{"id":2975,"date":"2026-02-26T22:34:47","date_gmt":"2026-02-26T22:34:47","guid":{"rendered":"https:\/\/renewasoft.com.tr\/?p=2975"},"modified":"2026-03-01T16:47:24","modified_gmt":"2026-03-01T16:47:24","slug":"kritik-altyapida-scada-guvenligi","status":"publish","type":"post","link":"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/","title":{"rendered":"Kritik Altyap\u0131da SCADA G\u00fcvenli\u011fi"},"content":{"rendered":"

[vc_row][vc_column][vc_column_text css=””]<\/p>\n

Kritik Altyap\u0131da SCADA G\u00fcvenli\u011fi<\/h1>\n

Sald\u0131r\u0131 Y\u00fczeyi Analizi ve Savunma Katmanlar\u0131<\/em>
\nHydrowise Yapay Zek\u00e2 Destekli Hidroelektrik Santral Y\u00f6netim Sistemi<\/em>
\nRenewasoft | 2026<\/strong><\/p>\n

Seviye: \u0130leri<\/span>\u00a0\u00a0 Hedef Kitle: SCADA M\u00fchendisi, HES \u0130\u015fletmecisi, CTO, Altyap\u0131 Yat\u0131r\u0131mc\u0131s\u0131<\/p>\n

Giri\u015f: T\u00fcrbinin Arkas\u0131ndaki G\u00f6r\u00fcnmez Tehdit<\/h1>\n

Her 39 saniyede bir, d\u00fcnyan\u0131n herhangi bir yerindeki internete ba\u011fl\u0131 bir sisteme siber sald\u0131r\u0131 ger\u00e7ekle\u015ftiriliyor[1]<\/sup>. \u00c7o\u011fu end\u00fcstri i\u00e7in bir ihlal veri kayb\u0131 veya finansal hasar anlam\u0131na gelir. Ancak bir Hidroelektrik Santral (HES) i\u00e7in, ele ge\u00e7irilen tek bir Programlanabilir Mant\u0131k Denetleyicisi (PLC) kontrols\u00fcz kap\u0131 operasyonlar\u0131, t\u00fcrbin a\u015f\u0131r\u0131 h\u0131z olaylar\u0131 veya birbirine ba\u011fl\u0131 \u015febekede kademeli ar\u0131zalara neden olabilir. Sonu\u00e7lar soyut de\u011fildir \u2014 kinetik, \u00e7evresel ve potansiyel olarak felaket boyutundad\u0131r.<\/p>\n

Ancak bu varl\u0131klar\u0131 y\u00f6neten operasyonel teknoloji (OT) ortamlar\u0131, temelden farkl\u0131 bir tehdit modeli alt\u0131nda on y\u0131llar \u00f6nce tasarlanm\u0131\u015ft\u0131r: fiziksel izolasyon. Pek \u00e7ok HES SCADA sisteminin halen omurgas\u0131n\u0131 olu\u015fturan Modbus RTU protokol\u00fc 1979’da standartla\u015ft\u0131r\u0131lm\u0131\u015ft\u0131r[6]<\/sup>. Kimlik do\u011frulama, \u015fifreleme veya b\u00fct\u00fcnl\u00fck kontrol\u00fc i\u00e7ermez.<\/p>\n

Bu d\u00fcnya art\u0131k mevcut de\u011fildir. IT ve OT a\u011flar\u0131n\u0131n yak\u0131nsamas\u0131 \u2014 uzaktan izleme talepleri, bulut tabanl\u0131 analitik ve d\u00fczenleyici raporlama gereksinimleri taraf\u0131ndan y\u00f6nlendirilen \u2014 bir zamanlar birincil savunma olarak hizmet eden hava bo\u015flu\u011funu ortadan kald\u0131rm\u0131\u015ft\u0131r. Dragos’un 2023 OT Siber G\u00fcvenlik Y\u0131ll\u0131k De\u011ferlendirmesine g\u00f6re, end\u00fcstriyel kontrol sistemlerini (ICS) hedef alan tehdit gruplar\u0131 y\u0131ldan y\u0131la %35 artm\u0131\u015f olup enerji sekt\u00f6r\u00fc en \u00e7ok hedef al\u0131nan dikey olmaya devam etmektedir[2]<\/sup>.<\/p>\n

Bu yaz\u0131, hidroelektrik SCADA ortamlar\u0131na \u00f6zg\u00fc sald\u0131r\u0131 y\u00fczeylerini yap\u0131land\u0131r\u0131lm\u0131\u015f ve teknik olarak temellendirilmi\u015f bi\u00e7imde analiz etmekte, bunlar\u0131 yerle\u015fik \u00e7er\u00e7evelerle (Purdue Modeli[3]<\/sup>, MITRE ATT&CK for ICS[4]<\/sup>, IEC 62443[8]<\/sup>) e\u015fle\u015ftirmekte ve Renewasoft’un\u00a0Hydrowise<\/strong>\u00a0platformunun yapay zek\u00e2 destekli anomali tespiti, adaptif a\u011f segmentasyonu ve HES operasyonlar\u0131 i\u00e7in \u00f6zel olarak tasarlanm\u0131\u015f Zero Trust g\u00fcvenlik mimarisi[7]<\/sup>\u00a0ile her risk katman\u0131na nas\u0131l yan\u0131t verdi\u011fini detayland\u0131rmaktad\u0131r.<\/p>\n

Hydrowise, hidroelektrik santrallerin SCADA\/IoT verilerini anlamland\u0131rmay\u0131; \u00fcretim tahmini, kestirimci bak\u0131m ve pazar verisiyle birlikte tek bir karar destek \u00e7er\u00e7evesinde<\/strong> ele almay\u0131 hedefleyen bir platform yakla\u015f\u0131m\u0131d\u0131r. Bu yakla\u015f\u0131mda siber g\u00fcvenlik, \u201cayr\u0131 bir \u00fcr\u00fcn\u201d olmaktan ziyade operasyonel zek\u00e2 katman\u0131n\u0131n ayr\u0131lmaz bir par\u00e7as\u0131<\/strong> olarak konumlan\u0131r: g\u00fcvenlik uyar\u0131lar\u0131, s\u00fcre\u00e7 davran\u0131\u015f\u0131 ve operasyonel risk g\u00f6stergeleriyle birlikte yorumlan\u0131r. Siber g\u00fcvenlik, bu b\u00fct\u00fcnle\u015fik platformun kritik bir bile\u015fenidir; ancak Hydrowise’\u0131n katma de\u011feri, g\u00fcvenlik ile operasyonel zek\u00e2y\u0131 tek bir karar destek altyap\u0131s\u0131nda birle\u015ftirmesindedir[13]<\/sup>.<\/p>\n

\u25b6 (\u0130\u00e7 link: Renewasoft \u2013 Hizmetler \/ Hydrowise)<\/p>\n

Kavramlar 101: Temel Terminoloji<\/h2>\n

SCADA\/ICS alan\u0131 d\u0131\u015f\u0131ndaki okuyucular i\u00e7in, a\u015fa\u011f\u0131daki terimler bu yaz\u0131y\u0131 anlamak i\u00e7in temel niteliktedir:<\/p>\n\n\n\n\n\n\n\n\n\n\n
Terim<\/th>\nTan\u0131m<\/th>\n<\/tr>\n
PLC<\/strong><\/td>\nProgramlanabilir Mant\u0131k Denetleyicisi \u2014 fiziksel s\u00fcre\u00e7leri (\u00f6r. t\u00fcrbin ayar kanat\u0131 a\u00e7ma\/kapama) programlanm\u0131\u015f mant\u0131\u011fa g\u00f6re kontrol eden sa\u011flamla\u015ft\u0131r\u0131lm\u0131\u015f end\u00fcstriyel bilgisayar.<\/td>\n<\/tr>\n
RTU<\/strong><\/td>\nUzak Terminal Birimi \u2014 da\u011f\u0131t\u0131lm\u0131\u015f sens\u00f6rlerden telemetri toplayan ve SCADA sistemine ileten saha cihaz\u0131.<\/td>\n<\/tr>\n
HMI<\/strong><\/td>\n\u0130nsan-Makine Aray\u00fcz\u00fc \u2014 operat\u00f6rlerin santrali ger\u00e7ek zamanl\u0131 olarak izlemek ve kontrol etmek i\u00e7in kulland\u0131\u011f\u0131 grafiksel i\u015f istasyonu ekran\u0131.<\/td>\n<\/tr>\n
SCADA<\/strong><\/td>\nMerkezi Denetim ve Veri Toplama \u2014 PLC\/RTU’lardan veri toplayan ve t\u00fcm santral \u00fczerinde denetimsel kontrol sa\u011flayan merkezi sistem.<\/td>\n<\/tr>\n
OPC UA<\/strong><\/td>\nA\u00e7\u0131k Platform \u0130leti\u015fimi Birle\u015fik Mimarisi \u2014 IT\/OT veri al\u0131\u015fveri\u015fi i\u00e7in fiili standart protokol.<\/td>\n<\/tr>\n
DPI<\/strong><\/td>\nDerin Paket \u0130nceleme \u2014 paket y\u00fck\u00fcn\u00fc (payload) tamamen inceleyen, protokol bilin\u00e7li filtreleme sa\u011flayan a\u011f g\u00fcvenlik tekni\u011fi.<\/td>\n<\/tr>\n
GOOSE<\/strong><\/td>\nGenel Nesne Y\u00f6nelimli Trafo Merkezi Olay\u0131 \u2014 koruma r\u00f6leleri aras\u0131nda h\u0131zl\u0131 multicast ileti\u015fim i\u00e7in IEC 61850 protokol\u00fc.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Tablo 1: HES OT\/ICS Siber G\u00fcvenli\u011fi Temel Terminolojisi<\/em><\/p>\n

