Critical Information Infrastructure Research Articles

О ПРОФЕССИОНАЛЬНЫХ СТАНДАРТАХ В ИНТЕРЕСАХ ПОДГОТОВКИ КАДРОВ ПО БЕЗОПАСНОСТИ ОБЪЕКТОВ КРИТИЧЕСКОЙ ИНФОРМАЦИОННОЙ ИНФРАСТРУКТУРЫ

О ПРОФЕССИОНАЛЬНЫХ СТАНДАРТАХ В ИНТЕРЕСАХ ПОДГОТОВКИ КАДРОВ ПО БЕЗОПАСНОСТИ ОБЪЕКТОВ КРИТИЧЕСКОЙ ИНФОРМАЦИОННОЙ ИНФРАСТРУКТУРЫ

Key Problems of the Critical Information Infrastructure through Scada Systems Research

In the current age, cyber security is an essential element of any information system. A key aspect is in the critical information infrastructure, where information security has become a top priority for information and network security experts. The interoperability of an ICT infrastructure with other components of it is an important aspect of its life cycle. Because Supervisory Control and Data Acquisition (SCADA) systems form part of the critical infrastructure, their cyber protection is particularly important in strategically important industrial and infrastructure sites — power plants, refineries, oil pipelines, treatment plants, manufacturing facilities, communications and transportation infrastructures. Along with the advancement of technology, the increasing number of Scada devices available online, the vulnerability of the sectors controlled by them has also increased. In the world of Internet of things (everything), the end devices cause a new wave of possible vulnerabilities in SCADA. They become the new places for attacks and breaches trough wich the system may be accessed or even compromised. There are a number of critical infrastructures in the Community whose disruption or destruction would have significant cross-border implications for more than one sector as a result of the interdependence of interconnected infrastructures. Such European critical infrastructures have been established and launched under a common procedure developed by the European Commission, with security requirements assessed according to a common minimum approach.
 The present article exposes and examines the critical infrastructures of the European Union and Bulgaria. Trough presenting the structure of a Scada system the vulnerabilities and the various possibilities of attacking it were analised. As an example, a specific case based on trees has been considered, and the obtained results were summarized and visualized. The consequences were analized and respecctive conclusion was done.

CRIMINAL LEGAL ENSURING OF SECURITY OF CRITICAL INFORMATION INFRASTRUCTURE OF THE RUSSIAN FEDERATION

The article considers the problems associated with the development of new state approaches to ensure the security of critical information infrastructure (hereinafter - the CII) in the context of the existence of threats to their information security, including computer attacks in its regard. We analyzed the main provisions of the Federal Law No. 187-FZ dated July 26, 2017 “On the Safety of the CII of the Russian Federation”.We disclosed the content and essence of the concept of “security of the CII”. It is justified that the security of the CII shall be based on the principles and methodology of ensuring national security. We have developed proposals to classify part of the subjects of economic activity as the CII subjects, as well as offered some additional mechanisms to increase the security of the CII. We proposed to develop and implement: the federal state standard of higher education in the direction of “safety of the CII”; retraining and advanced training courses in the direction of “safety of the CII”; a mechanism for improving the qualifications of officials of the CII subjects on various issues of ensuring its security; security insurance mechanism for the CCI; a mechanism for organizing international, all-Russian, regional and sectoral cyber orders at the CII objects. It has been established that the security of the CII directly depends on the correctness of decision-making in countering computer attacks, the speed and effectiveness of the actions of their entities. It is proved that the criminal law norm on liability for unlawful influence on the CII of the Russian Federation shall be changed

The securitization of cyberspace governance in Singapore

ABSTRACT Drawing from securitization theory and Critical Discourse Analysis (CDA), this article examines how the Singaporean government has “securitized” cyberspace governance. It contributes value-add to the existing literature on securitization theory by evaluating the specific backgrounds and preexisting beliefs that securitizing actors bring with them to the securitization process. Taking the case of Singapore, this paper focuses on the military elites turned civilian politicans and policymakers that have been tasked with cyberspace governance. A discourse analysis shows how terminologies describing cyberspace as an “existential” issue and key personnel appointments with significant military backgrounds reflect the prevalance of military elites, terminologies, strategies that have become embedded within domestic cybersecurity governance structures. The use of military-style concepts such as “digital ranges” and “war games” in Singapore mirrors global financial industry trends where military-derived terminology has become widespread in preparing for cyber-attacks on critical information infrastructure. Two key focus areas of cyberspace governance are evaluated: online content regulation of Internet and social media networks, and legislation to protect critical information infrastructure. The paper concludes by discussing a range of concerns raised by the target “audience” of securitization processes, such as civil society and information infrastructure providers.

