TÜBİTAK – BİLGEM – SGE Cyber Security Institute Asım Gençer Gökce TÜBİTAK BİLGEM Cyber Security Institute (SGE) Role: Cyber Security Services Unit Manager/Project Manager Targeted Calls (DS Session): DS : Assurance and Certification for Trustworthy and Secure ICT systems, services and components DS : Cyber Security for SMEs, local public administration and Individuals DS : EU Cooperation and International Dialogues in Cybersecurity and Privacy Research and Innovation DS : Addressing Advanced Cyber Security Threats and Threat Actors Disclaimer: with the submission of this presentation the consent is given by its author for the organisers to distribute the presentation. SMIG January

TÜBİTAK – BİLGEM – SGE Previous / on going projects Advanced Persistent Threat Analysis ( ) (funded by the Republic of Turkey, Ministry of Transport, Maritime Affairs and Communications) National Critical Infrastructure, Asset and Facility Determination, Risk Assessment and Prioritization Project (2015-…) (funded by the Republic of Turkey, Prime Ministry, Disaster & Emergency Management Authority) National Critical Infrastructure Information Systems Protection Project ( ) (funded by the Republic of Turkey, Ministry of Development) Projects funded under European Commission FP7 Managing Threats And Vulnerabilities in the Future Internet (SYSSEC) Project ( ) Cloud For Europe (C4E) Project (2013-…) Penetration Testing and Security Assessment for critical public sector organizations, financial institutions, etc. International Cyber Security Exercises (NATO Cyber Coalition, NATO Locked Shields, NATO CMX) SMIG January

TÜBİTAK – BİLGEM – SGE Potential partnership activity DS : Assurance and Certification for Trustworthy and Secure ICT systems, services and components Security requirements specification and formalization, Software code review, static and dynamic security testing, Attack and threat modelling, Vulnerability analysis, Penetration testing DS : Addressing Advanced Cyber Security Threats and Threat Actors Developing custom techniques, tools and systems for aiding APT analysis tasks in areas including computer and network forensics, as well as malware analysis. Incorporating big data analytics into various analysis steps. Large scale threat analysis in key institutions operating ICSs and SCADA systems. Development of custom systems, tools and techniques specifically for SCADA systems. SMIG January