Information Protection System Research Articles

High-security multidimensional data protection system based on the Hartley algorithm-driven chaotic scheme

This paper proposes a high-security multidimensional data protection system based on the Hartley algorithm-driven chaotic scheme. We utilize the fast Hartley algorithm instead of the fast fourier computation, and we employ chaotic sequences generated by the multi-winged chaotic system to achieve chaos-driven 3D constellation mapping, effectively integrating the chaotic system with the stochastic amplitude modulator. We reduce the signal’s peak-to-average power ratio (PAPR) by deploying a random amplitude modulator. Simultaneously, this approach enhances the security of the physical layer of the signal. The PAPR reduction can reach up to 2.6 dB, while the most robust and stable modulator scheme can gain 2 dB. Finally, in the Hartley frequency domain, the signal's frequency is disrupted, providing the entire system with a key space of 10131 to resist violent cracking and thus improving the system's overall security. To validate the feasibility of our scheme in comparison to conventional IFFT-based encrypted 3D orthogonal frequency division multiplexing, We achieved a transmission rate of 27.94 Gb/s over a 2 km multicore fiber. Experimental results show that since the random amplitude generator effectively reduces PAPR, our proposed encryption scheme increases the forward error correction threshold range by 1.1 dB, verifying that our proposed scheme has highly reliable security performance.

МЕТОД ДВОКАСКАДНОЇ ІМПЛАНТАЦІЇ ПРИХОВАНОЇ ІНФОРМАЦІЇ НА ОСНОВІ СТЕГАНОКОМПРЕСІЙНИХ ПЕРЕТВОРЕНЬ

In the article, the need for further development of the state is directly related to: solving issues of increasing defense capability and information security; development of information and intelligent systems. The necessity of ensuring the required level of completeness of information, compliance with the requirements of its relevance, achievement and maintenance of the appropriate level of integrity, accessibility and confidentiality is substantiated. The article emphasizes that for this purpose, complex systems of coding and information protection are being built. It is shown that recently, in order to further increase the level of security of information resources, methods of hidden embedding of information have been used. In this field of scientific and applied research, the direction of timely delivery of integral video information in a secure mode is outlined. For protection, the following can be used: meta-messages, which are formed on the basis of intelligent analysis of video frames; separate video segments of aerial photographs containing the most important information for decision-making. This article examines a class of methods of steganographic transformations, which are associated with embedding messages in digital containers, which are formed by a stream of video segments (VS). However, existing steganographic systems are based mainly on the use of the amount of psychovisual (PSV) redundancy available for reduction. Therefore, an increase in steganographic capacity leads to a loss of integrity and efficiency of delivery of video-container information. Steganocompression coding in the stegano-polyadic basis was created on the basis of taking into account the amount of redundancy permissible for reduction. In this case, in the process of compression of the components of the VS, the direct embedding of hidden information is organized. Concealment of information is carried out by technological stages, depending on the compression transformation of the transitional syntax of the quilted sequence. The key stage is the technology of two-stage implementation of the elements of the concealed message added to the stegano sequences to the syntax of the steganocompression representation of the BC components.

A STRONG AND PRACTICAL AUTHENTICATION MECHANISM USING PASSTEXT AND ONE MINUTE PASSCODE

In this modern world, hacking is growing faster, and there is no privacy for personal data. Therefore, we have decided to create passwords using new methods. This project demonstrates that there is no secret shared between the user and strangers; it presents a one minute challenge to unlock private data. Our project generates random codes minute by minute, and each password is only valid for just one minute, which is called OMP (One Minute Passcode). Therefore, the user doesn't know the correct password at all times. These passkeys are then sent to the user's mobile phone using the Twilio method, which is more secure and provided by Google to communicate through secret authentication methods and tokens. Thus, hacking becomes impossible with this level of complexity. In the future, if there's a possibility of hacking, we will update the cipher methods to unlock the data. Nowadays, the usage of PCs and mobile phones has increased rapidly. What if the passwords are not known by the user or strangers in this modern technology. Our project ensures privacy between users and hackers or strangers; secret passwords may sometimes be compromised, but random passwords will never be known to users or strangers. This idea is used here to maintain safety while unlocking our privacy or private sectors by creating random codes and sending them to the user's mobile IP value or number. We can easily unlock our device in a non-hackable form using brute force and Twilio, which are the main components of our data protection system. In the older authentication method, there were only 6-digit numbersto unlock data, which were available only for apps. Like an OTP, this method randomly generates a 6-digit code to unlock the private sector, which is available on the same phone or PC. This makes it easy for hackers to access details using your phone number or email. These passkeys are dynamic and not stable at all times, and theirsize istoo small. A relational database plays a major role here, we also use the emergency password method for user convenience. KEYWORDS: Security Authentication, Twilio, Database, Spyware attacks, Hacking, Password Authentication,Database.