Developing a Software Module to Automate the Process of Categorizing Objects of Critical Information Infrastructure

This article presents a program for automating the process of categorizing critical information infrastructure of the Russian Federation. The program for automating the process of categorizing critical information infrastructure objects is located on Windows 7 that provides consistent, logically verified work. When you run it, the user is given the ability to automatically enter data in the object scope, type, architecture. As a development environment for this software product PyCharm developed by JetBrains based on IntelliJ IDEA was used for Python programming language. The program provides libraries pyqt5, python-docxtemplate’s, pyinstaller. In the end of the program the objects of critical information infrastructure are identified as the outcome of importance (or not given) and create the resulting document in Microsoft Word (.docx). Thus, the developed software module for automating the process of categorizing critical information infrastructure objects allows to speed up the process making it easier to implement.

Issue of criminal liability for offences against critical infrastructure objects in nuclear industry

A special legislation on criminal liability for offences against critical infrastructure objects is currently under development in Ukraine. The Cabinet of Ministers of Ukraine adopted the Concept for the development of a state system for critical infrastructure protection.
 The paper considers this legal area with regard to objects in the nuclear industry in the general context of critical infrastructure protection. It provides the current state in the legal regulation of fundamentals of criminal liability for offences against the critical infrastructure objects in the nuclear industry. The issue on the sufficiency and appropriateness of the existing level of such a liability is discussed further.
 The paper presents the list of some main critical infrastructure objects in accordance with the regulatory documents in the sphere of critical infrastructure protection and their classification.
 In addition, such concepts as “critical infrastructure” (relatively new notion in the national legislation), “unlawful intrusion”, “computer crimes”, “critical information infrastructure” and other concepts important to the nuclear industry were considered in this research. The notions presented in different regulatory documents were analyzed.
 The paper emphasizes that the legislation of Ukraine does not currently present special (separate) standards on the criminal liability for offences against critical infrastructure objects. Some promising issues related to fundamentals of the criminal liability and protection of critical infrastructure objects in the nuclear industry were also considered.
 The research involves the prospect of further development of a special law to define the area for improving relevant legislation on general regulation of these issues.
 The paper also stresses on the need to introduce some changes to the Criminal Code of Ukraine with respect to certain articles of section XIV.

Применение многомодальной аутентификации на объектах критической информационной инфраструктуры

Применение многомодальной аутентификации на объектах критической информационной инфраструктуры

ON THE FORMATION OF LEGAL AND SCIENTIFIC BASES OF ENSURING THE SAFETY OF CRITICAL INFORMATION INFRASTRUCTURE OF THE RUSSIAN FEDERATION

The concept of critical information infrastructure is analyzed. The history of its formation and consolidation in the legal space of Russian legislation is considered. The article studies the experience of foreign countries in the field of ensuring information security in general and protecting critical infrastructure in particular. The relevance of the chosen topic is due to the course taken by the Russian Federation for the development of the information society in the country, as well as the need to protect significant information systems and resources of state authorities. The author of the article reveals the terms included in the definition of critical information infrastructure, enshrined in the legislation of the Russian Federation. In conclusion, the main problems of the considered regulatory legal acts are highlighted, recommendations are given on the further development of the information security system of critical infrastructure.

