Mimarlık Eğitiminde Siber Güvenlik Kültürünün Benimsenmesi Üzerine Bir Değerlendirme

Öz

Teknolojinin hızla ilerlemesi, diğer pek çok alanı olduğu gibi mimarlık alanını da dönüştürerek, giderek daha fazla birbirine bağlı ve dijital sistemlere dayanan yeni bir “akıllı yapılar” çağını başlatmıştır. Ancak Ortak ağa bağlanan ve birbirleriyle iletişim kurabilen nesneler ve cihazlar, potansiyel olarak siber saldırganların istismar edebileceği zayıflıklara ve açıklıklara sahip olup internete bağlı her türlü yapı, sistem ve donanım hacklenme riski ile karşı karşıyadır. Dolayısıyla bu kapsama giren her tür nesneyi ve yapıları geliştiren ve bunlarla ilgilenen uzmanlık dalının, profesyonel alanlarının bir parçası olacak şekilde “siber güvenlik kültürü”nü benimsemesi son derece önemlidir. Mimari tasarımda akıllı yapılara olan bağımlılık giderek artmasına rağmen siber güvenlik alanı mimarlık alanı içerisinde oldukça kısıtlı bir düzeyde ele alınmaktadır. Mimari tasarımlar, hiç durmadan farklılaşan siber tehditlere karşı ne kadar hazırlıklı planlanmaktadır sorusu ise bu çalışmanın temel problemini oluşturmaktadır. Siber güvenlik kültürü kavramıyla, siber tehditlerden korunma konusunda güçlü bir bilinç düzeyinin oluşturulması, kurumsal ve bireysel düzeyde ortak değerlerin ve normların oluşturulması, paylaşılması ve bu konudaki eylemlerin sürdürülebilir olması kastedilmektedir. Çalışma kapsamında “siber güvenlik kültürü”nün mimarlık alanındaki önemine değinilmesinin ardından bu kavramın mimarlık eğitim sistemine ne ölçüde adapte edildiği, dünyanın farklı ülkelerinde yer alan ve mimarlık bölümleriyle öne çıkan üniversitelerde kullanılan müfredat ve ders içerikleri incelenerek analiz edilmiştir. Araştırma sonucunda mevcut mimarlık eğitimi ve müfredatının yeni mezun bir mimarın kapsamlı bir siber güvenlik kültürü geliştirmesini sağlayacak bir yapıda henüz olmadığı çıkarımında bulunulmuştur.

Anahtar Kelimeler

• Akıllı Bina
• Mimarlık
• Mimarlık Eğitimi
• Siber Güvenlik
• Siber Güvenlik Kültürü

An Evaluation of the Adoption of Cybersecurity Culture in Architectural Education

Öz

The rapid advancement of technology has transformed the field of architecture (as in many other fields), ushering in a new era of "smart" buildings that are increasingly interconnected and reliant on digital systems. However, objects and devices that are connected to the common network and can communicate with each other have weaknesses and vulnerabilities that can potentially be exploited by cyber attackers, and all kinds of structures, systems and hardware connected to the internet are at risk of being hacked. Despite the increasing reliance on smart structures in architectural design, the field of cybersecurity is addressed at a very limited level within the field of architecture. The question of how prepared architectural designs are planned against ever-evolving cyber threats constitutes the main problem of this study. The concept of cyber security culture refers to the creation of a strong level of awareness about protection from cyber threats, the creation and sharing of common values and norms at the institutional and individual level, and the sustainability of actions in this regard. Within the scope of the study, after mentioning the importance of “cyber security culture” in the field of architecture, the extent to which this concept has been adapted to the architectural education system has been analyzed by examining the curricula and course contents used in universities in different countries of the world that stand out with their architecture departments. As a result of the research, it was concluded that the current architectural education and curriculum is not yet in a structure that will enable a newly graduated architect to develop a comprehensive cyber security culture.

Anahtar Kelimeler

• Architecture
• Architectural Education
• Cybersecurity
• Cybersecurity Culture
• Smart Building

Kaynakça

1. Architectural Digest. (2020, September). Zaha Hadid Architect was the Victim of a Ransomware Attack. https://www.architecturaldigest.com/story/zaha-hadid-architects-was-the-victim-of-a-ransomware-attack.
2. Başarır, L. (2022). Modelling AI in Architectural Education. Gazi University Journal of Science, 35(4), 1260–1278. https://doi.org/10.35378/gujs.967981
3. Braun, V., Clarke, V. (2006). Using Thematic Analysis in Psychology. Qualitative Research in Psychology, 3(2), 77–101. https://doi.org/10.1191/1478088706qp063oa
4. Boyes, H. A. (2014). Cyber Security of Intelligent Buildings: A Neview. Engineering & Technology Reference. https://doi.org/10.1049/etr.2014.0008
5. Ciholas, P., Lennie, A., Sadigova, P., & Such, J. M. (2019). The Security of Smart Buildings: A Systematic Literature Review, ArXiv, 1-50. https://doi.org/10.48550/arXiv.1901.05837
6. Craigen, D., Diakun-Thibault, N., & Purse, R. (2014). Defining Cybersecurity. Technology Innovation Management Review, 4(10), 13-21.
7. Columbia. (2024, September). Architecture Department Course Descriptions. https://architecture.barnard.edu/architecture-department-course-descriptions.
8. Delft. (2024, November). Bachelor of Architecture, Urbanism and Building Sciences. https://www.tudelft.nl/en/onderwijs/opleidingen/bachelors/bk/bachelor-of-architecture-urbanism-and-building-sciences

