Information Protection System Research Articles

ANALYSIS OF QUANTUM SECURE DIRECT COMMUNICATION PROTOCOLS

The development of modern computer technologies endangers the confidentiality of information, which is usually ensured by traditional cryptographic means. This circumstance forces us to look for new methods of protection. In view of modern trends, quantum cryptography methods can become such alternatives, which allow solving a number of important cryptographic problems, for which the impossibility of solving using only classical (that is, non-quantum) communication has been proven. Quantum cryptography is a branch of quantum informatics that studies methods of protecting information by using quantum carriers. The possibility of such protection is ensured by the fundamental laws of quantum mechanics. One of the promising directions of quantum cryptography is Quantum Secure Direct Communication (QSDC) that offers secure communication without any shared key. A characteristic feature of this method is the absence of cryptographic transformations, accordingly, there is no key distribution problem. The purpose of this work is a general overview of quantum cryptography protocols, finding their weak points for further development and improvement, as well as identifying vulnerabilities to different attacks. The article analyzes new methods and protocols, as well as presents their advantages and disadvantages. Based on partial generalizations of theoretical provisions and practical achievements in the field of quantum cryptography, a generalized classification was developed. By comparing various factors of the protocols, and their resistance to certain cyberattacks, we have the opportunity to identify several problems in this field and expand the possibilities for choosing appropriate methods for building modern quantum information protection systems. In accordance with this, conclusions were presented regarding the use of protocols and increasing the level of their effectiveness.

Development of the concept for determining the level of critical business processes security

The development of technologies and computing resources not only expanded the spectrum of digital services in all areas of human activity, but also defined the spectrum of targeted cyber attacks. The object of the study is the process of ensuring the safety of critical business processes that ensure the continuity of production and/or functioning of the company/organization/enterprise as a whole. Targeted attacks are aimed at destroying not only the business structure, but also its individual components that determine critical business processes. Continuity of such business processes is a critical component of any company, organization or enterprise of any form of government, which critically affects the earning of profits or the organization of production processes. The proposed concept of determining the security level of critical business processes is based on the need to use multi-loop information protection systems. This allows to ensure the continuity of critical business processes through a timely objective assessment of the level of security and the timely formation of preventive measures. This approach is based on the proposed rules for determining the achievement of a given level of security, which are based on assessments of the integrity, availability and confidentiality of information arrays, as well as computer equipment in relation to various points of the organization's business processes. The use of threat integration on the internal and external contours of the protection system allows to ensure the necessary level of security and continuity of the production/technological process of critical business processes. The proposed practical implementation of the system security level assessment system in the declarative programming language Prolog, which allows to form requirements regarding the achievement of a given system security level depending on the state assessments of individual system components

ANALYSIS OF RISK TERMINAL FLOWS IN TECHNOGENIC SYSTEMS ARISING IN THE PROCESS OF THREAT IMPACT

Context. The analysis of the risk terminal flows in technogenic systems is carried out, which arise in the process of the impact of informational and cognitive threats in the automated document management system as part of the hierarchical production system.
 The object of the research is the process of functioning of complex systems with a hierarchical structure, in which automated document management systems with a high level of data flow protection for decision-making are used to provide the information quality control of technological processes.
 The subjects of the research are the methods and means of constructing an information protection system to ensure the reliable functioning of automated document management systems and making targeted decisions in hierarchical structures with minimal risk of exposure to external threats and attacks.
 Objective is to develop a complex model for assessing the risk of the document management system failure as part of a hierarchical production system under the active threats.
 Method. For the first time, the cause-and-effect diagram of the event formation with the active action of threat factors and attacks is substantiated and developed, the interpretation of risk in a technogenic system is defined, and the risk in the space of states is presented as a change in the trajectory in the system transitions to the limit operation mode. For the first time, a category diagram of the structure of risk generation under the threat factors and a system-category diagram of interaction in the system risk ↔ emergencyactive nature is constructed, a system-category scheme of risk formation under the active threat factors is suggested. For the first time, a cognitive diagram for assessing losses in the event of a risk situation arising from incorrect actions of the personnel is substantiated.
 Results. As a result of the research, a system-category diagram of the impact of a set of threats on the system functioning mode and process is constructed, a method is developed for calculating the level of system strategic security of energy-active hierarchical systems in the process of attacks and threats, and a complex model for assessing the risk of a system functioning failure under active threats is suggested.
 Conclusions. Under the action of active obstacles, cognitive and system factors at the operational and strategic levels of the control hierarchy, due to wrong decisions and informational disorientation, emergency situations and risks of the system function loss and its target-orientation arise. The analysis of a set of risks and the suggested category diagram of the risk generation structure under the impact of threat factors form the basis of the development of the probability structure of the risk concept based on the attack ↔ consequence model, as well as the construction of a system-category diagram of the interaction in the game active factor ↔ accident risk. This, in turn, makes it possible to construct a system-category scheme for the formation of risk terminal flows in technogenic systems that arise in the process of threat impact. A complex model for assessing the risk of system failure under threats can be used to construct protection systems for any hierarchical control structures of technogenic systems.

