Component Of Information Security Research Articles

Правові механізми забезпечення інформаційної безпеки в Україні

The article considers the legal mechanisms for ensuring information security. It has been proven that today, more than ever, when there is a war in Ukraine, the issue of ensuring information security becomes especially relevant and significant, as the information space becomes a “battlefield” on a par with the war front. Enemy forces actively use informational and psychological operations to destabilize the situation inside our country, create panic, spread fakes and undermine trust in state institutions. In these conditions, the state’s policy becomes important, which should be integral and effective in countering these threats. An effective state policy in the field of information security will help ensure society’s resilience to information threats, strengthen trust in state institutions, and maintain stability in crisis conditions. The author’s understanding of information security is offered as a state of security of information resources and information systems, which ensures their confidentiality, integrity, availability and reliability, as well as protection against unauthorized access, disclosure, modification, destruction and other forms of abuse that may lead to a violation of national security, economic stability and social order. The main components of information security, which are the basis for information security for the state as a whole, individual bodies or private enterprises, are called confidentiality, integrity and availability. The main components of the mechanism for ensuring information security, in the opinion of the author, should be: technical (creation of appropriate technical infrastructure to ensure the functioning of information security), political (development of state policy aimed at ensuring information security) and legal (adoption of high-quality normative legal acts that will determine all information security measures). These three components complement each other and are key to creating an effective system of protection against information threats.

The concept of developing security components based on the development of the company's logistics business processes

In the context of the ongoing digital revolution, the development of generative design, machine learning, the active use of 3D marketing in advertising, 3D printing technologies, new principles of logistics and computer-aided design systems, the business processes of the enterprise are radically changing. There is a need to deepen the orientation of business processes to the customer, and enterprises need to solve the problem of ensuring low cost of both the business processes themselves and the security components supporting them. Due to the complexity of the integration of information systems, it is necessary to create in advance a concept for the development of security components based on the development of the company's logistics business processes. Obviously, it is necessary not only to take into account the aspects of information security (IS) when improving business processes, but to consider the problem comprehensively, that is, to develop both a concept and a methodology for developing, implementing business processes, their development, and estimating the cost of IS components. It is necessary to ensure the flexibility and adaptation of the implemented business processes of the enterprise.

Analysis of Information Security Under the Conditions of Hybrid War in Ukraine: Social Aspects

Abstract The development of the post-industrial society requires the acceleration of the integration of the national economy into the globalized economic space. This stage is characterized by active informatization of all spheres of life in society, which requires information security and cyber protection for high-quality information provision of the country’s population, intellectualization of economic processes and prevention of destructive informational influence on the social status of the individual. It is also necessary to consider that for Ukraine the specified stage is complicated by the hybrid war with Russia, which requires strengthening the protection of information from cyber-attacks and the formation of new approaches in preserving the quality of information on social networks. Therefore, the purpose of this article is the development of scientific and methodological approaches in information security management, strengthening its social significance. This requires solving a certain range of tasks of identifying and preventing socially dangerous information based on the use of economic and mathematical methods and models. The article highlights the main directions of socialization of modern technological development and theoretically substantiates its significant impact on human consciousness and behavior, puts a person in front of serious challenges and, under conditions of hybrid warfare, requires strengthening of information security in social networks. In the work, the components of information security are supplemented, its impact on social aspects of society’s life is highlighted. As a result of the research, the authors proposed a scientific and methodical approach to the construction of a system for countering the spread of socially dangerous information in social networks. Besides, its functional elements are highlighted. A method of combating the spread of harmful information in social networks has been developed, which solves the problem of information support of the decision-making process and includes providing the chosen and alternative options to the person making the decision, with the justification of the choice. This creates prerequisites for information support for making a well-founded management decision.

АНАЛИЗ ПОДХОДОВ К РАССЛЕДОВАНИЮ ИНЦИДЕНТОВ ИНФОРМАЦИОННОЙ БЕЗОПАСНОСТИ

The article presents an analytical review of materials on the investigation of information security incidents. It considers the definition of the concept of an information security incident. Regulatory documents regulating activities related to information security incidents are provided and the main directions and approaches to handling incidents are identified. The author draws attention to the fact that concepts such as information security and cybersecurity are often used as synonyms. The concept of information security seems broader in relation to the concept of cybersecurity. Cybersecurity can be defined as one of the components of information security and is aimed at protecting against attacks in cyberspace. Consequently, the issue of investigating information security incidents should be considered in a broad sense, since information security incidents can occur not only within cyberspace. All activities to collect information about incidents, their prevention, containment and investigation should be aimed at the informatization object as a whole. The article outlines the main directions for further research of the issue. Particular attention is paid to the “human factor” issue in communication.