ОСОБЕННОСТИ ПОВЫШЕНИЯ КВАЛИФИКАЦИИ СПЕЦИАЛИСТОВ ПО ОБЕСПЕЧЕНИЮ БЕЗОПАСНОСТИ ЗНАЧИМЫХ ОБЪЕКТОВ КРИТИЧЕСКОЙ ИНФОРМАЦИОННОЙ ИНФРАСТРУКТУРЫ

The article considers the program of professional development that allows to gain the necessary knowledge and abilities in the field of safety of the critical information infrastructure (CII). This program explains actions of public authorities, institutions and other organizations for fulfilling the requirements of the Federal law of July 26, 2017 No. 187 “About safety of critical information infrastructure of the Russian Federation”. The purpose of the article is to describe the features of implementation of the offered program for advanced training. The structure of the program, the form and types of advanced training, structure of the final assessment, types of qualification documents are given. The article also describes the educational requirements for students entering and features of teaching the program and interaction with students within a course. Special attention is paid to the practical issues contained in the program related to the organization of secure network communication between elements of the critical information infrastructure using “m-TrusT” microcomputers. As a result of successful mastering of the program, students receive standard certificates and with information obtained on the course could organize works on categorization of the objects of the CII’s and fulfill the requirements of Federal Law No. 187 for them.

Cloud Control: China’s 2017 Cybersecurity Law and its Role in US Data Standardization

This paper contends that by influencing the security issues presented by global corporate data investments through a combination of domestic policymaking, dominance in key market sectors, and leadership in international standards-making organizations, China is establishing new global standards for the data trade. In 2017, Apple Inc. was one of the first firms to build a new joint venture data center in China to comply with China’s Cybersecurity Law of the same year. This law requires all firms that maintain “critical information infrastructure” to store their data on a Chinese-owned server. Apple, like many firms operating in China, relies heavily on data centers to function in the Chinese market. However, for Apple, as for many other companies in areas ranging from engineering services to enterprise computing, the decision to open a data center with major ownership by a Chinese firm transforms the politics of power and access to data within the company and among its consumers. Indeed, shortly after Apple began migrating the data of Chinese users to its new Chinese servers, some US-based users reported the migration of their data to Chinese servers as well. The effects of Chinese influence on data security standards in the United States have yet to be thoroughly explored in the communications scholarship. No one has done so in relation to data storage for firms that are not explicitly in the digital economy such as white goods providers and home monitoring systems,. Drawing on reviews of Chinese corporate filings and government documents, as well as U.S. corporate filings this paper concludes that China’s Cybersecurity Law and the related technology regulatory framework have fundamentally transformed the ownership and the circulation of the data within the US market. The findings of this paper suggest that the United States should change its approach, because its current laissez-faire policies ultimately protect neither consumers nor national competitiveness. China’s influence on global data governance lies at the core of the future of global communications policy. Targeted, critical perspectives on the country’s specific policies and their effects on firms across a wide range of sectors will help regulators to plan for mid- and long-term strategic challenges not just in the technology industry, but across sectors. As more industrial sectors become data-driven, communications policy will take an increasingly central role in industrial regulation writ large.

To a Question of Predicting Model Stability on the Basis of Multiple Scale Wavelet Transformation

Purpose of research. The article is devoted to the development of production predicting models and their stability conditions.Methods: Predicting models are actively used in modern control systems, in information support intellectual systems of decision-making. They have a huge role in any activity connected with signals' processing including anomalies detection of various technological processes and assessment of risk potential of critical information infrastructure objects. They can also be used in monitoring systems of security threats. Special class among predicting models is represented by the models based on experiences of proceeding processes (for example, regularities taken from the data which are saved up as a result of an object work).Results. Virtual "instant" model of an object belonging to this class is described in the article. It is presented taking into account multiple and large-scale decomposition of entrance influences vectors and the forecast of an object output. The described model gives the forecast without possible future conditions of an expected background. The approach based on the wavelet-analysis which is characterized by a unique opportunity of detailed frequency analysis in time is developed for stability study of virtual "instant" model. Stability conditions of the predicting model are received on the basis of this approach. This model has allocation conditions for approximating and detailing components for four types of ratios between memory depth on input and output.Conclusion: Predicting model of oil processing in which memory depth on an input is more than memory depth on output is described in the article. It is shown that the accuracy of virtual "instant" model forecast is higher than linear predicting model has at rare data of laboratory analysis. One of stability conditions depending on decomposition depth is shown for the constructed model. On the basis of received results analysis it is possible to draw a conclusion on applicability of received stability conditions for risk potential assessment of process development forecast implementation in monitoring systems of security threats.

