TR-CERT

TR-CERT (Computer Emergency Response Team of the Republic of Turkey, Turkish: Ulusal Siber Olaylara Müdahale Merkezi (USOM)) is an organization within the Information and Communication Technologies Authority (ICTA) which is the national regulatory authority of the Turkish electronic communication sector. It is responsible for the analysis and risk mitigation of large-scale cyber threats and vulnerabilities, communicating information regarding malicious cyber activities or possible vulnerabilities to computer security incident response teams (CSIRT) and the public.[1]

Computer Emergency Response Team of Turkey (TR-CERT)
Ulusal Siber Olaylara Müdahale Merkezi (USOM)
Logo of TR-CERT
Agency overview
Formed27 May 2013 (2013-05-27)
TypeNational computer emergency response team (CERT)
JurisdictionRepublic of Turkey
HeadquartersÇankaya, Ankara
Parent agencyInformation and Communication Technologies Authority
Websitehttps://www.usom.gov.tr/

Background

TR-CERT was established on 27 May 2013 within the ICTA, in accordance with the 4. clause "National Cybersecurity Strategy and 2013-2014 Action Plan" (Turkish: Ulusal Siber Güvenlik Stratejisi ve 2013-2014 Eylem Planı) [2] issued by the Cabinet of Turkey and published in the Official Gazette of the Republic of Turkey.[3]

Mission

The mission of TR-CERT is to protect the Turkish government's and its citizens' cyberspace, taking measures for the protection of critical infrastructures, both public and private, such as energy production and distribution, water management, and telecommunication institutions and facilities in Turkey. TR-CERT also takes both proactive and reactive actions toward cyber incidents that would affect the country as a whole, such as botnets,[4] malware,[5] and distributed denial-of-service (DDoS) attacks.[6]

There are over 1300 CSIRTs and over 4000 cyber security professionals[7] in nearly every sector in Turkey that coordinate with TR-CERT regarding cyber incidents. These CSIRTs are mostly institutional CSIRTs (such as the CSIRT of a bank), but there are also industry-specific CSIRTs that coordinate with TR-CERT (such as the CSIRT of the finance industry).[3]

Activities

The Cyber Star (Turkish: Siber Yıldız), a 24-hour online capture-the-flag cybersecurity competition organized by TR-CERT,[8] had over 20,000 contestants working either in teams or individually, during the latest competition held in February 2019. In the previous Cyber Star event held in January 2017, TR-CERT had nearly 15,000 contestants and some of the most successful contestants were hired by TR-CERT later on.[9]

In December 2019, TR-CERT organized the "Cyber Shield 2019", an international cybersecurity exercise[10] with simulated cyber attacks, malware, phishing, and industrial control systems (ICS).[11] Held at the ICTA headquarters in Ankara,[12] contestants from 17 countries[11] competed to identify cybersecurity emergencies and take the necessary measures within the scenarios and technical infrastructure prepared by TR-CERT. The exercise was supported by the International Telecommunication Union (ITU) agency of the United Nations and the Cybersecurity Alliance for Mutual Progress (CAMP). International Cyber Shield 2019 was organized to increase preparedness to combat cybersecurity incidents and foster international cooperation in dealing with them.[10]

On 10 February 2020, TR-CERT's security operations center (SOC) was officially opened, with the attendance of the President of Turkey, Recep Tayyip Erdoğan. Speaking at the opening ceremony, Recep Tayyip Erdoğan said

"We aim for Turkey to not only be a consumer of technology, but also be a country that designs, develops, produces, and markets technologies to the world. The security dimension of digital transformation is at least as important as the physical defense of countries.[13]"

Cooperating with "ICTA Academy" (Turkish: BTK Akademi), TR-CERT has given various cybersecurity trainings,[14] ranging from web application security to computer forensics. Similarly, TR-CERT gives one-on-one, hands-on training to cybersecurity enthusiasts in the Fetih Cyber Drill Field[15]

Some of the other events organized and/or attended by TR-CERT include:

  • TR-CERT - CSIRT Advisory Meetings[16]
  • Energy Sector CSIRTs Meeting[17]
  • NATO CMX-2017[9] and CMX-2019[18] Crisis Management Exercises

Due to TR-CERT's contribution to the cybersecurity ecosystem in Turkey, between the years 2017 and 2018, the ranking of Turkey on the Global Cybersecurity Index (GTI) published by ITU went up by 23 ranks, going from 43[19] to 20[20] within a year.

