Military Information Systems Research Articles

Priority-based QoS Extensions and IAM Improvements

The command and control system operates in a harsh and dynamic environment with limited resources and have a very high risk of failure or malfunction. In the case of military information systems, including the command and control system, the efficiency and effectiveness of system resource management are very important and required. Therefore, the application of a QoS-like approach is necessary to improve the operational effectiveness of all command and control system resources. However, supporting QoS at the entire command and control system level incurs additional costs and burdens for implementation and operation. This paper describes the necessity and possibility of collaboration with QoS and IAM (identity and access management) among the collaboration between core functions within the command and control system. This paper proposes an extended QoS approach to improve the operational effectiveness of the entire command and control system resources. As a result of this research, expanded concepts, structures, standards, and methods of collaboration between QoS and IAM are developed and presented, and their feasibility is demonstrated through prototype development and experiments.

Fuzzy models for cyber incident detection in military information and communication systems databases

Protecting databases of military information and communication systems is an extremely important task in the modern cybersecurity sphere. Growing threats from cyberattacks, the need to effectively detect, counteract and prevent them require the use of new, more effective models and methods. The main disadvantages of existing models and methods include insufficient sensitivity to new threats, a large number of detection errors, low response to new threats, the possibility of bypassing protective measures, and low scalability, which are key challenges for further improvement and development of cybersecurity. The article analyzes the existing fuzzy models for detecting cyber incidents, identifies their shortcomings and emphasizes the need for their further improvement and development. An improved fuzzy model for detecting cyber incidents in databases of military information and communication systems and an improved fuzzy model for detecting cyber incidents in databases of military information and communication systems with weighted rules based on the expansion of cyber incident signs by obtaining them from different levels of cyber security of the data are proposed. The main levels of database cybersecurity include: the operating system level, the network level, and the database management system level. To eliminate the shortcomings associated with the false triggering of cyber incident detection rules and the complexity of their configuration in a dynamically changing cyberattack landscape, as well as the dimensionality of the knowledge base of the information and security event management system, a fuzzy model for detecting cyber incidents in databases of military information and communication systems with weights of rule antecedents is proposed. The expediency of applying the developed model is shown.

МЕТОДИКА ВИЯВЛЕННЯ КІБЕРІНЦИДЕНТІВ SIEM-СИСТЕМОЮ В БАЗАХ ДАНИХ ІНФОРМАЦІЙНО-КОМУНІКАЦІЙНИХ СИСТЕМ ВІЙСЬКОВОГО ПРИЗНАЧЕННЯ

With the integration of information and communication systems into military operations, the issue of their cyber defense is becoming increasingly important. The main target for cyberattacks are databases that mostly contain confidential information. One of the most effective approaches to ensuring cybersecurity of databases of military information and communication systems is to use the intelligent capabilities of a SIEM system. SIEM allows real-time monitoring, analysis and response to potential cyber incidents. The article proposes a methodology for detecting cyber incidents by a SIEM system in databases of military information and communication systems. The main emphasis is placed on the multi-level protection of databases, which includes protection at the operating system level, the database level and the database management system, as well as the network level of protection. In order to improve the efficiency of cyber incident detection at the level of SIEM data analysis, an improved methodology based on fuzzy logic is used. Improvement of the methodology is achieved by introducing weights of antecedents in fuzzy rules, which allows, in some cases, to identify cyber incidents more accurately compared to existing models and methods. The weights of the antecedents of fuzzy rules are determined using the method of pairwise comparisons based on the rankings made on the 9-point Saaty scale. A decision-making algorithm for identifying cyber incidents based on the analysis of fuzzy rules and the weights of their antecedents is presented. An example of calculating the weights of antecedents of fuzzy rules using the method of pairwise comparisons based on rank estimates is given.

Architecture of intelligent SIEM for detecting cyber incidents in databases of military information and communication systems.