\u00d6zet (TL;DR) \u2014 Y\u00f6netici \u00d6zeti<\/h2>\n
    \n
  1. IT\/OT yak\u0131nsamas\u0131 hava bo\u015flu\u011funu ortadan kald\u0131rm\u0131\u015ft\u0131r;<\/strong>\u00a0HES SCADA sistemlerini koruyan tarihsel izolasyon \u00e7\u00f6z\u00fclm\u00fc\u015f, PLC, RTU ve HMI’lar eski mimarilerin hi\u00e7 tasarlanmad\u0131\u011f\u0131 a\u011f kaynakl\u0131 tehditlere maruz kalm\u0131\u015ft\u0131r[2][3]<\/sup>.<\/li>\n
  2. Sald\u0131r\u0131 y\u00fczeyi haritalamas\u0131 be\u015f kritik zay\u0131f nokta ortaya koymaktad\u0131r:<\/strong>\u00a0eski seri protokoller (Modbus, DNP3), izlenmeyen m\u00fchendislik i\u015f istasyonlar\u0131, d\u00fcz a\u011f topolojileri, a\u00e7\u0131k OPC UA u\u00e7 noktalar\u0131 ve Purdue Seviye 0\u20132’de yetersiz loglama[4]<\/sup>.<\/li>\n
  3. OT’ye uygulanan Zero Trust iste\u011fe ba\u011fl\u0131 de\u011fil, operasyonel zorunluluktur.<\/strong>\u00a0“Asla G\u00fcvenme, Her Zaman Do\u011frula” ilkesi, kurumsal s\u0131n\u0131r\u0131n alt\u0131ndaki s\u00fcre\u00e7 kontrol a\u011f\u0131na kadar uzanmal\u0131d\u0131r[7]<\/sup>.<\/li>\n
  4. Yap\u0131land\u0131r\u0131lm\u0131\u015f risk puanlama modeli<\/strong>\u00a0(R = T \u00d7 V \u00d7 I), HES operat\u00f6rlerinin iyile\u015ftirme yat\u0131r\u0131mlar\u0131n\u0131 genel kontrol listelerine de\u011fil, \u00f6l\u00e7\u00fclebilir ve tesise \u00f6zg\u00fc verilere dayand\u0131rmas\u0131n\u0131 sa\u011flar[9]<\/sup>.<\/li>\n
  5. Hydrowise u\u00e7tan uca dijital enerji y\u00f6netim platformu olarak;<\/strong> DPI ve ML tabanl\u0131 siber g\u00fcvenli\u011fin yan\u0131 s\u0131ra, yapay zek\u00e2 destekli \u00fcretim tahmini, kestirimci bak\u0131m, su debisi \u00f6ng\u00f6r\u00fcs\u00fc ve EP\u0130A\u015e pazar entegrasyonu sunar. OT trafi\u011fi ve s\u00fcre\u00e7 de\u011fi\u015fkenlerini birlikte ele alan anomali tespitiyle, olay tespit s\u00fcresini saniyeler seviyesine indirmeyi hedefler<\/strong> ve ayn\u0131 zamanda operasyonel verimlilik i\u00e7in karar destek \u00e7\u0131kt\u0131lar\u0131 \u00fcretir.[13]<\/sup>.<\/li>\n<\/ol>\n

    SCADA ve OT G\u00fcvenli\u011finde Paradigma De\u011fi\u015fimi<\/h1>\n

    Purdue Modeli: Bask\u0131 Alt\u0131ndaki \u00c7er\u00e7eve<\/h2>\n

    Purdue \u00dcniversitesi’nde Theodore Williams taraf\u0131ndan 1990’larda formalize edilen Purdue Kurumsal Referans Mimarisi (PERA)[3]<\/sup>, end\u00fcstriyel a\u011f segmentasyonunu halen y\u00f6neten hiyerar\u015fik modeli olu\u015fturmu\u015ftur. Alt\u0131 seviyesi \u2014 Seviye 0 (Fiziksel S\u00fcre\u00e7) ile Seviye 5 (Kurumsal A\u011f) aras\u0131nda \u2014 sens\u00f6r\/akt\u00fcat\u00f6rlerin fiziksel d\u00fcnyas\u0131 ile i\u015f uygulamalar\u0131n\u0131n dijital d\u00fcnyas\u0131 aras\u0131nda mant\u0131ksal bir ayr\u0131m sa\u011flar.<\/p>\n

    \"\"<\/p>\n

    \u015eekil 1: Purdue Kurumsal Referans Mimarisi \u2014 Hydrowise G\u00fcvenlik Katman\u0131 ile HES Haritalamas\u0131<\/em><\/p>\n

    \n

    \ud83d\udd0e Teknik Not: HES Ba\u011flam\u0131nda Purdue Seviyeleri<\/strong><\/p>\n

    Seviye 0 (Fiziksel):<\/strong>\u00a0Su giri\u015f sens\u00f6rleri, titre\u015fim transd\u00fcserleri, cebri boru bas\u0131n\u00e7 g\u00f6stergeleri, jenerat\u00f6r sarg\u0131 s\u0131cakl\u0131k sens\u00f6rleri.<\/p>\n

    Seviye 1 (Temel Kontrol):<\/strong>\u00a0Regulat\u00f6r sistemlerini y\u00f6neten PLC’ler (ayar kanat\u0131 pozisyon kontrol\u00fc), uyar\u0131m sistemleri, savak kap\u0131s\u0131 akt\u00fcat\u00f6rleri; da\u011f\u0131t\u0131lm\u0131\u015f telemetriyi toplayan RTU’lar.<\/p>\n

    Seviye 2 (Denetimsel):<\/strong>\u00a0SCADA sunucular\u0131, HMI i\u015f istasyonlar\u0131, debi, su y\u00fcksekli\u011fi, g\u00fc\u00e7 \u00e7\u0131kt\u0131s\u0131, yatak s\u0131cakl\u0131klar\u0131n\u0131 kaydeden historian veritabanlar\u0131.<\/p>\n

    Seviye 3 (Saha Operasyonlar\u0131):<\/strong>\u00a0M\u00fchendislik i\u015f istasyonlar\u0131 (Siemens TIA Portal, Rockwell Studio 5000), yama y\u00f6netim sunucular\u0131, yerel etki alan\u0131 denetleyicileri.<\/p>\n

    Seviye 3.5 (DMZ):<\/strong>\u00a0Veri diyotlar\u0131, jump sunucular\u0131, OT’yi IT’den ay\u0131ran protokol k\u0131r\u0131c\u0131 a\u011f ge\u00e7itleri.<\/p>\n

    Seviye 4\/5 (Kurumsal):<\/strong>\u00a0Kurumsal ERP sistemleri, bulut analitik platformlar\u0131, uzaktan eri\u015fim portallar\u0131.<\/p>\n

    (Kaynak:\u00a0[3]<\/sup>)<\/em><\/p>\n<\/div>\n\n\n\n\n\n\n\n\n\n
    Purdue Seviyesi<\/th>\nHES Varl\u0131klar\u0131 ve \u0130\u015flevleri<\/th>\n<\/tr>\n
    Seviye 0 \u2014 Fiziksel<\/strong><\/td>\nSu giri\u015f sens\u00f6rleri, t\u00fcrbin titre\u015fim transd\u00fcserleri, cebri boru bas\u0131n\u00e7 g\u00f6stergeleri, jenerat\u00f6r sarg\u0131 s\u0131cakl\u0131k sens\u00f6rleri<\/td>\n<\/tr>\n
    Seviye 1 \u2014 Temel Kontrol<\/strong><\/td>\nRegulat\u00f6r PLC’leri (ayar kanat\u0131 pozisyonu), uyar\u0131m sistemleri, savak akt\u00fcat\u00f6rleri; da\u011f\u0131t\u0131lm\u0131\u015f telemetri RTU’lar\u0131<\/td>\n<\/tr>\n
    Seviye 2 \u2014 Denetimsel<\/strong><\/td>\nSCADA sunucular\u0131, HMI i\u015f istasyonlar\u0131, historian veritabanlar\u0131 (debi, su y\u00fcksekli\u011fi, g\u00fc\u00e7 \u00e7\u0131kt\u0131s\u0131, yatak s\u0131cakl\u0131klar\u0131)<\/td>\n<\/tr>\n
    Seviye 3 \u2014 Saha Ops.<\/strong><\/td>\nM\u00fchendislik i\u015f istasyonlar\u0131 (Siemens TIA Portal, Rockwell Studio 5000), yama y\u00f6netim sunucular\u0131, etki alan\u0131 denetleyicileri<\/td>\n<\/tr>\n
    Seviye 3.5 \u2014 DMZ<\/strong><\/td>\nVeri diyotlar\u0131, jump sunucular\u0131, OT’yi IT’den ay\u0131ran protokol k\u0131r\u0131c\u0131 a\u011f ge\u00e7itleri<\/td>\n<\/tr>\n
    Seviye 4\/5 \u2014 Kurumsal<\/strong><\/td>\nKurumsal ERP, bulut analitik, uzaktan eri\u015fim portallar\u0131<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    Tablo 2: HES Varl\u0131klar\u0131na E\u015flenmi\u015f Purdue Modeli Seviyeleri [3]<\/em><\/p>\n

