Faculty Profile
< BACK TO FACULTY PROFILES

Bilge Karabacak, Dr.

Lead Faculty

bilge.karabacak@franklin.edu

Profile

Dr. Karabacak holds a Doctor of Philosophy degree in information systems, a Master of Science degree in computer engineering, a Bachelor of Science degree in electrical engineering. Dr. Karabacak has pursued his academic and professional career harmoniously. In his two-decades of cybersecurity career, he has worked to fulfill the organizations' cybersecurity needs in the public and private sectors. He worked in numerous technical and managerial positions, including system administrator, cybersecurity researcher, vulnerability analyst, digital forensic investigator, information security consultant, principal investigator, deputy director, and product manager. He co-founded Netsecop, a cloud-based website security scanner, in Silicon Valley in 2016. Dr. Karabacak developed and taught undergraduate and graduate-level courses in network security, information security management, digital forensics, vulnerability management, and operating systems security. His applied cybersecurity research has been shaped by the organizations' needs and the shortcomings of the current methods in fulfilling these needs. Dr. Karabacak has researched various topics, including information security risk analysis, critical infrastructure protection, cyber regulations, cybersecurity maturity models, and IoT security. He proposed the Information Security Risk Analysis Method (ISRAM), which has been cited more than 250 times, deployed by various organizations worldwide, and listed as one of the main risk analysis methods in the prestigious review papers. He co-authored six articles published at the top-ranked computer security journals, seven peer-reviewed conference articles, and five book chapters. He delivered speeches in several venues as an invited speaker and panelist in the US, Portugal, Germany, Oman, and Turkey.

Education

2015
Middle East Technical University
Doctor of Philosophy, Information Systems
2003
Gebze Technical University (Turkey)
Master of Computer Engineering, Computer Engineering
1999
Bilkent University
Bachelor of Science in Electrical and Electronics Engineering, Electronics Engineering

Certifications

2021
Social & Behavioral Research - Basic/Refresher, Collaborative Institutional Training Initiative, Expiration Date: 2024
2005
BS 7799:2 2002 Information Security Management System Lead Auditor Course, BSI Eurasia-British Institution
2002
Common Criteria Certification and Evaluation Scheme Course, DOMUS

Work Experience

2020 - Present
Franklin University, Lead Faculty Cyber Security
2019 - 2020
Deutsche Bank, Information Security Analyst, Jacksonville, Florida
2019 - 2019
Franklin University, Adjunct Faculty
2019 - 2019
Franklin University, Lead Faculty, Cybersecurity
2016 - 2019
Netsecop Inc, Co-Founder, Cyber Security Analyst & Product Manager, Santa Clara, California
2000 - 2014
National Cyber Security Institute, Information Security Manager, Ankara

