HQ KNPOHU ³\D]ÕOPDPÕú´ VD\ÕOÕU
(TBK.m.21) [10] %% V|]OHúmesinLQ QLWHOL÷LQH \DEDQFÕ
úDUWODUD D\QÕ \DSWÕUÕP X\JXODQÕU $\UÕFD EX WU V|]OHúPH
úDUWODUÕ, G]HQOH\HQLQ KL]PHW VD÷OD\ÕFÕQÕQ DOH\KLQH
NXOODQÕFÕODUÕQOHKLQH\RUXPODQÕU7UNKXNXNX\|QQGHQEX
kurDOODUÕQ KHU LNL WDUDIÕ WDFLU RODQ V|]OHúPHOHUde de
X\JXODQDFD÷Õ NDEXO edilmektedir. Hatta ticaret hukukunda,
GUVWON NXUDOÕQD D\NÕUÕ LúOHP úDUWODUÕ NXOODQÕOPDVÕ KDNVÕ]
rekabet halleri araVÕQGDVD\ÕOPÕúWÕU77..m.55) [11].
%%LúOHPOHULQGHoRNVD\ÕGD³PRGHOV|]OHúPH´ DGÕDOWÕQGD
|QFHGHQ KD]ÕUODQPÕú LúOHP úDUWODUÕ NXOODQÕOPDNWDGÕU gUQHN
RODUDN ³2IILFH ´ X\JXODPDVÕQGD EX KNPOHU ILUPDQÕQ
LQWHUQHW VLWHVLQGH |QFHGHQ LODQ HGLOPHNWHGLU +HU ONHQLQ
GLOLQGH V|]OHúPHOHU EXOXQPDNWDGÕU DQFDN D\UÕQWÕODUD
XODúÕOPDN LVWHQGL÷LQGH oR÷XQOXNOD EX GXUXP GH÷LúPHNWH
IDUNOÕ GLOGH YH IDUNOÕ ONH KXNXNXQD J|UH KD]ÕUODQPÕú
øQJLOL]FH $%' KXNXNX PHWLQOHUH XODúÕOPDNWDGÕU Model
V|]OHúPHOHU GDKD VRQUD ILLOHQ WHN WDUDIOÕ RODUDN
GH÷LúWLULOHELOPHNWHGLU %XQD |rnek olarak da, Microsoft
KL]PHWVD÷OD\ÕFÕVÕQÕQ\ÕOÕVRQXQGDV|]OHúPHúDUWODUÕQÕ
\HQLOHGL÷LQH úDUWODUÕ $YUXSD %LUOL÷L QRUPODUÕQD X\JXQ
GXUXPD JHWLUGL÷LQH LOLúNLQ GX\XUXVX J|VWHULOHELOLU $QFDN
|QHPOH EHOLUWilmelidir ki, sadece duyuru ile, \HQL V|]OHúPH
LP]DODQPDGDQ EX úDUWODU V|]OHúPH LoHUL÷LQH JLUPLú ROPD]
$QFDN NXOODQÕFÕQÕQ KL]PHW VD÷ODQPDVÕ WDOHEL NDUúÕVÕQGD
NDEXO HWWL÷LQH LOLúNLQ ELU NXWXFX÷X WÕkODWPDVÕ LVWHQHUHN
DPDFD XODúÕOÕrsa, buQXQ JHoHUOLOL÷L WDUWÕúÕOPDOÕ olacak,
KL]PHWWHQ
\DUDUODQDQ
DOH\KLQGHNL
GH÷LúLNOLNOHULQ
³\D]ÕOPDPÕú´ VD\ÕOPDVÕ JHUHNWL÷L, \DQL V|]OHúPH LoHUL÷L
NDSVDPÕQGDROPDGÕ÷Õ ileri VUHELOHFHNWLU
AvruSD %LUOL÷L %% VWUDWHMLVLQGH ³*YHQOL YH DGLO
V|]OHúPH úDUWODUÕ´ KD]ÕUODQPDVÕ |QJ|UOPHNWHGLU [18]. Bu
strateji kapsaPÕQGD JHQHO LúOHP úDUWODUÕQÕQ %%
V|]OHúPHVLQGH NXOODQÕOPDVÕQD NDUúÕ oÕNÕOPDPDNWD DQFDN EX
úDUWODUÕQEHOLUOLLoHULNWH ROPDVÕYHWDUDIODUDUDVÕQGDNLPHQIDDW
dengesini
JHUoHNOHúWLUHELOPHVLQLQ
VD÷ODQPDVÕ
DPDoODQPDNWDGÕU. %X NDSVDPGD |]HOOLNOH úX KXVXVODUÕQ
G]HQOHQPHVL|QJ|UOPúWU [18]:
6|]OHúPHQLQVRQDHUPHVL DúDPDVÕQGDYHULOHULQNRUXQPDVÕ,
9HULOHULQJL]OLOL÷LYHEWQO÷,
Veri yeri ve transferi,
9HULPONL\HWL
%% VD÷OD\ÕFÕVÕ YH DOW KL]PHW VD÷OD\ÕFÕODU DUDVÕQGD
GR÷UXGDQ GR÷UX\D YH GROD\OÕ VRUXPOXOXN LOLúNLVLQLQ
belirlenmesi.
