Cyber Security

Content: Work aimed at developing basic reading, writing and listening skills.

Content: Definition of language. The relationship between language, thought and emotion. The relationship between language and culture; the elements that constitute culture and their characteristics. Cultural change. The relationship between language and society. Languages of the world. The place of the Turkish language among world languages. The development of the Turkish language and its historical periods. Turkic dialects and vernaculars. Spoken language and written language. The current state and areas of spread of the Turkish language. Work on an application text of any Turkic dialect, or comparative work on texts from different dialects. Spelling rules. Punctuation marks. Word formation. Oral and written expression. The qualities of good expression. Observing, thinking, reading, and making good use of one’s mother tongue. Speech deficiencies. Stress in Turkish: word stress, phrase stress, sentence stress. Dialogue, speaking before an audience, meetings. Written expression: sentence, paragraph. Types of expression: narration, explanation, description, etc.

Content: The Western Front in the War of Independence. Winning the war and the Armistice of Mudanya. Abolition of the sultanate and relations with Istanbul. The Treaty of Lausanne. Proclamation of the Republic. Abolition of the caliphate, the Constitution of 1924. Implementation of Atatürk’s reforms. Reforms in the social, legal, educational and cultural fields. Reforms in the social, legal, educational and cultural fields. Attempts at transition to multi-party life. The 1929 economic depression and the development policies of the Republic. Atatürk’s foreign policy. Turkey after Atatürk, the Second World War and the transition to multi-party life. Turkey’s strategic issues: the Mosul question, the annexation of Hatay to the homeland. Turkey’s strategic issues: the question of the Straits, Cyprus.

Content: This course introduces the fundamental concepts and principles of programming. Students learn how algorithms and flowcharts are built, and examples of algorithms from everyday life are given. An introduction to programming languages is provided, and practical work is carried out on basic data types, variables and constants. Control structures, namely conditional statements (if, else) and loops (for, while), are examined. The definition and use of functions, and parameters and return values, are explained. Throughout the course, practical applications are carried out using a selected programming language.

Content: With this course, students are able to explain sets and number systems, set up and solve ratio and proportion problems, solve percentage and interest problems, explain the concept of a function, and perform operations on functions. They learn basic mathematics topics such as algebraic expressions and factorization, equations and inequalities.

Content: This course aims to introduce the fundamental concepts of security in the digital world. Students are informed about the importance of cyber security, the main types of threats, and personal and data security. Practical knowledge such as creating strong passwords, safe internet use, and how antivirus software and firewalls work is presented. In addition, topics such as the basic concepts of cyber security, cyber warfare, an introduction to encryption, network security, attack recognition and prevention systems, secure software development, web application security and penetration testing are covered.

Content: This course aims to introduce the main hardware components of computer systems and the structure and working principles of network devices. Students acquire basic skills in the physical components of computer and network systems, hardware infrastructure, the installation of computer systems, the creation of simple network structures, and the detection of hardware faults.

No detailed record is available for this course.

Content: This course aims to introduce the fundamental concepts of object-oriented programming and to teach students concepts such as class, object, inheritance, encapsulation and polymorphism. Students develop basic applications using an object-oriented programming language.

Content: This course aims to teach the fundamental concepts of system programming, which enables students to work more closely with operating systems. Students are taught techniques for developing the software components that make up an operating system. In addition, information is provided on the effective use of system calls, advanced C programming, and the operation and control of computer hardware. Students gain the ability to write programs that run at the operating system level, acquiring the knowledge and competence to perform system-level analysis, control and intervention in cyber security.

Content: Past simple tense; count and uncount nouns; comparatives and superlatives; present continuous tense; going to; question forms; present perfect tense; ever and never; just and yet; present perfect and simple past tense are among the topics covered in the course content.

Content: Types of written and oral expression, with examples; subject, purpose, main idea, scientific language, plan; writing petitions; minutes, essays; column, article, critique, introduction; letters, memoirs; curriculum vitae, biography; travel writing, conversation, interview, speech; theatre, fable, poetry; short story, novel; lecture, paper, report, scientific research; scientific research methods (use of books, libraries and computers, reading, note-taking); how a book is structured in terms of form (outer cover, dedication page, inner cover, abbreviations, etc.); types of bibliography and their rules; footnote rules.

