Sürdürülebilir Kalkınma Amaçları

• 2

• MakaleYalnız künye2026/r/kostu/10834
  Scanning Capabilities of Nessus, Qualys and OpenVAS Vulnerability Scanner Tools for Vulnerable Operating Systems and Web Applications

  Kara, Mehmet

  Web applications, which serve as the primary interface between users and organizational systems, represent a particularly critical attack surface that requires specialized attention to ensure their security. Common web application vulnerabilities, such as SQL injection, cross-site scripting (XSS), and insecure authentication mechanisms, can provide attackers with direct access to sensitive data and backend systems. Therefore, it is crucial for vulnerability scanning tools to effectively detect and report web application security flaws. Vulnerability scanning tools are widely used to detect risks in the software and hardware used in information systems. However, owing to the variety of software and hardware used in information systems, vulnerability scanning and detection tools have very different capabilities. These differences in capabilities make it difficult to compare the vulnerability scanning tools. In this study, after determining the necessary comparison criteria for general information system and web application vulnerability detection, the widely used Nessus, Qualys, and OpenVAS vulnerability scanning tools were examined. The results were compared by running the vulnerability scanning tools on operating systems and web applications known to contain vulnerabilities.

  İncele
• BildiriYalnız künye2025/r/kostu/10643
  Efficiency of Adding a New Template to Network Management System and Zabbix Application

  Kara, Mehmet; Tuǧrul, Gokhan

  In today's world, where institutional business processes are transferred to electronic environments, the real-time monitoring and management of software and hardware assets in institutional information systems are of great importance for ensuring business continuity. Information system software and hardware are managed using network management software. Due to the presence of numerous different brands of network devices, software, IoT devices, mobile computing devices, and cloud computing devices, network management software cannot recognize every type of device. Therefore, there is a need for methods that can efficiently and quickly introduce new and different devices to network management software. Within the scope of this article, approaches to adding software and hardware to the open-source network management system Zabbix are analyzed. Templator tool was analyzed. The study examines how software and hardware can be quickly introduced by creating templates and provides an application of this process.

  • 
  İncele
• MakaleAçık Erişim2025Scopus SJRQ1/r/kostu/10469
  xT-STRIDE threat model for unmanned air vehicle security

  Yerden, Aytac Ugur; Senol, Sinan; Kara, Mehmet; Dilibal, Savas

  In recent years, substantial progress has been made in the design and development of unmanned aerial vehicles (UAVs) with diverse functional capabilities for avionic applications. Beyond addressing performance bottlenecks, the growing threat of cybersecurity attacks introduces additional complexity to the UAV design process. Developing a high-performance UAV system involves navigating technical security challenges that must be addressed pragmatically. Implementing excessive security measures can increase costs and degrade system performance, while insufficient protection of vulnerable components may expose the UAV to potential exploitation. This study introduces a multi-layered drone system, thoroughly examines threats to its components, and outlines corresponding safeguards in trusted layers. The security requirements for UAV systems were defined using the Common Criteria framework. To strengthen UAV security under real-world operational conditions, a novel threat modeling approach, xT-STRIDE, has been developed. This method incorporates the UAV’s communication and embedded system architecture, modeled with realistic security elements. The xT-STRIDE framework was evaluated theoretically in conjunction with traditional threat modeling techniques.

  • 
  AtıfScopus5·WoS3·OpenAlex4

  İncele