Proceedings/Bildiriler Kitabı
212
6. ULUSLARARASI
%é/*é*µ9(1/éçéYH.5é372/2-é
.21)(5$16,
III. BB Sg=/(ù0(6ø1ø1H8.8.øNø7(/øöø9(
UYGULANMASI Aù$0$6,1'$ORTAYA dIKAN H8.8.ø
SORUNLAR
%% V|]OHúPHVLQLQ NRQXVX oR÷XQOXNOD VDGHFH YHULOHULQ
VDNODQDELOHFH÷L YH LVWHQLOGL÷LQGH XODúÕODELOHFHN HOHNWURQLN
ELU RUWDP VD÷ODPDNOD VÕQÕUOÕ NDOPDPDNWDGÕU %X GXUXPGD
|QFHOLNOH X\JXODQDFDN NXUDOODU \|QQGHQ V|]OHúPHQLQ
QLWHOL÷LQLQEHOLUOHQPHVL|QHPWDúÕPDNWDGÕU
%% V|]OHúPHVL ERUoODU KXNXNX DoÕVÕQGDQ WDUDIODUÕQÕ
³KL]PHWVD÷OD\ÕFÕ´YH³NXOODQÕFÕ´QÕn ROXúWXUGX÷XELUKXNXNv
LOLúNLGLU 8OXVODUDUDVÕ DODQGD IDDOL\HW J|VWHUHQ KL]met
VD÷OD\ÕFÕODUD |UQHN RODUDN ³$SSOH´ ³L:RUN´ ³*RRJOH´
³MicrRVRIW´ ³6DOHVIRUFH´ ³$PD]RQ´ YH ³=RKR´
J|VWHULlebilir. 6|]OHúmeQLQ NRQXVXQX ROXúWXUDQ LúJ|UPH
edimi, sanalODúWÕUÕOPÕú YHULOHULQ LúOHQPH\H KD]ÕU RODUDN
saklaQPDVÕ IDDOL\HWLQH GD\DQPDNWDGÕU 9erilerin tevdi
HGLOGL÷L \HU NHVLQ RODUDN EHOLUOHQHPH] YH\D LIDGH HGLOPH]
tam olarak bilinmHVL YHUL JYHQOL÷L DoÕVÕQGDQ GR÷UX GD
GH÷LOGLU; EX\]GHQ VR\XWELUNDYUDPRODUDN³EXOXW´FORXG
WHULPL LOH LIDGH HGLOPLúWLU ³%XOXW´ WHULPL V|]OHúPHQLQ
X\JXODPD DODQÕ RODUDN FR÷UDIL VÕQÕUODUÕQ |QHPLQLQ ILLOHQ
NDOPDGÕ÷ÕQÕGDLIDGHHWPHNWHGLU$VOÕQGDverileri saklamaya
YHLúOHPH\HX\JXQGRQDQÕPÕQ|QSODQGDROGX÷XELUDOW\DSÕ
YD]JHoLOPH] ELU XQVXU QLWHOL÷LQGHGLU $QFDN YHULOHULQ
GLQDPLN RODUDN GD÷ÕWÕOGÕ÷Õ PDQWÕNVDO ELU \DSÕQÕQ YDUOÕ÷Õ
QHGHQL\OH V|]OHúPHQLQ WDUDIODUÕ YHULOHULQ KDQJL FLKD]GD
VDNODQGÕ÷ÕQÕYHLúOHQGL÷LQLWDPRODUDNELOHPH]OHU%X\]GHQ
NXOODQÕFÕQÕQ ERUFX RODQ YH NXUDO RODUDN G]HQOL DUDOÕNODUOD
|GHQHQ ³FUHW´ ELU FLKD]ÕQ NLUD EHGHOLQGHQ oRN KL]PHW
VD÷OD\ÕFÕQÕQLúJ|UPHHGLPLQLQNDUúÕOÕ÷ÕQÕROXúWXUPDNWDGÕU
³GHQHO VDNODPD V|]OHúPHVL´ bir WDúÕQÕUÕQ JYHQOL ELU
\HUGH NRUXQPDVÕQÕQ VWOHQLOGL÷L V|]OHúPHGLU (TBK m.561)
[10] 7DúÕQÕU NDYUDPÕ VDNODQDQ YHULOHUL NDSVD\DFDN úHNLOGH
\RUXPODQVD ELOH WHN EDúÕQD %% V|]OHúPHVLQLQ |]HOOLNOHULQL
NDUúÕOD\DPD\DFDNWÕU dQN %% NDSVDPÕQGD GRQDQÕP
\D]ÕOÕP EDNÕP YH oHúLWOL KL]PHWOHUL NDSVD\DQ HGLPOHU
toplXOX÷X EXOXQPDNWDGÕU %X NRQXGD $OPDQ KXNXNXQGD ELU
olayda [19] ³NLUD V|]OHúPHVL´ KNPOHULQLQ X\JXODQPDVÕ
JHUHNWL÷L\|QQGHNDUDUYHULOPLúWLU(VHU\DSÕW ve YHNkOHW
V|]OHúPHOHUL GH %% NDSVDPÕ LoHULVLQGH yer alabilir,
JHQHOOLNOH LúJ|UPH V|]OHúPHOHULQH DLW XQVXUODUÕQ D÷ÕUOÕNWD
ROGX÷X LIDGH HGLOHELOLU Bu durumda, birden fazla
V|]OHúPHQLQYH\DELUGHQID]ODV|]OHúPH\HDLWXQVXUODUÕQ%%
LOLúNLVLQGH WDUDIODUÕQ LUDGHVL LOH ELU DUD\D JHWLULOPHVL V|]
konusu olacakWÕU B|\OHFH, ³bLUOHúLN´ YH\D ³NDUPD´
V|]OHúPHQLWHOL÷LQGHNLKXNXNvLOLúNLOHUH|]JNROD\ROPD\DQ
o|]P \ROODUÕ DUDQDFDNWÕU [20]. gUQHN RODUDN LúJ|UHQLQ
³|]HQ YH VDGDNDW ERUFX´QXQ NDSVDPÕ YH D÷ÕUOÕ÷Õ
V|]OHúPHQLQ KL]PHW HVHU YH\D JHQHO YHNkOHW V|]OHúPHsi
KNPOHULQLQ X\JXODQPDVÕ LKWLPDOOHULQGH IDUNOÕ RODFDNWÕU.
<LQH %% V|]OHúPHOHULQGH oRN VD\ÕGD EXOXQDQ YH KL]PHW
VD÷OD\ÕFÕQÕQ VRUXPOXOX÷XQX NDOGÕUDQ YH\D VÕQÕUODQGÕUDQ
³VRUXPVX]OXNDQODúPDODUÕ´\HQLNXUDOODUNDUúÕVÕQGDJHoHUVL]
KNPV]VD\ÕODELOHFHNWLU (TBK m.115, m.116) [10].