Content: The basic characteristics of the reforms and the Turkish Revolution; movements that influenced the Turkish Revolution; the Democratic Constitutional State as the goal of the Turkish Revolution; the restructuring of the Turkish economy, the national economy and globalization; the establishment of the secular Turkish legal system; other innovations that brought order and vitality to Turkish social life; the general nature of Atatürk’s principles and the principle of republicanism; the principle of nationalism; the principles of populism and statism; the principle of secularism; the principle of reformism; criticisms of Atatürkism and responses to them.

Content: This course provides information on network fundamentals, system security, and backup. It aims to teach the working principles of computer networks at a basic level. Topics such as network architectures, network hardware, IP addressing, subnetting, the OSI and TCP/IP models, and basic network protocols (ARP, ICMP, DNS, DHCP) are covered. Students learn how the local area network (LAN), wide area network (WAN) and the internet work, and gain the ability to carry out simple network setups and configurations by understanding data communication between network devices. This infrastructure knowledge forms a solid foundation for advanced analysis and interventions in cyber security.

Content: This course aims to enable students to conceptually recognize cyber security threats and the main types of attacks. The course covers types of cyber attacks (malicious software, DoS/DDoS attacks, MITM attacks, etc.), the attack lifecycle, and attack surfaces. At the same time, an introduction is given to basic defense principles, firewalls, antivirus software, access control methods and security policies. Students gain the opportunity to practice with introductory-level applications such as the analysis of cyber security incidents and basic log examination. This course provides the theoretical foundation for the advanced and applied work carried out in “Cyber Attack and Defense Methods 2”.

Content: This course aims to introduce the virtualization concepts and technologies widely used in information technology. The course covers the fundamental principles of virtualization, hardware and software virtualization, types of hypervisors (Type 1 and Type 2), and the installation and management of virtual machines. Widely used virtualization platforms such as VMware, VirtualBox and KVM are used in practice. Advanced virtualization features such as network and storage virtualization, resource sharing, backup, high availability (HA) and load balancing are covered.

Content: The concepts of strategy and strategic management are explained; strategic thinking skills, vision and mission development, and basic strategy tools such as internal and external environmental analysis (SWOT, PESTLE, Porter’s Five Forces Model) are introduced. Students have the opportunity to evaluate the strategic planning processes specific to the aviation sector through applied examples and current case studies.

Content: The Artificial Intelligence Applications course aims to introduce the concepts of artificial intelligence and its applications in various fields. The course covers the history, fundamental concepts and ethical dimensions of artificial intelligence, and provides an introduction to the main AI fields such as machine learning, deep learning, natural language processing, image processing and expert systems. The use of artificial intelligence techniques in the field of cyber security is also presented.

Content: This course aims to provide an introduction to the basic concepts of electronic commerce and system design. Students learn the working principles of e-commerce, digital marketing, payment systems, customer relationship management and security requirements. Within the course, basic components such as web-based shopping systems, product catalogs, inventory management and order processes are examined. The importance of user experience (UX) and user interface (UI) design is also emphasized. Students gain the skill to design a simple e-commerce website and implement its basic functions. The course offers practical knowledge on the requirements of digital commerce within the framework of current technologies and security practices.

Content: This course aims to introduce the DevOps and agile project management approaches in modern software development processes. Students learn the importance of integrating software development and operations teams, and of rapid, continuous delivery and automation. Agile methodologies (Scrum, Kanban, etc.) and basic concepts such as project planning, sprint management and team collaboration are covered. DevOps tools and processes (CI/CD, version control systems, automated testing) are introduced through practical applications.

Content: This course enables students to learn the fundamental concepts of the Python programming language. Basic topics such as variables, data types, control structures (if-else, loops), functions, lists, dictionaries and file operations are covered. An introduction to object-oriented programming is given, and basic applications with classes and objects in Python are carried out.

Content: This course addresses the concepts of cyber attack and defense through practical applications. Students are introduced to the concept of penetration testing, ethical rules and the legal framework. Steps such as information gathering, port scanning and vulnerability analysis are carried out in practice using the Kali Linux operating system. Password attacks, attacks on web applications (SQL Injection, XSS, etc.) and penetration tests on wireless networks are examined in detail. Exploit development and access techniques are practiced with the Metasploit Framework. Defense mechanisms such as IDS, IPS and firewalls are introduced. At the end of the course, students learn to report penetration testing results and present security recommendations. Throughout the course, theoretical knowledge is reinforced through practical application with realistic cyber security scenarios.

