Comprehensive Information Security Research Articles

A risk assessment method for power internet of things information security based on multi‐objective hierarchical optimisation

AbstractPower Internet of Things (PIoT) relies on various smart sensors and edge devices to support the operational status of the power grid. To address the challenge of conducting a comprehensive information security risk assessment for communication among heterogeneous devices in PIoT, a reliable security risk assessment method is proposed. This method, based on the analytic hierarchy process (AHP), considers four key dimensions: the cloud platform, communication transmission, edge side and terminal side. It integrates information indexes, the asset loss and risk probability to construct a risk assessment scheme oriented towards PIoT information security. The judgement matrix of AHP which fails the consistency test, is modified by using an improved multi‐objective particle swarm optimisation (IMPSO) algorithm, while minimising semantic offset distance. Verified through a case study, this method effectively reduces the consistency index to an average of 0.01 and achieves a correlation of 90.86% with traditional AHP assessment results.

Building a comprehensive and multi-dimensional information security ontology: elicitation process and OWL implementation

Building a comprehensive and multi-dimensional information security ontology: elicitation process and OWL implementation

ПІДХОДИ ДО МОДЕЛЮВАННЯ ЗАГРОЗ ПРИ СТВОРЕННІ КОМПЛЕКСНОЇ СИСТЕМИ ЗАХИСТУ ІНФОРМАЦІЇ ДЛЯ БАГАТОРІВНЕВИХ ІНТЕЛЕКТУАЛЬНИХ СИСТЕМ КЕРУВАННЯ

The problem of modeling threats in the creation of a comprehensive information security system in multi-level intelligent control systems is considered. Existing approaches to creating a threat model are described. It is proposed to consider a multi-level intelligent control system as a type of automated system according to the classification of Ukrainian normative documentation. The process of creating threat models for automated systems is analyzed. To select the optimal methodology for threat modeling the main criteria are determined which are taken into account when developing threat models. The proposed approach allows for the development of effective and reliable threat models for multi-level intelligent control systems providing a high level of information security. Keywords: threat modeling information security system intelligent control systems multi-level systems.

Modern approaches to information security: analysis of intrusion detection, firewalls and auditing in the context of organizational data protection

Today’s business environment presents organizations with growing information security challenges. The threats posed by cyber-attacks and the leakage of sensitive information require effective and innovative approaches to data protection. This paper explores a combination of tools and techniques, including intrusion detection system (IDS), firewalls, and information security auditing, as key elements of organizational data protection. The paper provides a detailed overview of each of these components and discusses their roles in information security. For an intrusion detection system, its ability to detect and respond to different types of attacks in real time is investigated. For firewalls, consider how they restrict access to network resources and regulate traffic. Finally, information security audits act as a means of assessing the effectiveness of security measures and identifying weaknesses. Statistical data and best practices are presented to support our recommendations. This article discusses the integration of these systems in a comprehensive information security strategy and provides tips for maximizing data protection in today’s digital world.

МОДЕЛЬ ИМПУЛЬСНОГО УПРАВЛЕНИЯ УСТОЙЧИВОСТЬЮ СИСТЕМЫ ИНФОРМАЦИОННОЙ БЕЗОПАСНОСТИ

The article considers in detail issues related to organizing management of the stability in information security systems. A comparative analysis of literature sources was carried out to describe current methods, tools and algorithms for managing the stability of operation and security of information systems based on various management models. It also considers the main approaches to formalizing the control of the structural dynamics of information security systems based on the mathematical theory of reachability sets, as well as issues of ensuring comprehensive information security. The authors propose approaches to the construction of models for strategic and tactical management of the loss of stability of an information security system (ISS) under conditions of its natural wear and tear, as well as in the presence of external disturbing influences of a random impulse. There are given dynamic models that implement the principles of highly effective control of the stability in an information security system when it is upset, as well as in the presence of external disturbing influences of a random impulse nature. The basic principles of strategic management of the stability in the information security system are formed based on the criteria-based approach. Formation of tactical control of its stability was carried out based on regulation by deviation. The concept of pulse control using a regulator is proposed to maintain the dynamic stability of security information systems.

Construction and Practice of Enterprise Information Security Management System of Intrusion Detection Technology

This article focuses on the construction and practice of enterprise information security management system, and conducts in-depth research and practice on the information security needs of enterprises. For the information security management system of enterprises, this study designs a comprehensive information security management system, aiming to enhance the information security protection capabilities of enterprises. At the same time, to ensure the stable operation of the system, this study has established a corresponding security guarantee system. This study conducted a comprehensive inspection of the information security management system. With a network information volume of 5TB, only 103MB of data was lost under the security supervision of this system, accounting for 5.66% of the total data volume. This data is much lower than the data loss rate of the original system. The amount of information stolen by the original system under the same conditions was as high as 1819MB, accounting for 35.53% of the total information. This result fully proves that the information security management system designed in this article has high security and practicality, and can effectively protect the internal network information security of enterprises.