*HQHO VDNODPD V|]OHúPHVLQH LOLúNLQ NODVLN KXNXN
LONHOHULQLQ ELOLúLP RUWDPÕQGD GD X\JXODQDELOHFHN HYUHQVHO
NXUDOODU ROGX÷X \DNODúÕN ELU DVÕU |QFH \D]ÕOPÕú ELU HVHUGH
J|UOHELOLU ³(PDQHW V|]OHúPHVLQLQ NRQXVX HPDQHW DODQ
WDUDIÕQGDQNRUXPDQÕQVWOHQLOPHVLGLU.RUXPDVDGHFHILLOHQ
HOGH WXWPDGDQ GDKD ID]ODVÕQÕ LIDGH HGHU .RUXPD GL÷HU
V|]OHúPHOHUOH GH ELUOHúPLú RODELOLU .RUXPD LoLQ |GHYLQ
20-21 September /Eylül 2013 | Ankara / TURKEY
6th INTERNATIONAL
INFORMATION SECURITY & CRYPTOLOGY
CONFERENCE
LoHUL÷LKHUúH\GHQ |QFHDQODúPD\DJ|UHEHOLUOHQLU*YHQLúL
ROPDVÕQÕQQLWHOL÷LQGHQELUVÕU VDNODPD|GHYLGR÷DELOLU” [21].
%% V|]OHúPHVLQGH yer alan, YHULOHULQ VDNODQPDVÕ LOH
ED÷ODQWÕOÕ LúJ|UPH ERUFX ile ilgili VRQXoODU DOW EDúOÕNODUOD
LQFHOHQPLúWLU:
A. +DNVÕ]5HNDEHW+XNXNX
+DNVÕ] UHNDEHW KNPOHULQLQ DPDFÕ EWQ NDWÕODQODUÕQ
PHQIDDWLQH GUVW YH ER]XOPDPÕú UHNDEHWLQ VD÷ODQPDVÕGÕU
g]HOOLNOH rDNLSOHUDUDVÕQGDYH\DWHGDULNHGHQOHUOHPúWHULOHU
DUDVÕQGDNL LOLúNLOHUL HWNLOH\HQ DOGDWÕFÕ YH\D GUVWON
NXUDOÕQD GL÷HU úHNLOOHUGHNL D\NÕUÕ GDYUDQÕúODU LOH WLFDUL
X\JXODPDODUKDNVÕ]YHKXNXNDD\NÕUÕGÕU (TTK.m.54) [11].
Bu kapsamda, BB hizmeti VD÷OD\DQ\|QQGHQ“kendisine
HPDQHW HGLOPLú WHNOLI KHVDS YH\D SODQ JLEL Lú Unlerinden
yetkisiz
\DUDUODQPDN´
V|]OHúPH
NDSVDPÕQGDNL
VRUXPOXOX÷XQXQ GÕúÕQGD D\UÕ YH D÷ÕU ELU VRUXPOXOXN
GR÷XUPDNWDGÕU77. m.55) [11].
B. .LúLVHO9HULOHULQ.RUXQPDVÕ9HUL*YHQOL÷LYH
ùHIIDIOÕN
%%V|]OHúPHVLNDSVDPÕQGDVDNODQÕODQYHULOHULQ JYHQOL÷L
konusu, bu alandaki temel sorunlardan birisidir. Veri
JYHQOL÷L WDUDIODU DUDVÕQGDNL V|]OHúPH KNPOHUL GÕúÕQGD
|]HOOLNOH NLúLVHO YHULOHULQ NRUXQPDVÕQD LOLúNLQ KXNXNv
G]HQOHPHOHUOH GH VD÷ODQPD\D oDOÕúÕOPDNWDGÕU [22]. Ancak,
|]HOOLNOH YHULOHULQ VDNODQGÕ÷Õ \HU YH GHYOHWOHULQ XOXVDO
JYHQOLN ND\JÕODUÕ J|] |QQH DOÕQGÕ÷ÕQGD PXWODN ELU
NRUXPDQÕQ EXOXQGX÷XQX V|\OHPHN PPNQ GH÷LOGLU %X
noktada ise, KL]PHW VD÷OD\ÕFÕODUÕQ ve alt hizmet
VD÷OD\ÕFÕODUÕQ birlikte sorumluluNODUÕ da V|] NRQXVX
olDFDNWÕU
$YUXSD%LUOL÷L¶QGHEXNRQXGDNLWHPHOG]HQOHPHJHUoHN
NLúLOHULQ NRUXQPDVÕQD \|QHOLN RODUDN NLúLVHO YHULOHULQ
LúOHQPHVLNRQXVXQGD 1995 \ÕOÕQGDoÕNDUÕOPÕú olan direktiftir
[23]. Avrupa .RPLV\RQX ¶de Avrupa¶da BB
SRWDQVL\HOLQLQNXOODQÕOPDVÕQD \|QHOLNELUVWUDWHMLNDEXOHWPLú
ve LONHOHUL EHOLUOHPLúWLU [24]. Ancak AB \|QQGHQ JQFHO
sorunlardan birisi |]HOOLNOH $%' ND\QDNOÕ %% KL]PHW
VD÷OD\ÕFÕODU EQ\HVLQGHNL YHULOHUH $%' PDNDPODUÕQÕQ
XODúDELOPHVL LPNkQÕGÕU AB G]HQOHPHVLQH J|UH, \H
ONHOHUde \DSÕODQ %%V|]OHúPHOHULQGHVDGHFHIL]LNVHl olarak
WRSOXOXN VÕQÕUODUÕ LoHULVLQGH EXOXQDQ WHNQLN DOW\DSÕ
NXOODQÕODELOHFHNWLU VÕQÕUDúDQ YHUL WUDIL÷L NRQXVXQGD |]Hl
KNPOHU YH L]LQ VUHFL |QJ|UOPúWU %X NRQXGD WHPHO
|OoW oQF ONHQLQ |QJ|UOHQ WHNQLN G]H\H XODúPÕú
ROPDVÕGÕU VHUWLILND WHN EDúÕQD \HWHUOL GH÷LOGLU gUQH÷LQ BB
KL]PHWVD÷OD\ÕFÕVÕQÕQ$%' ³6DIH+DUERU´ VHUWLILNDVÕQD[25]
VDKLS ROPDVÕ WHN EDúÕQD VÕQÕUDúDQ YHUL WUDIL÷LQL LoHUHQ
V|]OHúPHOHUL\DSDELOPHVLLoLQ\HWHUOLROPD\ÕSHNGHQHWLPGH
gereklidir [26]. $QFDN |]HOOLNOH $%' DoÕVÕQGDQ EHOLUOL
úDUWODUÕQ YDUOÕ÷Õ KDOLQGH %%¶de bulunan verileri izleyebilme
LPNkQÕQÕ WDQÕ\DQ³3DWULRW$FW´ J|]|QQGHWXWXOPDOÕGÕU [27].