Методика построения защищенных систем искусственного интеллекта для проведения электроретинографии в офтальмологии

Relevance. It is known that the method of electroretinography (hereinafter – ERG) in ophthalmology, which works on the key registration of changes in the bioelectric potential of the retina, uses the potential of exposure to light passing through the optical media of the eye. A similar method is conditionally applicable to the transmission of a light pulse over a fiber-optic cable, during which the correct transmission of information is carried out. If there is a violation or change in the electrical potential, there is every reason to believe that a person has any diseases. Purpose. To develop a technology for creating intellectual information security systems (IISS) is of a complex nature in which a quasi-biological paradigm is put in the first place, where the form of programming information processes, machine learning systems (MLS) and the construction of neural systems and ending with an AI architecture with built – in mechanisms for ensuring information security. Material and methods. In this article, a methodology for using a new artificial intelligence system (hereinafter referred to as AI) in a protected version for working with corrective devices for electroretinography in ophthalmology is compiled. Results. A set of methodological and scientific and technical solutions for the artificial intelligence system has been developed in order to ensure its «viability» and resistance to computer attacks aimed at violating the integrity. Conclusion. The article raises a key issue – the need to develop software architectural solutions for AI and adaptive neuro-fuzzy AI, which have «neurons» built into the software and hardware information protection systems with a universal set of commands for EG devices. Keywords: artificial intelligence, multi-agent system, electroretinography, neural network, integrity control, information security

Review of Methodologies and Metrics for Assessing the Quality of Random Number Generators

Random number generators are a key element for various applications, such as computer simulation, statistical sampling, and cryptography. They are used to generate/derive cryptographic keys and non-repeating values, e.g., for symmetric or public key cyphers. The strength of a data protection system against cyber attacks corresponds to the strength of the weakest point in the security chain. Therefore, from a mathematical point of view, the security chain can be compromised even if the strongest algorithm is implemented. In fact, if the system requires keys or other random values and the generation process shows a certain vulnerability, the security of the system itself can be compromised. In this article, we present the most reliable tools and methodologies and the main standardisation efforts in the field of computer security to assess the quality of random number generators and ensure that they can be applied to computer security applications by offering adequate security strength. We offer a comprehensive guide that can be used as a quick and practical reference by developers of random number generators of any type to evaluate the random bit streams generated by implemented modules and determine whether or not they can be used in cybersecurity applications. Finally, we also present some use cases to which we applied the presented approach.

A Lightweight Method for Detecting Cyber Attacks in High-traffic Large Networks based on Clustering Techniques

Protecting information systems is a difficult and long-term task. The size and traffic intensity of computer networks are diverse and no one protection solution is universal for all cases. A certain solution protects well in the campus network, but it is unlikely to protect well in the service provider's network. A key component of a cyber defence system is a network attack detector. This component needs to be designed to have a good way to scale detection capabilities with network size and traffic intensity beyond the size and intensity of a campus network. From this point of view, this paper aims to build a network attack detection method suitable for the scale of large and high-traffic networks based on machine learning models using clustering techniques and our proposed detection technique. The detection technique is different from outlier detection commonly used in clustering-based anomaly detection applications. The method was evaluated in cases using different feature extraction methods and different clustering algorithms. Experimental results on the NSL-KDD data set are positive with a detection accuracy of over 97%.

Cyber insurance: state of the art, trends and future directions

Society has become increasingly dependent on IT infrastructure and services. Additionally, the pandemic of COVID-19 forced the transition of the traditional way of working (i.e., physical presence) into a more modern and flexible one (i.e., working remotely). This has led to an increase of cyberattacks, as a direct consequence of the increase of the attack surface but subsequently also led to an increased necessity for the protection of information systems. Toward the protection of information systems, cyber insurance is considered as a strategy for risk management, where necessary. Cyber insurance is emerging as an important tool to protect organizations against cyberattack-related losses. In this work, we extensively examine the relevant literature on cybersecurity insurance, research and practice, in order to draft the current landscape and present the trends.