The article looks at the current supply of cyber defense to the databases of information and communication systems. The effectiveness of continuous visits to databases is analyzed. The analysis indicates that existing systems are not immune to security, which is a critical aspect in the field of cybersecurity. A new approach to the architecture of the SIEM system is being introduced, which is aimed at different parts of the protection circuit of the information and communication system. The fragmented architecture makes it possible to effectively detect and respond to cyber attacks at all levels of protection, from the operating system to databases. A new approach is being introduced to ensure cyber security of databases with the benefit of the intelligent capabilities of the SIEM system. The main aspect of this architecture is rich database protection, which allows you to effectively detect and respond to cyber attacks. The registration approach includes the addition of data from different levels to the security circuit of the information and communication system, the module for analyzing data about categories in the database, which operates on the basis of The use of fuzzy multiplicity theory methods, fuzzy logic inference and rule correlation module to improve the detection of cyber incidents. And also the integration of OLAP technologies to provide a deep and analytical view of the database security system. The architecture for identifying cyber incidents has been designed to improve the efficiency of identifying cyber incidents related to the functioning of the database of information and communication systems and. The result of the investigation is a reduction in the capabilities of the SIEM system in identifying and responding to cyber identities in the database of the military information system. Further, we directly monitor the operational model of the cybersecurity system of the information and communication system database.

Analysis of the capacity of existing anti-virus protection systems and their based methods for detecting new malware in military information systems

The article solves the task of analyzing the ability of existing anti-virus systems and the methods based on them to detect new malicious software in information systems of critical infrastructure, in particular, the sector of the state defense forces. It is noted that the official data of the developers of antivirus systems often do not confirm the declared level of accuracy of detecting new malicious software in practice. In addition, in most cases, the declared accuracy rate of detecting new malware is higher than the similar rate of detection of known malware, which indicates that the antivirus systems in question are tested in specific conditions that are too different from real ones. The properties of new malicious software are described in order to find the most suitable class of computer viruses. Classes of polymorphic (oligomorphic) and metamorphic viruses demonstrate the most complete compliance with the specified properties, which allows us to assert their significant share in the use of new malicious software. The characteristics of malicious software detection methods are given, which due to their properties are able to adapt to a certain extent to their metamorphic (polymorphic) nature. Methods based on the theory of fuzzy logic demonstrate the most complete correspondence. The direction of improvement of the existing anti-virus systems in order to increase the adaptability to the detection of new (polymorphic, metamorphic) classes of malicious software is proposed. The obtained results should be considered as a basis for the implementation of new approaches to the detection of malicious software in order to identify previously unknown instances of it, which will allow to significantly increase the effectiveness of ensuring cyber security of modern information systems and networks.

The method of regularizing the sign space of the biometric model of the keyboard handwriting of users of military information systems on the basis of factor analysis

The article addresses the current scientific task of regularizing the feature space of the biometric model of the keyboard handwriting of users of military information systems in order to increase the effectiveness of the user authentication procedure by access control and demarcation systems. The setting of this scientific task is due to the presence of the following shortcomings of the existing biometric models of users' keyboard handwriting: when the number of users in the system increases, the complexity of their classification increases; the complexity of formalizing the uniqueness of users; the implementation of determining the fact of replacing an already authorized user is too complex; the feature space of the existing biometric models is insignificant due to the limitation of the set of properties of the modern keyboard, which negatively affects the accuracy of the authentication procedure. A biometric model of keyboard handwriting was chosen, the feature of which is the formalization of the uniqueness of the user of the information system on the basis of the detection of the regularities of the keyboard handwriting by fuzzy rules. An improved method of regularization of the feature space of the biometric model of keyboard handwriting of users of military information systems is proposed. The essence of the proposed method, which distinguishes it from the existing ones, is that the increase in the set of features of the biometric model is achieved by adding to it discovered hidden facts from the set of own features based on factor analysis with the highest rate of their variability. The application of the proposed method allows solving the problem of non-linear separability of the n-dimensional feature space of the biometric model of keyboard handwriting, which in turn allows to increase the accuracy and reliability of the authentication procedure by control systems and access demarcation of military information systems.

Information technologies for database protection against cyber attacks in military information systems

.

The Capability Gap in Occupational Health Information Management.