³3DWULRW $FW´ X\JXODPDVÕ QHGHQL\OH mHUNH]L $%'¶GH
bulunan KLoELU KL]PHW VD÷OD\ÕFÕVÕQÕQ %% RUWDPÕQGDNL
YHULOHULQ XOXVDO JYHQOLN NXUXPODUÕQÕQ GHQHWLPLQH WkEL
ROPD\DFD÷Õ JDUDQWLVLQL YHUHPH\HFH÷L LIDGH HGLOPLúWLU [28].
+D]LUDQ D\ÕQGD RUWD\D oÕNDQ 16$ J|]HWLP
SURJUDPODUÕQÕQ YDUOÕ÷Õ EX J|UúQ GR÷UXOX÷XQX RUWD\D
koymXú VHNW|U EX QHGHQOH |QHPOL HNRQRPLN ]DUDUD
X÷UDPÕúWÕU Bu konu, Alman Parlamentosunda, 31.01.2013
WDULKOL VRUX |QHUJHVL LOH DoÕNOÕNOD RUWD\D NRQXOPXú YH \HGL
20-21 September /Eylül 2013 | Ankara / TURKEY
6. ULUSLARARASI
%é/*é*µ9(1/éçéYH.5é372/2-é
.21)(5$16,
VD\ID WXWDQ D\UÕQWÕOÕ VRUXODUOD SUREOHPLQ XODúWÕ÷Õ ER\XW
VHUJLOHQPLúDQFDNGR\XUXFXFHYDSODUYHULOHPHPLúWLU [29].
Hizmet VD÷OD\ÕFÕODUÕQ NXOODQÕFÕODUD úHIIDIOÕN \|QQGHQ
PDGGLYHKXNXNLJYHQOLNVLVWHPOHULLOHLOJLOLRODUDND\UÕQWÕOÕ
bilgi vermeleri gereklidir, soyut nitHOLNWHNL JYHQFH \HWHUOL
GH÷LOGLU %X NRQXGD NXOODQÕFÕODUD WDQÕQDFDN GHQHWLP
KDNNÕQÕQILLOHQX\JXODQDELOPHVLLVHoRN]RUGXU
7UNL\H
GH \ÕOÕQGD 7%00¶QH VXQXODQ ve Avrupa
%LUOL÷L G]HQOHPHOHULQGHQ HVLQOHQHQ ³.LúLVHO 9HULOHULQ
.RUXQPDVÕ +DNNÕQGD .DQXQ 7DVDUÕVÕ´ EXJQH NDGDU
NDQXQODúDPDPÕúWÕU <LQH \ÕOÕQGD 7%00¶QH VXQXODQ
“7LFDUv 6ÕU %DQND 6ÕUUÕ YH 0úWHUL 6ÕUUÕ +DNNÕQGDNL
.DQXQ7DVDUÕVÕ” NDQXQODúPD\Õ EHNOHPHNWHGLU\ÕOÕQGD
7%00¶QH VXQXODQ ³(OHNWURQLN 7LFDUHWLQ ']HQlenmesi
+DNNÕQGD.DQXQ7DVDUÕVÕ” LVH*HQHO.XUXOJQGHPLQGHGLU
7DVDUÕQÕQ Maddesi ile “.LúLVHO YHULOHULQ NRUXQPDVÕQÕ”
DúD÷ÕGD YHULOGL÷L ]HUH NDSVDPOÕ ELU úHNLOGH
G]HQOHnmektedir:
³+L]PHWVD÷OD\ÕFÕ
D%X.DQXQoHUoHYHVLQGH\DSPÕúROGX÷XLúOHPOHUQHGHQL\OH
elde etWL÷LNLúLVHOYHULOHULQVDNODQPDVÕQGDQYHJYHQOL÷LQGHQ
sorumludur.
E .LúLVHO YHULOHUL LOJLOL NLúLQLQ RQD\Õ ROPDNVÕ]ÕQ oQF
NLúLOHUHLOHWHPH]YHEDúNDDPDoODUODNXOODQDPD]
.LúLVHO VD÷OÕN YHULOHUL LOH LOJLOL RODUDN ³*HQHO 6D÷OÕN
6LJRUWDVÕ 9HULOHULQLQ *YHQOL÷L ve 3D\ODúÕPÕQD øOLúNLQ
<|QHWPHOLN”
WDULKOL 5HVPv *D]HWH¶de
\D\ÕPODQPÕúWÕU
C. BB 6|]OHúPHVLQGH 5L]LNR<|QHWLPLYH6RUXPOXOXN
6LVWHPLQ o|NPHVL YH\D SHUIRUPDQV ND\ÕSODUÕ VLVWHPLQ
\DYDúODPDVÕ HULúLOHELOLUOLN NDOÕFÕ QLWHOLNWHNL YHUL ND\ÕSODUÕ
veULOHULQ GH÷LúWLULOPHVL VLOLQPHVL YH\D oDOÕQPDVÕ BB
RUWDPÕQGD RUWD\D oÕNDELOHFHN ULVNOHUGLU g]HO ELU \DVDO
G]HQOHPH EXOXQPDGÕ÷ÕQGDQ EX KXVXVODUÕQ V|]OHúPH ile
G]HQOHQPHVLQGH \DUDU KDWWD ]RUXQOXOXN EXOXQGX÷X LIDGH
edilebilir. 5L]LNR \|QHWLPLQGH, maruz NDOÕQDELOHFHN
WHKOLNHOHU LoLQ sigorta V|]OHúPHVL \DSÕOPDVÕQÕQ |QHPOL ELU
yerL YDUGÕU, sorumluluk sigortalarÕ NRQXVXQGD \HQL 7LFDUHW
.DQXQX¶QGD |]HO G]HQOHPHOHU JHWLULOPLúWLU (TTK. m.1472
vd.) [11].