METHODOLOGY FOR INVESTIGATING INFORMATION SECURITY INCIDENTS

The development and implementation of a comprehensive information security strategy during times of war are critical tasks for ensuring national security and protecting vital resources and information. The article analyzes various types of incidents in the field of information security, their mitigation, and recovery methods. It demonstrates the mechanics of investigating information security incidents at stages such as monitoring, indexing, data collection, mitigation, recovery, and closure. The publication presents a formalized description of an incident-handling plan in the form of a state machine, enabling the systematization and automation of the incident response process. Using examples of attacks targeting critical infrastructure, it illustrates the application of this mechanism and identifies measures aimed at enhancing the information security system, which can be employed to protect both governmental and commercial institutions and organizations. As a result, the recommended strategies for effectively countering cyberattacks and ensuring information security for organizations or nations include the implementation of monitoring tools and coordination with governmental and international response teams. It is also crucial to regularly train employees and develop mechanisms for collaboration with partners to achieve efficient protection against cyber threats. These measures contribute to strengthening cybersecurity and reducing potential damages. Future research may encompass the development of new threat detection algorithms, evaluating the effectiveness of information security measures for governmental and commercial institutions, implementing automated incident response systems, as well as studying the impact of war on critical infrastructure and international cooperation in this field, exploring opportunities for international cooperation and information exchange in the realm of information security during conflicts for the collective defense of national interests.

СПОСОБ ЗАЩИТЫ КОРПОРАТИВНОЙ СЕТИ НА ОСНОВЕ ДИНАМИЧЕСКОГО РАСПРЕДЕЛЕНИЯ ИНФОРМАЦИОННЫХ РЕСУРСОВ

The general trend in ensuring network security is the transition to the use of comprehensive information security systems. As the statistics of cyber attacks have shown, the objects of destructive influences, as a rule, are software and information resources of corporate networks. Within the framework of the well-known concept of comprehensive protection of network resources, the principle of situational transfer of information resources to protected nodes is substantiated. The article formulates the problem of dynamic distribution of local databases across nodes of a corporate information network. The implementation of such a mechanism is carried out in the event of a threat to the integrity of information resources by a priori formalization and initiation of an algorithm for solving the problem of assignments of a special type in Boolean variables. The features of the mathematical model of an extremal problem are the minimization of the cost of computing resources when solving a set of applied problems and taking into account the requirement for placing local databases on several network nodes with backup capabilities. In other words, a situationally formed plan for storing information resources involves placing one local database on at least the main and backup servers. The article considers the general methodology for determining the plan for placing databases on corporate network nodes and an example of its numerical implementation using the integer programming method. Based on the research results, recommendations are formulated consisting of choosing the optimal option for placing distributed database components on corporate network nodes, which ensures its full functionality and minimizes the risks of violating the integrity of information resources.

ASSESSMENT OF COMPLIANCE WITH INFORMATION SECURITY REQUIREMENTS VIA SECUBE

This article focuses on the assessment of compliance with information security requirements using SeCube, a comprehensive information security management system. It explores howSeCube facilitates organizations in meeting various information security standards and regulations. Key features of SeCube, such as risk assessment, policy management, incident tracking, and compliance reporting are examined. The article also highlights the benefits and challenges of using SeCube for compliance purposes, providing insights into its effectiveness in maintaining high information security standards.

THE ADVANTAGES OF USING SECUBE IN PUBLIC ADMINISTRATION TO ENSURE INFORMATION SECURITY

This article explores the advantages of using SeCube in public administration to ensure information security. SeCube, a comprehensive information security management system, is particularly suited for the unique requirements of public sector entities. The article highlights how SeCube addresses common challenges in public administration, such as data protection, regulatory compliance, and secure communication. The focus is on SeCube’s capabilities in risk assessment, incident management, policy implementation, and compliance monitoring, providing insights into its role in enhancing the security posture of public sector organizations.

Creating an information security policyin a bank

Abstract Information security policies are particularly important when it comes to maintaining information security within an organization. As a result, creating an information security policy is an invaluable process that cannot be undermined. This study aims at investigating how these information security policies are created, specifically in banks, from a linguistic perspective. The study employed the use of corpora and analyzed ten information security policies of banks randomly collected online. The analyses were categorized under five levels of linguistic analysis which included: the mode, lexis, grammar, speech acts, and discourse. Some statistical analyses which involved clustering were also performed at the level of discourse in order to find similar patterns in the information security policies. The results show that banks use the same linguistic features when writing their information security policies. The results also reveal how these linguistic features are used to develop a comprehensive and effective information security policy.

