Intelligent Information Security Research Articles

ФУНКЦИОНАЛЬНОСТЬ СЕТИ КИБЕРБЕЗОПАСНОСТИ КРИТИЧЕСКОЙ ИНФОРМАЦИОННОЙ ИНФРАСТРУКТУРЫ

The analysis of modern approaches to countering computer attacks on critical information infrastructure (CII), presented in the form of distributed information resources, shows that there is an objective need for technological development of this direction. In this aspect, the most promising solution to this problem seems to be the use of the concept of "Cybersecurity Mesh" (cybersecurity networks), introduced by Gartner without precise instructions on practical implementation and possible technological solutions. This paper presents the results of a study of functional requirements for systems implemented in accordance with the above concept, on the basis of which a new architecture of CII cybersecurity will be set in the future. The features of its application proposed by the authors of the concept are considered in detail, on the basis of which the requirements for the functional structure of possible technological requirements have been developed. It consists of four basic levels that allow you to respond flexibly to emerging integration and security challenges. These levels include: intelligent information security and analytics, distributed identity structure, consolidated policy and state management, consolidated interactive dashboard. To meet the specified functional requirements, a technological model for building a cybersecurity network is proposed in the form of an organic combination of three fairly heterogeneous technologies: 5G mobile communications, Secure Access Edge (SASE - Secure Access Service Edge) and advanced detection and response (XDR) into a consolidated cloud platform. The results of the studies of the functionality of the concept of a cybersecurity network can be considered as a methodology for ensuring the security of CII, implying a transition from building a single secure digital perimeter around all its devices or nodes to point protection of each remote access point. This publication can be useful for experts in the security forces of CII facilities, as well as to employees of educational institutions in the implementation of appropriate training, retraining and advanced training programs for such specialists.

Research on Information Security Risk Analysis and Prevention Technology of Network Communication Based on Cloud Computing Algorithm

Data communication network must use telephone, cable or optical fiber as transmission medium and computer as information receiving, output and communication tool. Customers can not only process the received information, but also realize information sharing through the network. With the wide application of network communication in daily life, network security issues have higher requirements. In order to solve the problems of subjectivity, long modeling time and low classification accuracy of information security risk assessment methods, this paper first proposes an intelligent information security risk assessment method based on decision tree. Compared with other classification algorithms such as support vector machine, the decision tree classification algorithm has no requirement for data category distribution, and has good classification effect and fast speed. Finally, this paper introduces the security measures in network data communication for reference only.

Задачи нормативно-технического регулирования интеллектуальных систем информационной безопасности

Research aim. Improving the efficiency of solving information security tasks by eliminating standard technical barriers that prevent the application of artificial intelligence technologies in advanced information security systems. Research method. The article applies the method of functional decomposition of intelligent tasks of information security, based on the analogy of artificial and natural intelligence. With respect to the proposed functional structure, the intelligent information security system is decomposed according to the processes of its life cycle with the specific tasks of technical regulation identification, that is specific to each of the processes, and the subsequent aggregation of tasks into groups corresponding to the main areas of standardization of such systems is performed. Results obtained. The research presents a structured list of information security tasks, the solution quality of which can be improved with the use of artificial intelligence technologies. It is shown that the main standard technical barriers to the effective creation and application of intelligent information security systems are associated with the shortcomings of metrological support for intelligent systems, also with the peculiarities of ensuring the confidentiality of information processed in such systems. The analysis of the current state of work on the preparation of national and international standards governing the creation and application of intelligent information security systems is carried out, and it is indicated that the work in this direction is of an initial, staged nature. The list of specific standardization tasks aimed at overcoming the identified standard technical barriers in the implementation of individual processes of the intelligent systems life cycle is justified. Specific tasks are grouped by the main standardization areas, for each of which the proposals for the adjustment of existing and the development of new standard technical documents in the field of artificial intelligence and information security are prepared.

Онтологическое обеспечение управления рисками информационной безопасности

As a result of the work focused on improving the efficiency of the information security system through the development of an ontological model and an approach based on it to ensure information security (IS) risk management, a flexible result was obtained, which is designed to ensure an increase in the efficiency of the information security system by reducing the time spent on managerial decision-making. At the end of the work, a comparative analysis of existing approaches and techniques to information security risk management and the described approach was carried out. Based on the developed ontology and approach, highly intelligent information security risk management systems and the information security system can be created on its basis.

Модель интеллектуальной системы управления информационной безопасностью для цепей поставок на основе пространственных концепций акторно-сетевой теории

Aim. The use of modern information technologies makes it possible to achieve a qualitatively new level of control in supply chains. In these conditions, ensuring information security is the most important task. The article shows the possibilities of applying the spatial concepts of the actor-network theory in the interests of forming a relevant intelligent information security management system for supply chains. Materials and methods. The article discusses a new approach based on the provisions of the actor-network theory, which makes it possible to form the structure of an intelligent information security control system for supply chains, consisting of three main functional blocks: technical, psychological and administrative. The incoming information security threats and the relevant system responses generated through the interaction of the system blocks were considered as enacting the three Law’s spaces: the space of regions, the space of networks and the space of fl uids. Results. It is shown that the stability of this system in the space of networks is a necessary condition for its successful functioning in the space of regions, and its resilience in the space of fl uids gained through the dynamic knowledge formation helps overcome the adverse effects of the fl uidity. The problems of the intentional / unintentional nature of information security threats, as well as the reactivity / proactivity of the corresponding responses of the intelligent information security management system for supply chains are investigated. Conclusions. The proposed approach showed the possibility of using such an interdisciplinary tool in the fi eld of information security as the concepts of the actor-network theory. The intelligent information security control system built on its basis ensures that almost all the features of solving information security problems in supply chains are taken into account.