5L]LNR \|QHWLPL LOH LOJLOL RODUDN KL]PHW VD÷OD\ÕFÕVÕQÕQ
VRUXPOXOX÷XQX VÕQÕUODQGÕUDQ YH\D WDPDPHQ NDOGÕUDQ
V|]OHúPH úDUWODUÕ oR÷XQOXNWDGÕU $QFDN EHOLUWLOPHOLGLU NL
\HQLNXUDOODU NDUúÕVÕQGD KL]PHWVD÷OD\ÕFÕVÕQÕQ YH\DRQXQDOW
KL]PHWVD÷OD\ÕFÕODUÕQÕQILLOOHULQGHQGR÷DQYHNXVXUDGD\DQDQ
VRUXPOXOX÷X NDOGÕUDQ KNPOHU LONH RODUDN JHoHUVL]
RODFDNWÕU7%.Pm.116) [10]gUQHNRODUDNVLVWHPLQ
³KDILI NXVXU´ QLWHOL÷LQGHNL ELU GDYUDQÕú QHGHQL\OH o|NPHVL
KDOLQGHKL]PHWVD÷OD\ÕFÕVÕQÕQVRUXPOXROPD\DFD÷ÕQDLOLúNLQ
úDUWJHoHUOLROPD\DFDNWÕU
D. ùLUNHWOHU+XNXNX<|QQGHQ 2UWD\DdÕNDELOHFHN +XNXNv
Sorunlar
TTK DQRQLP úLUNHW YH OLPLWHG úLUNHW \|QHWLFLOHUL
\|QQGHQ ³|]HQ YH ED÷OÕOÕN \NPOO÷´ JHWLUPLúWLU
<|QHWLFLOHU J|UHYOHULQL WHGELUOL ELU \|QHWLFLQLQ |]HQL\OH
\HULQH JHWLUPHNOH YH úLUNHWLQ PHQIDDWOHULQL GUVWON
kuraOÕQD X\DUDN J|]HWPHNOH \NPOGUOHU 77. m.369,
m.626) [11]. %X |]HQLQ |OoV WHGELUOL ELU \|QHWLFLQLQ
213
Proceedings/Bildiriler Kitabı
6th INTERNATIONAL
INFORMATION SECURITY & CRYPTOLOGY
CONFERENCE
göstermesi gereken özendir. Tedbirli yönetici ölçüsü,
yönetim kurulu üyelerinin kurumsal yönetim ilkeleri
NDSVDPÕQGD ³LúDGDPÕNDUDUÕ´ QLWHOL÷LQGH NDUar alabilmeleri
LPNkQÕQÕ WDQÕU %XQD J|UH EHOLUOL ELU NRQXGD NDUDU
DOÕQPDGDQ |QFH NRQXQXQ X]PDQODUÕQÕQ birikimlerimden
\DUDUODQÕOPÕú \HWHULQFH DUDúWÕrPD YH GH÷HUOHQGLUPH
\DSÕOPÕúVD DOÕQDQ NDUDUÕQ úLUNHW LoLQ EHOLUOL ULVNOHU WDúÕPDVÕ
halinde
bile,
özen
\NPOO÷ LKOkO HGLOPLú
VD\ÕOPD\DFDNWÕU $QFDN EXQXQ LoLQ NLúLVHO YH \DEDQFÕ
PHQIDDWOHU |Q SODQGD WXWXOPDPDOÕ úLUNHWLQ PHQIDDWLQLQ
J|]HWLOPHVLDVÕOROPDOÕGÕU [30].
Bu durumda, úiUNHW VÕUODUÕQÕ LoHUHQ YHULOHULQ, oR÷XQOXNOD
EDúND ONHlerGH EXOXQPDVÕ özensiz YH úLUNHW PHQIDDWOHULQH
D\NÕUÕ ELU GDYUDQÕú VD\ÕODELOHFHN PLGLU? ùLUNHWLQ LúOHWPH
konusuna uygun olarak D\QÕ DQGD IDUNOÕ \erlerde faaliyetini
sürdürmesi LKWL\DFÕ NDUúÕVÕQGD KÕ]OÕ YH úLUNHW YHULOHUine
XODúÕODUDN NDUDU DOma LKWL\DFÕQÕQ NDUúÕODQPDVÕ DPDFÕ\OD %%
V|]OHúPHVL \DSÕOPÕú ROPDVÕ LúDGDPÕ NDUDUÕ NDSVDPÕQGD
GH÷HUOHQGLULOHELOLU %|\OHOLNOH úLUNHW \NVHN PDOL\HWOL
GRQDQÕP\D]ÕOÕPYHJQFHOOHPHJHUHNWLUHQELUDODQGDNHQGL
o|]POHULQL DUDPDNWDQ NXUWXODELOHFHNWLU %X QRNWDGD LúDUHW
edilmesi gereken bir husus GD 77.¶QXQ PDGGHVLQGH
[11]
yer
verilen,
yönetim
kurulu
üyelerinin
VRUXPOXOXNODUÕQÕQ VLJRUWDODQPDVÕ KNPQQ KD\DWD
geçirilmesinin, \|QHWLFLOHULoLQEDVLUHWOLELUGDYUDQÕúRODFD÷Õ
olgusudur.