    Modern Tehdit Ortam\u0131<\/h2>\n

    Purdue’nun hiyerar\u015fik s\u0131n\u0131rlar\u0131n\u0131n \u00e7\u00f6z\u00fclmesi, OT odakl\u0131 tehdit faaliyetlerinde \u00f6nemli bir art\u0131\u015fla e\u015f zamanl\u0131 olmu\u015ftur. MITRE ATT&CK for ICS \u00e7er\u00e7evesi, end\u00fcstriyel kontrol sistemlerine \u00f6zel 12 taktik kategori ve 80’den fazla tekni\u011fi belgelemektedir[4]<\/sup>.<\/p>\n\n\n\n\n\n\n
    Tehdit Grubu<\/th>\nKabiliyet<\/th>\nHES \u0130li\u015fkisi<\/th>\n<\/tr>\n
    CHERNOVITE (Pipedream)<\/strong><\/td>\nMod\u00fcler ICS sald\u0131r\u0131 \u00e7er\u00e7evesi; Modbus TCP\/IP, OPC UA, CODESYS PLC [5]<\/td>\nHES protokol y\u0131\u011f\u0131n\u0131na do\u011frudan uygulanabilir<\/td>\n<\/tr>\n
    ELECTRUM (Industroyer)<\/strong><\/td>\nDevre kesicileri a\u00e7mak i\u00e7in IEC 61850 ve IEC 104 manip\u00fclasyonu [5]<\/td>\nHES \u015febeke ba\u011flant\u0131 noktalar\u0131 ve trafo merkezi otomasyonu<\/td>\n<\/tr>\n
    XENOTIME (TRITON)<\/strong><\/td>\nG\u00fcvenlik Enstr\u00fcmante Sistemlerini (SIS) hedef al\u0131r [5]<\/td>\nSald\u0131rganlar\u0131n son savunma hatt\u0131n\u0131 tehlikeye atma iste\u011fini kan\u0131tlar<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    Tablo 3: HES Operasyonlar\u0131yla \u0130lgili ICS Tehdit Gruplar\u0131 [4][5]<\/em><\/p>\n

    Sald\u0131r\u0131 Y\u00fczeyi Haritalamas\u0131: HES’lerin En Savunmas\u0131z Noktalar\u0131<\/h1>\n

    10\u2013500 MW aral\u0131\u011f\u0131ndaki santrallerde g\u00f6zlenen yayg\u0131n kurulum kal\u0131plar\u0131na dayanan sistematik bir HES SCADA sald\u0131r\u0131 y\u00fczeyi analizi, be\u015f temel maruz kalma kategorisi ortaya koymaktad\u0131r[4][8]<\/sup>.<\/p>\n

    \"\"<\/p>\n

    \u0130nfografik 1: HES SCADA Sald\u0131r\u0131 Y\u00fczeyi Haritas\u0131 \u2014 Be\u015f Kritik Maruz Kalma Kategorisi [4][8]<\/em><\/p>\n\n\n\n\n\n\n\n\n
    #<\/th>\nSald\u0131r\u0131 Vekt\u00f6r\u00fc<\/th>\nA\u00e7\u0131klama<\/th>\nRisk Seviyesi<\/th>\n<\/tr>\n
    1<\/strong><\/td>\nEski Protokoller<\/strong><\/td>\nModbus RTU\/TCP (kimlik do\u011frulama\/\u015fifreleme yok) [6], DNP3 SA benimseme <%15 [6], IEC 61850\/MMS oturum ka\u00e7\u0131rma<\/td>\nKR\u0130T\u0130K<\/strong><\/td>\n<\/tr>\n
    2<\/strong><\/td>\nD\u00fcz A\u011f Topolojisi<\/strong><\/td>\nSCADA + m\u00fchendislik + i\u015f trafi\u011finin payla\u015f\u0131ld\u0131\u011f\u0131 tek Layer 2 yay\u0131n alan\u0131<\/td>\nY\u00dcKSEK<\/strong><\/td>\n<\/tr>\n
    3<\/strong><\/td>\nM\u00fchendislik \u0130stasyonlar\u0131<\/strong><\/td>\nDo\u011frudan PLC yazma eri\u015fimi, eski OS, EDR yok, OT\/kurumsal a\u011fa \u00e7ift ba\u011fl\u0131<\/td>\nKR\u0130T\u0130K<\/strong><\/td>\n<\/tr>\n
    4<\/strong><\/td>\nA\u00e7\u0131k OPC UA<\/strong><\/td>\nYanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f anonim eri\u015fim; IT a\u011f\u0131ndan tam s\u00fcre\u00e7 de\u011fi\u015fkeni ke\u015ffi<\/td>\nY\u00dcKSEK<\/strong><\/td>\n<\/tr>\n
    5<\/strong><\/td>\nYetersiz OT Loglama<\/strong><\/td>\nSeviye 3 alt\u0131nda s\u0131f\u0131ra yak\u0131n SIEM g\u00f6r\u00fcn\u00fcrl\u00fc\u011f\u00fc; SCADA\/g\u00fcvenlik korelasyonu yok [8]<\/td>\nY\u00dcKSEK<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Tablo 4: HES Sald\u0131r\u0131 Y\u00fczeyi S\u0131n\u0131fland\u0131rmas\u0131 [4][6][8]<\/em><\/p>\n

    \n

    \u26a0\ufe0f Risk Kutusu: M\u00fchendislik \u0130stasyonu Ele Ge\u00e7irme Yolu<\/strong><\/p>\n

    Sald\u0131r\u0131 Vekt\u00f6r\u00fc:<\/strong>\u00a0Hedefli oltalama e-postas\u0131 \u2192 IT u\u00e7 nokta ele ge\u00e7irme \u2192 OT a\u011f\u0131ndaki EWS’ye RDP (Purdue Seviye 3 yanl\u0131\u015f yap\u0131land\u0131rmas\u0131).<\/p>\n

    Etki:<\/strong>\u00a0Ele ge\u00e7irilen bir EWS, do\u011frudan PLC yazma eri\u015fimi sa\u011flar \u2014 i\u015flevsel olarak sald\u0131rgana y\u00f6netici ayr\u0131cal\u0131klar\u0131yla kontrol odas\u0131nda bir koltuk vermekle e\u015fde\u011ferdir.<\/p>\n

    MITRE E\u015flemesi:<\/strong>\u00a0T0817 (Drive-by Compromise), T0853 (Scripting), T0843 (Program Download)[4]<\/sup>.<\/p>\n

    Kritik Fakt\u00f6rler:<\/strong>\u00a0Eski OS (Win 7 Embedded), EDR yok, \u00e7ift ba\u011fl\u0131 a\u011f, PLC programlama ara\u00e7lar\u0131 (Siemens TIA Portal, Rockwell Studio 5000).<\/p>\n

    \n

    Hydrowise yakla\u015f\u0131m\u0131 (\u00f6rnek kar\u015f\u0131l\u0131k): OT eri\u015fiminde PAM\/Jumphost mimarisiyle do\u011frudan RDP\/SSH kullan\u0131m\u0131n\u0131 azaltacak \u015fekilde<\/strong> tasarlan\u0131r; davran\u0131\u015fsal temel \u00e7izgi ile EWS\u2019den gelen yeni tarama\/ke\u015fif kal\u0131plar\u0131 erken uyar\u0131<\/strong> olarak yakalan\u0131r; ICS protokollerinde DPI ile yetkisiz PLC yazma komutlar\u0131 tespit edilip i\u015faretlenebilir<\/strong>. Uygulama ayr\u0131nt\u0131lar\u0131 tesis mimarisi ve operasyon toleranslar\u0131na g\u00f6re projelendirilir<\/p>\n<\/blockquote>\n

    [13]<\/sup>.<\/p>\n

    (Kaynak:\u00a0[4][5][13]<\/sup>)<\/em><\/p>\n<\/div>\n

    Zero Trust Zorunlulu\u011fu<\/h2>\n

    NIST \u00d6zel Yay\u0131n\u0131 800-207’de tan\u0131mland\u0131\u011f\u0131 \u00fczere Zero Trust Mimarisi (ZTA)[7]<\/sup>, hi\u00e7bir a\u011f konumuna, kullan\u0131c\u0131 kimli\u011fine veya cihaza \u00f6rt\u00fck olarak g\u00fcvenilmemesi ilkesiyle \u00e7al\u0131\u015f\u0131r. Zero Trust’\u0131n OT’ye geni\u015fletilmesi adaptasyon gerektirir \u2014 PLC’ler modern kimlik protokollerini desteklemez ve kontrol d\u00f6ng\u00fcleri paket ba\u015f\u0131na kimlik do\u011frulama gecikmesine tahamm\u00fcl edemez.<\/p>\n

    \"\"<\/p>\n

    \u0130nfografik 2: HES i\u00e7in Zero Trust OT Uygulama D\u00fczlemleri \u2014 NIST SP 800-207 Uyumlu [7][8]<\/em><\/p>\n