LSB Steganography using Dual Layer for Text Crypto-Stego

Cryptography and Steganography are two main components of information security. Utilizing encryption and Steganography to establish many layers of protection is a commendable approach. Our main objective of this paper is to build an integrated method of securely transmitting data through a combination of cryptography and Steganography. Cryptography and Steganography are two common methods of secretly transmitting information. RC4 is used in this paper to change information from plaintext to cipher, and then cipher text is integrated into the image by Least Significant Bit (LSB). The results are defined in terms of the processing time, the peak signal-to-noise ratio (PSNR), and mean square error (MSE). The experimental results showed the stego image’s acceptable quality and combining the two techniques provides additional security in the original Steganography.

Intrusion detection system for detecting distributed denial of service attacks using machine learning algorithms

<span>Today, the creation of more effective intrusion detection system (IDS) has become crucial due to the rise in computer malware. Ensuring the availability of the system is an important component of information security and the most important requirement of any network. Recently the machine learning algorithm (ML) has been used to improve intrusion detection over the network. It is currently necessary to release an updated version of these systems. The presented work aimed to build a reliable and accurate IDS based on ML to classify and prevent distributed denial of service attacks to protect any system working on the network from temporary or complete system failure. We presented five ML models to create the proposed distributed denial-of-services attack (DDoS)-IDS, including (decision tree, random forest, logistic regression, support vector machine, and multi-layer neural network) which were trained and evaluated using the CIC-IDS-2018 dataset. Furthermore, principal component analysis (PCA) was used to reduce the dimensionality of the dataset. According to the classification results, the proposed multi-layer neural network model reached optimal performance for detecting DDoS attacks and achieved classification accuracy at 99.9992%.</span>

A Hybrid Approach for Data Hiding using Twofish Algorithm and Compression Steganography Techniques

Data compression and encryption are essential components of information security, facilitating efficient data handling, reduced storage requirements, and secure data transmission. The system presents a novel hybrid data compression algorithm that combines lossy and lossless compression techniques, along with Twofish cryptography. The hybrid approach leverages the strengths of different compression techniques. First, the Huffman coding algorithm is employed to compress textual data efficiently. Subsequently, the cover image undergoes lossy compression using the Discrete Wavelet Transform (DWT) technique. To fortify data security, the Twofish algorithm offers robust and high-level encryption. The encrypted data is then embedded into the compacted cover image using the least significant bit (LSB) technique in a steganographic manner. In the evaluation phase, the system's performance is assessed using key metrics, bits per pixel, mean squared error (MSE), peak signal-to-noise ratio (PSNR), and structural similarity index (SSIM). Comparative analysis with existing methodologies demonstrates the superior performance and methodological efficiency of the system. The results indicate that the hybrid approach strikes a balance between compression efficiency and data security, enabling faster data transmission over limited bandwidth connections and effectively utilizing storage media.

Information society and information security. New challenges and new ways to overcome the information threats

The article analyzes the concepts of “information society”, “information”, “information security”. The purpose of the article is to solve the problem of ensuring information security as a key direction in the development of the information society, and to determine the main directions of legal provision of information security, considering the experience of the countries of the European Union.The article explores the relationship between the information society and information security, highlighting the growing importance of information security in the digital age and the risks associated with cyber threats. The role of information technologies in facilitating the exchange of information and the challenges that arise in connection with the use of such technologies are considered.The article also argues that the growth of the information society has led to an increase in cyber threats that pose a significant risk to information security, emphasizing the importance of information security measures to protect sensitive information and protect against cyber attacks. The article also emphasizes the need for individuals and organizations to be aware of the risks associated with the use of information technology and to take proactive measures to mitigate these risks.Overall, the article emphasizes the importance of information security in the information society and the need for individuals and organizations to take responsibility for protecting their confidential information. The main components of information security are a set of elements that includes openness, confidentiality and integrity of information resources and supporting infrastructure. Studying the experience of foreign countries is necessary to create an optimal system of legal support for information security of Ukraine. The European model of information society development, which is characterized by social orientation and active involvement of the state and international institutions, is the most optimal for Ukraine

Legal regulation of information openness of public authorities as a component of information security

Legal regulation of information openness of public authorities as a component of information security

Methodology for evaluating the system of protection of automated information resources of a commercial bank

The existing systems of protection of automated systems are considered. An analysis of threats to the information resources of a commercial bank was made. Identified components of information security of a banking institution. The composition of the automated banking system and its core - the subsystem "Operational day of the bank" are shown. Recommendations for building a system for protecting information resources of a commercial bank have been developed.