Yeni TTK DQRQLP úLUNHWOHULQ GHQHWLPL konusunda da
\HQLELUVLVWHPJHWLUPLúGÕúGHQHWLPLONHVLQLEHQLPVHPLúWLU
77.¶QXQ 401. maddesi [11] KNPQH J|UH ³'HQHWoL
\|QHWLP NXUXOXQGDQ NDQXQD X\JXQ YH |]HQOL ELU GHQHWLP
LoLQ JHUHNOL RODQ EWQ ELOJLOHULQ NHQGLVLQH YHULOPHVLQL YH
GD\DQDN ROXúWXUDELlecek belgeOHUL VXQPDVÕQÕ LVWHU”. Bu
durumda GHQHWoLOHUH %% NDSVDPÕQGDNL ³GHQHWLP LoLQ
JHUHNOL RODQ´ YHULOHUH XODúDELOPH \HWNLVLQLQ YHULOPHVL
JHUHNHFHNWLU 6DGHFH \|QHWLP NXUXOXQXQ YHUGL÷L ELOJL YH
EHOJHOHUOH \HWLQPHN GR÷UX ROPD\DFDNWÕU $PD EX \HWNL
GHQHWLP GÕúÕQGDNL KXVXVODUÕ NDSVDPD\DFDNWÕU %X VÕQÕUÕQ
EHOLUOHQPHVLE\NELU|QHPWDúÕPDNWDGÕU
IV. BB Sg=/(ù0(6ø1ø1SONA ERME Aù$0$6,1'$.ø
H8.8.øSORUNLAR
%% NXOODQÕFÕVÕ oHúLWOL QHGHQOHUOH V|]OHúPH\L VRQD
HUGLUPHNLVWH\HELOLU.HQGLVLGDKDJYHQLOLUYHGDKDKÕ]OÕELU
vHUL VDNODPD YH LúOHPH DOW\DSÕVÕ NXUDELOLU YH\D GDKD JoO
YHGDKDX\JXQúDUWODUODKL]PHWVXQDQELUKL]PHWVD÷OD\ÕFÕLOH
V|]OHúPH\DSPDNLVWH\HELOLU
%RUoODUKXNXNXQGDVDNODQDQÕQJHULYHULOPHVL genel olarak
G]HQOHQPLúWLU V|]OHúPHGH VUH EHOLUOHQPLúVH EX Vürenin
VRQXQGD V|]OHúPHGH ELU VUH EHOLUOHQPHPLú ROVD ELOH
NXOODQÕFÕQÕQ WDOHEL ]HULQH YHULOHULQ JHUL YHULOPHVLQL
istenebilir (TBK. m.564) [10] %% V|]OHúPHOHULQGH ³JHUL
verme” |]HOELU|QHPWDúÕPDNWDGÕUYHULOHULQLDGHVL\DQÕ VÕUD
saklanan verilerin, sö]OHúPHQLQ VRQD HUPHVLQGHQ VRQUD
VLOLQPHVL GH WHPLQDW DOWÕQD DOÕQPDOÕGÕU $YUXSD %LUOL÷L %%
stratejisinde de [18] DGLO YH JYHQOL V|]OHúPH úDUWODUÕ
NDSVDPÕQGD V|]OHúPHQLQ VRQD HUPHVL DúDPDVÕQGD YHULOHULQ
NRUXQPDVÕQD |]HO ELU |QHP YHULOPLúWLU g]HOOLNOH RUtak
ND\QDNODUÕQ \D]ÕOÕPODUÕQ YH YHULWDEDQÕQÕQ da hizmet edimi
NDSVDPÕQGD ROGX÷X 6DD6 \DSÕVÕQGD YHULOHULQ LDGHVLQGHQ
VRQUD \D]ÕOÕP GHVWH÷L GH VRQD HUHFH÷LQGHQ KL]PHW
NXOODQÕFÕVÕQÕQ NHQGL YHULOHULQL NXOODQDPDPD ELOLúLP
Proceedings/Bildiriler Kitabı
214
6. ULUSLARARASI
%é/*é*µ9(1/éçéYH.5é372/2-é
.21)(5$16,
RUWDPÕQGD J|UQWOH\HPHPH LúOH\HPeme rizikosu ortaya
oÕNDFDNWÕU%%V|]OHúPHVL\DSÕOÕUNHQV|]OHúPHQLQELWLPLQGH
PHYFXW YHULOHULQ HQ D]ÕQGDQ J|UQWOHQHELOPHVL \HQL
GRV\DODU ROXúWXUXOPDVD ELOH EXQODUÕQ GH÷LúWLULOHELOPHVL
LPNkQÕQÕ VD÷OD\DFDN úDUWODUÕQ V|]OHúPHye NRQXOPDVÕQÕQ
VD÷ODQPDVÕ, NDQDDWLPL]FH LúOHWPH DoÕVÕQGDQ LKPDO
edilmemesi gereken bir husustur. Öte yandan, verilerin
V|]OHúPH VUHVLQLQ ELWPHVLQGHQ VRQUD EDúND ELU KL]PHW
VD÷OD\ÕFÕ SODWIRUPXQGD VDNODQDELOHFHN YH LúOHQHELOHFHN
IRUPDWWD WHVOLP HGLOPHVLQH LOLúNLQ G]HQOHPHOHU GH
sözlHúPHQLQNXUXOPDVÕDúDPDVÕQGD\DSÕOmDOÕGÕU
V. BB Sg=/(ù0(/(5ø1(UYGULANACAK HUKUK
<DEDQFÕOÕN XQVXUX WDúÕ\DQ |]HO KXNXND LOLúNLQ LúOHPOHUH
X\JXODQDFDNKXNXNVD\ÕOÕ³0LOOHWOHUDUDVÕg]HO+XNXk
YH 8VXO +XNXNX +DNNÕQGD .DQXQ´ [31] LOH G]HQOHQPLúWLU
Bu KanuQ¶XQ PDGGHVL X\DUÕQFD V|]OHúPHGHQ GR÷DQ
boUoLOLúNLOHULWDUDIODUÕQDoÕNRODUDNVHoWLNOHULKXNXNDWkELGLU
KXNXNVHoLPLWDUDIODUFDKHU]DPDQ\DSÕODELOLU\HWHUNLNDPX
G]HQLQHD\NÕUÕROPDVÕQ
%% V|]OHúPHOHULQGH |]HOOLNOH YHULOHULQ VDNODQGÕ÷Õ \HU
unsuUX NHQGLQH |]J ELU \DSÕGDGÕU FDUNOÕ FR÷UDIL
E|OJHOHUGHEXOXQDQNLúLOHULQ verilere KHU]DPDQXODúDELOPHVL
JHUHNOL ROGX÷XQGDQ ELUGHQ ID]OD \HU \DEDQFÕ XQVXU RODUDN
oUWD\DoÕNDELOLUgUQHNRODUDN³2IILFH´ X\JXODPDVÕQGD
2UWDGR÷X¶GD
EXOXQDQ
NXOODQÕFÕODUD
LOLúNLQ
YHUL
PHUNH]OHULQLQ |QFHOLNOL RODUDN +ROODQGD YH øUODQGD ROGX÷X
belirtilmektedir, yedekleme YHUL PHUNH]L LVH oR÷XQOXNOD
$%'¶GH EXOXQPDNWDGÕU Somut bir olayda, zarar gören
YHULQLQ¶VLQLQ )UDQVD¶GD¶XQXQ $UMDQWLQ¶GH YH
¶sinin ise Yunanistan¶GD VDNODQGÕ÷Õ RUWD\D oÕNPÕúWÕU [22].