Publications & Presentations

Karabacak, B., & Whittaker, T. (2022). Zero Trust and Advanced Persistent Threats: Who Will Win the War?. Proceedings of the 17th International Conference on Cyber Warfare and Security. Proceedings of the 17th International Conference on Cyber Warfare and Security.
Karabacak, B. (2020). A mixed public-private partnership approach for cyber resilience of space technologies. Space infrastructures: from risk to resilience governance. IOS Press.
Karabacak, B. (2019). A Complex Structure Representation of the US Critical Infrastructure Protection Program based on the Zachman Framework. International Journal of System of Systems Engineering. http://www.inderscience.com/info/ingeneral/forthcoming.php?jcode=ijsse
Karabacak, B. (2019). IoT forensics curriculum: Is it a myth or reality?. Annual ADFSL Conference on Digital Forensics, Security and Law. Annual ADFSL Conference on Digital Forensics, Security and Law, 6.
Karabacak, B. (2017). From the national cyber maturity to the cyber resilience: An assessment of the strategic efforts of Turkey. Strategic cyber defense. IOS Press.
Karabacak, B. (2017). Preliminary analysis of cyberterrorism threats to Internet of Things (IoT) applications. Terrorists' use of the Internet. IOS Press.
Karabacak, B. (2016, Apr. 12). Military Cyber Security Strategy as a Part of National Cyber Security. NATO Advanced Research Workshop on a Framework for a Military Cyber Defence Strategy, Old Dominion University, Norfolk, VA.
Karabacak, B. (2016). An assessment model of improving national cyber security governance. . .
Karabacak, B. (2015, Feb. 13). Cyber Security and Cyber Threats: Today and Tomorrow. NATO SPS Advanced Training Course: Hands-on Cyber Defence Training Course for System / Network Administrators of Ukraine, Middle East Technical University, Ankara, Turkey.
Karabacak, B. (2014). Strategies to counter cyberattacks: cyberthreats and critical infrastructure protection. Critical infrastructure protection.
Karabacak, B. (2014). A comparative analysis of the national cyber security strategies of leading nations. . .
Karabacak, B. (2012, Dec. 30). Turkey on Critical National Infrastructure Protection. OIC-CERT Annual Conference, Muscat, Oman.
Karabacak, B. (2012, Dec. 10). Computer Security Emergency Response Teams (CSIRTs). International Law of Cyber Operations Seminar, Germany, Oberammergau.
Karabacak, B. (2012, May. 03). Strategies to Counter Cyber Attacks: Cyber Threats and Critical Infrastructure Protection. NATO Advanced Research Workshop on Critical Infrastructure Protection, NATO Centre of Excellence Defence against Terrorism, Ankara, Turkey.
Karabacak, B. (2012). An hierarchical asset valuation method for information security risk analysis. Proceedings of the International Conference on Information Society. Proceedings of the International Conference on Information Society.
Karabacak, B. (2011, Sep. 29). Cyber threats against critical infrastructures and countermeasures for Turkey. Information Security Association’s Cyber Security Workshop, Ankara, Turkey.
Karabacak, B. (2011, Jun. 20). Cyber threats against critical energy infrastructures. Critical Energy Infrastructure Security Conference, Ankara, Turkey.
Karabacak, B. (2011, May. 25). Critical infrastructures and critical infrastructure protection. Cyber Defence Symposium, Istanbul, Turkey.
Karabacak, B. (2011, May. 24). Forensics analysis of Windows XP operating system. Cyber Defence Symposium, Istanbul, Turkey.
Karabacak, B. (2011, Mar. 17). Strategies to Counter Cyber Terrorism: International Cooperation and Critical Information Infrastructure Protection. NATO Cyber Terrorism Course, NATO Centre of Excellence Defence against Terrorism, Ankara, Turkey.
Karabacak, B. (2010, May. 07). National Cyber Space Security Policy. 4th International Information Security and Cryptology Conference, Ankara, Turkey.
Karabacak, B. (2010, Apr. 09). A Collaborative Process based Risk Analysis for Information Security Management Systems. 5th International Conference of Information Warfare and Security, Dayton, OH, USA.
Karabacak, B. (2010, Feb. 05). Process based risk analysis for information security management systems. 3rd Network and Information Security Symposium, Ankara, Turkey.
Karabacak, B. (2010). A collaborative process based risk analysis for information security management systems. Proceedings of the 5th International Conference of Information Warfare and Security. Proceedings of the 5th International Conference of Information Warfare and Security.
Karabacak, B. (2009, Dec. 10). Critical infrastructures and cyber war. Cyberwar Symposium, Ankara, Turkey.
Karabacak, B. (2009). Critical infrastructure protection status and action items of Turkey. Proceedings of the International Conference on eGovernment Sharing Experience. Proceedings of the International Conference on eGovernment Sharing Experience.
Karabacak, B. (2004). A Novel Approach for Information Security Risk Analysis. The 3rd Asia Pacific International Symposium on Information Technology. The 3rd Asia Pacific International Symposium on Information Technology.
Karabacak, B. (2003, Nov. 27). A New Approach to Risk Analysis at Information Age. Conference on Information and Terrorism, Lisbon, Portugal.
Karabacak, B. (2002, May. 06). Risk analysis and management processes. Information Technologies Congress, Denizli, Turkey.

Professional Service

2020
Member
Faculty Development Committee
2019
Member
National Initiative for Cybersecurity Education (NICE) Working Group (NICEWG)
2016
Committee Member
International Conference on Cyber Warfare and Security

Memberships

2019
Information Systems Security Association International