The lack of an integrated approach to data capture, information management, and analysis limits the contribution of occupational and environmental medicine to protecting 2.3 million uniformed and civilian DoD workers. Despite an abundance of military information systems that include the terms "Safety" and "Occupational Health" in their names, none of these systems provide capabilities needed to aggregate and analyze the results of occupational medicine exams, use medical surveillance to mitigate exposure incidents, provide enterprise-level management of occupational medicine services, or comply with privacy and recordkeeping law and regulation. Instead, they provide a patchwork of data that meets most regulatory compliance requirements but fails to achieve the true objectives of occupational health programs. Bridging these capability gaps will improve the occupational health care of the DoD workforce, improve the quality of occupational medicine services, increase public trust in the DoD management of exposure incidents, and potentially generate hundreds of millions of dollars through cost-avoidance on workers' compensation claims and through identification and elimination of non-value-added medical certification exams. The ongoing Military Health System transformation represents a unique opportunity to bridge these long-recognized but persistent capability gaps.

A Machine Learning Approach to the Determination of Value of Information to Operators and Applications on the Tactical Edge

Value of Information (VoI) is critical to the operators in the field and the backbone of a communications network. With proper determination of VoI the correct information can be routed to the operators that need it and not burden those who don't. VoI is used to determine the relevance, importance, and utility of information objects (discrete elements of information) to an entity (ranging from an individual person to even a software component, such as an agent). The value is always dependent on the context of the receiving entity. In the military domain, context can be defined by the identity, role, current and future activity, current status, current and future location, and type of mission of an operator. Being able to determine the VoI allows systems to prioritize and filter information, thereby reducing information overload on the recipient, as well as network load on the communications infrastructure. The concept of VoI is not new, but has recently begun to be applied to military information systems.

ОЦІНКА "ПРАКТИЧНОСТІ" ТА "КОРЕКТНОСТІ" СПЕЦІАЛЬНОГО ПРОГРМАНОГО ЗАБЕЗПЕЧЕННЯ АВТОМАТИЗОВАНИХ ІНФОРМАЦІЙНИХ СИСТЕМ ВОЄННОГО ПРИЗНАЧЕННЯ

The assessment of the "practicality" and "correctness" of special software of the automated military information systems is consider in the article. It’s shown that the information resource of the high-precision weapons must have a full set of software as active and passive protection against attacks on its information systems, and its active and passive influences on all existing and promising weapons systems. Among the problems associated with the creation of special software (SS) of the automated information military systems, there are two main ones: the problem of creating high-quality special software; the problem of rationalizing the efficiency of the participants of the SS life cycle. One of the promising areas of their solution is the implementation of the regulated technological process. The systematic approach is to reduce software errors by detecting and locating them in the timely manner, reducing the complexity of detecting and correcting them through clear and orderly structures and connections. A characteristic of the SS’s practicality is the studied, that is characterized by efforts required for users to master the conditions, procedures and rules of application of the software. They are described by the following indicators: the average time of development of the software product by service personnel, the completeness coefficient of the demo version, the completeness and flexibility coefficient of the help system. The characteristics of ease operation and correctness of SS is characterized by ease of preparation of input data and start-up of SS. The quantitative assessment is characterized by the following indicators: the coefficient of the degree of automation of data entry control, the coefficient of use of effective means of data entry. The estimating of the necessary intellectual effort to create a program is characterized by the number of necessary basic solutions when creating program code, but it doesn’t take into account debugging actions, so the authors propose to introduce a factor of real complexity, that is to estimate the cost of program perception. The given metrics allow to receive their numerical values on the basis of that it’s possible to compare programs on these quality characteristics.