Content: This course addresses the basic operation and security dimensions of operating systems. Authentication methods, attack types and defense mechanisms are examined in detail. Students recognize threats to operating systems and develop effective defense strategies against them. Log management, secure system configuration and access control policies are covered in practice. The basics of cryptography are explained as a security tool, and its use in the security of files, disks and network communication is demonstrated. The requirements and evaluation criteria of certified systems are introduced. All these topics are discussed comparatively in the context of Windows and Unix/Linux operating systems, and students are made to carry out security applications on both systems.

Content: This course covers the auditing and management of information security infrastructure comprehensively. The security management environment, processes and institutional responsibilities are detailed. Internal audit functions, data center auditing, disaster recovery scenarios and the auditing of IT services are examined through practical examples. Security audits are carried out in areas such as physical and environmental security, intranet and internet security, and financial technology applications. System audits are performed on Unix, Linux and Windows infrastructures. Reporting and risk assessment studies are conducted in areas such as basic banking applications, operational information systems, network security and database security. All content is delivered integrated with audit processes in the context of institutional IT management.

Content: This course addresses the fundamental concepts and principles of information and data security. Students learn to determine security requirements in information systems and to classify threats to these requirements. Students learn to create security policies in line with the principles of confidentiality, integrity and availability. Authorization, authentication and access control mechanisms are emphasized. In addition, cryptography, key management, digital signatures and data integrity are covered within data security. The systematic design, implementation and management of security strategies are supported with sample scenarios. Throughout the course, the security of information systems is evaluated from both technical and managerial perspectives.

Content: This course addresses the security of institutional information technology infrastructures with a holistic approach. The security requirements of information systems used in organizations are evaluated within the framework of policies and standards. Network security, server security, client security, access control and identity management are examined in detail. The role of firewalls, intrusion detection and prevention systems (IDS/IPS), antivirus and security software in enterprise environments is explained. Monitoring of security events (SIEM), incident response plans and disaster recovery scenarios are emphasized. Logging, auditing and reporting processes in enterprise systems are demonstrated in practice. Employee awareness, measures against social engineering attacks and the importance of security training are also emphasized. Throughout the course, enterprise security strategies are designed and evaluated using real-world scenarios.

Content: This course addresses the basic structure of database systems and their security dimensions together. Topics include the relational database model, data modeling, normalization, data definition and data querying with SQL. The architecture and working principles of database management systems (DBMS) are introduced. Security measures such as user authorization, role-based access control, data privacy and integrity are detailed. Attack types targeting databases (SQL Injection, unauthorized access, etc.) and the measures that can be taken against them are emphasized. Secure database design, backup strategies and logging processes are explained. Throughout the course, practical examples are used to aim for both the management of database systems and the provision of their security.

Content: This course covers cloud computing architecture and the cyber security problems encountered in this environment in detail. First, an introduction to cloud computing is given, and basic features such as virtualization technologies, multi-tenancy, elasticity, scalability and on-demand access are explained. The cloud computing stack, service models (SaaS, PaaS, IaaS) and deployment models (private, public, hybrid, community) are introduced. The concept of security as a service (SECaaS) is examined. Basic security measures such as data security, encryption techniques and identity and access management (IAM) in cloud environments are covered. Security threats, vulnerabilities and solution approaches for cloud systems are evaluated through case analyses. Throughout the course, students acquire the knowledge and skills needed to design, manage and audit cloud-based systems securely.

Content: This course covers the digital forensics process as a whole, including the identification, collection, analysis and reporting of digital evidence. Incident scene intervention, preservation of evidence integrity and the correct use of equipment in digital forensics laboratories are taught in practice. Disk imaging, data recovery, log analysis, timestamp examination and file system investigation are carried out. Students gain technical skills in areas such as file systems (FAT, NTFS, EXT), data remnants (slack space, unallocated space), mobile device analysis and network traffic inspection. Students’ incident investigation competencies are developed through expert opinions and real case scenarios. In addition, preparing reports suitable for presentation in court, digital forensics standards and ethical principles are covered in detail in the course.