    \u25b6\u00a0NIST SP 800-207 Zero Trust Architecture \u2192 https:\/\/csrc.nist.gov\/pubs\/sp\/800\/207\/final<\/a>
    \n\u25b6\u00a0    MITRE ATT&CK for ICS \u2192 https:\/\/attack.mitre.org\/techniques\/ics\/<\/a><\/p>\n\n\n\n\n\n\n\n
    Uygulama D\u00fczlemi<\/th>\nUygulama Detay\u0131<\/th>\n<\/tr>\n
    A\u011f D\u00fczlemi<\/strong><\/td>\nIEC 62443 b\u00f6lge\/kanal\u0131na mikro-segmentasyon [8]. Protokol d\u00fczeyinde izin listeleme ile DPI. \u00d6rnek: Regulat\u00f6r PLC’si yaln\u0131zca belirli register aral\u0131\u011f\u0131nda Modbus FC 03 g\u00f6nderebilir \u2014 di\u011fer t\u00fcm FC\/register\/y\u00f6n d\u00fc\u015f\u00fcr\u00fcl\u00fcr.<\/td>\n<\/tr>\n
    Cihaz D\u00fczlemi<\/strong><\/td>\nHer OT cihaz\u0131 tan\u0131mlan\u0131r, kataloglan\u0131r, davran\u0131\u015fsal profil atanmas\u0131 yap\u0131l\u0131r: ileti\u015fim e\u015fleri, protokoller, fonksiyon kodlar\u0131, frekans, s\u00fcre\u00e7 de\u011fi\u015fken aral\u0131klar\u0131. Herhangi bir sapma \u2192 uyar\u0131.<\/td>\n<\/tr>\n
    Kullan\u0131c\u0131 D\u00fczlemi<\/strong><\/td>\nMFA, oturum kayd\u0131 ve zamana ba\u011fl\u0131 eri\u015fim penceresi ile PAM. Do\u011frudan RDP\/SSH ortadan kald\u0131r\u0131l\u0131r; ba\u011flant\u0131lar tam komut loglamas\u0131yla DMZ jump sunucusu \u00fczerinden proxy’lenir.<\/td>\n<\/tr>\n
    Veri D\u00fczlemi<\/strong><\/td>\nKuzey y\u00f6nl\u00fc OT\u2192IT donan\u0131m veri diyotlar\u0131 ile; \u00e7ift y\u00f6nl\u00fc kar\u015f\u0131l\u0131kl\u0131 sertifika do\u011frulamas\u0131yla TLS 1.3 ile. Anahtar y\u00f6netimi IEC 62443-3-3 SR 4.3 [8] uyumlu.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Tablo 5: HES OT i\u00e7in Zero Trust Uygulama D\u00fczlemleri [7][8]<\/em><\/p>\n

    Hydrowise: U\u00e7tan Uca Dijital Enerji Y\u00f6netim Platformu<\/h1>\n

    Platform Genel Bak\u0131\u015f\u0131<\/h2>\n

    Hydrowise<\/strong>, hidroelektrik santraller i\u00e7in u\u00e7tan uca dijital d\u00f6n\u00fc\u015f\u00fcm\u00fc sa\u011flamak \u00fczere tasarlanm\u0131\u015f yapay zek\u00e2 destekli bir enerji y\u00f6netim platformudur. SCADA ve IoT sens\u00f6rlerinden ger\u00e7ek zamanl\u0131 veri toplayarak santral performans\u0131n\u0131 s\u00fcrekli izler ve t\u00fcm kritik operasyonel parametreler \u00fczerinde g\u00fcvenilir g\u00f6r\u00fcn\u00fcrl\u00fck sa\u011flar[13]<\/sup>.<\/p>\n

    Toplanan veriler \u2014 su debisi, rezervuar seviyeleri, meteorolojik ko\u015fullar ve enerji talebi \u2014 geli\u015fmi\u015f yapay zek\u00e2 algoritmalar\u0131yla i\u015flenir. Bu birle\u015fik zek\u00e2 katman\u0131nda \u00fcretim tahminleri y\u00fcksek do\u011frulukla ger\u00e7ekle\u015ftirilir, kestirimci bak\u0131m senaryolar\u0131 otomatik olarak \u00fcretilir ve potansiyel ar\u0131zalar i\u00e7in erken uyar\u0131lar verilir. EP\u0130A\u015e pazar entegrasyonu, otomatik raporlama, pazar planlama zek\u00e2s\u0131 ve karar destek mekanizmalar\u0131yla Hydrowise, enerji \u00fcretim s\u00fcre\u00e7lerini daha \u015feffaf, optimize ve s\u00fcrd\u00fcr\u00fclebilir hale getirir[13]<\/sup>.<\/p>\n

    Siber g\u00fcvenlik, bu kapsaml\u0131 platformun kritik bir bile\u015fenidir. Kurumsal IT g\u00fcvenlik ara\u00e7lar\u0131n\u0131 OT’ye uyarlamak yerine \u2014 bu ara\u00e7lar gecikme ekler, yanl\u0131\u015f pozitifler \u00fcretir ve ICS protokol g\u00f6r\u00fcn\u00fcrl\u00fc\u011f\u00fcnden yoksundur \u2014 Hydrowise, hidroelektrik operasyonlar\u0131n\u0131 s\u00fcre\u00e7 d\u00fczeyinde anlayan amaca y\u00f6nelik bir g\u00fcvenlik katman\u0131 sa\u011flar[13]<\/sup>.<\/p>\n

    4 Ad\u0131mda Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/h2>\n\n\n\n\n\n\n\n
    #<\/th>\nAd\u0131m<\/th>\nA\u00e7\u0131klama<\/th>\n<\/tr>\n
    1<\/strong><\/td>\nYapay Zek\u00e2 Destekli Veri Entegrasyonu<\/strong><\/td>\nSCADA, sens\u00f6rler ve IoT cihazlar\u0131ndan gelen ger\u00e7ek zamanl\u0131 operasyonel veriler g\u00fcvenli bi\u00e7imde toplan\u0131r ve Hydrowise platformunda birle\u015ftirilir. T\u00fcm kritik parametreler \u2014 su debisi, rezervuar seviyesi, meteorolojik ko\u015fullar, enerji talebi, pazar verileri \u2014 tek merkezden eri\u015filebilir hale gelir.<\/td>\n<\/tr>\n
    2<\/strong><\/td>\nYapay Zek\u00e2 Destekli Veri Analizi<\/strong><\/td>\nB\u00fcy\u00fck veri teknolojileri kullan\u0131larak temel operasyonel parametreler i\u015flenir ve anlaml\u0131 i\u00e7g\u00f6r\u00fclere d\u00f6n\u00fc\u015ft\u00fcr\u00fcl\u00fcr. A\u011f g\u00fcvenlik olaylar\u0131 ile s\u00fcre\u00e7 verileri korelasyon alt\u0131nda birle\u015ftirilerek hem operasyonel verimlilik hem de siber g\u00fcvenlik i\u00e7in tek bir zek\u00e2 katman\u0131 olu\u015fturulur.<\/td>\n<\/tr>\n
    3<\/strong><\/td>\nYapay Zek\u00e2 Destekli Tahmin ve \u0130\u00e7g\u00f6r\u00fcler<\/strong><\/td>\nGeli\u015fmi\u015f makine \u00f6\u011frenimi algoritmalar\u0131 \u00fcretim tahminleri, kestirimci bak\u0131m senaryolar\u0131 ve su debisi \u00f6ng\u00f6r\u00fcleri \u00fcretir. Anomali tespiti (saniyeler seviyesinde), g\u00fcvenlik tehditleri, performans riskleri ve operasyonel sapmalar erken tespit edilir [13].<\/td>\n<\/tr>\n
    4<\/strong><\/td>\nKarar Destek<\/strong><\/td>\nEP\u0130A\u015e pazar planlamas\u0131, bak\u0131m i\u015f ak\u0131\u015flar\u0131, enerji optimizasyon \u00e7\u0131kt\u0131lar\u0131 ve otomatik raporlama ile y\u00f6neticilere eyleme d\u00f6n\u00fc\u015ft\u00fcr\u00fclebilir zek\u00e2 sunulur. Siber g\u00fcvenlik uyar\u0131lar\u0131, operasyonel i\u00e7g\u00f6r\u00fclerle birle\u015fen tek bir panoda konsolide edilir [13].<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Tablo 6: Hydrowise \u2014 3 Ad\u0131mda Nas\u0131l \u00c7al\u0131\u015f\u0131r [13]<\/em><\/p>\n

    Uygulama Metodolojisi<\/h2>\n

    Her kurulumdan \u00f6nce Hydrowise, lokasyon bazl\u0131 meteorolojik veriler ve ge\u00e7mi\u015f \u00fcretim kay\u0131tlar\u0131 ile yapay zek\u00e2 modellerini e\u011fiterek santralin \u00f6zg\u00fcn ihtiya\u00e7lar\u0131n\u0131 analiz eder. Bu analitik s\u00fcre\u00e7 operasyonel zorluklar\u0131, kapasite k\u0131s\u0131tlamalar\u0131n\u0131, su debisi de\u011fi\u015fkenli\u011fini ve bak\u0131m gereksinimlerini tan\u0131mlar[13]<\/sup>.<\/p>\n

    \n

    \ud83d\udd0e Teknik Not: HES-Spesifik Yapay Zek\u00e2 Yetenekleri<\/strong><\/p>\n

    Su Debisi Tahmini:<\/strong>\u00a0Meteorolojik veriler (ya\u011f\u0131\u015f, kar erime modelleri, s\u0131cakl\u0131k), havza hidrolojik parametreleri ve ge\u00e7mi\u015f debi kay\u0131tlar\u0131yla e\u011fitilen ML modeli. Saatlik ve g\u00fcnl\u00fck \u00e7\u00f6z\u00fcn\u00fcrl\u00fckte 72 saatlik tahmin penceresi.<\/p>\n

    Rezervuar Seviyesi \u0130zleme:<\/strong>\u00a0Ger\u00e7ek zamanl\u0131 seviye sens\u00f6r\u00fc + debi tahmini entegrasyonu. Optimum su y\u00f6netimi i\u00e7in dolma\/bo\u015falma e\u011frileri ve ta\u015fk\u0131n riski erken uyar\u0131s\u0131.<\/p>\n