Approaches to management and assessment of the health of military services using information technologies

Introduction. At the present stage of developing domestic health care, active processes of informatization of the clinical diagnostic process are taking place. In most regions of the Russian Federation, various medical information systems are actively exploited in medical organizations, digital medical devices and devices are being introduced, which determines the relevance of the formation of a methodology for the use of information technologies in the health care system of military personnel. Materials and methods. The materials of literary sources, bibliographic databases, regulatory documents, research and development work data, materials of military-scientific support of military-medical information systems have been studied. The historical, literary and structural-logical approach, system analysis methods, comparison, composition, and decomposition were used. Results. This study proposes approaches to managing the health of servicemen and a system of its assessment using information technologies. Within the framework of the entire system of medical support for troops at the sectoral level, the ultimate goal of informatization is to construct a single information space for the medical service of the RF Armed Forces. It should be based on the use of unified personal electronic cards of military personnel, a single protected intradepartmental telecommunication network, and medical information systems for various purposes, depending on the level of a medical organization, unit or subdivision. In the informatization of the medical service, it is necessary to distinguish three primary levels, each of which develops its technologies and means of automation: personal (the level of an individual soldier); the level of medical organizations; the systemic level that determines the activities of the entire medical service. A personal electronic card of a serviceman should be used as an individual carrier of passport and medical information in military medical information systems. To decide on the medical and evacuation purpose of a particular patient at the admission and triage department of a medical company, it is necessary to ensure the formation of a protocol of medical and evacuation measures, which includes information from the electronic medical archive, vital activity sensors and medical care accounting systems. Conclusion. The capabilities of information technologies, vital activity sensors, electronic medical archives and communication channels should ensure the collection of relevant information about an individual patient for the needs of the treatment and diagnostic process, even when military medical organizations are deployed at the stages of medical evacuation. The integration of all information systems in the health care system of servicemen into a single information space must be carried out, taking into account the requirements of regional medical information systems and a unified state information system in the field of health.

An Ontology Based Methodology for Capability Requirements Analysis and Verification of the Military Information System

To solve the problem of capability requirements analysis and verification of the military information system, a new method based on ontology is proposed in this paper. Firstly, meta ontology of capability requirements is designed based on its analysis process. And then meta ontology is instantiated to construct the capability requirements model according to the scenario of specific applications. Secondly, the data completeness and data consistency rules of the model are extracted from the ontology directly according to the relations among the data entities of the ontology, and the data entities are used to develop the verification matrixes, which are utilized to judge the data completeness and data consistency of requirements model. Finally, a typical example is given to illustrate the implementation process of our method, and the results demonstrate its feasibility and validity.

ВДОСКОНАЛЕННЯ МЕТОДИКИ МОНІТОРИНГУ ІНФОРМАЦІЙНОГО ПРОСТОРУ ЗА ДОПОМОГОЮ ГЕОІНФОРМАЦІЙНИХ СИСТЕМ

Growing opportunities for the use of modern geographic information technologies in the military sphere force us to reconsider traditional approaches to the use of tools and methods for analyzing existing information and analytical materials to improve the efficiency of information activities in accordance with the competence of the MOU and the Armed Forces. At the same time, the growing intensity of the dynamics of peacetime and armed struggle (conflicts) implies the presence and circulation of a large amount of information that requires processing, storage, transmission to consumers, which makes it impossible for human operator (analyst) to make an informed decision. Under these circumstances, there is a need to use modern geographic information systems aimed at supporting decision-making in conditions of limited, temporal and spatial parameters. Changes in the content of passive intelligence are associated with the use of geographic information systems (GIS), which combine the collection, processing of information about the area with hydrometeorological, operational and tactical, intelligence and other information, which provides qualitative analysis and modeling of the most rational solutions. in the interests of armed struggle. The constant increase in the amount of information required and the reduction of decision-making time determine the urgency of the problem, to solve which it is necessary to develop geographic information systems and use them in planning and managing combat operations of units of the Armed Forces of Ukraine. One of the tasks of passive remote reconnaissance is to identify the coordinates of the enemy. In the future, these coordinates must be presented in a user-friendly form. This is achieved through the creation of military information systems for various purposes, an important component of which are the means of processing digital information about the area in conjunction with various data about the enemy and their troops. It is possible to solve such problems with the use of passive remote reconnaissance systems based on reconnaissance and signaling devices. Based on the analysis of existing RSPs for the effective solution of such problems, one of the possible options is the use of seismic acoustic systems. The operation of seismic systems is based on the detection of the presence in the environment of propagation (surface layer of the earth) of seismic waves that occur during the movement of the intruder in the observation area using seismic sensors and (air, liquids or solids) acoustic waves using acoustic sensors. The use of passive remote reconnaissance based on seismic monitoring together with geographic information systems will eliminate the human factor (errors), reduce human costs, reduce time costs for data processing, and store the information in GIS databases, which is relevant to this topic. The use of geographic information systems will eliminate personnel losses.

