Search

Industrial Control Systems used in the control of critical infrastructures, especially in smart grids, have made a rapid transition from an isolated network architecture to wired and wireless external networks due to the factors that facilitate human life such as productivity, economy and speed. With this transition, industrial control systems specific protocols have become insufficient and hybrid protocols have started to be used. As a result, the vulnerabilities specific to the internet and new protocols besides the vulnerabilities specific to industrial control systems have started to threaten control systems. In this study, the usability of the Light Fidelity (Li-Fi) transmission infrastructure in data transmission was investigated as a solution proposal for the smart city / network infrastructure where attack of False Data Injection carried out. This study will make important contributions to the studies carried out for industrial control systems security.

Developing information and technology has caused the digitization of data in all areas of our lives. While this digitization provides entirely new conveniences, speed, efficiency, and effectiveness in our current life, it also created a new environment, space, and ultimately a risk area for attackers. This new space is called cyberspace. There is a constant struggle between security experts and attackers in cyberspace. However, as in any environment, the attacker is always in an advantageous position. In this fight, the newest approach for security experts to catch attackers is to use technologies based on prediction and detection, such as artificial intelligence, machine learning, artificial neural networks. Only in this way will it be possible to fight tens of thousands of pests that appear every second. This study focuses on detecting password attack types (brute force attack, dictionary attack, and social engineering) on real systems using Cowrie Honeypot. The logs obtained during the said attacks were used in the machine learning algorithm, and subsequent similar attacks were classified with the help of artificial intelligence. Various machine learning algorithms such as Naive Bayes, Decision tree, Random Forest, and Support Vector Machine (SVM) have been used to classify these attacks. As a result of this research, it was determined that the password attacks carried out by the attacker were phishing attacks, dictionary attacks, or brute force attacks with high success rates. Determining the type of password attack will play a critical role in determining the measures to be taken by the target institution to close the vulnerabilities in which the attack can be carried out. It has been evaluated that the study will make significant contributions to cybersecurity and password attacks.

With the developments in information technologies, every area of our lives, from shopping to education, from health to entertainment, has transitioned to the cyber environment, defined as the digital environment. In particular, the concept of the Internet of Things (IoT) has emerged in the process of spreading the internet and the idea of controlling and managing every device based on IP. The fact that IoT devices are interconnected with limited resources causes users to become vulnerable to internal and external attacks that threaten their security. In this study, a Flood attack, which is an important attack type against IoT networks, is discussed. Within the scope of the analysis of the study, first of all, the effect of the flood attack on the system has been examined. Subsequently, it has been focused on detecting the at-tack through the K-means algorithm, a machine learning algorithm. The analysis results have been shown that the attacking mote where the flood attack has been carried out has been successfully detected. In this way, similar flood attacks will be detected as soon as possible, and the system will be saved from the attack with the most damage and will be activated as soon as possible., Bilgi teknolojilerindeki gelişmelerle birlikte alışverişten eğitime, sağlıktan eğlenceye hayatımızın her alanı dijital çevre olarak tanımlanan siber ortama geçiş yapmıştır. Özellikle internetin yaygınlaşmasıyla ve her cihazın IP tabanlı olarak kontrol edilmesi ve yönetilmesiyle Nesnelerin İnterneti (IoT) kavramı ortaya çıkmıştır. Günümüzde IoT, küçük ev aletleri, akıllı araçlar, akıllı evler ve hatta akıllı şehirler gibi birçok uygulama alanında kullanılmaktadır. Bu sayede hız, verimlilik, uzaktan algılama ve kontrol ve etkinlik gibi insan yaşamına birçok önemli katkı sağlamaktadır. Ancak sunduğu bu avantajlar ile her kullanıcı alanına göre farklı güvenlik gereksinimlerine ihtiyaç duyar. IoT cihazlarının sınırlı kaynaklarla birbirine bağlı olması, kullanıcıların güvenliklerini tehdit eden iç ve dış saldırılara karşı savunmasız kalmasına neden olur. Bu çalışmada, IoT ağlarına karşı önemli bir saldırı türü olan Flood saldırısı ele alınmıştır. Çalışmanın analizi kapsamında öncelikle flood saldırısının sistem üzerindeki etkisi incelenmiştir. Ardından, bir makine öğrenmesi algoritması olan K-means algoritması aracılığıyla saldırıyı tespit etmeye odaklanılmıştır. Analiz sonuçları, flood saldırısının gerçekleştirildiği saldırı noktalarının başarıyla tespit edildiğini göstermiştir. Bu sayede benzer flood saldırıları en kısa sürede tespit edilecek ve sistem, saldırıdan en az hasarla kurtulacak ve en kısa sürede devreye girecektir. Çalışmanın IoT güvenliği ile ilgili çalışmalara önemli katkılar sağlayacağı düşünülmektedir.

