Secure Design and Implementation of OPC Standards Based Log/Process Gathering Framework for Water Management Systems

In this study, a web-based log collection framework application suitable for secure software development processes has been developed, which aims to create an infrastructure for solutions to be developed for the effective and efficient management of water resources in water management systems, one of the critical infrastructures, and for the cyber security of these systems. Within the scope of the study, an integrated system has been designed that collects field data from the OPC server and then transfers it to the relevant platforms for processing or storage. This system has been developed on the basis of modern software engineering principles and DevSecOps methods. These approaches aim to increase the automation, security and sustainability of the software development process. In addition, continuous integration and continuous deployment (CI/CD) processes have been automated using GitLab and Docker. Thus, code changes can be tested and deployed quickly. In addition, the API developed using.NET Core also performs user authentication and authorization processes.