Legal regulation of big data killing

As a new problem arising from algorithm and information abuse in the data age, big data killing is difficult to be regulated by law before the promulgation of the Personal Information Protection Law, and the relevant judicial practice is not mature enough. The implementation of the Personal Information Protection Law clearly prohibits the killing of big data from the perspective of protecting personal information, and makes comprehensive provisions from the three stages of personal information collection, processing and application. However, the relevant regulations are not perfect, and the right to carry personal information and the impact assessment system of personal information protection still need to be clarified. In terms of information compliance, the government and enterprises should build a multi governance mechanism to improve personal information protection and governance capabilities.

Urban Digital Transformation and Enterprise Personal Data Protection

With the continuous digital transformation of Shanghai, the problem of illegal use of data has become prominent. This study examines the relationship between urban digital transformation and enterprises’ personal data protection from both micro- and macro-viewpoints. Enterprises establishing personal data protection system (PDPS) can gain public support in the process of urban digital transformation, accelerate urban digital transformation, and develop the whole market. Public support, corporate governance, and government guidance interact to provide the impetus for urban digital transformation. This study provides a theoretical basis for the establishment of a smart city under emerging markets. Meanwhile, it provides practical implications for governance guidelines for promoting the digital transformation of cities.

Implementation of the elements of the enterprise protection system

The article defines the main tasks and features of corporate information networks and analyzes the specifics of the corporate network implemented in a medical center. The proposed data protection system at the enterprise is developed on the basis of the Bella-La Padula model since the key provisions of this model are the assignment of special security levels to all participants in the protected data processing process and to the documents in which it is contained. The specified security levels are arranged using the established dominance relationship, and the access control is carried out depending on the security levels of the interacting parties, which allows the application of technical solutions of the Active Directory service. One of the elements to ensure data protection is the use of a Shadow Copy of data according to the appropriate schedule. An important component of ensuring data protection is the individual process of setting up group policies and checking replication with other servers running the Active Directory directory services of the medical center. As a result of the implementation of elements of the company's data protection system, it was possible to significantly increase the level of protection and set up a backup server, on which appropriate folders were created, to which backup copies would be made according to the schedule. This function makes it possible to save the history of changes in any file for a certain period. The proposed elements of the security system can be used to analyze the security system, control access, ensure data integrity, etc. The Active Directory directory services were implemented in the medical center, and data replication to a backup server was configured. Taking into account the specifics of the enterprise, namely the medical center, the implemented elements of the data protection system ensure the delimitation of access levels, implement protection profiles and secure the personal data of patients.

МАТЕМАТИЧНА МОДЕЛЬ ВЗАЄМОВІДНОСИН СИСТЕМИ КЕРУВАННЯ ІНФОРМАЦІЙНОЮ БЕЗПЕКОЮ

An effective solution to the problems of analysis and synthesis of information security management systems can not be provided by simple ways of simply describing their behavior in different conditions - systems engineering solves problems that require quantitative evaluation of characteristics. Such data, obtained experimentally or by mathematical modeling, should reveal the properties of information security management systems. The main one is efficiency, which means the degree of compliance of the results of information protection to the goal. The latter, depending on the resources available, the knowledge of developers and other factors, can be achieved to one degree or another, and there are alternative ways to implement it. In a number of publications the authors propose the basics of the categorical apparatus of set theory, which allows to explain the relationship between sets of threats and sets of information protection system, which allows to build different mathematical models to analyze information exchange systems in critical application systems. At present, the creation of information security management systems is not possible without research and generalization of world experience in building information systems and their constituent subsystems, one of the key of which are information protection and intrusion prevention systems. Components of the process of attacking the mechanisms of protection and blocking or destruction of cyber threats themselves are components of the mathematical support of such systems. The basis of such models is the mathematical apparatus, which should ensure the adequacy of modeling of information security processes for any conditions of cyber threats. When defining the mathematical apparatus, it is necessary to clearly understand how certain sets of cyber threats are built, and how the sets of cyber threat sets, sets of security system elements and sets of cyber attack detection systems, which should control the correctness of the information security process. The article analyzes various options for building models of information security management system and creates a mathematical model that takes into account the internal relationships of different subsets of components of the information security system under the influence of cyber threats.

