Objects Of Critical Information Infrastructure Research Articles

Provision of security of the Unified Federal Information Register Containing Data on the Population of the Russian Federation

The object of this research is the public relations with regards to processing of information in the Unified Federal Information Register Containing Data on the Population of the Russian Federation n. Besides the Federal Law “On the Unified Federal Information Register Containing Data on the Population of the Russian Federation”, the subject of this research is legislation in the area of personal data and legislation on the critical information infrastructure. Based on the main formal and substantive aspects, the author defines the indicated register as a variety of register-based information; substantiates the relevance of application of the principles of framework regulation of information law in the context of creating the register; raises the question on the need to recognize the information system that processes data contained in the register as a valuable object of critical information infrastructure. The novelty of this research consists in the fact that this article is one of the first works dedicated to provision of legal security of the Unified Federal Information Register Containing Data on the Population of the Russian Federation. The following conclusions and proposals on improvement of legislation are formulated: 1) The principles of legal regulation established by legislation with regards to information as the object of legal regulation should be applied to the created register; any unauthorized actions with a separate register entry should be viewed as violation of integrity of the entire object. 2) Due to critical importance of the data contained in the register, it is essential to set confidentiality restrictions, and recognize the federal nformation system that processes data contained in the register as a valuable object of critical information infrastructure. 3) In the text of the Law “On the Unified Federal Information Register Containing Data on the Population of the Russian Federation”, it is necessary to specify the responsibilities of operator of the federal information system who maintains the federal register and compliance with the requirements of legislation on the security of critical information infrastructure. It is also necessary to clarify the provisions of the Decree of the Government of the Russian Federation that establishes a list of criteria of importance of the objects of critical information infrastructure of the Russian Federation and their value.

Методика детализированного оценивания значимости систем организации движения поездов как объектов критической информационной инфраструктуры

Методика детализированного оценивания значимости систем организации движения поездов как объектов критической информационной инфраструктуры

МЕТОДИКА ОПРЕДЕЛЕНИЯ КРИТИЧЕСКИХ ПРОЦЕССОВ НА ОБЪЕКТАХ ИНФОРМАЦИОННОЙ ИНФРАСТРУКТУРЫ

. The aim of the study is to develop a methodology for determining critical processes in order to simplify the activities of critical information infrastructure (CII) entities for categorizing information infrastructure objects the example of the chemical industry. The actuality of the problems under consideration is based the fact that the number of cyber attacks in various areas of state activity, including significant objects (ZO) of CII, is not decreasing. To protect the national information resources of the Russian Federation in 2017, the actions have been chosen in the direction of protecting CII objects with the adoption of the Federal law on the security of critical information infrastructure of the Russian Federation, which defined important directions of the Russian state policy in the information sphere for the next decade. Thus during its implementation, many subjects of critical information infrastructure have already had to face difficulties of various levels. The paper analyzes some fragments of solving the tasks set in the development of methods for determining critical processes at information infrastructure facilities, the sustainable functioning of which is regulated by a number of fundamental regulatory legal documents of the Russian Federation. In the course of the study, some features of determining critical processes at CII facilities, for example, in the chemical industry, were established. These features were later used in the development of a unique methodology for determining critical processes in the information infrastructure.

Method for Evaluating Security of Cloud IT-Components based on Estandards Criteria

The analysis of well-known methods for ensuring IT-security is presented, methods for evaluating security of IT-components and Cloud services in general are considered.
 An attempt to analyze cloud services not from a commercial position of a popular marketing product, but from a position of system analysis is made. The previously introduced procedure for IT-components evaluation is not stable, since the end user has not a 100% guarantee of access to all IT-components, and even more so to the remote and uncontrolled Cloud service. A number of reviews point at increased efforts to create a secure network architecture and ability to continuously monitor deviations from established business goals. In contrast to the Zero Trust and Zero Trust eXtended models, according to which additional security functions are superimposed on existing IT-components, it is proposed to consider the set of IT-components as a new entity – an Information Processing System. This will allow to move to formal processes for assessing the degree of compliance with the criteria of standards for both existing and prospective IT-components while ensuring security of Cloud services.
 A new method for evaluation which is based on the previously developed hybrid methodology using formal procedures based on two systems of criteria - assessment of the degree of compliance of Management systems (based on ISO/IEC 27001 series) and assessment of functional safety requirements (based on IEC 61508 series and ISO/IEC 15408 series) is proposed. This method provides reproducible and objective assessments of security risks of Cloud-based IT‑components that can be presented to an independent group of evaluators for verification. The results obtained can be applied in the independent assessment, including critical information infrastructure objects.

