{"id":77044,"date":"2018-08-03T09:47:59","date_gmt":"2018-08-03T06:47:59","guid":{"rendered":"https:\/\/www.enerjigazetesi.ist\/?p=77044"},"modified":"2018-08-03T09:47:59","modified_gmt":"2018-08-03T06:47:59","slug":"enerji-sirketlerinin-siber-guvenligi-icin-13-oneri","status":"publish","type":"post","link":"https:\/\/www.enerjigazetesi.ist\/en\/enerji-sirketlerinin-siber-guvenligi-icin-13-oneri\/","title":{"rendered":"(Turkish) Enerji \u015eirketlerinin Siber G\u00fcvenli\u011fi i\u00e7in 13 \u00d6neri!"},"content":{"rendered":"

Sorry, this entry is only available in Turkish<\/a>. For the sake of viewer convenience, the content is shown below in the alternative language. You may click the link to switch the active language.<\/p>

<\/p>\n

\n
\n
\n
\n

Yenilenebilir enerji sistemlerinin yayg\u0131nla\u015fmas\u0131, bu sistemlere y\u00f6nelik b\u00fcy\u00fck \u00e7apta bir siber sald\u0131r\u0131 ihtimalini de gitgide daha s\u0131k g\u00fcndeme getiriyor. Bu sistemlerin nas\u0131l ele ge\u00e7irebilece\u011fi \u00fczerine yo\u011funla\u015fan siber sald\u0131rganlar\u0131n ve bu konudaki vakalar\u0131n say\u0131s\u0131 az\u0131msanamayacak kadar y\u00fcksek. Lider g\u00fcvenlik duvar\u0131 ve UTM sa\u011flay\u0131c\u0131s\u0131 WatchGuard\u2019\u0131n T\u00fcrkiye ve Yunanistan \u00dclke M\u00fcd\u00fcr\u00fc Yusuf Evmez, santrallere, enerji hatlar\u0131na veya r\u00fczgar t\u00fcrbinlerine y\u00f6nelik sald\u0131r\u0131lar\u0131n uzun s\u00fcreli elektrik kesintileriyle ve milyonlarca dolar de\u011ferinde maddi zararla sonu\u00e7lanabilece\u011finin alt\u0131n\u0131 \u00e7izerek enerji sekt\u00f6r\u00fcndeki \u015firketlerin alabilece\u011fi 13 \u00f6nlemi payla\u015f\u0131yor.<\/strong><\/p>\n

\u00c7o\u011fu g\u00fcvenlik uzman\u0131 ve g\u00fcvenlik ara\u015ft\u0131rmac\u0131s\u0131na g\u00f6re yenilenebilir enerji sistemlerinin pazar pay\u0131n\u0131n \"\"artmas\u0131, bu sistemlere y\u00f6nelik siber sald\u0131r\u0131lar\u0131n da gitgide artaca\u011f\u0131n\u0131 g\u00f6steriyor. Enerji \u015firketlerinin g\u00fcvenlik eksikliklerinden faydalanan sald\u0131rganlar, sadece k\u00fc\u00e7\u00fck bir r\u00fczgar santraline sald\u0131r\u0131 d\u00fczenleseler dahi birbiriyle ba\u011flant\u0131l\u0131 \u015febekeler tek bir eri\u015fim noktas\u0131 \u00fczerinden etkisiz hale getirilebiliyor. Bu durum da elektri\u011fin haftalarca ya da aylarca kesilmesine, temiz suyun veya ula\u015f\u0131m\u0131n sa\u011flanamamas\u0131na ve milyonlarca dolar maddi zarara yol a\u00e7abiliyor. Lider g\u00fcvenlik duvar\u0131 ve UTM sa\u011flay\u0131c\u0131s\u0131 WatchGuard\u2019\u0131n T\u00fcrkiye ve Yunanistan \u00dclke M\u00fcd\u00fcr\u00fc Yusuf Evmez, enerji sekt\u00f6r\u00fcndeki \u015firketlerin dikkate almas\u0131 gereken 13 g\u00fcvenlik \u00f6nlemini payla\u015f\u0131yor.<\/p>\n

Enerji ve Elektrik Sistemlerinde Siber G\u00fcvenlik Vakalar\u0131<\/strong><\/p>\n