Formation of the list of critical aviation information systems in the context of the cyber threats activities

The subject of the paper is the methods and models of forming the list of objects of critical information infrastructure (CII). The purpose of this paper is to form a list of critical aviation information systems (CAIS) on the basis of the developed unified data model and determine their metrics of connectivity and complexity. Results. Based on the author’s previously developed unified data model, a methodology was developed for creating a list of CII objects. It due to multi-level detail, hierarchical representation of sets characterizing systems and their components, as well as the introduction of the incidence matrix of CII cybersecurity, its simplex complexes and Q-analysis, allowed to formulate the list of CAIS and to determine their connectivity (the ratio of q -bonds between sets cyber threats (CT) and CAIS). Conclusions. This research study has shown that the relations q -connections of sets of CT have a higher connectivity in comparison with similar relations q -connections of sets of systems of CAIS, which indicates that the implementation of one CT can initiate a cascade effect on other related threats and lead to damage, and sometimes devastating consequences for a certain system of CAIS. In addition, the complexity measurements of complexes j KAIS = 1,39 and j THREATS = 1,13 are calculated and indicate a greater «complexity» of CAIS systems. Given results can be used by the relevant state authorities to build a list of CII objects in order to apply adequate security methods and means.

The essence and content of the investigation of cyber incidents and cyberattacks by the Security Service of Ukraine units

The article analyzes the nature of the investigation of cyberincidents and cyberattacks on state electronic information resources, information the protection of which is required by law, critical information infrastructure, delimitates such an investigation from the pre-trial investigation, and also determines the total amount of responsibilities of the SSU officers involved in this activity.

К ВОПРОСУ КАТЕГОРИРОВАНИЯ ОБЪЕКТОВ КРИТИЧЕСКОЙ ИНФОРМАЦИОННОЙ ИНФРАСТРУКТУРЫ ВЫСШИХ УЧЕБНЫХ ЗАВЕДЕНИЙ

The aim of this work is to simplify the activities of categorization of critical information infrastructure (CII) for educational organizations engaged in research activities in the framework of the implementation of the adopted legislation. In the field of critical information security, the regulatory and legislative framework is still being improved in accordance with the Federal law "On the security of critical information infrastructure of the Russian Federation" dated 26.07.2017 No. 187-FZ, imposing new requirements on the subjects of CII. The educational sphere is absent in this norm, as well as the automated information systems of support of administrative processes of management, and also ensuring educational process are excluded from the list of objects of CII respectively. However, the above list contains an indication of the sphere of science, and if any higher education institution is involved in research activities, it becomes the subject of this legislation, which imposes the obligation to carry out a number of organizational and technical measures to ensure the safety of CII facilities. The paper details the minimum procedures for categorization of a certain list of CII for the institutions involved in scientific research.

ВЫЯВЛЕНИЕ ПРИЗНАКОВ КОНТРАФАКТА В ИЗДЕЛИЯХ ЭЛЕКТРОННОЙ КОМПОНЕНТНОЙ БАЗЫ В АСПЕКТЕ ОБЕСПЕЧЕНИЯ ПРОМЫШЛЕННОЙ КИБЕРБЕЗОПАСНОСТИ

The program of digitalization of the economies of developed countries highlights a relatively new direction of development of the so-called cyberphysical control systems, in particular, industrial technological processes, which motivates the formulation of non-traditional tasks to ensure the security of critical information infrastructure. The obvious threat of loss of stability of technological processes is the use of counterfeit components in a view of the observed overall increase in a volume of counterfeit products, including electronic components. Therefore, there is a clear request for a systematic solution to the problem of detecting counterfeit not only from the standpoint of the protection of intellectual property, but also in the aspect of industrial safety during the certification of appropriate technical solutions. Considering that for testing centers and laboratories this statement implies the organization of rather new type of activity under conditions of insufficiency of the corresponding regulatory base. The paper reviews the foreign normative documents defining the methods and means of detecting counterfeit in radio electronics, which can be used as the initial basis for the formation of the domestic regulatory framework

Evaluation of damage to objects of critical information infrastructure under the influence of destructive electromagnetic radiation based on hierarchical rank approach

In article is presented hierarchical rank an approach to assessing damage to objects of critical information infrastructure under the impact of destructive electromagnetic radiations, providing formalisationt the specified objects and the account of their criticality with use of the conceptual scheme within the limits of expert system, and also distribution of influences of the opponent, with their subsequent classification as destructive electromagnetic attacks. One of the main tasks for the objects of CII facilities that provide vital public functions is the analysis and assessment of threats and consequences from exposure of electromagnetic impulses (EMI) of artificial origin, which can be used to disorganize CII control systems, suppression of technical means of protection (TMP) of specially protected objects, as well as causing significant economic damage.