As a result of the developments in science and technology, all our living spaces, from health, education, and trade to our social life, have been moved to the digital environment. With this process, artificial intelligence, which is the ultimate goal of creating systems that think and act like human beings, has started to be used in all areas of our lives. This study focuses on gender determination by using artificial intelligence algorithms on voice data. Thanks to this determination, significant contributions will be made in various fields such as social engineering and cyber security such as fraud, person detection, and advertising investments. The study used a completely open-source R application for various artificial intelligence algorithms. In this way, a solution has been provided to take the security as mentioned above measures with low cost instead of high-cost systems and increase the sales figures in areas such as marketing. In the study, supervised learning artificial intelligence algorithms were examined. The artificial intelligence analysis results of the study have shown that the gender of the person could be determined at very successful rates through the voice data., Bilim ve teknolojideki gelişmeler sonucunda sağlıktan eğitime, ticaretten sosyal hayatımıza kadar tüm yaşam alanlarımız dijital ortama taşınmıştır. Bu süreçle birlikte insan gibi düşünen ve hareket eden sistemler oluşturmak amacıyla geliştirilmiş yapay zeka kavramı da hayatımızın her alanında kullanılmaya başlanmıştır. Bu çalışmada, yapay zeka algoritmaları kullanılarak ses verilerinin incelenmesiyle cinsiyet belirlemeyi hedefleyen bir algoritma geliştirilmiştir. Cinsiyet tespitine yönelik olarak yapılan Bu tespit sayesinde sosyal mühendislik gibi çeşitli alanlarda ve dolandırıcılık, kişi tespiti, reklam yatırımları gibi siber güvenlik alanlarında önemli katkılar sağlanması hedeflenmiştir. Uygulama geliştirilirken, çeşitli yapay zeka algoritmaları için tamamen açık kaynak kodlu R yazılımı kullanılmıştır. Bu sayede yukarıda bahsedilen güvenlik önlemlerinin yüksek maliyetli sistemler yerine düşük maliyetli önlemler alınmasına ve pazarlama gibi alanlarda satış rakamlarının artırılmasına çözüm aranmıştır. Ayrıca çalışmada yapay zeka algoritması olarak denetimli öğrenme kullanılmıştır. Çalışmanın yapay zeka analiz sonuçları, ses verileri aracılığıyla kişinin cinsiyetinin çok başarılı oranlarda belirlenebildiğini göstermiştir.