    \u00dcretim Tahmini:<\/strong>\u00a0Rezervuar seviyesi + su debisi + t\u00fcrbin verim e\u011frileri + pazar fiyat sinyalleri ile entegre tahmin. EP\u0130A\u015e G\u00d6P\/G\u0130P bildirim d\u00f6nemlerine uyumlu \u00e7\u0131kt\u0131.<\/p>\n

    Kestirimci Bak\u0131m:<\/strong>\u00a0T\u00fcrbin titre\u015fim profili, yatak s\u0131cakl\u0131k trendi, ya\u011f kalitesi, sarg\u0131 izolasyon direnci gibi parametrelerden \u00e7ok de\u011fi\u015fkenli anomali skoru. Bak\u0131m penceresi \u00f6nerisi ile plans\u0131z duraklatmay\u0131 \u00f6nleme.<\/p>\n

    EP\u0130A\u015e Pazar Entegrasyonu:<\/strong>\u00a0G\u00fcn \u00d6ncesi Piyasas\u0131 (G\u00d6P) ve G\u00fcn \u0130\u00e7i Piyasas\u0131 (G\u0130P) fiyat sinyalleriyle entegre optimizasyon. Otomatik bildirim, dengesizlik riski analizi ve gelir maksimizasyonu.<\/p>\n

    (Kaynak:\u00a0[13]<\/sup>)<\/em><\/p>\n<\/div>\n

    Siber G\u00fcvenlik Katman\u0131: Temel Yetenekler<\/h2>\n\n\n\n\n\n\n\n
    Yetenek<\/th>\nTeknik Detay<\/th>\n<\/tr>\n
    Derin Paket \u0130nceleme (DPI)<\/strong><\/td>\nTam uygulama katman\u0131 ayr\u0131\u015ft\u0131rma: Modbus TCP\/RTU (FC + register do\u011frulama), DNP3 (nesne d\u00fczeyinde ACL), IEC 61850\/MMS\/GOOSE (kaynak do\u011frulama), OPC UA (oturum + sertifika). Cihaz ba\u015f\u0131na FC ve register izin listeleri [13].<\/td>\n<\/tr>\n
    Yapay Zek\u00e2 Davran\u0131\u015fsal Temel \u00c7izgi<\/strong><\/td>\nTesise \u00f6zel verilerle e\u011fitilen ML modeli: a\u011f davran\u0131\u015f\u0131 (e\u015fler, protokoller, frekanslar), s\u00fcre\u00e7 davran\u0131\u015f\u0131 (korelasyonlar: rezervuar seviyesi \u2194 kap\u0131 pozisyonu \u2194 t\u00fcrbin h\u0131z\u0131 \u2194 \u00e7\u0131kt\u0131), zamansal davran\u0131\u015f. Olay tespiti: saha PoC ve mimariye ba\u011fl\u0131 olarak saniyeler seviyesinde hedeflenir[13].<\/td>\n<\/tr>\n
    Adaptif Mikro-Segmentasyon<\/strong><\/td>\nG\u00f6zlenen trafikten otomatik b\u00f6lge ke\u015ffi. Protokol\/FC d\u00fczeyinde gran\u00fcler izin listeleme. \u00c7evreleme\/izolasyon: OT g\u00fcvenlik politikalar\u0131na g\u00f6re uyar\u0131 \u2192 operat\u00f6r onay\u0131 \u2192 izolasyon<\/strong> veya baz\u0131 kritik senaryolarda otomatik aksiyon<\/strong> \u015feklinde kurgulanabilir[13].<\/td>\n<\/tr>\n
    Birle\u015fik OT Panosu<\/strong><\/td>\nKonsolide: a\u011f uyar\u0131lar\u0131, s\u00fcre\u00e7 anomalileri, eri\u015fim loglar\u0131, zafiyet de\u011ferlendirmeleri, \u00fcretim tahminleri ve bak\u0131m \u00f6nerileri. MITRE ATT&CK for ICS otomatik s\u0131n\u0131fland\u0131rma [4]. Entegrasyon: Kurumsal SIEM\/SOAR, CMMS ve pazar verisi kanallar\u0131yla projeye g\u00f6re<\/strong> syslog\/CEF\/REST \u00fczerinden b\u00fct\u00fcnle\u015ftirilebilir[13].<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Tablo 7: Hydrowise Siber G\u00fcvenlik Katman\u0131 Yetenekleri [13]<\/em><\/p>\n

    \n

    Teknik Not: Metrik Tan\u0131mlar\u0131 \u2014 MTTD ve Yanl\u0131\u015f Pozitif Oran\u0131<\/strong><\/p>\n

    MTTD (Ortalama Tespit S\u00fcresi):<\/strong>\u00a0Anormal bir olay\u0131n ba\u015flamas\u0131 ile Hydrowise uyar\u0131s\u0131n\u0131n \u00fcretilmesi aras\u0131ndaki ortalama ge\u00e7en s\u00fcre. Kalibre edilmi\u015f test ortam\u0131nda kontroll\u00fc k\u0131rm\u0131z\u0131 tak\u0131m enjeksiyonu ile \u00f6l\u00e7\u00fcl\u00fcr. A\u011f anomali MTTD: <4 saniye (p95). S\u00fcre\u00e7 davran\u0131\u015fsal anomali MTTD: <15 saniye (p95).<\/p>\n

    YP Oran\u0131 (Yanl\u0131\u015f Pozitif Oran\u0131):<\/strong>\u00a03 pilot HES kurulumunda devreye alma sonras\u0131 90 g\u00fcnl\u00fck d\u00f6nemde \u00f6l\u00e7\u00fcl\u00fcr. Devreye alma sonras\u0131 YP oran\u0131: a\u011f anomalileri i\u00e7in <%0.1, s\u00fcre\u00e7 davran\u0131\u015fsal sapmalar i\u00e7in <%0.5.<\/p>\n

    (Not: Metrikler, tesis topolojisi, trafik hacmi ve devreye alma olgunlu\u011funa g\u00f6re de\u011fi\u015fir; PoC a\u015famas\u0131nda birlikte \u00f6l\u00e7\u00fcmlenerek hedefler netle\u015ftirilir.)<\/em><\/p>\n<\/div>\n

    HES Projeleri \u0130\u00e7in Teknik Risk Puanlama Modeli<\/h1>\n

    OT Riskine Kantitatif Yakla\u015f\u0131m<\/h2>\n

    Genel risk matrisleri (Y\u00fcksek\/Orta\/D\u00fc\u015f\u00fck) HES siber g\u00fcvenli\u011finin karma\u015f\u0131kl\u0131\u011f\u0131 i\u00e7in yetersizdir. Burada \u00f6nerilen model, FAIR (Bilgi Riski Fakt\u00f6r Analizi) metodolojisini[9]<\/sup>\u00a0uyarlamakta ve HES’e \u00f6zg\u00fc operasyonel parametreleri entegre etmektedir.<\/p>\n

    Risk Puan\u0131 (R) = T \u00d7 V \u00d7 I
    \nT = Tehdit Olas\u0131l\u0131\u011f\u0131 (1\u201310) \u00a0|\u00a0 V = Zafiyet S\u00f6m\u00fcr\u00fclebilirli\u011fi (1\u201310) \u00a0|\u00a0 I = Operasyonel Etki (1\u201310)<\/div>\n

    Operasyonel Etki Kategorileri (I)<\/h3>\n\n\n\n\n\n\n\n\n
    Kategori<\/th>\nA\u00e7\u0131klama<\/th>\nPuan<\/th>\n<\/tr>\n
    G\u00fcvenlik<\/strong><\/td>\nBaraj yap\u0131sal hasar\u0131, kontrols\u00fcz su sal\u0131n\u0131m\u0131, personel yaralanmas\u0131<\/td>\n9 \u2013 10<\/strong><\/td>\n<\/tr>\n
    \u015eebeke Kararl\u0131l\u0131\u011f\u0131<\/strong><\/td>\n\u015eebeke frekans reg\u00fclasyonunu etkileyen \u00fcretim kapasitesi kayb\u0131<\/td>\n7 \u2013 9<\/strong><\/td>\n<\/tr>\n
    Ekipman<\/strong><\/td>\nT\u00fcrbin a\u015f\u0131r\u0131 h\u0131z, yatak ar\u0131zas\u0131, transformat\u00f6r hasar\u0131<\/td>\n6 \u2013 8<\/strong><\/td>\n<\/tr>\n
    \u00c7evresel<\/strong><\/td>\nKontrols\u00fcz de\u015farj, mansap ekolojisi etkisi, bal\u0131k ge\u00e7idi bozulmas\u0131<\/td>\n5 \u2013 7<\/strong><\/td>\n<\/tr>\n
    Finansal\/Operasyonel<\/strong><\/td>\nGelir kayb\u0131, d\u00fczenleyici ceza, itibar hasar\u0131<\/td>\n3 \u2013 6<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    \"\"<\/p>\n

    \u015eekil 2: Risk Puanlama Is\u0131 Haritas\u0131 (Y\u00fcksek Etkide T \u00d7 V) [9]<\/em><\/p>\n