TR-CERT is accredited by Trusted Introducer[21] and also is a member of the Forum of Incident Response and Security Teams (FIRST)[22] and the Organisation of Islamic Cooperation's (OIC) computer emergency response team, OIC-CERT.[23]

References
  1. "About TRCERT". Ulusal Siber Olaylar Müdahale Merkezi (USOM). Retrieved 8 September 2020.
  2. "Ulusal Siber Güvenlik Stratejisi ve 2013-2014 Eylem Planı" [National Cybersecurity Strategy and 2013-2014 Action Plan] (PDF) (in Turkish). T.C. Ulaştırma Denizcilik ve Haberleşme Bakanlığı. 2013. Retrieved 8 September 2020.
  3. "USOM ve Kurumsal Siber Olaylara Müdahale Ekibi". Bilgi Teknolojileri ve İletişim Kurumu (in Turkish). 15 December 2017. Retrieved 8 September 2020.
  4. "Siber ordudan nefes kesen operasyon" [Breathtaking operation from the cyber army]. Milliyet Gazetesi (in Turkish). 11 September 2019. Retrieved 8 September 2020.
  5. "BTK-USOM açığı gördü, zararı önledi" [ICTA - TR-CERT found the vulnerability, prevented damage]. Bilgi Teknolojileri ve İletişim Kurumu (BTK) (in Turkish). 16 May 2017. Retrieved 8 September 2020.
  6. "USOM, ulusal siber güvenlikte çok önemli bir adım" [USOM is a crucial step for national cybersecurity]. BThaber (in Turkish). 3 April 2020. Retrieved 8 September 2020.
  7. "Siber Güvenlik Üssü Türkiye'de açılıyor". Sabah. Retrieved 8 September 2020.
  8. "Yarışma Kuralları" [Competition Rules] (in Turkish). TR-CERT. Retrieved 8 September 2020.
  9. Global Cybersecurity Index (GCI) 2018 (PDF). 2019. p. 47. ISBN 978-92-61-28201-1. Retrieved 8 September 2020. {{cite book}}: |website= ignored (help)
  10. "Cyber Shield 2019". International Telecommunication Union (ITU). 2019. Retrieved 8 September 2020.
  11. "International cybersecurity exercise begins in Ankara". Daily Sabah. 19 December 2019. Retrieved 8 September 2020.
  12. "Cyber Shield - Practical Information". Cyber Shield. 2019. Retrieved 8 September 2020.
  13. "Cumhurbaşkanı Erdoğan'dan USOM açılışında konuştu: Yerli 5G teknolojisi altyapısını kurmadan 5G'ye geçemeyiz". Yeni Şafak (in Turkish). 10 February 2020. Retrieved 8 September 2020.
  14. "BTK'den siber güvenlik uzmanlığı eğitimi". Hürriyet Gazetesi (in Turkish). 11 June 2019. Retrieved 8 September 2020.
  15. "Fetih Siber Talimhane". Fetih Siber Talimhane. TR-CERT. 2019.
  16. "Duyuru Listesi". Ulusal Siber Olaylara Müdahale Merkezi (USOM) (in Turkish). Retrieved 8 September 2020.
  17. "Enerji sektörüne yönelik siber güvenlik çalışmaları sürüyor". Enerji Piyasası Düzenleme Kurumu (EPDK). Retrieved 8 September 2020.
  18. "NATO Kriz Yönetim Tatbikatı-2019" [NATO Crisis Management Exercise-2019]. Timeturk Haber (in Turkish). 6 May 2019. Retrieved 8 September 2020.
  19. Global Cybersecurity Index (GCI) 2017 (PDF). 2017. p. 60. ISBN 978-92-61-25071-3. Retrieved 8 September 2020. {{cite book}}: |website= ignored (help)
  20. Global Cybersecurity Index (GCI) 2018 (PDF). 2019. p. 62. ISBN 978-92-61-28201-1. Retrieved 8 September 2020. {{cite book}}: |website= ignored (help)
  21. "Trusted Introducer: Directory: TR-CERT". Trusted Introducer. Retrieved 9 September 2020.
  22. "TR-CERT". FIRST — Forum of Incident Response and Security Teams. Retrieved 20 September 2020.
  23. "OIC-CERT | Organisation of The Islamic Cooperation - Computer Emergency Response Team". www.oic-cert.org. Retrieved 21 September 2020.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.