ПРОЕКТИРОВАНИЕ ВСПОМОГАТЕЛЬНОЙ АВТОМАТИЗИРОВАННОЙ СИСТЕМЫ ПРИНЯТИЯ УПРАВЛЕНЧЕСКИХ РЕШЕНИЙ НА ОСНОВЕ АНАЛИЗА УРОВНЯ ИНФОРМАЦИОННОЙ БЕЗОПАСНОСТИ

The aim of the scientific work is to create a methodology for designing an auxiliary automated management decision making system based on analysing information security level of intellectual resources of a large industrial enterprise. The methodology is based on the principle of comprehensive information security. The article is devoted to solving the problem of creating a convenient auxiliary tool for auditing information security events. The novelty of the work is the proposed creative concept of using the maximum amount of data on information security events to make a management decision (including a personnel management decision). The study results are recommendations for building an auxiliary automated system for auditing and analysing the information security level of intellectual resources of a large industrial enterprise.

Analysis of Network Security Countermeasures From the Perspective of Improved FS Algorithm and ICT Convergence

In this paper, the forward selection (FS) algorithm is introduced on the basis of information and communication technology, and the design of intrusion detection method for communication network is carried out. By studying the classification and detection pattern matching of communication network intrusion behavior, extracting the intrusion behavior features of communication network based on FS algorithm, and optimizing the intrusion detection and learning effect based on the limit learning machine, the intrusion behavior attributes of communication network are clarified, and a new detection method is proposed to solve the problems of low detection accuracy and low recall in the current intrusion behavior detection of complex communication network environments. Compared with the intrusion detection method based on GA-SVM algorithm, the accuracy of the detection results reaches 94.23%, and the recall rate exceeds 97%, which is obviously better than the 85% accuracy and 75% recall rate of the traditional detection method, which can ensure the security of the communication network environment. In addition, this paper proposes the APDR dynamic comprehensive information security assurance system model, which has considerable flexibility and can respond to current network security requirements.

Peculiarities of the Functional Approach to the Management of Information Security of Enterprises in Crisis Conditions

The paper identifies the relevance of the problem under study with regard to the development of information security management systems for enterprises and organizations. This issue is of particular importance in the context of economic crisis. With the active development of the latest information and communication technologies, general computerization, information security is becoming a key characteristic of enterprise information systems The problems of using a functional approach in the formation of information security management systems for enterprises in crisis conditions are considered. The essence of the information danger of enterprises in crisis conditions is analyzed. It is proposed that the process of forming an integrated information security management system should be carried out on the basis of a comprehensive functional approach. A conceptual model of enterprise information security management in crisis conditions based on the functional approach is built. This model will help to increase the level of information and economic security of enterprise. This model will help to increase the level of information and economic security of an enterprise. The proposed methodology for building enterprise information security management systems, which is formed on the basis of a functional approach, should provide a reliable level of protection of information and communications of an enterprise. This will be achieved through continuous monitoring of the information environment (threats, dangers, challenges, etc.), constant monitoring of the information and communication activities of an enterprise, forecasting of information security (in particular, the risks that will affect it), etc. The result of the formation and application of the enterprise information security management system based on the functional approach is the formation of a comprehensive, balanced, effective and flexible information security system that will take into account all the features of the application of measures to protect the enterprise from negative information and communication influences, protect information arrays (data), information and intellectual rights, and provide open access to information resources of employees.

Analysis of Financial Information Security in the Age of Big Data

This paper mainly discusses the security of financial information in the era of big data. With the acceleration of digitalization and networking in the financial industry, financial information security is facing more and more challenges. Firstly, this paper analyzes the main threats and risks faced by financial information security, including hacking, data leakage and improper behavior of internal employees. Then, this paper discusses the application of big data technology in financial information security, including data encryption, data backup, access control and so on. Finally, this paper puts forward some suggestions to strengthen financial information security, including strengthening personnel training, perfecting security management system and establishing information security guarantee system. Through this research, we can provide more comprehensive and effective information security measures for the financial industry.