    Uygulama \u00d6rne\u011fi: Regulat\u00f6r PLC (150 MW Francis)<\/h3>\n\n\n\n\n\n\n\n
    Fakt\u00f6r<\/th>\nPuan<\/th>\nGerek\u00e7e<\/th>\n<\/tr>\n
    T (Tehdit)<\/strong><\/td>\n7<\/strong><\/td>\nBelgelenmi\u015f ulus-devlet tehdit faaliyeti olan b\u00f6lgede santral [2]. Uzaktan eri\u015fim VPN aktif.<\/td>\n<\/tr>\n
    V (Zafiyet)<\/strong><\/td>\n8<\/strong><\/td>\nModbus TCP (kimlik do\u011frulama yok) [6]. PLC firmware 3 y\u0131l g\u00fcncellenmemi\u015f. DMZ’den iki atlama, b\u00f6lgeler aras\u0131 firewall yok.<\/td>\n<\/tr>\n
    I (Etki)<\/strong><\/td>\n9<\/strong><\/td>\nRegulat\u00f6r manip\u00fclasyonu \u2192 t\u00fcrbin a\u015f\u0131r\u0131 h\u0131z \u2192 felaket boyutunda mekanik ar\u0131za + baraj g\u00fcvenli\u011fi.<\/td>\n<\/tr>\n
    R (Risk)<\/strong><\/td>\n504<\/strong><\/td>\nKR\u0130T\u0130K \u2014 Maksimum \u00d6ncelik (R > 400). Acil iyile\u015ftirme gereklidir.<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Tablo 9: Risk Puanlama Uygulamas\u0131 \u2014 Regulat\u00f6r PLC Vaka \u00c7al\u0131\u015fmas\u0131 [2][6][9]<\/em><\/p>\n

    Vaka Analizi: 200 MW HES \u00dczerinde Siber Sald\u0131r\u0131 Sim\u00fclasyonu<\/h1>\n

    A\u015fa\u011f\u0131daki senaryo, d\u00f6rt adet 50 MW Francis t\u00fcrbin-jenerat\u00f6r \u00fcnitesine sahip kurgusal ancak mimari olarak temsili bir 200 MW depolamal\u0131 HES (“Santral Alfa”) \u00fczerinde \u00e7ok a\u015famal\u0131 bir izinsiz giri\u015fi modellemektedir. Sald\u0131r\u0131 a\u015famalar\u0131 MITRE ATT&CK for ICS \u00e7er\u00e7evesine e\u015flenmektedir[4]<\/sup>.<\/p>\n

    \"\"<\/p>\n

    \u015eekil 3: Hydrowise Tespit Katman\u0131 ile \u00c7ok A\u015famal\u0131 Sald\u0131r\u0131 \u00d6ld\u00fcrme Zinciri [4]<\/em><\/p>\n

    Sald\u0131r\u0131 Etki De\u011ferlendirmesi<\/h2>\n\n\n\n\n\n\n\n\n
    Parametre<\/th>\nNormal<\/th>\nSald\u0131r\u0131 S\u0131ras\u0131nda<\/th>\nSonu\u00e7<\/th>\n<\/tr>\n
    T\u00fcrbin H\u0131z\u0131 (\u00dc2)<\/strong><\/td>\n150.0 RPM \u00b1 0.2<\/td>\n142\u2013158 RPM osilasyon<\/td>\n\u015eaft titre\u015fimi, yatak yorgunlu\u011fu<\/td>\n<\/tr>\n
    Jenerat\u00f6r \u00c7\u0131kt\u0131s\u0131<\/strong><\/td>\n50 MW sabit<\/td>\n46\u201354 MW dalgalanma<\/td>\n\u015eebeke frekans sapmas\u0131, r\u00f6le a\u00e7mas\u0131<\/td>\n<\/tr>\n
    K\u0131lavuz Yatak S\u0131c.<\/strong><\/td>\n45\u00b0C<\/td>\n6 saatte 78\u00b0C’ye y\u00fckselme<\/td>\nHasar e\u015fi\u011fine yakla\u015f\u0131m<\/td>\n<\/tr>\n
    Santral Kullan\u0131labilirli\u011fi<\/strong><\/td>\n%100 (4\/4 \u00fcnite)<\/td>\n\u00dc2 a\u00e7\u0131l\u0131rsa %75<\/td>\nGelir kayb\u0131: ~$18.000\/saat<\/td>\n<\/tr>\n
    Plans\u0131z Bak\u0131m<\/strong><\/td>\nYok<\/td>\nYatak de\u011fi\u015fimi<\/td>\n$250K\u2013$500K + 2\u20134 hafta duraklatma<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Tablo 10: Santral Alfa Sald\u0131r\u0131 Etki De\u011ferlendirmesi [4][13]<\/em><\/p>\n

    Bu senaryo, geleneksel SCADA e\u015fik alarmlar\u0131n\u0131 tetiklemeyen “yava\u015f ve sinsi” bir sald\u0131r\u0131n\u0131n bile \u00f6nemli fiziksel hasar ve finansal kayba neden olabilece\u011fini g\u00f6stermektedir. Hydrowise’\u0131n DPI motoru yetkisiz Modbus FC 06 yazmas\u0131n\u0131 i\u015faretlerdi; davran\u0131\u015fsal model, kap\u0131 pozisyonu ile korelasyonsuz t\u00fcrbin h\u0131z\u0131 osilasyonunu tespit ederdi; ve adaptif segmentasyon, \u00dcnite 2’yi saniyeler i\u00e7inde izole ederdi[13]<\/sup>.<\/p>\n

    Ayr\u0131ca Hydrowise’\u0131n enerji y\u00f6netim katman\u0131, sald\u0131r\u0131 sonras\u0131 toparlanma s\u00fcrecinde de kritik de\u011fer sunar: kalan \u00fc\u00e7 \u00fcnitenin (3 \u00d7 50 MW) optimum y\u00fck da\u011f\u0131l\u0131m\u0131n\u0131 otomatik olarak yeniden hesaplar, EP\u0130A\u015e pazar bildirimleri i\u00e7in \u00fcretim kapasitesini g\u00fcnceller ve kestirimci bak\u0131m mod\u00fcl\u00fc yatak de\u011fi\u015fim penceresi ile plans\u0131z duraklatma s\u00fcresini minimize eder[13]<\/sup>.<\/p>\n

    SSS: Teknik Derinlemesine \u0130nceleme<\/h1>\n

    S1: Hydrowise, kabul edilemez gecikme olmadan Modbus TCP \u00fczerinde DPI’yi nas\u0131l ger\u00e7ekle\u015ftirir?<\/strong>
    \nHydrowise varsay\u0131lan olarak pasif izleme modunda \u00e7al\u0131\u015f\u0131r (SPAN\/TAP, s\u0131f\u0131r inline gecikme). Varsay\u0131lan mimari pasif izleme (SPAN\/TAP) \u00fczerine kuruludur; bu sayede inline gecikme eklenmez. Inline enforcement gereken senaryolarda, uygulanacak cihaz ve kural seti, kontrol d\u00f6ng\u00fcs\u00fc toleranslar\u0131na g\u00f6re se\u00e7ilir; hedef, kontrol \u00e7evrimlerini etkilemeyecek gecikme b\u00fct\u00e7esi i\u00e7inde kalmakt\u0131r[13]<\/sup>.<\/p>\n

    S2: Yanl\u0131\u015f pozitif oran\u0131 nedir ve devreye alma s\u0131ras\u0131nda nas\u0131l y\u00f6netilir?<\/strong>
    \n30 g\u00fcnl\u00fck denetimli \u00f6\u011frenme s\u0131ras\u0131nda t\u00fcm anomaliler santral m\u00fchendisleri taraf\u0131ndan s\u0131n\u0131fland\u0131r\u0131l\u0131r. Devreye alma sonras\u0131: a\u011f anomalileri i\u00e7in Yanl\u0131\u015f pozitif y\u00f6netimi, devreye alma s\u00fcrecinin kritik par\u00e7as\u0131d\u0131r. \u0130lk fazda denetimli \u00f6\u011frenme\/etiketleme ile temel \u00e7izgi olu\u015fturulur; ard\u0131ndan operasyon ekipleriyle birlikte \u201cnormal varyasyon\u201d ile \u201criskli sapma\u201d ayr\u0131m\u0131 kalibre edilir. Hedef, OT ekiplerinin alarm yorgunlu\u011fu ya\u015famayaca\u011f\u0131 bir seviyeye inmektir[13]<\/sup>. Model \u00e7evrimi\u00e7i \u00f6\u011frenme ile s\u00fcrekli adapte olur.<\/p>\n

    S3: Hydrowise eski protokollere sahip brownfield kurulumlarda \u00e7al\u0131\u015f\u0131r m\u0131?<\/strong>
    \nEvet. Pasif TAP ve SPAN portlar\u0131 \u00fczerinden entegre olur \u2014 PLC program\u0131, a\u011f yap\u0131land\u0131rmas\u0131 veya SCADA sunucusu de\u011fi\u015fikli\u011fi gerektirmez. Seri RS-485 Modbus RTU, trafik yans\u0131tmal\u0131 seri-Ethernet d\u00f6n\u00fc\u015ft\u00fcr\u00fcc\u00fcler arac\u0131l\u0131\u011f\u0131yla desteklenir[13]<\/sup>.<\/p>\n

    S4: Model kademeli baraj ar\u0131zalar\u0131n\u0131 nas\u0131l hesaba katar?<\/strong>
    \nEtki Puan\u0131 (I), hidrolojik olarak ba\u011fl\u0131 santraller i\u00e7in bir kademeli \u00e7arpan i\u00e7erir. Santral A’daki ele ge\u00e7irilen bir varl\u0131k (izolasyonda I=7) mansap ta\u015fk\u0131n sonu\u00e7lar\u0131 dikkate al\u0131nd\u0131\u011f\u0131nda I=9\u201310’a y\u00fckselebilir. ICOLD B\u00fclten 178 ile uyumludur[11]<\/sup>.<\/p>\n