INFORMATION SECURITY IN THE TERMS THE RUSSIAN-UKRAINIAN WAR: CHALLENGES AND THREATS

The need to create an effective mechanism for ensuring state information security is substantiated. It is noted that the blocking of true information about the role of the Armed Forces of Ukraine, actions of the leadership and power structures does not contribute to victory in the war waged by Russia against Ukraine. The following main ways of disseminating unreliable information in the conditions of war have been identified. social networks; fake accounts of famous people, politicians, TV and radio channels; personal messages or in shared groups of Viber, Telegram, WhatsApp and other messengers. It is indicated that in the aspect of ensuring information security, a significant place is occupied by the problems of spreading rumors, gossip, and fakes. The following types of fakes are highlighted. fake advertising, fake pseudo-expert, fake conspiracy, fake clickbait. To promote fake news, there are bot farms, «Internet troll factories», and pranking is practiced. In addition, fakes in the conditions of Russian aggression are also a battle of narratives and cultures. Such components of information security as information-technical and information-psychological protection are highlighted. The main mechanisms of combating false information in the conditions of war are disclosed, namely. formation of media literacy of the population; coverage of objective information through government Internet publications, mass media, e-government; establishment of responsibility for spreading fake news among the population; control of fake accounts; neutralization of fakes by special units in the cyber police. The main directions of improving information security as a component of the state security of Ukraine have been identified and characterized.

Enhancing Multimedia Security Using Shortest Weight First Algorithm and Symmetric Cryptography

A critical component of information security is data encryption, and numerous researchers have invented various approaches to encrypt data. This paper presents a novel image encryption approach using the shortest weight first algorithm from graph theory, categorized as a symmetric cipher where the user has much freedom in selecting the keys. Furthermore, this method requires no sophisticated computations and is simple to understand and implement while providing effective protection against cryptographic attacks, such as brute force. The detailed algorithm, analysis, and security implications are also presented. The results firmly set a good base for many real-world applications involving security.

The Cyber Security Incident Response and Reverse Engineering

Although incident response has always been a crucial component of information security, security administrators frequently ignore it. Whereas, Reverse engineering focuses on the difficult issue of analyzing legacy software code in the absence of appropriate documentation. This paper proposes an approach to understanding cyber security Incident Response and the services it provides followed by Reverse Engineering resources and the practical analysis of a malware named “Alice ATM Malware” in detail.

The Cyber Security Incident Response and Reverse Engineering

Although incident response has always been a crucial component of information security, security administrators frequently ignore it. Whereas, Reverse engineering focuses on the difficult issue of analyzing legacy software code in the absence of appropriate documentation. This paper proposes an approach to understanding cyber security Incident Response and the services it provides followed by Reverse Engineering resources and the practical analysis of a malware named “Alice ATM Malware” in detail.