Human history has passed through important technological stages and continues to do so. One of the most important of these stages is the Industry 4.0 process. With this process, traditional industrial production has left its place to an approach where information systems are at the forefront. Industrial communication systems were completely isolated when they were first produced. In time, the Industry 4.0 process started with their connection to internal networks (intranet) and then to the Internet. With the emergence of cyber-physical systems in this process, these systems have become vulnerable to cyber threats. These weaknesses have made smart systems and Industry 4.0 systems the favorite of attackers. Although these systems make significant contributions to human life such as efficiency, speed and operability, if cyber security vulnerabilities are not properly evaluated, the real potential of Industry 4.0 may never be reached. Therefore, the study focused on the Cyber Security component by considering all the components of Industry 4.0. The study will make a significant contribution to the studies on the cyber security dimension of Industry 4.0., İnsanlık tarihi teknolojik açıdan önemli aşamalardan geçmiştir ve geçmeye devam etmektedir. Bu aşamaların en önemlilerinden birisi de Endüstri 4.0 sürecidir. Bu süreçle birlikte geleneksel sanayi üretimi yerini bilişim sistemlerinin ön planda olduğu bir yaklaşıma bırakmıştır. Endüstriyel haberleşme sistemleri ilk üretildikleri zamanlarda tamamen izole olarak yönetilmişlerdir. Zamanla iç ağlara (intranet) devamında ise internete bağlanmaları ile Endüstri 4.0 süreci başlamıştır. Bu süreçte siber-fiziksel sistemlerin ortaya çıkmasıyla birlikte, bu sistemler siber tehditlere karşı açık hale gelmişlerdir. Bu zafiyetler akıllı sistemleri ve Endüstri 4.0 sistemlerini saldırganların gözdesi haline getirmiştir. Her ne kadar bu sistemler verimlilik, sürat, işlerlik gibi insan hayatına önemli katkılar sağlasa da siber güvenlik açıklıkları uygun şekilde değerlendirilmezse, Endüstri 4.0'ın gerçek potansiyeline asla ulaşılamayabilir. Bu nedenle, çalışmada Endüstri 4.0’ın tüm bileşenleri ele alınarak, Siber Güvenlik bileşeni üzerine odaklanılmıştır. Çalışma, Endüstri 4.0’ın siber güvenlik boyutuna yönelik çalışmalara önemli katkı sağlayacaktır.

In this study, a microgrid in Matlab/Simulink environment controlled by artificial intelligence algorithm was designed for the campus area of a public institution. In addition, the performance analysis and optimization of this microgrid was realized by using Hybrid Optimization of Multiple Energy Resources (HOMER) software. In both simulation studies, the solar energy potential of the institution and the actual electricity consumption data collected for one year were used. With the HOMER simulation study, feasibility of renewable energy integration for the public institution was demonstrated. In addition, all combinations of microgrids were optimized and the results were evaluated. Simulink analysis was performed using artificial intelligence algorithms for 24 h energy flow analysis. According to the simulation results, it was seen that renewable energy sources can feed the existing loads and even supply energy to the grid when necessary. As a result, it has been proved that integrating the designed microgrid into the campus energy network will be profitable and efficient for the public institution in question.

Smart networks and smart city systems, which are increasing in use with new approaches every day, are now in the investment plan of each state. At many points, these two concepts combine. Industrial Control Systems (ICS), which constitute the infrastructure of these systems, have opened to external networks due to the requirements of the era. Once smart grids are integrated with smart cities, ICS left its isolated structure. This process has emerged more security vulnerabilities. In this study, False Data Injection (FDI) attack was carried out to change the memory address values of Programmable Logic Controller (PLC)s which is an important component of ICS. Initially, the feasibility of the attack was examined. Thereafter, in the event of an attack, the effect on the systems was revealed. Eventually, important software and hardware solution suggestions to prevent the attack are mentioned. Thus, in the possible cyber attacks that may occur, it is aimed to recover critical systems with minimum damage and make them to be operational as soon as possible. It is considered that this study will make important contributions to other studies regarding ICS security. (c) 2020 Elsevier Ltd. All rights reserved.

Artificial Intelligence and Machine Learning technologies have a widespread use in many disciplines thanks to raw data processing and computational power. The capabilities of these technologies will enable the identification of legal and illegal traffic/behavior by classifying these data rapidly and without damaging the continuity of the system through the high amount of network traffic/behavior, which is one of the biggest problems in the field of cyber security. In this respect, artificial intelligence and machine learning technologies will provide valuable contributions in protecting Industrial Control Systems (ICS), which play an important role in the control of critical infrastructures such as electrical power generation-transmission-distribution systems, nuclear power plants, gas and water, against cyber-attack. In this study, it is aimed to reveal the anatomy of the attacks by executing denial of service, Start/Stop, and the man in the middle attacks to PLCs, an important component of ICS. In the test environment created in the study, the attacks on the real two types of PLCs were analyzed. The analyzes focused to obtain the rule sequences, which can be used by the artificial intelligence and machine learning technologies, by benefitting from data sets obtained in the test environment. In this way, a new security approach has been created for ICS. The results also revealed the importance of PLCs’ vulnerability to attacks and the continuous monitoring of the network in order to detect and identify the attacks as soon as possible and to protect the ICS and to maintain its continuous functioning.