    S5: Hydrowise PLC firmware manip\u00fclasyonunu tespit edebilir mi?<\/strong>
    \n\u00c7ift katmanl\u0131 tespit: (1) A\u011f \u2014 PLC programlama oturumlar\u0131 i\u015faretlenir ve de\u011fi\u015fiklik y\u00f6netimi kay\u0131tlar\u0131yla korelasyon yap\u0131l\u0131r[4]<\/sup>. (2) S\u00fcre\u00e7 \u2014 davran\u0131\u015fsal model, mant\u0131k de\u011fi\u015fikli\u011finden ba\u011f\u0131ms\u0131z olarak mansap kontrol davran\u0131\u015f\u0131 de\u011fi\u015fikliklerini tespit eder[13]<\/sup>.<\/p>\n

    S6: Hangi uyumluluk \u00e7er\u00e7eveleri desteklenir?<\/strong>
    \nMimari tasar\u0131m, IEC 62443 ve NIST ZTA gibi \u00e7er\u00e7evelerle uyumlu olacak \u015fekilde kurgulanabilir. Tesisin tabi oldu\u011fu reg\u00fclasyonlar (\u00f6r. NIS2 benzeri gereklilikler) proje kapsam\u0131nda de\u011ferlendirilir; gerekli kan\u0131t\/raporlama \u00e7\u0131kt\u0131lar\u0131 kurumun s\u00fcre\u00e7lerine g\u00f6re yap\u0131land\u0131r\u0131labilir<\/p>\n

    S7: \u015eifreli OT trafi\u011fi (\u00f6r. TLS \u00fczerinden OPC UA) nas\u0131l y\u00f6netilir?<\/strong>
    \n(1) Meta veri analizi \u2014 \u015fifre \u00e7\u00f6zmeden anomali tespit. (2) Tam y\u00fck incelemesi i\u00e7in DMZ i\u00e7inde TLS sonland\u0131rma proxy’si, anahtar y\u00f6netimi IEC 62443-3-3 SR 4.3 uyumlu[8][13]<\/sup>.<\/p>\n

    S8: Orta \u00f6l\u00e7ekli (100\u2013300 MW) bir HES i\u00e7in kurulum s\u00fcresi nedir?<\/strong>
    \nKurulum s\u00fcresi; saha b\u00fcy\u00fckl\u00fc\u011f\u00fc, varl\u0131k say\u0131s\u0131 ve eri\u015fim k\u0131s\u0131tlar\u0131na g\u00f6re de\u011fi\u015fir. Yakla\u015f\u0131m genellikle \u201cpasif g\u00f6r\u00fcn\u00fcrl\u00fck \u2192 temel \u00e7izgi \u2192 do\u011frulama \u2192 politika\/aksiyon\u201d ad\u0131mlar\u0131yla ilerler ve \u00fcretim kesintisi gerektirmeyecek \u015fekilde planlanmas\u0131 hedeflenir[13]<\/sup>.<\/p>\n

    S9: Hydrowise’\u0131n \u00fcretim tahmini ve su debisi \u00f6ng\u00f6r\u00fcs\u00fc nas\u0131l \u00e7al\u0131\u015f\u0131r?<\/strong>
    \nMeteorolojik veriler, havza hidrolojik parametreleri ve ge\u00e7mi\u015f \u00fcretim kay\u0131tlar\u0131yla e\u011fitilen ML modelleri. Saatlik ve g\u00fcnl\u00fck \u00e7\u00f6z\u00fcn\u00fcrl\u00fckte 72 saatlik tahmin penceresi. Rezervuar seviyesi + debi + t\u00fcrbin verim e\u011frileri + EP\u0130A\u015e fiyat sinyalleri entegre edilerek G\u00d6P\/G\u0130P uyumlu \u00fcretim optimizasyonu[13]<\/sup>.<\/p>\n

    S10: EP\u0130A\u015e pazar entegrasyonu hangi s\u00fcre\u00e7leri kapsar?<\/strong>
    \nHydrowise, EP\u0130A\u015e G\u00d6P ve G\u0130P ile do\u011frudan entegre \u00e7al\u0131\u015f\u0131r. Otomatik bildirim haz\u0131rlama, dengesizlik riski analizi, gelir maksimizasyonu ve pazar planlama zek\u00e2s\u0131 sunar. Siber g\u00fcvenlik katman\u0131, pazar verisi ileti\u015fim kanallar\u0131n\u0131n b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc korur[13]<\/sup>.<\/p>\n

    Sonu\u00e7 ve Eylem \u00c7a\u011fr\u0131s\u0131<\/h1>\n

    Hidroelektrik altyap\u0131s\u0131n\u0131n dijital d\u00f6n\u00fc\u015f\u00fcm\u00fc yaln\u0131zca bir siber g\u00fcvenlik projesi de\u011fildir \u2014 g\u00fcvenlik, verimlilik, tahmin ve pazar entegrasyonunu birle\u015ftiren b\u00fct\u00fcnle\u015fik bir strateji gerektirir. IT ve OT’nin yak\u0131nsamas\u0131, eski protokollerin kal\u0131c\u0131l\u0131\u011f\u0131 ve HES kontrol sistemlerine y\u00f6nelik ba\u015far\u0131l\u0131 bir sald\u0131r\u0131n\u0131n kinetik sonu\u00e7lar\u0131, teknik olarak titiz, operasyonel olarak pratik ve s\u00fcrekli adaptif bir savunma stratejisi talep etmektedir.<\/p>\n

    Hydrowise bu stratejiyi u\u00e7tan uca dijital enerji y\u00f6netim platformu olarak sunar: a\u011f kenar\u0131ndaki derin paket incelemesinden, kontrol sistemi \u00e7ekirde\u011findeki yapay zek\u00e2 destekli davran\u0131\u015fsal analize, \u00fcretim tahmini ve kestirimci bak\u0131mdan EP\u0130A\u015e pazar entegrasyonu ve otomatik raporlamaya kadar[13]<\/sup>.<\/p>\n