9. ETH Zurich. (2024, September). Teaching Areas & Categories. https://arch.ethz.ch/en/studium/studienangebot/bachelor-architektur/lehrgebiete.html
10. Floridi, L. (2013). The Ethics of Information. United Kingdom: Oxford University Press.
11. Gazi. (2024, October). Mimarlık Programı Bilgileri. https://obs.gazi.edu.tr/oibs/bologna/index.aspx?lang=tr&curOp=showPac&curUnit=10&curSunit=106060482#
12. Harding, L. (2015). The Node Pole: Inside Facebook's Swedish Hub near the Arctic Circle. https://www.theguardian.com/technology/2015/sep/25/facebook-datacentre-lulea-sweden-node-pole
13. Harvard. (2024, October). Courses. https://www.gsd.harvard.edu/courses/?department=architecture
14. HKU. (2024, December). Architecture Introduction. https://www.arch.hku.hk/programmes_/arch/.
15. Hofer, F., Russo, B. (2023). Architecture and Its Vulnerabilities in Smart-Lighting Systems. In: Vershinin, Y.A., Pashchenko, F., Olaverri-Monreal, C. (eds) Technologies for Smart Cities. Springer, Cham. https://doi.org/10.1007/978-3-031-05516-4_10.
16. Istanbul Technical University. (2024, September). Ders Planları. https://obs.itu.edu.tr/public/DersPlan/
17. Hollander, J. B., & Sussman, A. (2018). Why Architecture Education Needs to Embrace Evidence-Based Design, Now. Architectural Digest.
18. Jacob, J., Peters, M.L., & Yang, T.A. (2019). Interdisciplinary Cybersecurity: Rethinking the Approach and the Process. Neuromorphic Computing Symposium.
19. Kaspersky. (2019, September). Smart Buildings Threat Landscape: 37.8% Targeted by Malicious Attacks in H1 2019. https://www.kaspersky.com/about/press-releases/smart-buildings-threat-landscape
20. Kostešić, I., & Jukić, T. (2024). Institutionalized Interdisciplinary Approaches in Architectural and Design Education. Prostor: A Scholarly Journal of Architecture and Urban Planning, 32(1), 1–186. https://doi.org/10.31522/p.32.1(67).7
21. Kim, E., Kwon, J., Yoon, J., & Agogino, A.M. (2019). Embedding Cybersecurity Into Design Education: Increasing Designers’ Awareness of Cybersecurity Throughout the Design Process. Volume 3: 21st International Conference on Advanced Vehicle Technologies; 16th International Conference on Design Education.
22. Lawrence-Fowler, W.A. (2013). Multi-disciplinary Approach to Cyber Security Education.
23. Mylrea, M., Gourisetti, S. N. G., Nicholls, A, (2017). An Introduction to Buildings Cybersecurity Framework, In 2017 IEEE Symposium Series on Computational Intelligence (SSCI), pp. 1-7. https://doi.org/10.1109/SSCI.2017.8285228.
24. Majority Staff Report, (2014, September). A “Kill Chain” Analysis of the 2013 Target Data Breach. September https://www.emacromall.com/reference/A-Kill-Chain-Analysis-of-the-2013-Target-Data-Breach.pdf.
25. Mantha, B., de Soto, B. G., & Karri, R. (2021). Cyber Security Threat Modeling in the AEC Industry: An Example for the Commissioning of the Built Environment. Sustainable Cities and Society, 66, 102682. https://doi.org/10.1016/j.scs.2020.102682
26. Melbourne. (2024, October). Architecture. https://msd.unimelb.edu.au/about/disciplines/architecture
27. METU. (2024, August). Courses Given by the Department of Architecture. https://catalog.metu.edu.tr/prog_courses.php?prog=120.
28. MIT. (2024, November). Classes. https://architecture.mit.edu/classes
29. Mouheb, D., Abbas, S., & Merabti, M. (2019). Cybersecurity Curriculum Design: A Survey. Transactions on Edutainment XV, 93-107. https://doi.org/10.1007/978-3-662-59351-6_9
30. MSA. (2024, October). Studying At Manchester School of Architecture. https://www.msa.ac.uk/study/
31. MSU. (2024, December). 2024-2025 Öğretim Yılı Öğretim Planı Ders Programı Ders Bilgi Formları. https://msgsu.edu.tr/wp-content/uploads/2024/10/2024_2025_MIMBOL_DERSKATALOGU.pdf
32. NUS. (2024, October). Department of Architecture. https://cde.nus.edu.sg/arch/