Content: This course covers the fundamental concepts of network security and software and hardware security solutions. Methods for securing local area networks (LAN), wide area networks (WAN) and wireless networks are introduced. Hardware solutions such as firewalls, intrusion detection and prevention systems (IDS/IPS), VPN, NAT and proxy servers are examined. On the software side, network access control, packet filtering, port security, attack analysis and network traffic monitoring tools are introduced. Defense mechanisms against DoS/DDoS attacks, together with encryption and authentication methods for data transmission over the network, are taught. Students carry out applied work through real-time attack simulations and network security scenarios. The course aims to give a holistic approach to ensuring network security.

Content: This course covers the basic concepts, methods and technologies for ensuring the security of endpoint devices. Threats and attack types targeting endpoint systems such as desktop computers, laptops, mobile devices and IoT devices are examined. Security solutions such as endpoint protection platforms (EPP), endpoint detection and response systems (EDR), malware analysis, antivirus, anti-ransomware and behavioral monitoring are introduced. Patch management, device control, application control and data loss prevention (DLP) strategies are emphasized. In addition, authentication, multi-factor authentication (MFA), encryption and remote monitoring solutions are demonstrated in practice. Throughout the course, the integration of endpoint security with the internal network and general cyber security policies is evaluated through sample scenarios.

Content: This course covers the fundamental concepts, techniques and application processes of penetration testing. Students learn the steps of penetration testing, such as information gathering, target identification, vulnerability scanning, vulnerability analysis, gaining access and tracking. The detection of security vulnerabilities and methods of exploiting them are examined in detail. The use of common penetration testing tools such as Metasploit, Nmap, Nessus and Burp Suite is demonstrated in practice. Security testing is carried out on web applications, network infrastructures, wireless networks and system services. The aim is to evaluate the findings, report them, and develop defense strategies against these vulnerabilities. Within the framework of ethical principles and the legal framework, the aim is for students to be trained as competent and responsible security testing specialists.

Content: This course covers in detail types of malicious software such as viruses, worms, Trojan horses, rootkits, spyware and ransomware. Students acquire the ability to analyze the operating logic of such software, its infection routes and its effects on the system. Dynamic and static analysis techniques, reverse engineering, the x86 architecture and basic programming in assembly language are covered. The use of sandbox environments to examine the behavior of malicious software and the monitoring of harmful software are carried out in practice. In addition, the working principles of antivirus systems are discussed together with signature-based and behavior-based analysis methods. By the end of the course, students acquire the competence to detect and analyze malicious software and to develop defense strategies against these threats.

Content: This course addresses computer networks and software security with a holistic approach. Students gain basic knowledge of the Physical Layer, Data Link Layer, Transport Layer and Application Layer within the framework of the OSI and TCP/IP models. The operation of the TCP and UDP protocols, data transmission security and network standards (RFCs) are emphasized. Within network security, threat types, attack methods and protection strategies are covered. In the software security section, secure software development principles, system vulnerabilities arising from coding errors, common software attacks (buffer overflow, SQL injection, XSS, etc.) and protection methods against them are explained in detail. Through applied work, students acquire the ability to identify and solve security problems at both the network and software levels.

Content: This course develops the ability to perform statistical analysis on data sets encountered in the field of informatics. Basic statistical concepts, descriptive statistics, probability theory and distributions (normal, binomial, Poisson, etc.) are covered. Students learn methods such as data visualization, measures of central tendency and variability, correlation and regression analysis. Advanced analysis techniques such as hypothesis testing, confidence intervals, t-test, chi-square test and analysis of variance are demonstrated with applied examples. Applications are carried out on data sets using R, Python or similar programming languages and statistical analysis tools. By the end of the course, students acquire the competence to analyze data in informatics projects, draw meaningful conclusions, and prepare statistical reports for decision support systems.

Content: This course covers the security threats faced by end users of information systems and the measures that can be taken against them. Common risks such as social engineering attacks, phishing, malicious links, fake software and email attacks are introduced. Awareness is raised on password security, multi-factor authentication (MFA), safe internet and email use. In addition, mobile device security, software updates, safe use of applications and data backup strategies are emphasized. Students learn how to prevent security vulnerabilities arising from user errors and acquire cyber hygiene habits. Throughout the course, end users’ security awareness is developed through real-world examples and applied scenarios.