Интеллектуальные системы управления информационной безопасностью

Интеллектуальные системы управления информационной безопасностью

CONCEPTUAL APPROACH TO ENSURING INFORMATION SECURITY OF A SYSTEM OF DISTRIBUTED SITUATIONAL CENTERS

Goal. The problem of ensuring information security for a system of the distributed situational centers gains the special importance owing to sharp increase in a set of security threats influencing them and increase in the importance of consequences from realization of these threats. Development of conceptual bases of creation of the protection system for a system of the distributed situational centers is fundamental stage in solving this problem. Materials and methods. The paper proposes a conceptual approach to ensuring information security of a system of the distributed situational centers based on classification and modeling of security threats, assessment of consequences of their realization and use of intelligent means of protection. When developing the general architecture of a system of information security, the methods of allocation of levels and components, peculiar the concept of SIEM-system, are used. Results. The conceptual model of information security threats and the architecture of an intelligent system of information security focused on it for a system of the distributed situational centers are developed. In the information security system, traditional protection means form the lower level of data collection, and intelligent protection means are located at the levels of storage, the analysis and management of security events. Conclusion. The offered approach allows us to increase the level of information security of a system of the distributed situational centers due to investment of its protection system with more effective, flexible and versatile opportunities given by intelligent protection means. More detailed illumination of questions of creating and functioning of intelligent information security systems demands the further additional research.

Siamese neural network for intelligent information security control in multi-robot systems

Anomaly detection of the robot system behavior is one of the important components of the information security control. In order to control robots equipped with many sensors it is difficult to apply the well-known Mahalanobis distance which allows us to analyze the current state of the sensors. Therefore, the Siamese neural network is proposed to intellectually support the security control. The Siamese network simplifies the anomaly detection of the robot system and realizes a non-linear analogue of the Mahalanobis distance. This peculiarity allows us to take into account complex data structures received from the robot sensors.

Архитектура системы интеллектуальных сервисов защиты информации в критически важных инфраструктурах

The paper describes the overall architecture of the system of intelligent information security services (SIISS) for usage in critical infrastructures, as well as its constituent components. In the overall architecture of SIISS the event level, the data layer and applied level are determined. Structural and functional models of the SIISS overall architecture are outlined to highlight the main functional mechanisms for selected levels. As key components of SIISS, which provide a more detailed description of their architectural design, we consider the event correlation management module, the prognostic security analyzer, the component of attack and security system behavior modelling, the decision support and reaction component, the visualization module, and the repository.

The construction of a multi-level intelligent information security system for automated systems of railway transport

The paper discusses features of construction and operation of automated systems of railway transport. As main distinguishing factors, the great variety and diversity of such systems, their mutual co-relationships and links with public networks, and strong heterogeneity of internal user are highlighted. The architecture of a multi-level intelligent information security system that proposed to protect information in automated systems of railway transport is suggested and discussed. To store data about security in a multilevel intelligent system of protection it is proposed to use a hybrid ontology repository. Formal task statements for intelligent services of data analysis at the top level of the reviewed protection systems are offered. Analysis of these statements showed that development of intelligent services for correlation management, security analysis and attack modeling should be assigned to analysis tasks. Intelligent services for decision support and visual data analysis are among the synthesis tasks.

Secure Key Generation for Static Visual Watermarking by Machine Learning in Intelligent Systems and Services

The Service-Oriented Architecture (SOA) demands supportive technologies and new requirements for mobile collaboration across multiple platforms. One of its representative solutions is intelligent information security of enterprise resources for collaboration systems and services. Digital watermarking became a key technology for protecting copyrights. In this article, the authors propose a method of key generation scheme for static visual digital watermarking by using machine learning technology, neural network as its exemplary approach for machine learning method. The proposed method is to provide intelligent mobile collaboration with secure data transactions using machine learning approaches, herein neural network approach as an exemplary technology. First, the proposed method of key generation is to extract certain type of bit patterns in the forms of visual features out of visual objects or data as training data set for machine learning of digital watermark. Second, the proposed method of watermark extraction is processed by presenting visual features of the target visual image into extraction key or herein is a classifier generated in advance by the training approach of machine learning technology. Third, the training approach is to generate the extraction key, which is conditioned to generate watermark signal patterns, only if proper visual features are presented to the classifier. In the proposed method, this classifier which is generated by the machine learning process is used as watermark extraction key. The proposed method is to contribute to secure visual information hiding without losing any detailed data of visual objects or any additional resources of hiding visual objects as molds to embed hidden visual objects. In the experiments, they have shown that our proposed method is robust to high pass filtering and JPEG compression. The proposed method is limited in its applications on the positions of the feature sub-blocks, especially on geometric attacks like shrinking or rotation of the image.