ANALYSIS OF TYPES OF USER’S IDENTIFICATION AND ADVANTAGES OF USER’S ATRIBUTE IDENTIFICATION BY QR-CODE

Emergence of new technologies and modernization of existing information technologies, development of information and telecommunication processing and storage systems have increase the level of information security, necessitating an increase of information security’s effectiveness with the complexity of data storage architecture. Security of information from unauthorized access is an essential measure to prevent material and non-material damage to its owner. So it is very important to take into account the efficiency of the subsystem of access control and data security in order to ensure security of some information system. Accordingly the threat of information leakage has made the means of information security and cyber security one of the mandatory characteristics of information and telecommunication systems and information security has become an integral part of professional function. Under conditions of the hybrid war of the Russian Federation against Ukraine? the number of cyber attacks on military information and telecommunication systems has increased. At the same time their technological complexity has increased too. This process necessitates the improvement of information security systems and the process of providing access to them by using modern types of users identification. Access control is an effective method of information security. It regulates the use of information system resources. User’s identification is an important and integral element of access control system. An analysis of modern types of users identification is presented in the paper. The technology of QR-code is considered: the principle of formation, the types of coding, the structure of elements, the advantages of its usage. The interconnection between its components was established. Prospects for further research are the development of an algorithm and software application for user identification to provide access by QR-code to information and telecommunication systems for military purposes.

ПІДХОДИ ДО ВИБОРУ ВАРІАНТУ ПОБУДОВИ ІНФОРМАЦІЙНО-ТЕЛЕКОМУНІКАЦІЙНОЇ СИСТЕМИ ВІЙСЬКОВОГО ПРИЗНАЧЕННЯ

At the present time, the most relevant issues are the assessment of the ITSVP when choosing the option of building the ITSVP at the stage of communication planning. Evaluation of ITS is not an end in itself, but serves as the basis for a quantitative substantiation of the decision to organize communications. This determines the urgency of the problem of choosing an option for building a military information and telecommunications system. Complex systems (which also include the communication system), being in different conditions (situations, modes), reveal different system properties, including those incompatible with any of the situations separately. However, one cannot be neglected, since each characterizes some property of the phenomenon under study, and none of them can be accepted as the only one, since it does not express all its properties. The development of a formal apparatus for solving parametric problems of assessing the effectiveness of the functioning of a communication system provides for a systemic relationship of contradictory indicators. Based on this, an improved methodology for choosing an option for constructing an information and telecommunications system for military purposes is proposed, which differs from the existing one in that the person who makes a decision to organize communications, from certain possible options, chooses a rational one through the use of methods of analyzing hierarchies and taxonomy.

TELEMEDICINE IN CURRENT HEALTH CARE – general considerations and possibilities of use in the field of rehabilitation

