1. NATIONAL CYBER SECURITY GOVERNANCE & EMERGING CYBER SECURITY THREATS
Dr. Hayrettin BAHŞİ
Director of Cyber Security Institute
TÜBİTAK BİLGEM

2. Cyber Security Governance
Lack of Nationwide
Cyber Security
Governance
Cyber Security is an Internal Security Issue
Cyber Security is an Effective Strategic or Tactical Tool In Five Domains
Intelligence
Cyber Diplomacy
Cyber Crime
Protection of Critical Infrastrcutures
Military
Cyber Security Strategy
Cyber Security Council

3. Cyber Security Governance (2)
Intelligence
Cyber Diplomacy
Cyber Crime
Protection of Critical Infrastrcutures
Military
Integration of domain knowledge and technical cyber security knowledge
Interdisiplinary area between engineering and social sciences
Policy creators have to have cyber security understanding

4. Main Cyber Security Threats
Hidden attacking activities
Information stealing channels
Main aim: Know-how
Important sectors like defence industry
Effective tool for cyber espionage
Long durations of info stealing channels
Protection of Critical Infrastructure Information Systems
Finance,
Transportation
Energy
Water Supply etc.
Availability threats
Composed of rarly updated rarely
SCADA Security

5. Attack Vectors Sophisticated Attacks Targetted Malware
Social Engineering
Vulnerabilities and Configuration Problems
Targetted Malware

6. Actionable Intelligence
Threats and Solutions
Traditional perimeter protection is dead!
Control the outbound data as
well as inbound data
Dynamic analysis based malware analysis systems
Active defence mechanisms
Correlation of different logs
User security awareness
Rapid sharing of cyber threat intelligence
Detect
Intelligence
Gathering
Actionable Intelligence
Prevention
Actions

7. Cyber Threat Intelligence Framework
Investigations of malware analysis lab
APT
Analizi
Honeypot Systems
Private Cyber Threat Intelligence Databases
Virus Scanners
Open Cyber Threat Intelligence Databases
Cyber Threat Intelligence
Warnings
System Administrators
Rule Lists
Firewalls
Actionable Intelligence
Spam Mail Addresses
Virus Signatures
Intrusion Signatures
SPAM Prevention Systems
Intrusion Detecetion Systems
Virus Scanners

8. Thanks