Research of cyber threats and attack scenarios for corporate security

Cyber security is important in every aspect of our daily life. The increase in technology usage areas and usage rate is one of the most important reasons for this. Today, active use of information technologies is seen in many sectors that we can think of, such as health, tourism, education, transportation, communication and banking. Companies operating in these sectors may suffer serious financial losses and their reputations may be damaged in case of possible cyber attacks. This situation makes corporate information security an important topic. Cyber attacks on corporate companies can be implemented with a wide variety of methods and techniques. These can be grouped into social engineering, physical attacks, and malware. In this study, cyber attack threats and attack scenarios on corporate companies were examined. These scenarios have been implemented in laboratory environments by using various tools. In the example scenarios, the 10 most common vulnerabilities list published by OWASP (Open Web Application Security Project) in 2021 are taken as reference. OWASP is a foundation that aims to fix security vulnerabilities in web applications and ensure security in these applications. The aim of this study is to examine possible attacks on corporate companies and to be a resource that provides an understanding of the importance of cyber security as a result of the examinations. In addition, it is aimed to draw attention to security vulnerabilities in corporate companies with sample attack scenarios.