Cybersecurity Technology Foresight: 2040 Scenarios for Turkey

Abstract

Foresight is a methodical and comprehensive approach that prioritizes investment and research in order to shape the future and implement future strategies. Cybersecurity, one of the most important elements of Industry 4.0, is to protect information and communication systems against cyber attacks and to ensure the availability, confi-dentiality and integrity of these systems and the data therein. This study aims to make a theoretical and practical contribution to foresight and cybersecurity studies by summarizing the updated version of the methods and outputs used in the doctoral thesis titled “Technology Foresight and Modeling: Turkish Cybersecurity Foresight 2040”, con-ducted at Middle East Technical University (METU) in 2019. As a result of the study, Turkey's national cybersecurity technology foresight was given with different scenarios; Turkey's strengths, weaknesses, opportunities and threats in terms of cybersecurity were determined; a cybersecurity technology taxonomy which is officially accepted by the Presidency of Defense Industries was created; the cybersecurity status of the universities and companies in Turkey has been determined; and concrete policy recommendations based on foresight outputs have been put forward. The study is the most comprehensive cybersecurity foresight in Turkey in terms of topics covered and participants, which comprises nearly 150 experts from government, military, academia, and the private sector. Overall, the study provides important insights into the current state of cybersecurity in Turkey and makes recommendations for the future. Its wide range of stakeholders and comprehensive analysis make it a valuable resource for understanding the complex landscape of cybersecurity in the country.

Keywords

• Cybersecurity
• Cybersecurity in Turkey
• Cybersecurity technology taxonomy
• Foresight Periscope Model
• Technology foresight

References

1. Bahuguna, A., Bisht, R. K., & Pande, J. (2020). Country-level cybersecurity posture assessment: Study and analysis of practices. Information Security Journal, 29(5), 250–266. https://doi.org/10.1080/19393555.2020.1767239
2. Brandes, S. (2013). The Newest Warfighting Domain: Cyberspace. Synesis, 90–95. https://api.semanticscholar.org/CorpusID:55688987
3. Braue, D. (2021). Global Cybersecurity Spending To Exceed $1.75 Trillion From 2021-2025. https://cybersecurityventures.com/cybersecurity-spending-2021-2025
4. Chen, H., Wakeland, W., & Yu, J. (2012). A two-stage technology foresight model with system dynamics simulation and its application in the Chinese ICT industry. Technological Forecasting and Social Change, 79(7), 1254–1267. https://doi.org/10.1016/j.techfore.2012.02.007
5. Çifci, H. (2017). Her Yönüyle Siber Savaş (2nd ed.). TÜBİTAK.
6. Çifci, H. (2019). Technology Foresight and Modeling: Turkish Cybersecurity Foresight 2040 [Middle East Technical University]. http://etd.lib.metu.edu.tr/upload/12623200/index.pdf
7. Conway, M. (2014). Foresight: an Introduction. Thinking Futures. http://choo.ischool.utoronto.ca/fis/courses/inf1005/foresight.intro.conway.pdf
8. Cyber Security Council. (2016). European Foresight Cyber Security Meeting. https://www.ospi.es/export/sites/ospi/documents/European-Foresight-Cyber-Security-2016.pdf

9. ENISA. (2012). National Cyber Security Strategies - Practical Guide on Development and Execution (Issue December). https://www.enisa.europa.eu/publications/national-cyber-security-strategies-an-implementation-guide
10. European Commission. (2013). Cybersecurity Strategy of the European Union: An Open, Safe and Secure Cyberspace. In European Commission. https://edps.europa.eu/data-protection/our-work/publications/opinions/cyber-security-strategy-european-union-open-safe-and_en
11. Keenan, M., Miles, I., & Koi-Ova, J. (2003). Handbook of Knowledge Society Foresight. European Foundation for the Improvement of Living and Working Conditions. https://www.eurofound.europa.eu/publications/2003/handbook-of-knowledge-society-foresight
12. Martin, B. R. (1995). Foresight in science and technology. Technology Analysis and Strategic Management, 7(2), 139–168. https://doi.org/10.1080/09537329508524202
13. Martin, B. R., & Johnston, R. (1999). Technology Foresight for Wiring Up the National Innovation System-Experiences in Britain, Australia, and New Zealand. Technological Forecasting and Social Change, 60(1), 37–54. https://doi.org/10.1016/S0040-1625(98)00022-5
14. Miles, I. (2002). Appraisal of Alternative Methods and Procedures for Producing Regional Foresight. In Mobilising the regional foresight potential for an enlarged EU (Issue May). https://www.researchgate.net/publication/235407634_Appraisal_of_Alternative_Methods_and_Procedures_for_Producing_Regional_Foresight
15. NIST. (2018). Framework for Improving Critical Infrastructure Cybersecurity. https://doi.org/10.6028/NIST.CSWP.04162018
16. NIST. (2022). Glossary: cyberspace. https://csrc.nist.gov/glossary/term/cyberspace
17. Ogasawara, A. (2015). 1st Preliminary Report on The 10th Science and Technology Foresight Survey. 1–40. http://www.nistep.go.jp/wp/wp-content/uploads/2-1_Ogasawara.pdf
18. Popper, R. (2008). How are foresight methods selected? Foresight, 10(6), 62–89. https://doi.org/10.1108/14636680810918586
19. Porter, A. L. (2010). Technology foresight: types and methods. International Journal of Foresight and Innovation Policy, 6(1), 36–45. https://doi.org/10.1504/IJFIP.2010.032664
20. Presidential Digital Transformation Office. (2022). Siber Kümelenme Projesi. https://cbddo.gov.tr/projeler/siber-kumelenme/
21. Rodrigues, B., Franco, M., Parangi, G., & Stiller, B. (2019). SEConomy: A Framework for the Economic Assessment of Cybersecurity BT - Economics of Grids, Clouds, Systems, and Services (K. Djemame, J. Altmann, J. Á. Bañares, O. Agmon Ben-Yehuda, & M. Naldi (eds.); pp. 154–166). Springer International Publishing. https://files.ifi.uzh.ch/CSG/staff/rodrigues/extern/publications/GECON-SEConomy.pdf
22. TGB. (2022). Duyurular: Teknopark sayımız 94’e ulaştı. https://teknopark.sanayi.gov.tr
23. The White House. (2015). National Security Strategy. 32. https://obamawhitehouse.archives.gov/sites/default/files/docs/2015_national_security_strategy_2.pdf
24. TÜBİTAK. (2004). Ulusal Bilim ve Teknoloji Politikaları - 2003-2023 Strateji Belgesi. In Ulusal Bilim ve Teknoloji Politikaları 2003-2023 Strateji Belgesi. https://www.tubitak.gov.tr/tubitak_content_files/vizyon2023/Vizyon2023_Strateji_Belgesi.pdf
25. Turkish Cybersecurity Cluster. (2022). About Us. https://siberkume.org.tr/About
26. World Economic Forum. (2021). The Global Risks Report 2021. https://www3.weforum.org/docs/WEF_The_Global_Risks_Report_2021.pdf
27. Yüksel, N. (2018). A New Technology Foresight Model and Its Application in Turkish Defense Industry for Aerospace Communication Technologies of 2040 [Middle East Technical University]. http://etd.lib.metu.edu.tr/upload/12622819/index.pdf
28. Yüksel, N., & Çifci, H. (2017). A New Model for Technology Foresight : Foresight Periscope Model (FPM). 2017 International Conference on Engineering, Technology and Innovation (ICE/ITMC), 807–817. https://doi.org/10.1109/ICE.2017.8279967