NATIONAL CYBER SECURITY GOVERNANCE & EMERGING CYBER SECURITY THREATS Dr. Hayret t in B AHŞİ

NATIONAL CYBER SECURITY GOVERNANCE & EMERGINGCYBER SECURITY THREATS Dr. Hayrettin BAHŞİ Director of Cyber Security Institute TÜBİTAK BİLGEM

Cyber Security Governance Cyber Security Council Cyber Security Strategy

Cyber Security Governance (2) • Integration of domain knowledge and technical cyber security knowledge • Interdisiplinary area between engineering and social sciences • Policy creators have to have cyber security understanding

Main Cyber Security Threats • Hidden attacking activities • Information stealing channels • Main aim: Know-how • Important sectors like defence industry • Effective tool for cyber espionage • Long durations of info stealing channels • Protection of Critical Infrastructure Information Systems • Finance, • Transportation • Energy • Water Supply etc. • Availability threats • Composed of rarly updated rarely • SCADA Security

Attack Vectors

Threats and Solutions • Traditional perimeter protection is dead! • Control the outbound data as well as inbound data • Dynamic analysis based malware analysis systems • Active defence mechanisms • Correlation of different logs • User security awareness • Rapid sharing of cyber threat intelligence

Cyber Threat Intelligence Framework Investigations of malware analysis lab APT Analizi Honeypot Systems Private Cyber Threat Intelligence Databases • Virus Scanners Open Cyber Threat Intelligence Databases Cyber Threat Intelligence Warnings System Administrators Rule Lists Firewalls Spam Mail Addresses Actionable Intelligence Virus Signatures Intrusion Signatures SPAM Prevention Systems Intrusion Detecetion Systems Virus Scanners

Thanks

NATIONAL CYBER SECURITY GOVERNANCE & EMERGING CYBER SECURITY THREATS Dr. Hayret t in B AHŞİ