African Union's data policy framework and data protection in Africa

The African Union (AU) has in recent years launched a number of initiatives with the goal of enabling member states to benefit from the emerging digital economy. One such initiative is the AU Data Policy Framework endorsed by the Executive Council in February 2022. This paper considers what value the Data Policy Framework adds to the protection of data privacy in Africa. It finds that the Data Policy Framework offers little that would further data protection systems at the continental, subcontinental and national levels. With far more progressive international best practices already available, member states are likely to ignore the Policy as they ignored preceding standards like the Malabo Convention.

Inadequacy and Improvement of Legal Protection of Sensitive Personal Information

In the era of rapid development of big data, the problem of personal information leakage is widely concerned by the society. Among them, sensitive personal information related to the human dignity of natural persons or basic rights such as personal and property is more important. China introduced the Personal Information Protection Law in 2021 to improve the legal system of personal information protection in China, but due to the short development time of the relevant system for the protection of sensitive personal information, resulting in the legal protection of sensitive personal information faces serious challenges in practice, so it is especially important to improve the legal protection of sensitive personal information in China. Based on this, this paper firstly explains the concept and characteristics of sensitive personal information, then analyzes the shortcomings of the legal protection of sensitive personal information, and finally puts forward suggestions for improvement from different perspectives, including improving the principle of “informed consent", strengthening the supervision of industry self-regulation and improving the principle of imputation.

Zaštita podataka o ličnosti u turističkom sektoru

This research aims to explain certain aspects of the complex legal system of personal data protection. The paper is based on the analysis of domestic and EU regulations that regulate the rights of citizens to the protection of personal data. The paper provides an overview of the obligations that must be fulfilled by tourism entities in order to ensure that the processing of personal data is carried out in accordance with the law. In addition, the risks associated with the processing of personal data and the possibility to ensure the security of data processed by providers of tourist services are listed. The research showed that there are many open questions in the tourism sector regarding the implementation of regulations on the protection of personal data.

Ustawa o Państwowej Komisji ds. badania wpływów rosyjskich a ochrona danych osobowych

The purpose of the article is to analyze the provisions of the Law on the State Commission for Investigating Russian Influences on the Internal Security of the Republic of Poland for 2007–2022 and its impact on the application of the provisions shaping the system of personal data protection. The text points out the numerous shortcomings of the provisions of this law, its inconsistency with the provisions of the Constitution and its inconsistency with the provisions of RODO – the General Data Protection Regulation, the provisions of the Law on Personal Data Protection and the Law on the Protection of Personal Data Processed in Connection with Preventing and Combating Crime. The analysis shows that the Commission’s action may significantly harm human freedoms and rights, including privacy and the right to the protection of personal data, and the manner of its action is contrary to the principles of a democratic state of law.

Forecasting the trafic of telecommunication networks and their optimization

The article is devoted to methods for generating predictive estimates of the traffic of new segments of telecommunication systems before they are put into operation in order to optimize the structure of networks and improve their performance. Three types of traffic sources are distinguished — network management system, information protection and line integrity system, and users. Each source has its own approach to assessing the contribution to the total traffic. The resulting numerical estimates were used to find an array of optimal routes in terms of minimum load between a given initial communication node and a set of given end nodes. An original method for solving this problem is proposed.

ВИМОГИ З КІБЕРЗАХИСТУ IНФОРМАЦІЙНО-КОМУНІКАЦІЙНИХ СИСТЕМ ТА СЕРВІСІВ ЗВ’ЯЗКУ ПІД ЧАС ЇХ РОЗГОРТАННЯ ТА ЕКСПЛУАТАЦІЇ НА ПУНКТАХ УПРАВЛІННЯ СКЛАДОВИХ СИЛ ОБОРОНИ ТА БЕЗПЕКИ