Cybersecurity law of the People’s Republic of China as a key instrument for ensuring information security of the banking and finance system

The object of this research is the legal relations that emerge in ensuring informations security of the banking and finance system of the People’s Republic of China. The work characterizes China’s cybersecurity law, which was enacted in 2017. The author determines the key positions of this statutory act that establishes the foundation for national institutional and normative-legislative mechanism of ensuring information security of the banking and finance sectors as objects of critical information infrastructure. China’s cybersecurity law represents a fundamental piece of legislation that defines the principles, mechanisms and order of ensuring information security. It defines critical information infrastructure through nomenclature of the sectors and indication of criteria for designation of one or another sector as critical information infrastructure. The banking and finance sector meets such criteria, thus ensuring its information security is based on the general positions of this legislation. The law determines the regime of protection of personal data, as well as obligations of network carriers that are included into the institutional mechanism of provision of cybersecurity. All aforementioned facts make China’s cybersecurity law a key legislative instrument of the mechanism of ensuring information security of the banking and finance system.

Method of forming expert coalitions in the context of solving the expertise problem of alternatives with weakly formalized criteria

The article describes the worked on numerical technique for forming alternative coalitions of experts relating to solving weakly formalized problems and the results of verification of the proposed method by the example of the studying the attributes of violators in the field of physical protection of critical information infrastructure objects. The proposed methodology for conducting preliminary examination on the basis of the worked on numerical method for identifying coalitions of experts allows to perform the procedure for forming an agreed group of experts and obtaining preliminary estimates of the significance of the attributes of a violator during a single survey of experts, that significantly saves time and reduces the complexity of the expertise of objects. Using the worked on numerical method, the main and two alternative coalitions were identified. Taking into account the alternative opinion of experts allowed 31 experts to be identified as agreed upon, which more precisely determines the results of the expertise.

The main aspects of conformity assessment of DLP-systems used to ensure the security of significant objects of critical information infrastructure of the Russian Federation

The main aspects of conformity assessment of significant objects of critical information infrastructure are considered. Information security tools used to ensure the security of significant objects of critical information infrastructure must necessarily undergo the conformity assessment procedure and its form is defined only for state and municipal information systems, as well as information systems of personal data. In all other cases, the subjects must determine the form, content and criteria of conformity assessment independently. The authors propose an approach to assessing the compliance of information security tools on the example of DLP-systems, allowing it to determine, as well as the analysis and synthesis of the procedure. This approach is harmonized with the international regulatory framework and is based on the latest methodological documents of the Federal Service for Technical and Export Control of Russia on operating systems.

Синтез модели объекта критической информационной инфраструктуры для безопасного функционирования технической системы в условиях деструктивного информационного воздействия

The purpose of the article: improving the security and stability of the functioning of complex technical systems managed by critical information infrastructure objects under the conditions of a destructive information impact, using parameterized evolutionary models. Methods: synthesis of parametrized evolutionary models of significant objects of critical information infrastructure based on the Markov theory of estimation of multidimensional diffusion processes. The result: within the framework of an integrated approach to ensuring the security of complex technical systems, a parametrized evolutionary model of an object of a critical information infrastructure operating under conditions of destructive information impact has been synthesized. An approach to the development of recommendations for managing a complex technical system by means of an operational assessment of the main characteristics of the functioning of a critical information infrastructure object is proposed. A sequence has been developed for developing solutions for the operation of a complex technical system, based on an assessment of the impact level and the results of an operational calculation of the main characteristics of the functioning of a critical information infrastructure object. The results obtained make it possible to reasonably formulate technical requirements for the created or modernized means of ensuring the security of significant objects of critical information infrastructure that manage complex technical systems.

МЕТОДИКА АНАЛИТИЧЕСКОЙ ОБРАБОТКИ РАСПРЕДЕЛЕННЫХ ВО ВРЕМЕНИ ИНЦИДЕНТОВ ИНФОРМАЦИОННОЙ БЕЗОПАСНОСТИ

The process of analytical processing of information security incidents has several drawbacks described in this article. A structural model of the subsystem of analytical data processing of the monitoring system of a threat to the information security of the objects of critical information infrastructure is built and the process of its functioning is described. Based on probability theory, a process is described for predicting the occurrence of an information security incident in advance, due to both random and independent information security events, and a targeted attack on information resources. The subject of the article is the methodology of analytical processing of information security events in the monitoring system, a threat to the information security of critical information infrastructure facilities. The purpose of the article is to increase the likelihood of detecting an information security incident by retrospectively analyzing information security events distributed over time, and to timely warn of a possible occurrence of an information security incident by predicting its occurrence, which in turn leads to an increase in the security of information systems. Thus, in contrast to the existing model of correlation of information security events, to reduce the time of detection of an information security incident in a given time interval. The research methodology allows us to solve two related but different tasks: “accounting problem” and “probabilistic problem”. Within the framework of the “accounting task”, the solution boils down to one goal — to determine the proportion of the occurrence of an information security incident at various levels of its occurrence. As part of the solution of the “probabilistic problem”, the methodology determines the probability of an information security incident on the basis of an accidental receipt of information security event chains at the entrance. The research results allow us to eliminate the shortcomings of existing systems for detecting computer attacks, such as distributed over time, and also to apply the developed methodology to create advanced tools for automated systems that can function stably under conditions of conducting distributed time attacks of computer attacks.