Content: This course introduces the main hardware components of computer and network systems and addresses the operation and integration of these components through practice. The structure and working principles of hardware components such as the motherboard, processor (CPU), memory (RAM), hard disk, SSD, power supply and graphics card are taught. Hardware installation, fault detection and maintenance are carried out in practice. Within network hardware, modems, routers, switches, access points and cabling systems are introduced. The physical installation and hardware configuration of local area networks (LAN), wide area networks (WAN) and wireless networks are carried out. In addition, topics such as hardware compatibility, BIOS/UEFI settings and driver management are covered in the course. By the end of the course, students acquire the skills to set up and manage both computer systems and network infrastructures and to solve hardware-based problems.

Content: Definition, structure and reasons for the emergence of informatics law; the basic principles of the right to the protection of personal data; the Personal Data Protection Law (KVKK) in Turkey and its implementation; the definition and classification of informatics crimes; national and international approaches to combating informatics crimes; the legal dimensions of e-commerce; the protection of intellectual and industrial property rights in the information environment; cyberbullying and digital rights violations; the collection of digital evidence and its use in judicial processes

Content: This course addresses security-focused software development methods for web-based applications. Students learn the basic concepts of web security and common attack types (SQL Injection, XSS, CSRF, File Inclusion, etc.). Secure coding principles, user input validation, session management, and authentication and authorization mechanisms are examined in detail. HTTPS, SSL/TLS, encryption techniques and data security applications are introduced. Based on the OWASP Top 10 list, the most frequently encountered vulnerabilities in web security and protection methods against them are demonstrated in practice. In addition, security testing, web application firewalls (WAF), security tools (Burp Suite, OWASP ZAP) and the secure software development life cycle (S-SDLC) are covered within the course. Through sample projects and scenarios, students gain practice in developing secure web software.

Content: This course covers the basic techniques and system components for developing graphics-based applications under the Windows operating system. The architecture of the Windows graphics system, and the internal data structures of GDI (Graphics Device Interface) and DirectDraw, are examined in detail. Graphics device context, coordinate space and transformation operations, pixel-based operations, lines, curves and area drawing are covered within the course. Bitmap graphics fundamentals, advanced bitmap techniques, and basic image processing applications using Windows bitmaps are carried out. The use of palettes, fonts, text processing and descriptive file structures are explained. Printing operations and device independence are touched upon. In addition, the DirectDraw and Direct3D components are introduced so that students acquire the ability to develop both 2D and 3D graphics applications. Throughout the course, competence in Windows API-based program development is provided through applied examples.

Content: This course addresses in detail the concept of quality, its historical development and the philosophy of Total Quality Management (TQM). The basic principles of TQM are examined under customer focus, leadership, employee involvement, process approach and continuous improvement (Kaizen). Strategies for establishing and sustaining a quality culture in organizations are explained. Quality costs, measurement methods and the evaluation of quality performance are emphasized. Stressing the importance of standards and standardization, national and international quality standards are introduced. The ISO 9001 Quality Management System, the OHSAS 18001 Occupational Health and Safety Management System and the EFQM Excellence Model are examined in detail. Throughout the course, quality management practices are supported by case analyses and sample documentation studies.

Content: This course addresses the structure and practices of the CSIRT (Computer Security Incident Response Team) that ensure cyber incident response processes are carried out effectively in institutions. The duties and responsibilities of the CSIRT organization are examined within the legal framework and national cyber security policies. Incident detection, classification, response, analysis, improvement and reporting processes are detailed. Collection of incident records, log analysis, malware examination, the fundamentals of digital forensics and the evaluation of attack traces are demonstrated in practice. The use of incident detection and monitoring tools such as SIEM systems and IDS/IPS is taught through case scenarios. The creation of institutional CSIRT policies, communication plans, threat intelligence and coordination processes are covered within the course. Students acquire the knowledge and skills to respond to cyber incidents effectively and in an organized manner.

Content: This course aims for students to apply their cyber security knowledge and skills in practice in real or simulated environments. Field scenarios are carried out on topics such as network security, system security, malware analysis, penetration testing, log analysis, secure software development and incident response. Students detect vulnerabilities, analyze attacks and develop defense strategies using security tools (Wireshark, Nmap, Metasploit, Burp Suite, SIEM systems, etc.). In addition, processes such as implementing institutional security policies, preparing security reports and carrying out incident response plans are experienced. Cyber exercises close to real life are conducted, and security operations are managed through teamwork. By the end of the course, students acquire the skills to produce applied solutions, perform analysis and make decisions in the field of cyber security.