The relevance of this work is due to the fact that in recent years the communication forces have been constantly developing and equipped with the latest digital means of communication, which allows them to successfully perform their assigned tasks. Today, information and communication systems that are deployed at the control points of various branches of management ensure the implementation of priority tasks for the management of troops. Functionally, the communication system and information systems are deployed at control points as a single information and communication environment based on the implementation of the latest information and communication technologies, information exchange protocols, complexes, systems and means of communication, which ensures the exchange of all types of information between bodies military management (management bodies) and control points at all levels of management. An active communication system ensures the exchange of information with guaranteed security in a single information space as a set of material functions (including personnel and other resources) that combine to perform a certain task. In turn, information systems, as a set of equipment, methods and procedures, and, if necessary, personnel organized to perform information processing functions operate in accordance with a defined structure, namely: - services, in the context of communication and information systems; - architecture, in the context of communication and information systems; - functions in the context of service-oriented architecture; - interoperability; - information protection and cyber protection. It is clear that the more important the object of management, the more capacious flow of information can be directed to it. This allows the adversary/attacker to identify the most important targets and direct other types of information to them or suppress them in various ways. Thus, in the interests of ensuring cyber protection of electronic information resources, communication and technological systems of the control points of the Armed Forces of Ukraine, the technological infrastructure of cyber protection of the Armed Forces of Ukraine has been deployed and is functioning, which is a component of the unified system of information protection and cyber protection in the information and communication systems of the Ministry of Defense and the Armed Forces of Ukraine. In these conditions, to solve the tasks of preventing unwanted interventions, disruption of the stable functioning of the information and communication environment at control points, counterweights in obtaining confidential information, data theft, and other minimally necessary components of the cyber protection infrastructure are deployed. The main components of the relevant technological infrastructure of cyber protection are the security information event management system (SIEM), the threat information exchange platform (Malware Information Sharing Platform & Threat Sharing, MISP), the centralized management system of inter-network screens and the system for detecting and countering cyber threats. including computer viruses on end equipment. Therefore, solving the tasks of ensuring cyber protection in the course of deployment and operation of electronic communication networks and communication services at the control points of various branches of management turns out to be quite a serious and urgent task.

An algorithm based on artificial intelligence for solving information security tasks

In the age of rapidly developing information technologies, when the process of informatization has long touched almost all aspects of human life, it is impossible to imagine a single company that would not use a computer network for its functioning. And also with the development of the software and hardware infrastructure of companies, security requirements are growing. But business development through the introduction of the Internet only increases the number of threats associated with the availability, integrity and confidentiality of information. The development of antivirus software, intrusion detection and prevention systems does not fundamentally change the statistics on the number of attacks on enterprises. The number and variety of attacks on information systems is growing every year, and financial losses from the introduction of computer viruses and unauthorized access to the system are growing proportionally. Artificial intelligence (AI) is present in all areas of our activities. Whether it is a household area or a commercial one. In this regard, the use of AI in the fields of information security is more often observed, which is a promising area of research. The article describes the ways of possible application of artificial intelligence methods in the field of information protection, and also proposes an algorithm for the system of information protection from abnormal requests. The use of an artificial immune algorithm makes it possible to increase the effectiveness of threat detection by comparison with existing analogues. A distinctive feature of these methods is the ability of these systems to solve multidimensional problems of enormous computational complexity in real time.

Research on Regulation of Data Capture Behavior from the Perspective of Anti-Unfair Competition

With the continuous infiltration of big data into our lives, data has become an important asset, and data capture behavior has gradually become a new business model for enterprises. Disputes about data capture also keep appearing. For whether data capture behavior violates business ethics, judicial practices often regulate this behavior according to Article 2 of the Anti-Unfair Competition Law. However, this regulation method has some problems, such as unclear ownership of data, inadequate relief of operators' rights, and lack of administrative supervision. Based on this, Article 2 of the Anti-Unfair Competition Law should be clearly interpreted to give consideration to data characteristics and competition effects, and improve the administrative supervision system of data protection, so as to establish a fair and just order of data competition.

Remapping cybersecurity competences in a small nation state

The impact of cybersecurity (CS) on public well-being is increasing due to the continued digitisation process of all industry sectors. The protection of information systems rests upon a sufficient number of CS specialists and their competences. A cyber-competence map describing the capacity and trends of the CS workforce is an essential element of the workforce development strategy. Large enterprises tend to have narrowly specialised employees with clearly identifiable roles. Still, most enterprises in small countries are SMEs. Therefore, the tasks and responsibilities of many CS-related specialists overlap the functions of several roles. This paper aims to develop a small-state cybersecurity competence map consistent with the standards of professional organisations. The work applies a combined qualitative and quantitative methodological approach to collect data using questionnaires and expert interviews in the CS field organisations. The study includes a representative public survey, a large-scale survey of company executives, an exploratory CS expert survey, and a comprehensive job posting analysis. Finally, a national CS competence map is presented and verified using two qualitative semi-structured interviews with field professionals. Even though the map reflects a status of a small nation state, it is activity-based and might be applicable in any country. As a future research direction, we will investigate the impact of early and late exposure to cybersecurity competences in education and framework applicability.