БАЗОВІ АСПЕКТИ ЗАХИСТУ КОНФІДЕНЦІЙНОЇ ІНФОРМАЦІЇ НА ОБ’ЄКТАХ КРИТИЧНОЇ ІНФОРМАЦІЙНОЇ ІНФРАСТРУКТУРИ

The rapid development of information and communication technologies has increased the vulnerabilities of various networks, systems and objects as well as made it much more difficult to ensure their reliable protection and security. All these factors have led to the fact that the world's leading countries have begun to pay considerable attention to cybersecurity and critical information infrastructure protection. However, the protection of various types of information with restricted access (in particular, confidential information) at critical infrastructure objects remains unexplored. With this in mind, the paper analyzes the existing approaches of the world's leading countries to the confidential information protection at critical infrastructure. The analysis revealed that today there are no comprehensive, multifunctional methods of protecting confidential information at critical information infrastructure. In addition, the classification of critical information infrastructure objects according to information security requirements is developed. This classification by determining the type of processing information, possible access modes and criticality category, allows to ensure unity of approaches to protection of these objects belonging to different types, including information systems, automated control systems and information-telecommunication networks.

Модель реализации требований по защите информации объектов критической информационной инфраструктуры

Модель реализации требований по защите информации объектов критической информационной инфраструктуры

Analyzing Impact of Computer Attacks on the Banking System of the Russian Federation

The article analyzes damage caused by attacking finance organizations in the Russian Federation through activization of hacker groups. The mentioned attacks were mainly directed at banking cards’ processing, cash machines and the SWIFT system, an international system of transmitting finance information and payments. The growth in hacker penetrations can be seen in all sectors of Russian economy, it is based on informational confrontation and aims at destabilization of considerable objects of critical information infrastructure. Today special attention is paid to attacks of hacker groups, which get financing from states and criminal groupings in order to exert influence on the leading banks of the world. The author investigated the key methods of attacks of finance organizations. The role of the Federal service on technical and export control and the Department of information security of the Bank of Russia was described. By assessing the impact of computer attacks the author came to the conclusion that the Russian banking sector is vulnerable to computer attacks on informational systems that could cause damage not only to small but also big credit organizations, which possess over 60% of the Russian banking sector assets.

О ПРОФЕССИОНАЛЬНЫХ СТАНДАРТАХ В ИНТЕРЕСАХ ПОДГОТОВКИ КАДРОВ ПО БЕЗОПАСНОСТИ ОБЪЕКТОВ КРИТИЧЕСКОЙ ИНФОРМАЦИОННОЙ ИНФРАСТРУКТУРЫ

О ПРОФЕССИОНАЛЬНЫХ СТАНДАРТАХ В ИНТЕРЕСАХ ПОДГОТОВКИ КАДРОВ ПО БЕЗОПАСНОСТИ ОБЪЕКТОВ КРИТИЧЕСКОЙ ИНФОРМАЦИОННОЙ ИНФРАСТРУКТУРЫ

Developing a Software Module to Automate the Process of Categorizing Objects of Critical Information Infrastructure

This article presents a program for automating the process of categorizing critical information infrastructure of the Russian Federation. The program for automating the process of categorizing critical information infrastructure objects is located on Windows 7 that provides consistent, logically verified work. When you run it, the user is given the ability to automatically enter data in the object scope, type, architecture. As a development environment for this software product PyCharm developed by JetBrains based on IntelliJ IDEA was used for Python programming language. The program provides libraries pyqt5, python-docxtemplate’s, pyinstaller. In the end of the program the objects of critical information infrastructure are identified as the outcome of importance (or not given) and create the resulting document in Microsoft Word (.docx). Thus, the developed software module for automating the process of categorizing critical information infrastructure objects allows to speed up the process making it easier to implement.