Decision-making in a state cybersecurity

Nowadays, the issue of cyber security as a component of information security of the state is extremely relevant for Ukraine and the World community. Even so, it should be taken into account that the use of cyberspace expands people's communication capabilities, promotes the development of information technologies, research and novelty, and stimulates the development of industry and the economy. Nevertheless, the advantages of modern cyberspace can lead to new threats to people, society, national and international security. Along with initiatives of natural (unintentional) origin, the number and power of cyberattacks is increasing. These cyberattacks are inspired by the interests of individuals, groups, states, and associations of states. Increasing the effectiveness of mathematical modeling of state cyber security information systems can be ensured by modeling both the complex system and the subsystems that are the essential part of it. It stimulates the progress of models and algorithms that allow solving complex problems of system management and processing of the information flow. Furthermore, it is necessary to limit the tolerance interval of the solution for each task of the complex system of cyber security information systems. The following steps should be taken into account: – assignment of directive terms for solving problems; – information related tasks of information processing and transmission. The analysis of the research shows the weakness of a conventional approach to the complex solution of the problem of the synthesis of mathematical models and algorithms for determining the time of decision-making in the system of both security and information cyber security; methods of countering threats, mathematical methods of modeling, creating and evaluating models of both cyberattacks and cybersecurity and solving the problem of synthesis of mathematical models and algorithms for determining the time of decision-making in the system of both security and cyber security information systems. The defined issue is an unperformed part of the general problem of ensuring information security in complex systems of technical protection and information cyber security. The tasks belong to the class of problems of nonlinear mathematical programming. Performing them, methods of the theory of nonlinear programming can be used. The main priority of the tasks is its large dimension, which has a number of tasks that are performed in the network and are introduced in the information correlation. One of the current approaches to perform non-linear programming problems of large dimensions is the use of approximation methods of the theory of non-linear programming, the essence is that the solution of the finite-dimensional nonlinear complementarity problem is carried out as a result of solving a sequence of problems of a simpler type, which require significantly optimization operating costs than the original problem. Linear approximation is not always effective as it allows to obtain only a necessarily approximate value. Lately, the new research has introduced an approach to eliminate this fault with the help of auxiliary quadratic equation. The minimization method takes a special place among these methods. Unlike other methods of this class, it converges to any initial approximation and does not require assumptions about the convexity of functions, does not require firm positive certainty of the matrix of second derivatives of Lagrange functions, and has a fairly simple structure of the auxiliary quadratic problem. Hence, the linearization method has a linear rate of ascent. However, there is a modification of the method that means that at a considerable distance from the extremum point, the speed of convergence is linear, and with sufficient proximity to it, it is quadratic. Solving quadratic problems is not exact and only those restrictions with the maxima acceptable limits can be taken into account. This feature minimizes the dimension of auxiliary problems and thereby minimizes the computer complexity of the original nonlinear problem. The described algorithm is implemented in the form of applied programs for evaluating the effectiveness of algorithms for determining the time of decision-making by cyber security information systems. Thus, the given results can be used in the development of effective decision-making time determination algorithms based on mathematical models for decision-making support systems of the cyber security information system, as well as for modeling complex technical systems and assessing the effective use of several computing information systems. Key words: cyber security, cyber defense, cyber attacks, cyber defense system, information protection, state protection, cyber space, communication channels.

Iptables for Security of Linux-based Information Networks

Abstract. The article discusses the main components of information security: confidentiality, integrity and accessibility. Passwords, encryption, authentication, and intrusion protection are methods designed to ensure confidentiality. Integrity means maintaining the data in its original state and preventing its modification: accidental or malicious. Ensuring the availability of information is understood as the compliance of network and computing resources with the expected amount of data access and the implementation of a backup policy for disaster recovery purposes. To ensure the security of information networks based on RedOS, the iptables utility, used to configure the Linux kernel firewall, has proven itself in the best way. Despite the fact that at first glance the implementation of IP routing in Linux may look quite complicated, in practice the most common use cases (NAT and/or basic Internet firewall) are much easier to implement. Iptables is a custom utility that allows you to work with chains/rules. The article describes in detail the principles of iptables operation, provides a detailed description of the NAT, mangle, filter, raw tables and chains. The NAT table is used to translate network addresses, mangle is used to distort packets, filter makes it possible to filter packets, raw and its chains are used before any other tables in netfilter. The input chain is used to process incoming packets and connections, forward — for passing packets, output — for outgoing packets. It is shown that to ensure the safety of the functioning of computer classes and the entire network infrastructure as a whole, only two tables are sufficient: filter and nat. Other tables are designed for complex configurations involving multiple routers and routing solutions. The results of using iptables based on the experience of administration of information networks based on RedOS in the federal state budgetary educational institution of higher education PSUTI are presented.

An intrusion identification and prevention for cloud computing: From the perspective of deep learning

As the Internet industry has connected the globe using advancements in computer network from LAN to Cloud Infrastructure, Fashions and Developments in Internet of Things (IoT), Cloud Infrastructures, E-Commerce, Banking and Healthcare are allowing unimaginable access to devastating attacks.Intrusion detection is a critical component of information security, and the essential technique is the ability to properly recognise diverse network assaults. In this article, the methodology of an intrusion detection scheme utilising deep learning technique which is based on Fuzzy Min Max Neural Networks-Based Intrusion Detection System (FMMNN-IDS) has been proposed. The fuzzy min-max learning algorithm, an expansion-contraction method that can learn nonlinear class boundaries in a single pass through the data and gives the capacity to incorporate new and improve current classes without retraining, is used to identify the min-max points.Furthermore, the article investigated the model's performance in terms of binary and multiclass classification, as well as the count of learning rate and neurons affect the model's performance. The performance of FMMNN-IDS is compared with state-of-art approaches determined in the literatures. The FMMNN-IDS model increases accuracy rate of intrusion detection, achieves better intrusion detection rate and reduced error rate.