*|UOG÷ JLEL %% LOLúNLOHULQ \HU \|QQGHQ VRmut bir
ED÷ODPD QRNWDVÕQGDQ ED÷ÕmsÕ] ROPDVÕ ELU EDúND LIDGH LOH
YHULEXOXWODUÕQÕQVÕQÕUDúDQELoLPGHKDUHNHWHWPHVLNDUúÕVÕQGD
NDQXQODU LKWLOkIÕ VRUXQODUÕ RUWD\D oÕNPDNWDGÕU BB
V|]OHúPHVLQGHQND\QDNODQDQELUX\XúPD]OÕ÷ÕQKDQJLGHYOHW
NXUDOODUÕ X\JXODQDUDN o|]OPHVL JHUHNWL÷LQLQ EHOLUOHQPHVL
JoOHúHFHNWLU
%X \]GHQ V|]OHúPH LOH X\JXODQDFDN
KXNXNXQNDUDUODúWÕUÕOPDVÕ|QHPWDúÕPDNWDGÕU
³%XOXW´ RUWDPÕQGD YHULOHULQ |]HOOLNOH KL]PHW VD÷OD\ÕFÕ
GÕúÕQGDNLNLúLOHULQ ILLOOHULLOH]DUDUJ|UPHVLYH\D \RNROPDVÕ
halinde ise, uygulaQDFDN KDNVÕ] ILLO KXNXNXQXQ WHVSiti
gerekmektedir. VD\ÕOÕ .DQXQ¶XQ PDGGHVL X\DUÕQFD
[31]KDNVÕ]ILLOGHQGR÷DQERUoODUKDNVÕ]ILLOLQLúOHQGL÷LONH
KXNXNXQD WkELGLU +DNVÕ] ILLOLQ LúOHQGL÷L \HU LOH ]DUDUÕQ
PH\GDQD JHOGL÷L \HULQ IDUNOÕ ONHOHU ROPDVÕ GXUXPXQGD
]DUDUÕQ PH\GDQD JHOGL÷L ONH KXNXNX X\JXODQÕU .DQXQGD
EHOLUWLOHQREMHNWLIED÷ODPD NXUDOÕQÕQ NDWÕOÕ÷ÕQÕ JLGHUHFHNELU
istisna hükmQHHVFDSHFODXVHGH \HUYHULOPLúWLU [32, 22].
%XQD J|UH KDNVÕ] ILLOGHQ GR÷DQ ERUo LOLúNLVLQLQ EDúND ELU
ONH LOH GDKD VÕNÕ LOLúNLOL ROPDVÕ KDOLQGH EX ONH KXNXNX
X\JXODQDFDNWÕU gWH \DQGDQ tDUDIODU KDNVÕ] ILLOLQ PH\GDQD
gelmesinden sonra, uygulanacak KXNXNX DoÕN RODUDN
VHoHELOPHLPNkQÕQDGDVDKLSWLUOHU
20-21 September /Eylül 2013 | Ankara / TURKEY
6th INTERNATIONAL
INFORMATION SECURITY & CRYPTOLOGY
CONFERENCE
VI. S218d
%X oDOÕúPDGD %% V|]OHúPHVL NDSVDPÕQGD RUWD\D
oÕNDELOHFHNKXNXNv VRUXQODU DQDEDúOÕNODU KDOLQGHYHDQFDN
WHPHO o|]POHU UHWLOPH\H oDOÕúÕODUDN LQFHOHQHELOPLú ve
aúD÷ÕGDNLVRQXoODUDXODúÕOPÕúWÕU:
1- %%¶LQ KXNXNv ER\XWX NRQXVXQGDNL oDOÕúPDODU
\HWHUVL]GLUYHJHOLúWLULOPHVLJHUHNPHNWHGLU
2- %% V|]OHúPHOHUL ³PRGHO V|]OHúPH´ RODUDN
\DSÕOPDNWDGÕU %XQXQ \DVDGDNL NDUúÕOÕ÷Õ ³JHQHO LúOHP
NRúXOODUÕ´GÕUNÕVDVUH|QFH\UUO÷HJLUHQNXUDOODUOD
|QHPOL G]HQOHPHOHU JHWLULOPLúWLU %X NDSVDPGD
|]HOOLNOH KL]PHW VD÷OD\ÕFÕODUÕQ VRUXPOXOXNODUÕQÕ
NDOGÕUDQYH\DVÕQÕUODQGÕUDQúDUWODUÕQJHoHUVL]VD\ÕOPDVÕ
V|]NRQXVXRODFDNWÕU
3- %%V|]OHúPHOHULWHNWLSGH÷LOGLUEX\]GHQoRNVD\ÕGD
V|]OHúPH\H |]J XQVXUODUÕ LoHUPHNWHGLU (Saklama,
KL]PHW NLUD HVHU YHNkOHW, vb. +kNLP RODQ V|]OHúPH
WUQHJ|UHWDUDIODUÕQKDNYH\NPOONOHULEXDUDGD
³VDGDNDWYH|]HQERUFX´QGDQGR÷DQVRUXPOXOXNODUÕQÕQ
NDSVDPÕ GH÷LúHFHNWLU
4- .LúLVHO YHULOHULQ NRUXQPDVÕ YH YHUL JYHQOL÷L %%
V|]OHúPHVLQLQ WHPHOLQL ROXúWXUPDNWDGÕU %X NRQXGD
JHUHN XOXVODUDUDVÕ DODQGD JHUHNVH Lo KXNXNWD
G]HQOHPH ERúOXNODUÕ YDUGÕU gWH \DQGDQ YDU RODQ
NXUDOODUÕQ X\JXODQPDVÕ YH \RUXPODQPDVÕ GD KL]PHW
VD÷OD\ÕFÕODUÕQ VRUXPOXOXNODUÕQÕ DUWÕUÕFÕ VRQXoODU
GR÷XUPDNWDGÕU
5- BB V|]OHúPHVLQLQ VRQD HUPHVL DúDPDVÕQGD %%
RUWDPÕQGDNL YHULOHULQ GDKD VRQUD GD NXOODQÕODELOHFHN
IRUPDWWD JHUL YHULOPHVLQLQ VD÷ODQPDVÕ E\N |QHP
WDúÕPDNWDGÕU
6- %%V|]OHúPHVLNDSVDPÕQGDNLYHULOHULQVDNODQGÕ÷Õ\HULQ
ELOLúLP WHNQRORMLVLQLQ JHUH÷L RODUDN somut ve tek bir
QRNWD RODUDN EHOLUOHQHPHPHVL NDUúÕVÕQGD X\XúPD]OÕN
KDOLQGH X\JXODQDFDN GHYOHW KXNXNXQXQ V|]OHúPHQLQ
NXUXOPDVÕ DúDPDVÕQGD JHoHUOL RODFDN ELoLPGH
WDUDIODUFDEHOLUOHQPHVLE\N|QHPWDúÕPDNWDGÕU
KAYNAKLAR
[1] J. Bughin, M. Chui ve J. Manyika, "Clouds, big data, and smart assets:
Ten tech-enabled business trends to watch," McKinsey Quarterly, cilt
VD\Õ 1, s. 75-86, 2010.