To a Question of Predicting Model Stability on the Basis of Multiple Scale Wavelet Transformation

Purpose of research. The article is devoted to the development of production predicting models and their stability conditions.Methods: Predicting models are actively used in modern control systems, in information support intellectual systems of decision-making. They have a huge role in any activity connected with signals' processing including anomalies detection of various technological processes and assessment of risk potential of critical information infrastructure objects. They can also be used in monitoring systems of security threats. Special class among predicting models is represented by the models based on experiences of proceeding processes (for example, regularities taken from the data which are saved up as a result of an object work).Results. Virtual "instant" model of an object belonging to this class is described in the article. It is presented taking into account multiple and large-scale decomposition of entrance influences vectors and the forecast of an object output. The described model gives the forecast without possible future conditions of an expected background. The approach based on the wavelet-analysis which is characterized by a unique opportunity of detailed frequency analysis in time is developed for stability study of virtual "instant" model. Stability conditions of the predicting model are received on the basis of this approach. This model has allocation conditions for approximating and detailing components for four types of ratios between memory depth on input and output.Conclusion: Predicting model of oil processing in which memory depth on an input is more than memory depth on output is described in the article. It is shown that the accuracy of virtual "instant" model forecast is higher than linear predicting model has at rare data of laboratory analysis. One of stability conditions depending on decomposition depth is shown for the constructed model. On the basis of received results analysis it is possible to draw a conclusion on applicability of received stability conditions for risk potential assessment of process development forecast implementation in monitoring systems of security threats.

Formation of the list of critical aviation information systems in the context of the cyber threats activities

The subject of the paper is the methods and models of forming the list of objects of critical information infrastructure (CII). The purpose of this paper is to form a list of critical aviation information systems (CAIS) on the basis of the developed unified data model and determine their metrics of connectivity and complexity. Results. Based on the author’s previously developed unified data model, a methodology was developed for creating a list of CII objects. It due to multi-level detail, hierarchical representation of sets characterizing systems and their components, as well as the introduction of the incidence matrix of CII cybersecurity, its simplex complexes and Q-analysis, allowed to formulate the list of CAIS and to determine their connectivity (the ratio of q -bonds between sets cyber threats (CT) and CAIS). Conclusions. This research study has shown that the relations q -connections of sets of CT have a higher connectivity in comparison with similar relations q -connections of sets of systems of CAIS, which indicates that the implementation of one CT can initiate a cascade effect on other related threats and lead to damage, and sometimes devastating consequences for a certain system of CAIS. In addition, the complexity measurements of complexes j KAIS = 1,39 and j THREATS = 1,13 are calculated and indicate a greater «complexity» of CAIS systems. Given results can be used by the relevant state authorities to build a list of CII objects in order to apply adequate security methods and means.

К ВОПРОСУ КАТЕГОРИРОВАНИЯ ОБЪЕКТОВ КРИТИЧЕСКОЙ ИНФОРМАЦИОННОЙ ИНФРАСТРУКТУРЫ ВЫСШИХ УЧЕБНЫХ ЗАВЕДЕНИЙ

The aim of this work is to simplify the activities of categorization of critical information infrastructure (CII) for educational organizations engaged in research activities in the framework of the implementation of the adopted legislation. In the field of critical information security, the regulatory and legislative framework is still being improved in accordance with the Federal law "On the security of critical information infrastructure of the Russian Federation" dated 26.07.2017 No. 187-FZ, imposing new requirements on the subjects of CII. The educational sphere is absent in this norm, as well as the automated information systems of support of administrative processes of management, and also ensuring educational process are excluded from the list of objects of CII respectively. However, the above list contains an indication of the sphere of science, and if any higher education institution is involved in research activities, it becomes the subject of this legislation, which imposes the obligation to carry out a number of organizational and technical measures to ensure the safety of CII facilities. The paper details the minimum procedures for categorization of a certain list of CII for the institutions involved in scientific research.

Evaluation of damage to objects of critical information infrastructure under the influence of destructive electromagnetic radiation based on hierarchical rank approach

In article is presented hierarchical rank an approach to assessing damage to objects of critical information infrastructure under the impact of destructive electromagnetic radiations, providing formalisationt the specified objects and the account of their criticality with use of the conceptual scheme within the limits of expert system, and also distribution of influences of the opponent, with their subsequent classification as destructive electromagnetic attacks. One of the main tasks for the objects of CII facilities that provide vital public functions is the analysis and assessment of threats and consequences from exposure of electromagnetic impulses (EMI) of artificial origin, which can be used to disorganize CII control systems, suppression of technical means of protection (TMP) of specially protected objects, as well as causing significant economic damage.

Модель обнаружения компьютерных атак на объекты критической информационной инфраструктуры

Модель обнаружения компьютерных атак на объекты критической информационной инфраструктуры

Categorization of objects of critical information infrastructure of water transport

The transport complex is a complex network with many add-ins and the transfer of large amount of information in real time. Identifying the critical transport information infrastructure is the first step in the process of ensuring security and protecting the availability of critical objects. This paper contains the author's recommendations on the implementation of Russia Federal Law No. 187-FZ regarding the categorization of objects of critical information infrastructure in the field of water transport.