Baskentgaz Natural Gas Distribution Company

Founded in 2007, our customer Başkentgaz is the oldest and and second largest natural gas distribution in Turkey, serving more than 2 million subscribers in Ankara, the capital city with a population on 5 million.

With its license valid until 2037, the joint-stock company serves to approximately 7% of the total population of Turkey in the capital city, which is its natural gas distribution region, with a customer-oriented, safe and quality service concept.

Problem

The urgent requirements of the company were the detection and prevention of potential attacks or threats on their web servers, and ensuring protection against them. Alerts created on their web servers needed to be efficiently managed by the company’s security analysts and incident response needed to be accelerated.

The company needed a SIEM in order to prevent potential DOS and XSS Attacks on their web servers, to manage the process, and to act against related issues.

Solution

Dashboards were created to control web attacks and web server messages. Reports containing error messages were created for each web server. Dashboards and reports were created to analyze the access logs for online payment systems.

In order to detect potential attacks:

• XSS Pattern list was made.
• Alert rules were created to detect DOS attacks.
• Alerts were created to operate in case the web servers generate specific error codes.

SMS notification was put into operation to rapidly activate triggered alerts.
Integration with the company’s firewall was ensured to take automatic action against potential cyber threats. Sessions of detected threat IPs were interrupted and prevented from reaccess.

Result

Logsign SIEM was installed via one server and with all modules activated. All data became processable with Logsign SIEM.
IT managers and team were enabled to rapidly analyze the data. The application’s service was ensured not to slow down in case of a problem on the company’s web server, and rapid detection and response were ensured so that the service is not rejected.