33. Pak, B., & Verbeke, J. (2012). Design Studio 2.0: Uugmenting Reflective Architectural Design Learning. Journal of Information Technology in Construction, 502-519.
34. Polimi. (2024, May). Cerca/Visualizza Manifesto. https://www4.ceda.polimi.it/manifesti/manifesti/controller/ManifestoPublic.do.
35. QS World University Ranking (2024, August). QS World University Rankings by Subject 2024: Architecture & Built Environment. https://www.topuniversities.com/university-subject-rankings/architecture-built-environment.
36. Reegård, K., Blackett, C., & Katta, V. (2019). The Concept of Cybersecurity Culture, In 29th European Safety and Reliability Conference, 4036-4043. https://doi.org/10.3850/978-981-11-2724-3_0761-cd
37. RMIT. (2024, October). Bachelor of Architectural Design - Plan BP250. https://www.rmit.edu.au/study-with-us/levels-of-study/undergraduate-study/bachelor-degrees/bachelor-of-architectural-design-bp250/bp250auscy
38. Salama, A. M. (2016). Spatial Design Education: New Directions for Pedagogy in Architecture and Beyond. London: Routledge.
39. Schön, D. A. (1983). The Reflective Practitioner: How Professionals Think in Action. New York: Basic Books.
40. Skarga-Bandurova, I., Kotsiuba, I., & Velasco, E. R. (2021). Cyber Hygiene Maturity Assessment Framework for Smart Grid Scenarios. Frontiers in Computer Science, 3, 1-13. https://doi.org/10.3389/fcomp.2021.614337
41. Stâmâtescu, G., Stamatescu, I., Arghira, N., & Făgărășan, I. (2020). Cybersecurity Perspectives for Smart Building Automation Systems, In 2020 12th International Conference on Electronics, Computers and Artificial Intelligence (ECAI), 1-5. https://doi.org/10.1109/ecai50035.2020.9223152
42. SNU. (2024, November). Undergraduate Program. https://architecture.snu.ac.kr/academics/undergraduate-program/.
43. Statistica. (2024, December). Number of Internet of Things (IoT) Connections Worldwide from 2022 to 2023, with Forecasts from 2024 to 2033. https://www.statista.com/statistics/1183457/iot-connected-devices-worldwide/.
44. Sydney. (2024, November). School of Architecture, Design and Planning. https://www.sydney.edu.au/handbooks/architecture.html.
45. Taneja, P., & Kumar, B. (2024). Architecture Education Towards a Sustainable Future: A Review. ShodhKosh: Journal of Visual and Performing Arts, 2582-7472. https://doi.org/10.29121/shodhkosh.v5.iICoMABE.2024.2158
46. The Hacker News. (2014, October). Las Vegas Sands' Casino Network hit by Destructive Malware. https://thehackernews.com/2014/12/las-vegas-casino-hacked.html.
47. The Hacker News. (2016). DDoS Attack Takes Down Central Heating System Amidst Winter in Finland. Retrieved October 12, 2024, https://thehackernews.com/2016/11/heating-system-hacked.html.
48. Tianjin. (2024, August). Undergraduate Program. https://t-arch.tju.edu.cn/PROGRAMMES/Architecture/Undergraduate.htm
49. Till, J. (2009). Architecture Depends. Cambridge: MIT Press.
50. Tongji. (2024, October). English Program. https://caup.tongji.edu.cn/caupen/_t1428/33804/list.psp
51. UCB. (2024, October). Courses. https://ced.berkeley.edu/arch/courses.
52. Uchendu, B., Nurse, J. R., Bada, M., & Furnell, S. (2021). Developing a Cyber Security Culture: Current Practices and Future Needs. Computers & Security, 109, 102387. https://doi.org/10.1016/j.cose.2021.102387
53. UCL. (2024, October). Study. https://www.ucl.ac.uk/bartlett/architecture/study.
54. UCLA. (2024, August). Academics Fall 2024 Courses. https://aud.ucla.edu/academics/fall-2024-courses.
55. Vassigh, S., Zhu, Y., & Newman, W. (2012). Leveraging Cyber-infrastructure to Transform Building Science Education. Journal of Architectural Engineering Technology, 1(2), 1-9. https://doi.org/10.4172/2168-9717.1000105.
56. YTU. (2024, November). Mimarlık Lisans Programı (%30 İngilizce). http://bologna.yildiz.edu.tr/index.php?r=program/view&id=50&aid=38.