[2] M. Armbrust, A. Fox, R. Griffith, A. D. Joseph, R. Katz, A.
Konwinski, L. Gunho, D. A. Patterson, A. Rabkin, I. Stoica ve M.
Zaharia, "A view of cloud computing," Communications of the ACM,
cilt 53, VD\Õ 4, s. 50-58, 2010.
6. ULUSLARARASI
%é/*é*µ9(1/éçéYH.5é372/2-é
.21)(5$16,
[10] "7UN%RUoODU.DQXQX2FDNdHYULPLoL
http://www.mevzuat.gov.tr/MevzuatMetin/1.5.6098.pdf.
[11] "7UN7LFDUHW.DQXQX2FDNdHYULPLoL:
http://www.mevzuat.gov.tr/MevzuatMetin/1.5.6102.pdf.
[12] (OHNWURQLNøP]D.DQXQX 2FDNdHYULPLoL
http://www.mevzuat.gov.tr/MevzuatMetin/1.5.5070.pdf.
[13] (<ÕOPD]+XNXN0XKDNHPHOHUL.DQXQXùHUKL$QNDUD
[14] +XNXN0XKDNHPHOHUL.DQXQXùXEDWdHYULPLoL
http://www.mevzuat.gov.tr/MevzuatMetin/1.5.6100.pdf.
[15] )(UHQ%RUoODU+XNXNX*HQHO+Nmler), Ankara, 2012, s. 215223.
[16] G$QWDO\D%RUoODU+XNXNX*HQHO+NPOHUøVWDQEXOV. 285343.
[17] <$WDPHU6|]OHúPHg]JUO÷QQ6ÕQÕUODQGÕUÕOPDVÕ6RUXQX
dHUoHYHVLQGH*HQHOøúOHPùDUWODUÕQÕQ'HQHWOHQPHVLøVWDQEXO
[18] "European Cloud Computing Strategy," dHYULPLoL
https://ec.europa.eu/digital-agenda/. 14.7.2013 WDULKLQGHHULúLOPLúWLU
[19] "Der Bundesgerichtshof, XII ZR 120/04," 15 11 2006. dHYULPLoL
http://www.bundesgerichtshof.de/EN/Home/home_node.html.
[20] &<DYX]%RUoODU+XNXNX'HUVOHULg]HO+NPOHUøVWDQEXO
s. 11-13.
[21] +%HFNHUøVYLoUH%RUoODU.DQXQXùHUKL%HUQ
[22] A. Leupold ve S. Glosner, IT-5HFKW0QFKHQHU$QZDOWV+andbuch, 2
G0QFKHQV. 97.
[23] "Directive 95/46/EC of the European Parliament and of the Council of
24 October 1995 on the protection of individuals with regard to the
processing of personal data and on the free movement of such data,"
Official Journal L 281, 23/11/1995.
[24] "Unleashing the Potential of Cloud Computing in Europe, Text with
EEA relevance SWD-2012-271 Final," 2012.
[25] "Main Safe Harbor Page," dHYULPLoL
http://www.export.gov/safeharbor/ 15.7.2013 WDULKLQGHHULúLOPLúWLU
[26] M. Borgmann, T. Hahn, M. Herfert, T. Kunz, M. Richter, U. Viebeg
ve S. Vowe, On the Security of Cloud Storage Services, Darmstadt:
Fraunhofer Institute for Secure, 2012.
[27] J. Billings, "European protectionism in cloud computing: addressing
concerns over the Patriot Act," CommLaw, cilt 21, s. 211, 2012.
[28] Z. Wittaker, "Microsoft admits Patriot Act can access EU-based cloud
data," 28 6 2011. dHYULPLoL
http://www.zdnet.com/blog/igeneration/microsoft-admits-patriot-actcan-access-eu-based-cloud-data/11225. 1.7.2013 WDULKLQGHHULúLOPLúWLU
[29] "Deutscher Bundestag, 17. Wahlperiode, 17/12259 Sicherheit,
Datenschutz uQGhEHUZDFKXQJYRQ&ORXG-Daten," 2013.
[30] )%LOJLOLYH('HPLUNDSÕùLUNHWOHU+XNXNX%XUVD
[31] "0LOOHWOHUDUDVÕg]HO+XNXN YH8VXO+XNXNX+DNNÕQGD.DQXQ
$UDOÕNdHYULPLoi:
http://www.mevzuat.gov.tr/MevzuatMetin/1.5.5718.pdf.
[32] )%7DQUÕELOLU$NLWGÕúÕ%RUoODUD8\JXODQDFDN+XNXNDøOLúNLQ
7]NWH5RPD,,hUQ6RUXPOXOX÷X *D]LhQLYHUVLWHVL+XNXN
)DNOWHVL'HUJLVLFLOW;,9VD\ÕV. 131, 2010.
[3] X. Xu, "From cloud computing to cloud manufacturing," Robotics and
computer-integrated manufacturing, FLOWVD\ÕV. 75-86, 2012.
[4] B. P. Rimal, A. Jukan, D. Katsaros ve Y. Goeleven, "Architectural
requirements for cloud computing systems: an enterprise cloud
approach," Journal of Grid Computing, cilt 9, VD\Õ 1, s. 3-26, 2011.
[5] F. Liu, J. Tong, J. Mao, R. Bohn, J. Messina, L. Badger ve D. Leaf,
"NIST cloud computing reference architecture," NIST special
publication, cilt 500, VD\Õ 292, 2011.
[6] S. Subashini ve V. Kavitha, "A survey on security issues in service
delivery models of cloud computing," Journal of Network and
Computer Applications, FLOWVD\ÕV. 1-11, 2011.
[7] J. Kerr ve K. Teng, "Cloud computing: legal and privacy issues,"
Proceedings of the Academy of Business Disciplines Conference,
2010.
[8] O. Brian vd., "Cloud Computing - White Paper," Swiss Academy of
(QJLQHHULQJ6FLHQFHV=ULFK
[9] "Negotiating the cloud- legal issues in cloud computing agreements,"
Australian Government - Information Management Office, 2013.
20-21 September /Eylül 2013 | Ankara / TURKEY
215
Proceedings/Bildiriler Kitabı