An Efficient AES Algorithm for Cryptography Using VLSI

In today's data exchange framework, information security is the most important consideration. Encryption is a key component of Information security and is used extensively. Encryption techniques are used by all sorts of organisations to protect sensitive data. An technique known as Data Encryption Standard (DES), which uses the same key for both encryption and decryption at the same time, was the first to be employed. That algorithm's key drawback is that it is readily hacked and vulnerable to attacks. Compared to DES and Triple DES, the calculations require enormous memory space and cannot be performed on the hardware stage. There are numerous ways in which AES, the Advanced Encryption Standard algorithm, has supplanted DES. An effective cryptographic method, AES uses multiple key lengths and surpassed DES when compared to other algorithms, such as SHA-1. It is possible to implement equipment stage circumstances inferable from the reconfigurability, cheap cost, and publicizing space with the use of field programmable entryway clusters (FPGAs). To scramble and decode complex data, the RIJNDAEL algorithmic guideline uses a square figure. It also supports cryptographic keys with lengths of 28,192 and 256 bits. The round keys, which are used throughout specific emphases of encryption, are developed in simultaneously with the Encryption strategy, which is a remarkable normal for the proposed pipelined design. Dual-stage architecture is the key to the expansion. It is possible to run at higher clock frequencies with this method, resulting in increased throughput and lower power use.

Identity Governance Framework for Privileged Users

Information technology companies have grown in size and recognized the need to protect their valuable assets. As a result, each IT application has its authentication mechanism, and an employee needs a username and password. As the number of applications increased, as a result, it became increasingly complex to manage all identities like the number of usernames and passwords of an employee. All identities had to be retrieved by users. Both the identities and the access rights associated with those identities had to be protected by an administrator. Management couldn’t even capture such access rights because they couldn’t verify things like privacy and security. Identity management can help solve this problem. The concept behind identity management is to centralize identity management and manage access identity centrally rather than multiple applications with their authentication and authorization mechanisms. In this research work, we develop governance and an identity management framework for information and technology infrastructures with privileged access management, consisting of cybersecurity policies and strategies. The results show the efficiency of the framework compared to the existing information security components. The integrated identity and access management and privileged access management enable organizations to respond to incidents and facilitate compliance. It can automate use cases that manage privileged accounts in the real world.

HARDWARE SUPPORT PROCEDURES FOR ASYMMETRIC AUTHENTICATION OF THE INTERNET OF THINGS

Subject of research: procedures of asymmetric authentication of Internet of Things nodes to ensure the highest level of security using cryptographic chips. The aim of the article is to study the ways of potential use of cryptographic chips to ensure secure authentication of Internet of Things sites using asymmetric cryptography procedures. The article solves the following tasks: analysis of hardware support technologies for asymmetric cryptography of the Internet of Things; definition of secure procedures for asymmetric authentication of Internet of Things sites and their constituent elements: creation of certificates, verification of public and private keys. Research methods: method of structural and functional analysis and design of complex systems, methods of identification and authentication of information objects, cryptographic methods of information protection, methods of security analysis of distributed information systems. The novelty of the study is the analysis of hardware support technologies for asymmetric cryptography of Internet of Things with cryptographic chips and the definition of structural and functional schemes for the implementation of procedures for asymmetric authentication of Internet of Things. Distinctive features of the provided asymmetric authentication schemes and procedures are: ensuring an increased level of information security through secure storage of cryptographic keys, digital signatures, certificates, confidential data in a novelty security environment protected from external attacks and no need to store private keys on the host side. The results of the work are procedures and schemes of application of cryptomicrops of asymmetric authentication to ensure the protection of Internet of Things. Analysis of the functioning of the presented schemes allowed to draw the following conclusions. The proposed structural and functional schemes for the implementation of procedures for asymmetric authentication of Internet of Things using cryptographic chips give the user an easy opportunity to implement cryptography without expertise in this field. These chips use the ECDSA digital signature computing and verification hardware with elliptical curve advantages, as a proven and reliable authentication algorithm, and the ECDH symmetric encryption session key generation unit. The provided schemes and procedures support three components of information security, namely: confidentiality, integrity and authenticity of data. Examples of potential applications of the provided schemes and procedures can be implemented using any asymmetric authentication chip, but it is recommended that they be used to generate encryption session keys and where digital signatures are required to verify data and code for integrity and authenticity.