Stationary systems of cyberattacks detection and prevention for cyberprotection and cybercounterintelli-gence (by example USA)

Several state institutions deal with the providing of national cybersecurity. Each of them solvs its own number of tasks on critical information infrastructure protection from cyberattacks and cyberincidents. For example, the State Service of Special Communication and Information Protection, units of technical protection are responsible for cyberprotection of information resources and data processing infrastructure from cyberattacks of any origin. The Security Service of Ukraine defends national critical information infrastructure from cyberattacks of foreign intelligence services and cyberterrorists, and the National Police protects legal rights and interests of cityzens and society from cybercrimes. For solving their tasks, all of them use cyberattacks detection and prevention instruments. But these specific tasks, solved by both institutions, have to be affected on functional possibilities and characteristics of these means. Taking this into account, the article contains results of studying the foreign experience of creation the cyberattacks detection and prevention systems for cyberprotection and cybercounterintelligence, is determined key characteristics of the mentioned systems of different functions, which we need to conside in practical activity of building national cybersecurity system.

Модель обнаружения компьютерных атак на объекты критической информационной инфраструктуры

Модель обнаружения компьютерных атак на объекты критической информационной инфраструктуры

ПРОБЛЕМЫ РАЗРАБОТКИ ДОВЕРЕННОГО ПРОГРАММНОГО ОБЕСПЕЧЕНИЯ, ПРИМЕНЯЕМОГО НА ОБЪЕКТАХ КРИТИЧЕСКОЙ ИНФОРМАЦИОННОЙ ИНФРАСТРУКТУРЫ (организационные и методические аспекты)

Due to the increasing complexity of information systems, information security threats associated with the presence of software vulnerabilities used in the information infrastructure systems become relevant. Today in order to protect against this type of threat one usually applies a range of measures implemented in the operation and maintenance of the software. At the same time, to ensure the required level of data protection, it is necessary to implement measures aimed at preventing vulnerabilities during the software life cycle. Secure software development is the basis for trust in information and communication technologies in the context of modern cyber threats. The aim of this paper is to summarize and analyze the problems of creating trusted software used in critical information infrastructure, and to find possible ways to solve them. The organizational and methodological aspects of the creation of trusted software used in critical information infrastructure are discussed, and the main problems, strategies and technologies to ensure the trust for various software components are described. The issue of trust for tools, system-wide and special software is still open both in methodological and organizational terms. To solve these problems, it is necessary to have a long-term state policy, development and clarification of legal documents that define common approaches and specific ways to ensure the reliability and security of the software used in critical information infrastructure, taking into account the actual conditions of their operation.

HYBRID GENESIS OF INFORMATION OPERATIONS IN CYBERSPACE

Contemporary global security environment could be labeled as complex, dynamic, multidimensional and ‘’beyond limits’’ of conventional understanding of Warfare. Diversity of threat forms and its interactions and non-conventionality contribute that most of the actual security crises and conflicts are marked as Hybrid security endangering, or Hybrid Warfare. Globalised tehnology introduce new ‘’battlefild’’ in global digital arena. Massive application of information and communication technology has brought about new risks and threats represented by physical and software related dangers to critical information infrastructure and cyberspace that are of relevance to the nation and its security. In same hand, wolnurability and inportance of Cyber space tends to provoke necessity for ultimate resilaince copabilities against ataks and informational warfare. Hybrid form and asimetrical nature of endangerment of Cyber space which is crutial for national defence copabilites, rised analiticial approach to the political, security and organizational forms as well as clasification of threats in cyber space which were elaborated in this paper. Authors’ contribute to the understunding of threats in Cyber secyrity arena, trough analyses of China PLA approach to the subject. In addition, unique contribution is given with analyses of Cyber-Information Warfare during 1999 NATO aggression to the Federal Republic of Yugoslavia.