Hackerlar, enerji sistemlerine s\u0131zmak i\u00e7in r\u00fczgar t\u00fcrbinlerinin, y\u00fcksek voltaj i\u00e7eren g\u00fc\u00e7 hatlar\u0131n\u0131n veya santrallerin \u00f6zellikle uzaktan y\u00f6netim sistemlerinde bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131 bulmaya \u00e7al\u0131\u015f\u0131yor ve s\u0131zd\u0131ktan sonra \u00e7al\u0131\u015fma \u015fekillerini de\u011fi\u015ftirebiliyor. \u00d6rne\u011fin, r\u00fczgar g\u00fcl\u00fcn\u00fcn y\u00f6n\u00fcn\u00fc de\u011fi\u015ftiriyor veya sistemin a\u011f ayarlar\u0131n\u0131 bozarak di\u011fer ki\u015filerin giri\u015f yapmas\u0131n\u0131 engelliyor. Ele ge\u00e7irilen t\u00fcrbinlerin a\u015f\u0131r\u0131 y\u00fcklenmesinden dolay\u0131 \u00fclke genelindeki bir\u00e7ok santral etkilenebiliyor, haftalar s\u00fcren elektrik kesintileri ger\u00e7ekle\u015febiliyor ve milyonlarca dolar maddi zarar ortaya \u00e7\u0131kabiliyor.<\/p>\n

23 Aral\u0131k 2015\u2019te Rusya\u2019daki bir hacker grubunun sald\u0131r\u0131s\u0131 nedeniyle Ukrayna\u2019daki Ivano-Frankivsk b\u00f6lgesinde 1 milyondan fazla insan saatlerce elektriksiz kald\u0131. 26 Ocak 2016\u2019da da \u0130srail Elektrik Y\u00f6netimi, oltalama y\u00f6ntemiyle yap\u0131lan \u00e7ok a\u011f\u0131r bir siber sald\u0131r\u0131 dolay\u0131s\u0131yla bilgisayarlar\u0131n\u0131n bozuldu\u011funu ve fidye yaz\u0131l\u0131m\u0131 bula\u015fan bilgisayarlardaki \u015fifrenin \u00e7\u00f6z\u00fclmesi i\u00e7in para istendi\u011fini duyurmu\u015ftu. Sistemler \u00e7al\u0131\u015fmay\u0131nca elektrik uzun s\u00fcre kesintiye u\u011fram\u0131\u015ft\u0131. PWC\u2019nin Ekim 2015\u2019te yapt\u0131\u011f\u0131 bir ara\u015ft\u0131rmaya g\u00f6re bu gibi siber sald\u0131r\u0131lar\u0131n say\u0131s\u0131 bir y\u0131lda iki kat\u0131na \u00e7\u0131km\u0131\u015ft\u0131.<\/p>\n

Enerji \u015eirketlerinin ve Santrallerin Uygulamas\u0131 Gereken 13 Siber G\u00fcvenlik \u00d6nlemi<\/strong><\/p>\n

\u00d6nlem al\u0131nmad\u0131\u011f\u0131 takdirde enerji \u015firketlerinin u\u011frad\u0131\u011f\u0131 siber sald\u0131r\u0131lar uzun zaman boyunca elektri\u011fin verilememesi, temiz suyun ya da toplu ta\u015f\u0131man\u0131n ger\u00e7ekle\u015ftirilememesi, \u015febeke malzemelerinin onar\u0131m veya de\u011fi\u015fim s\u00fcrecinin uzamas\u0131 ve milyonlarca dolar de\u011ferde zarar olu\u015fmas\u0131 gibi bir dizi felakete neden olabilir. Ayr\u0131ca, rakip enerji firmalar\u0131, \u015firketin a\u00e7\u0131\u011fa \u00e7\u0131kan verilerinden faydalanarak i\u015f stratejilerini \u00f6\u011frenebilir. Bu nedenlerden dolay\u0131, enerji \u015firketlerinin harekete ge\u00e7ip bir an \u00f6nce \u00f6nlem almas\u0131n\u0131n olduk\u00e7a \u00f6nemli oldu\u011funu belirten WatchGuard T\u00fcrkiye ve Yunanistan \u00dclke M\u00fcd\u00fcr\u00fc Yusuf Evmez, enerji sekt\u00f6r\u00fcndeki \u015firketlerin alabilece\u011fi 13 \u00f6nlemi s\u0131ral\u0131yor.<\/p>\n