It is obvious that the use of ICS will increase in view of the fact that smart grid systems are rapidly spreading and the concept of smart cities will spread throughout the world in the future projection. Due to business continuity, management control and efficiency, intranet and especially internet network system architecture are now being used in smart network and smart cities instead of isolated network topology. However, this transition has brought emerged with vital vulnerabilities. However, not using security software in ICS in general for the reason that they may hamper business continuity is attracting cyber criminals. On the other hand, the systems being controlled by ICS are performing very vital functions, so the attacks on these systems will have fatal consequences. In this study, the vulnerabilities of ICS, an important component in the management of smart grids, were analyzed. In this context, in the study, denial of service and information disclosure attacks were carried out on two different brands (Siemens and Schneider) real PLCs for examining negative and positive aspects of the PLCs in terms of cyber security weakness.

Industrial Control Systems (ICS) are vital for countries' smart grids and critical infrastructures. In addition to the advantages such as controlling and monitoring geographically distributed structures, increasing productivity and efficiency, ICS have brought some security problems. Specific solutions are needed to be produced for these security issues. The most important information security component for ICS is availability and the most devastating threat to this component is Denial of Service (DoS) attack. For this reason, DoS attacks carried out on Programmable Logic Controllers (PLC), an important component of ICS, have been analyzed in the paper. In the test environment where attack scenarios were implemented, real PLC devices were used in order to get the most accurate results. The destructive effects of insiders, particularly in the case of cyber attacks against ICS, in bypassing the system security measure and discovery phase also emphasized in the paper.

— Improving of information infrastructure technologies and expanding to broad geographical areas; enable persons, societies, institutions and states communicates with the help of communication and computer networks. Nowadays, approximately 2 billion people use internet and according to Microsoft search, passing to 4 billions is hoped till 2025. With increasing of users quantity, generally of privately ―Cyber security‖ problem comes up. Now countries use information technologies while constituting own information system and critical infrastructure. But for the protection of these systems still in use in information technology infrastructure and there occurs a vicious circle. Countries of the system to protect against cyber threats that are dependent on cyber field, standards, policies and strategies developed and implemented. In this study, the emergence of globalization depends on security concerns with the development of technology, information society strategy applied in our country, the knowledge society transition period in our country and around the world, critical infrastructure created by information technology, cyber threats against the system and risk analysis of these systems examined, Bilgi teknolojileri altyapısının gelişmesi ve geniş coğrafi alanlara yayılması bireylerin, toplumların, kurumların ve devletlerin birbirleri ile olan ilişkilerini iletişim ve bilgisayar ağları üzerinden yürütebilmelerine olanak sağlamıştır. Günümüzde yaklaşık 2 milyar insan internet kullanmaktadır ve Microsoft’un araştırmasına göre bu sayı 2025 yılına kadar hızla artarak 4 milyarı geçmesi beklenmektedir. Kullanıcı sayısı arttıkça genel tanımlama ile “Siber Güvenlik” olarak adlandırdığımız problem ortaya çıkmaktadır. Artık ülkeler kendi bilgi sistemlerini ve kritik altyapılarını bilgi teknolojileri altyapısıyla oluşturmaktadır. Bu sistemlerin korunması içinde yine bilgi teknolojileri altyapısını kullanmakta ve bir kısır döngü oluşmaktadır. Siber alana bağımlı olan sistemlerin güvenlik açıklarına karşı fiziksel ve siber tehditler meydana gelmiş ve güvenlik kaygıları oluşmuştur. Ülkeler siber alana bağımlı olan bu sistemlerini siber tehditlere karşı korumak için standartlar, politikalar ve stratejiler geliştirmiş ve uygulamıştır. Bu çalışmada teknolojinin gelişmesiyle birlikte küreselleşmenin ve güvenlik kaygılarının ortaya çıkışı, ülkemizde uygulanan bilgi toplumu stratejisi, ülkemiz ve dünyada bilgi toplumuna geçiş süreci, bilgi teknolojileriyle oluşturulan kritik altyapı sistemleri, bu sistemlere karşı siber tehditler ve bu sistemlerin risk analizi anlatılmıştır.