Dağıtık Defterler ve Bilgi Teknolojileri Hukukundaki Yansımaları

Abstract

Elektronik haberleşme güvenliği, bilgi ve iletişim teknolojilerinin artan kullanımına paralel olarak kayda değer bir önem kazanmıştır. Bu teknolojilerden biri olan dağıtık defter teknolojileri (DLT'ler), özellikle blokzincirler, “nesnelerin interneti” çağının ardından “nesnelerin blok zinciri” olarak adlandırılan yeni bir dönemi çağrıştıran bir devrim olarak kabul edilmektedir. DLT'ler, ticari işlevleri ve bilgi güvenliği yükümlülüklerine uyumu sağlamakla birlikte bazı güvenlik açıklarına da sahiptir. DLT'ler sayesinde, aracılık maliyetleri kolayca ortadan kaldırılabilir, varlıklar/işlemler dijital olarak kaydedilir ve güvence altına alınır. Ancak, bu aynı anda adem-i merkeziyetçilik/anarşi ile sonuçlanmaktadır. Dahası, bu alandaki çalışmaların çoğu DLT'lerin katkılarına odaklanmaktadır. Bu çalışma, DLT’lerin genellikle göz ardı edilen güvenlik yönüne odaklanmayı amaçlamaktadır. Bu çerçevede, DLT'lerin temel özelliklerini ele aldıktan sonra, bilgi güvenliği yükümlülüklerine uyum açısından DLT'lerin araçlarını ve avantajlarını ortaya çıkaracak, ardından dünyanın dört bir yanındaki bilgi güvenliği yasal çerçevelerine ilişkin güvenlik açıklarını ve ilgili riskleri analiz edecektir.

Keywords

• dağıtık defter
• blokzincir
• şifreleme
• anonimleşme
• bilgi güvenliği

Distributed Ledgers And Their Implications In Information Technology Law

Abstract

Electronic communications security has gained a considerable significance in parallel with the increasing usage of the information and communication technologies. Being one of these technologies, distributed ledger technologies (DLTs), more specifically the blockchains, are regarded as a revolution which propose a new era, called “blockchain of things” following the era of “internet of things”. While DLTs promoted the business functionalities and compliance with information security obligations, it has also some vulnerabilities. By the DLTs the cost of intermediaries could easily be eliminated while at the same time assets/transactions are recorded and secured digitally. Nevertheless, this has simultaneously resulted in decentralised power/anarchy. Besides, majority of the studies focus on the contributions of the DLTs. This article aims to concentrate on the security aspect of this technology, which is often disregarded. Thus, after addressing fundamental characteristics of DLTs, it will unfold their tools and advantages in terms of compliance to information security obligations, then, exercise its vulnerabilities and related risks with respect to information security legal frameworks from over the world.

Keywords

• distributed ledger
• blockchain
• encryption
• anonymization
• information security

References

1. Accenture. (2016) Seizing the Opportunities Unlocked by the EU’s Revised Payment Services Directive PSD2: A Catalyst for New Growth Strategies in Payments and Digital Banking. Everyday Bank Research Series accessed 3 May 2023.
2. Article 29 Data Protection Working Party. (2014) Opinion 05/2014 on Anonymisation Techniques 0829/14/EN WP216. accessed 4 November 2023.
3. European Network and Information Security Agency. (2014) Network and Information Security in The Finance Sector: Regulatory Landscape and Industry Priorities. accessed 10 February 2019.
4. European Union Agency for Network and Information Security. (2015) Information Security and Privacy Standards for SMEs: Recommendations to Improve the Adoption of Information Security and Privacy Standards in Small and Medium Enterprises accessed 4 November 2023.
5. Fedorov, A. K., Kiktenko, E. O. and Lvovsky, A. I. (2018) Quantum Computers Put Blockchain Security at Risk. Nature, 563, 465.
6. Filippi, P. D. and Wright, A. (2018) Blockchain and the Law: The Rule of Code (2nd edn). Cambridge, Massachusetts: Harvard University Press.
7. Kuszmaul, W. (15 January 2019) The (Almost) Secret Algorithm Researchers Used to Break Thousands of RSA Keys. Algorithm Soup accessed 3 May 2023.
8. Lee, Y.N. (12 December 2017) Bitcoin Hack: Expect Larger Cyber Attacks in 2018, A10 Networks Says. CNBC accessed 3 May 2023.

9. Lexis PSL TMT Team (ed). 2018. An Introduction to Technology Law (1st edn). United Kingdom: LexisNexis.
10. The EU Blockchain Observatory and Forum. (2019) Blockchain and the GDPR accessed 3 May 2023.
11. The EU Blockchain Observatory and Forum. (2018) No Law unto Itself: Blockchain and the European Legal and Regulatory Framework. EUBlockchain accessed 9 February 2019.
12. Turkish Data Protection Authority. (2018) Kişisel Verilerin Silinmesi, Yok Edilmesi Veya Anonim Hale Getirilmesi Rehberi accessed 11 May 2023.
13. Turkish Republic Ministry of Environment, Urbanization and Climate Change. (2022) Blok Zincir ve Metaverse Teknolojisi Çalışma Heyeti Sonuç Raporu accessed 4 November 2023.
14. UK Government Office for Science. (2016) Distributed Ledger Technology: Beyond Block Chain 3 May 2023.
15. Park, Jin and Park, Jong. (2018) Blockchain Security in Cloud Computing: Use Cases, Challenges, and Solutions. Symmetry 9, 164.
16. Presidency of Republic of Turkiye-Presidency of Strategy and Budget. (2023) Medium Term Program 2024-2026 accessed 4 November 2023.
17. Ray, S. (20 February 2018) The Difference Between Blockchains & Distributed Ledger Technology. Towards Data Science accessed 25 February 2019.
18. Stephen, R. and Alex, A. (2018) A Review on BlockChain Security. IOP Conference Series: Materials Science and Engineering 012030, 396.