БРИКС в глобальном режиме ИКТ-безопасности

The ubiquitous implementation of information and communication technologies (ICTs) is giving rise to cross-border security threats that require joint international responses. Fragmentation and growing conflict in the global information space complicates international cooperation within the UN to form a comprehensive global information security regime. Western countries actively support the formation of a cyber security regime based on Western values and promoted as a general initiative of the international community without taking into account the position of developing countries. An alternative approach focused on securing digital sovereignty is being promoted by many non-Western negotiating platforms, among which the BRICS occupies an important place. This article aims to assess the potential of BRICS influence in the framework of the international ICT security regime and the main directions of the BRICS activities in this area. In this paper, the BRICS agenda in the field of ICT security is studied on the basis of official documents of the annual summits and the main commitment made by the BRICS. The discourse analysis of the strategic planning documents of the BRICS countries allows to identify their priorities in the area under consideration, and to assess the potential for the implementation of the achieved obligations at the BRICS level. All the BRICS countries focus on ensuring sovereignty in the field of ICT. However, Russia, India and China consider digital development and ICT security as the most important direction of state policy and international cooperation; at the same time, they are more advanced in the field of digital technologies compared to other countries of the five and, as a result, are more vulnerable. In turn, Brazil and South Africa do not consider this area as a priority, placing more emphasis on ICT development and being more interested in access to technology and bridging the digital divide. However, all five countries are interested in solving the problem of extremism and terrorism in the digital sphere, which is also a promising area for the BRICS multilateral cooperation. A study of the voting of the BRICS countries in the UN and an analysis of their participation in alternative initiatives in the field of forming a cyber security regime promoted by Western countries showed the high efficiency of BRICS as a negotiating platform - the main contribution is made by developing a common position on the norms and principles of the international information security regime and their support at the UN level. Thus, BRICS can make a constructive contribution to the formation of the norms and principles of the international ICT security regime based on the principles of respect for state sovereignty, internationalization of the Internet governance, and counteraction to the criminal use of ICTs. An important advantage of BRICS in this area is the possibility of aggregating the interests and positions of developing countries.

Information Security Management Framework for Cloud Computing Environments

Cloud computing has become a popular paradigm for delivering computing resources and services over the internet. However, the adoption of cloud computing also brings new security challenges and risks, including data breaches, insider attacks, and unauthorized access. Therefore, it is critical to have a comprehensive information security management framework to address these challenges and ensure the security and privacy of cloud computing environments. This paper proposes a machine learning (ML) based information security management (ISM) framework for cloud computing environments that integrates best practices and standards from various domains, including cloud computing, information security, and risk management. The proposed framework includes residual recurrent network to effectively discriminate different patterns of cloud security attacks. The proposed framework emphasizes the importance of threat detection, security controls, and continuous monitoring and improvement. The framework is designed to be flexible and scalable, allowing organizations to tailor it to their specific needs and requirements.

How to Design the Best Audit Instrument for Evaluate E-Government Security?

The United Nation e-government survey reports that the implementation of e-government in Indonesia will increase in 2021. This proves that the Indonesian government is trying to transform all its business processes by digitalization. System digitization is expected to increase the efficiency of government performance. Information security is one of the important aspects to ensure that this digitization process really provides efficiency for government performance. A good information security management approach is management that adheres to the deeming cycle of quality. The management process includes plan, development, act and check. The audit enters the check cycle which functions as a control whether the process implemented in securing information is correct or not. A good audit process will encourage to produce good findings and recommendations as well. So, we need the right information security audit instrument so that the audit instrument is appropriate in the auditing process. A comprehensive information security audit instrument is an instrument that explains the COBIT 5 goals cascade, RACI chart mapping, briefing preparation and interview design protocol as well as key work-products.

Legal bases and stages of building information security in Ukraine

The article defines the legal basis for building an effective system of information protection by analyzing regulations. A study of legal methods of information security by analyzing and studying a comprehensive information security system and information security management system in accordance with the international standard ISO 27001. Describes the main stages of building a comprehensive information security system and information security management system, compares them.

Requirements for symmetric block encryption algorithms developed for software and hardware implementation

The hardware and software cryptographic information protection facility is one of the most important components of comprehensive information security in information and communication systems and computer networks. This article outlines and systematizes the basic requirements for modern cryptographic information protection facilities (CIPFs), and describes the stages of developing a symmetric block encryption algorithm. Based on the basic requirements for CIPFs, criteria for evaluating the developed cryptographic encryption algorithms were determined. The possibilities and necessary limitations of the types of cryptographic transformations (primitives) in the software and hardware implementation of the developed symmetric block encryption algorithm are considered and defined. On the basis of the developed encryption algorithm, SDTB Granit plans to implement a model of a hardware-software complex for off-line (linear) data encryption, taking into account all the listed requirements and characteristics. The article presents a new version of the "AL01" encryption algorithm, which is guided by the basic requirements for creating symmetric block ciphers.