Telemedicine has begun to be approached by more and more medical systems because it offers the possibility of providing remote healthcare and its main benefits are in reducing costs and increasing access to care and improving the effectiveness of diagnosis and treatment. Telehealth is a term associated with telemedicine which includes a broader definition of distance healthcare and does not always involve clinical services. The factors that help to implement this system are represented by the development of information technology and the increasing access of the population to computers and/or mobile devices. Telemedicine will be used more and more in the future, due to the important benefits to health systems such as: increased access to care (when we refer to the long distances and travel time between doctors and patients); expanding access to specialist services; permanent communication between different groups of health professionals allowing the sharing of medical experiences, discussions on complex cases, consultation of experts or just to request a second opinion; increasing patient involvement, allowing them to connect more frequently with a physician in a convenient way; the possibility of remote monitoring - telemonitoring - of vital signs and activities of the patient by specialists. However, there are limitations of telemedicine such as: lack of clinical examination of the patient; the lack of a highly developed digital infrastructure for healthcare professionals; limited number of medical specialties where telemedicine can be used; patients' reluctance about results; reduced accessibility for people with limited financial possibilities, who cannot purchase communication devices or who do not have the technical knowledge to use them. Currently, telemedicine is successfully used in cardiology, psychiatry, surgery, dermatology, medical rehabilitation, etc. In Romania, telemedicine is a relatively new concept that has become better known following the establishment of the state of emergency due to the COVID-19 pandemic. In 2018, the first legislative measures were taken, when the rural and military telemedicine information system was established as part of the health information system. In March 2020, a government decision established several provisions regarding the possibility of granting remote consultations, but also the transmission of medical documents by digital means. It is expected that after the end of the pandemic this system of providing medical services will continue and strengthen. Keywords: telemedicine, telehealth, telerehabilitation, legal framework Normal 0 false false false EN-US X-NONE X-NONE /* Style Definitions */ table.MsoNormalTable {mso-style-name:Table Normal; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-parent:; mso-padding-alt:0cm 5.4pt 0cm 5.4pt; mso-para-margin-top:0cm; mso-para-margin-right:0cm; mso-para-margin-bottom:8.0pt; mso-para-margin-left:0cm; line-height:107%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:Calibri,sans-serif; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:Times New Roman; mso-bidi-theme-font:minor-bidi; mso-ansi-language:EN-US; mso-fareast-language:EN-US;}

Key Problems in Achieving Interoperability of State and Military Information Systems in Handling Defense Tasks

Key Problems in Achieving Interoperability of State and Military Information Systems in Handling Defense Tasks

The e Integrated Military Information System of the Ministry of National Defense in the Aviation School Airbase

This article describes the Integrated Military Information System (IMIS), which is being gradually introduced in the Ministry of National Defense. The modern IMIS system is intended to form the foundations of effective management of the Air Force logistics. At present, military units often have to carry out their tasks in a coalition or allied environment and the integrated information system is a key to ensuring a successful outcome of these activities.
 This author also focus on airbase tasks on the example of 42 Aviation School Airbase in Radom. The article also describes the implementation effects of IMIS on enhanced functioning of the airbase logistics in this process.

Asymptotic Analysis of Blind Reconstruction of BCH Codes Based on Consecutive Roots of Generator Polynomials

In the military surveillance and security information systems, correct blind reconstruction of signal parameters from unknown signals is very important. Especially, many blind reconstruction methods of error-correcting codes have been proposed, and their theoretical performance analysis is essential for both the defender who wants to prevent information leakage and the challenger who wants to extract information from the intercepted signals. However, a proper performance analysis of most blind reconstruction methods has not been performed yet. Among many blind reconstruction methods of BCH codes proposed so far, the blind reconstruction method based on consecutive roots of generator polynomials proposed by Jo, Kwon, and Shin, called the JKS method, shows the best performance under the unknown channel information. However, the performance of the JKS method is only evaluated through simulation without performing theoretical analysis. In this paper, the JKS method is asymptotically analyzed under the binary symmetric channel with the cross-over probability $p$ . Since the blind reconstruction performance heavily depends on how many and which received codewords are used even for the same channel environment, sufficiently many codewords are assumed to perform asymptotic analysis. More specifically, an asymptotic threshold on $p$ , up to which blind reconstruction is successful, is derived when the number of received codewords is sufficiently large, which can be used as a new performance metric for blind reconstruction methods. Finally, the validity of the asymptotic analysis is confirmed through simulation.

Considerations Concerning the Necessity of Existence a Modern Military Information System in the Current Geopolitical and Geostrategic Context

Abstract The latest military actions carried out at global level have highlighted, besides the number, the quality and diversity of the participants in the multinational operations and the differences, not at all negligible, regarding the capabilities of these actors to participate in military actions characterized by a high technical level and technologically, but not only. One of the areas that generated a real lack of standardization, with obvious impact on the operational compatibility of the various participants was that of communications and informatics and, implicitly, of the insurmountable differences between different information subsystems as parts of the information systems of the multinational operations. From this perspective, it became evident that the performance of each participant in the military actions of a multinational character was and we consider that it will be permanently conferred by their technical ability to cope with the information avalanche and to integrate into the information system of the mission.