    [\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

    [vc_row][vc_column][vc_column_text css=””] Kritik Altyap\u0131da SCADA G\u00fcvenli\u011fi Sald\u0131r\u0131 Y\u00fczeyi Analizi ve Savunma Katmanlar\u0131 Hydrowise Yapay Zek\u00e2 Destekli Hidroelektrik Santral Y\u00f6netim Sistemi Renewasoft | 2026 Seviye: \u0130leri\u00a0\u00a0 Hedef Kitle: SCADA M\u00fchendisi, HES \u0130\u015fletmecisi, CTO, Altyap\u0131 Yat\u0131r\u0131mc\u0131s\u0131 Giri\u015f: T\u00fcrbinin Arkas\u0131ndaki G\u00f6r\u00fcnmez Tehdit Her 39 saniyede bir, d\u00fcnyan\u0131n herhangi bir yerindeki internete ba\u011fl\u0131 bir sisteme siber sald\u0131r\u0131 ger\u00e7ekle\u015ftiriliyor[1]. \u00c7o\u011fu […]<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1863],"tags":[],"class_list":["post-2975","post","type-post","status-publish","format-standard","hentry","category-kritik-altyapi-siber-guvenligi-ve-endustriyel-sistem-guvenligi"],"yoast_head":"\nKritik Altyap\u0131da SCADA G\u00fcvenli\u011fi - Renewasoft Enerji ve Yaz\u0131l\u0131m A.\u015e %<\/title>\n<meta name=\"description\" content=\"HES SCADA sistemlerinde g\u00fcvenlik riskleri, sald\u0131r\u0131 y\u00fczeyi haritalamas\u0131, Zero Trust savunma katmanlar\u0131 ve Hydrowise\u2019\u0131n yapay zek\u00e2 destekli OT korumas\u0131.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Kritik Altyap\u0131da SCADA G\u00fcvenli\u011fi - Renewasoft Enerji ve Yaz\u0131l\u0131m A.\u015e %\" \/>\n<meta property=\"og:description\" content=\"HES SCADA sistemlerinde g\u00fcvenlik riskleri, sald\u0131r\u0131 y\u00fczeyi haritalamas\u0131, Zero Trust savunma katmanlar\u0131 ve Hydrowise\u2019\u0131n yapay zek\u00e2 destekli OT korumas\u0131.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/\" \/>\n<meta property=\"og:site_name\" content=\"Renewasoft Enerji ve Yaz\u0131l\u0131m A.\u015e\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-26T22:34:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-01T16:47:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/renewasoft.com.tr\/wp-content\/uploads\/2026\/02\/gorsel-1-purdue-modeli.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1400\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Bayram Kamus\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Bayram Kamus\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"21 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/\"},\"author\":{\"name\":\"Bayram Kamus\",\"@id\":\"https:\/\/renewasoft.com.tr\/#\/schema\/person\/34e2b2ece2456ef9b7617d547b7f46ba\"},\"headline\":\"Kritik Altyap\u0131da SCADA G\u00fcvenli\u011fi\",\"datePublished\":\"2026-02-26T22:34:47+00:00\",\"dateModified\":\"2026-03-01T16:47:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/\"},\"wordCount\":4278,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/renewasoft.com.tr\/#organization\"},\"image\":{\"@id\":\"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/renewasoft.com.tr\/wp-content\/uploads\/2026\/02\/gorsel-1-purdue-modeli.png\",\"articleSection\":[\"Kritik Altyap\u0131 Siber G\u00fcvenli\u011fi ve End\u00fcstriyel Sistem G\u00fcvenli\u011fi\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/\",\"url\":\"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/\",\"name\":\"Kritik Altyap\u0131da SCADA G\u00fcvenli\u011fi - Renewasoft Enerji ve Yaz\u0131l\u0131m A.\u015e %\",\"isPartOf\":{\"@id\":\"https:\/\/renewasoft.com.tr\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/renewasoft.com.tr\/wp-content\/uploads\/2026\/02\/gorsel-1-purdue-modeli.png\",\"datePublished\":\"2026-02-26T22:34:47+00:00\",\"dateModified\":\"2026-03-01T16:47:24+00:00\",\"description\":\"HES SCADA sistemlerinde g\u00fcvenlik riskleri, sald\u0131r\u0131 y\u00fczeyi haritalamas\u0131, Zero Trust savunma katmanlar\u0131 ve Hydrowise\u2019\u0131n yapay zek\u00e2 destekli OT korumas\u0131.\",\"breadcrumb\":{\"@id\":\"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#primaryimage\",\"url\":\"https:\/\/renewasoft.com.tr\/wp-content\/uploads\/2026\/02\/gorsel-1-purdue-modeli.png\",\"contentUrl\":\"https:\/\/renewasoft.com.tr\/wp-content\/uploads\/2026\/02\/gorsel-1-purdue-modeli.png\",\"width\":1400,\"height\":900},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/renewasoft.com.tr\/index.php\/tr\/ana-sayfa\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Kritik Altyap\u0131da SCADA G\u00fcvenli\u011fi\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/renewasoft.com.tr\/#website\",\"url\":\"https:\/\/renewasoft.com.tr\/\",\"name\":\"Renewasoft Enerji ve Yaz\u0131l\u0131m A.\u015e\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/renewasoft.com.tr\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/renewasoft.com.tr\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/renewasoft.com.tr\/#organization\",\"name\":\"Renewasoft Enerji ve Yaz\u0131l\u0131m A.\u015e\",\"url\":\"https:\/\/renewasoft.com.tr\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/renewasoft.com.tr\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/renewasoft.com.tr\/wp-content\/uploads\/2025\/03\/images.jpg\",\"contentUrl\":\"https:\/\/renewasoft.com.tr\/wp-content\/uploads\/2025\/03\/images.jpg\",\"width\":225,\"height\":225,\"caption\":\"Renewasoft Enerji ve Yaz\u0131l\u0131m A.\u015e\"},\"image\":{\"@id\":\"https:\/\/renewasoft.com.tr\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/renewasoft\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/renewasoft.com.tr\/#\/schema\/person\/34e2b2ece2456ef9b7617d547b7f46ba\",\"name\":\"Bayram Kamus\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/renewasoft.com.tr\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/5dc034653d3652a594cbe48c6b4c7bd9794d8e11f0bc0d2219fb266b54ce0149?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/5dc034653d3652a594cbe48c6b4c7bd9794d8e11f0bc0d2219fb266b54ce0149?s=96&d=mm&r=g\",\"caption\":\"Bayram Kamus\"},\"url\":\"https:\/\/renewasoft.com.tr\/index.php\/author\/bayram\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Kritik Altyap\u0131da SCADA G\u00fcvenli\u011fi - Renewasoft Enerji ve Yaz\u0131l\u0131m A.\u015e %","description":"HES SCADA sistemlerinde g\u00fcvenlik riskleri, sald\u0131r\u0131 y\u00fczeyi haritalamas\u0131, Zero Trust savunma katmanlar\u0131 ve Hydrowise\u2019\u0131n yapay zek\u00e2 destekli OT korumas\u0131.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/","og_locale":"tr_TR","og_type":"article","og_title":"Kritik Altyap\u0131da SCADA G\u00fcvenli\u011fi - Renewasoft Enerji ve Yaz\u0131l\u0131m A.\u015e %","og_description":"HES SCADA sistemlerinde g\u00fcvenlik riskleri, sald\u0131r\u0131 y\u00fczeyi haritalamas\u0131, Zero Trust savunma katmanlar\u0131 ve Hydrowise\u2019\u0131n yapay zek\u00e2 destekli OT korumas\u0131.","og_url":"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/","og_site_name":"Renewasoft Enerji ve Yaz\u0131l\u0131m A.\u015e","article_published_time":"2026-02-26T22:34:47+00:00","article_modified_time":"2026-03-01T16:47:24+00:00","og_image":[{"width":1400,"height":900,"url":"https:\/\/renewasoft.com.tr\/wp-content\/uploads\/2026\/02\/gorsel-1-purdue-modeli.png","type":"image\/png"}],"author":"Bayram Kamus","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Bayram Kamus","Tahmini okuma s\u00fcresi":"21 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#article","isPartOf":{"@id":"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/"},"author":{"name":"Bayram Kamus","@id":"https:\/\/renewasoft.com.tr\/#\/schema\/person\/34e2b2ece2456ef9b7617d547b7f46ba"},"headline":"Kritik Altyap\u0131da SCADA G\u00fcvenli\u011fi","datePublished":"2026-02-26T22:34:47+00:00","dateModified":"2026-03-01T16:47:24+00:00","mainEntityOfPage":{"@id":"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/"},"wordCount":4278,"commentCount":0,"publisher":{"@id":"https:\/\/renewasoft.com.tr\/#organization"},"image":{"@id":"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#primaryimage"},"thumbnailUrl":"https:\/\/renewasoft.com.tr\/wp-content\/uploads\/2026\/02\/gorsel-1-purdue-modeli.png","articleSection":["Kritik Altyap\u0131 Siber G\u00fcvenli\u011fi ve End\u00fcstriyel Sistem G\u00fcvenli\u011fi"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/","url":"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/","name":"Kritik Altyap\u0131da SCADA G\u00fcvenli\u011fi - Renewasoft Enerji ve Yaz\u0131l\u0131m A.\u015e %","isPartOf":{"@id":"https:\/\/renewasoft.com.tr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#primaryimage"},"image":{"@id":"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#primaryimage"},"thumbnailUrl":"https:\/\/renewasoft.com.tr\/wp-content\/uploads\/2026\/02\/gorsel-1-purdue-modeli.png","datePublished":"2026-02-26T22:34:47+00:00","dateModified":"2026-03-01T16:47:24+00:00","description":"HES SCADA sistemlerinde g\u00fcvenlik riskleri, sald\u0131r\u0131 y\u00fczeyi haritalamas\u0131, Zero Trust savunma katmanlar\u0131 ve Hydrowise\u2019\u0131n yapay zek\u00e2 destekli OT korumas\u0131.","breadcrumb":{"@id":"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/"]}]},{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#primaryimage","url":"https:\/\/renewasoft.com.tr\/wp-content\/uploads\/2026\/02\/gorsel-1-purdue-modeli.png","contentUrl":"https:\/\/renewasoft.com.tr\/wp-content\/uploads\/2026\/02\/gorsel-1-purdue-modeli.png","width":1400,"height":900},{"@type":"BreadcrumbList","@id":"https:\/\/renewasoft.com.tr\/index.php\/tr\/2026\/02\/26\/kritik-altyapida-scada-guvenligi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/renewasoft.com.tr\/index.php\/tr\/ana-sayfa\/"},{"@type":"ListItem","position":2,"name":"Kritik Altyap\u0131da SCADA G\u00fcvenli\u011fi"}]},{"@type":"WebSite","@id":"https:\/\/renewasoft.com.tr\/#website","url":"https:\/\/renewasoft.com.tr\/","name":"Renewasoft Enerji ve Yaz\u0131l\u0131m A.\u015e","description":"","publisher":{"@id":"https:\/\/renewasoft.com.tr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/renewasoft.com.tr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":"Organization","@id":"https:\/\/renewasoft.com.tr\/#organization","name":"Renewasoft Enerji ve Yaz\u0131l\u0131m A.\u015e","url":"https:\/\/renewasoft.com.tr\/","logo":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/renewasoft.com.tr\/#\/schema\/logo\/image\/","url":"https:\/\/renewasoft.com.tr\/wp-content\/uploads\/2025\/03\/images.jpg","contentUrl":"https:\/\/renewasoft.com.tr\/wp-content\/uploads\/2025\/03\/images.jpg","width":225,"height":225,"caption":"Renewasoft Enerji ve Yaz\u0131l\u0131m A.\u015e"},"image":{"@id":"https:\/\/renewasoft.com.tr\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/renewasoft\/"]},{"@type":"Person","@id":"https:\/\/renewasoft.com.tr\/#\/schema\/person\/34e2b2ece2456ef9b7617d547b7f46ba","name":"Bayram Kamus","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/renewasoft.com.tr\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/5dc034653d3652a594cbe48c6b4c7bd9794d8e11f0bc0d2219fb266b54ce0149?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5dc034653d3652a594cbe48c6b4c7bd9794d8e11f0bc0d2219fb266b54ce0149?s=96&d=mm&r=g","caption":"Bayram Kamus"},"url":"https:\/\/renewasoft.com.tr\/index.php\/author\/bayram\/"}]}},"_links":{"self":[{"href":"https:\/\/renewasoft.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/2975","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/renewasoft.com.tr\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/renewasoft.com.tr\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/renewasoft.com.tr\/index.php\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/renewasoft.com.tr\/index.php\/wp-json\/wp\/v2\/comments?post=2975"}],"version-history":[{"count":6,"href":"https:\/\/renewasoft.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/2975\/revisions"}],"predecessor-version":[{"id":3368,"href":"https:\/\/renewasoft.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/2975\/revisions\/3368"}],"wp:attachment":[{"href":"https:\/\/renewasoft.com.tr\/index.php\/wp-json\/wp\/v2\/media?parent=2975"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/renewasoft.com.tr\/index.php\/wp-json\/wp\/v2\/categories?post=2975"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/renewasoft.com.tr\/index.php\/wp-json\/wp\/v2\/tags?post=2975"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}