    \n
  1. Hi\u00e7bir end\u00fcstriyel kontrol sistemini direkt olarak internete ba\u011flamay\u0131n.<\/li>\n
  2. Risk analizi yaparak \u00f6nceliklerinizi belirleyin ve sistem varl\u0131\u011f\u0131n\u0131z\u0131 sa\u011flayan en de\u011ferli bile\u015fenleri i\u015f a\u011f\u0131ndan ayr\u0131 olarak g\u00fcvenlik duvarlar\u0131n\u0131n arkas\u0131na yerle\u015ftirin.<\/li>\n
  3. Sisteme giri\u015f yapmak i\u00e7in kimlik do\u011frulamay\u0131 ve \u00e7ok fakt\u00f6rl\u00fc korumay\u0131 zorunlu yap\u0131n.<\/li>\n
  4. Hesaplara zorla giri\u015f riskini azaltan hesap kilitleme \u00f6zelli\u011fini aktif hale getirin.<\/li>\n
  5. G\u00fcvenlik takibini ve an\u0131nda olay m\u00fcdahalesini i\u00e7eren bir sistem kullan\u0131n ve bir sald\u0131r\u0131 an\u0131nda sorunun yay\u0131lmas\u0131n\u0131 \u00f6nleyin.<\/li>\n
  6. G\u00fcvenlik eksikliklerini veya hatalar\u0131n\u0131 d\u00fczenli zaman aral\u0131klar\u0131nda onaran bir yama y\u00f6netimi uygulay\u0131n.<\/li>\n
  7. Uzaktan kontrol edilen r\u00fczgar t\u00fcrbinlerine eri\u015fim sa\u011flarken sanal \u00f6zel a\u011flar (VPN) gibi g\u00fcvenlik y\u00f6ntemleri kullan\u0131n.<\/li>\n
  8. Varsay\u0131lan sistem hesaplar\u0131n\u0131 kald\u0131r\u0131n, devre d\u0131\u015f\u0131 b\u0131rak\u0131n veya yeniden adland\u0131r\u0131n.<\/li>\n
  9. T\u00fcm hesaplar i\u00e7in \u00e7ok g\u00fc\u00e7l\u00fc \u015fifreler se\u00e7in.<\/li>\n
  10. \u00dc\u00e7\u00fcnc\u00fc parti sa\u011flay\u0131c\u0131lar taraf\u0131ndan olu\u015fturulmu\u015f, \u00f6zellikle y\u00f6netici d\u00fczeyindeki hesaplar\u0131 g\u00f6zlemleyin.<\/li>\n
  11. Hesaplara zorla giren veya dolayl\u0131 olarak girilmesine yol a\u00e7an ki\u015filer \u015firketin kendi \u00e7al\u0131\u015fanlar\u0131 olabilece\u011finden personel kalitesine ve \u015firket i\u00e7i e\u011fitimlere \u00f6nem verin.<\/li>\n
  12. T\u00fcrbinlerin \u00e7al\u0131\u015fmas\u0131 i\u00e7in kullan\u0131lan yaz\u0131l\u0131mlara dair bilgilerin veya sistem g\u00fcncellemelerinin halka a\u00e7\u0131k olmad\u0131\u011f\u0131na emin olun.<\/li>\n
  13. E\u011fer sald\u0131r\u0131y\u0131 \u00f6nleyici tedbirleri siz uygulayam\u0131yorsan\u0131z, bu t\u00fcr \u00f6nlemleri profesyonel olarak sunabilecek g\u00fcvenlik hizmetlerinden yard\u0131m al\u0131n. WatchGuard Unified Threat Management ve Next-Generation Firewall \u00fcr\u00fcnleriyle geni\u015f kapsamda a\u011f g\u00fcvenli\u011fi sunarken merkezi y\u00f6netim ve a\u011f da\u011f\u0131l\u0131m\u0131nda rahat izlenebilir sistemiyle her \u015firket i\u00e7in en do\u011fru olan g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fcn\u00fc olu\u015fturur.<\/li>\n<\/ol>\n

    Kaynak: <\/strong>Cybermag<\/em><\/strong><\/a><\/p>\n<\/div>\n<\/section>\n<\/div>\n<\/div>\n

    <\/p>","protected":false},"excerpt":{"rendered":"

    Sorry, this entry is only available in Turkish. For the sake of viewer convenience, the content is shown below in the alternative language. You may click the link to switch the active language. Yenilenebilir enerji sistemlerinin yayg\u0131nla\u015fmas\u0131, bu sistemlere y\u00f6nelik b\u00fcy\u00fck \u00e7apta bir siber sald\u0131r\u0131 ihtimalini de gitgide daha s\u0131k g\u00fcndeme getiriyor. Bu sistemlerin nas\u0131l […]<\/p>\n","protected":false},"author":1,"featured_media":77045,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[51,53],"tags":[67,1009,2069,16303,37859],"views":627,"_links":{"self":[{"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/posts\/77044"}],"collection":[{"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/comments?post=77044"}],"version-history":[{"count":1,"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/posts\/77044\/revisions"}],"predecessor-version":[{"id":77046,"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/posts\/77044\/revisions\/77046"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/media\/77045"}],"wp:attachment":[{"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/media?parent=77044"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/categories?post=77044"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/tags?post=77044"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}