Colombian Ocular Diseases Epidemiology Study (CODES): Prevalence Incidence, and Sociodemographic Characterization of Vision Impairment (2015–2019), A Nationwide Study

ABSTRACT Purpose To describe the prevalence, incidence, and sociodemographic characterization of moderate to severe vision impairment (MSVI) and blindness in Colombia based on the National Health Registry Integrated Social Protection Information System (SISPRO) Database. Methods We performed a nationwide population-based study using SISPRO and the International Classification of Diseases. Total and new cases were identified to calculate the prevalence and incidence per 100,000 inhabitants of MSVI and blindness between 2015 and 2019. Blindness was defined as a best-corrected visual acuity (BCVA) of less than 20/400 in the better-seeing eye. Meanwhile, MSVI is a BCVA from 20/70 to equal or better than 20/400 in the better-seeing eye. An ANOVA test was performed to identify age differences. A conditional autoregressive model was also employed to depict standardized morbidity rate maps. Results From the 50 million inhabitants, the average prevalence and incidence of MSVI were 13.94 and 13.34 between 2015 and 2019, respectively, while for blindness, they were 4.03 and 3.53. Females accounted for most reported cases, and there was a notable shift towards individuals over 50 years (p < 0.001). Valle del Cauca was the region with the most cases reported and the greatest disease burden. Conclusion This is the first nationwide population-based study describing the prevalence, incidence, and sociodemographic characterization of blindness and MSVI in Colombia. In recent years, there has been an increased number of cases, prevalence, and incidence, with females over 50 particularly affected. This research provides insight into the country’s vision impairment epidemiology landscape and contributes to formulating public health policies to improve eye health care.

Design of storage benchmark kit framework for supporting the file storage retrieval

An open-source software framework called the storage benchmark kit (SBK) is used to store the system benchmarking performance framework. The SBK is designed to perform any storage client or device using any data type as a payload. SBK simultaneously helps number of readers as well as writes to the storage system of large amounts of data as well as allows end-to-end latency benchmarking for multiple writers and readers. The SBK uses standardized performance measures for comparing and evaluating various storage systems and their combinations. Distributed file systems, distributed database systems, single or local node databases, systems of object storage, platforms of distributed streaming and messaging, and systems of key-value storage are the storage solutions supported by SBK. The SBK supports various storage systems like XFS, Kafka streaming storage systems, and Hadoop distributed file system (HDFS) performance benchmarking. The experimental results show that a proposed method achieves execution time of 65.530 s, 40.826 s and 30.351 s for the 100k, 500k and 1000k files respectively which ensures better improvement than the existing methods such as simple data interface and distributed data protection system.

РАЗРАБОТКА АЛГОРИТМА ОЦЕНКИ ЭФФЕКТИВНОСТИ МЕР И СРЕДСТВ ЗАЩИТЫ ПЕРСОНАЛЬНЫХ ДАННЫХ В СФЕРЕ ЗДРАВООХРАНЕНИЯ

The features of existing directions and methods for assessing the effectiveness of information protection measures in medical institutions are considered. A comprehensive analysis of objects and identifying threats to the security of personal data is carried out. The authors identify key stages of the object research, consisting of determining the cost of information resources, identifying the most relevant threats, and calculating the damage from their application. The analysis of the possibility of implementing and eliminating threats is performed; a classification of the most critical threat groups is built. The main scientific result of the performed research states that this algorithm application is possible both for scientific purposes and for forming effective personal data protection systems in various organizations. Based on this, this study will lead to increasing the level of the effectiveness assessment for the protection measures of confidential information in medical organizations.

Colombian Ocular Diseases Epidemiology Study (CODES): Prevalence and Sociodemographic Characterization of Refractive Errors in Colombian Eye Care Consultations

ABSTRACT Purpose To estimate the prevalence and demographic characteristics of uncorrected refractive errors (URE) in people who attended eye care consultations in Colombia between 2015 and 2019, using the National Health Registry data. Methods We identified ICD codes for myopia (H-52.1), degenerative myopia (H-44.2), hyperopia (H-52.0), and astigmatism (H-52.2) from the Integrated Social Protection Information System. Crude prevalence rates by age and sex were calculated for the population attending eye care services during these years. Additionally, we developed a standardized morbidity map across county departments. Results In Colombia, the prevalence of URE among eye care consultations was 30.26%, increasing from 30.39% in 2015 to 35.14% in 2019. Of the 1,579,778 cases analyzed, 60.9% were females. Astigmatism emerged as the most prevalent URE, predominantly seen in individuals under 40 years old. Myopia showed the highest prevalence in the 10–30 age group, whereas hyperopia was most prevalent in the first decade of life. Geographically, the Andean region recorded most of URE cases, while more remote areas have seen a rising morbidity risk in recent years. Conclusions The rising trend of URE in Colombia and its demographic and geographical variations underscores the urgent need for health professionals and government authorities to acknowledge and address this issue. This study provides crucial insights into the refractive error landscape across the country, highlighting the necessity for prevention programs specifically designed to cater to the country’s unique needs.

Model of current threats to security of confiden-tial data in divisional information systems

The paper proposes a model for determining actual threats to the information security of distributed information systems, based on algorithms of fuzzy inference and the theory of fuzzy neural systems, unlike known ones, uses sufficient and necessary indicators, excludes expert errors, increases the detection of the number of actual threats to information security of distributed systems by 5 %, reduces the cost of purchasing information protection equipment from 15 to 30%. It takes into account the following factors: the IT infrastructure of the distributed information system, the capabilities of attackers and their level of motivation in the distributed information system, the list of existing protection tools in the distributed information system.&#x0D; The proposed approach differs from existing ones in the following: lack of involvement of highly qualified specialists in the field of information security; the process is automated, has a low computational complexity; absence of deficiencies in expert assessments; allows you to determine the list of current information security threats in information systems of various classes and types.&#x0D; The task of ensuring the security of confidential information becomes the most urgent, which is due to the growth of computer attacks and leaks of information, which are reflected in the statistical data on the commission of crimes in the field of high technologies, the growth of criminal activity using modern communication devices and the Internet.&#x0D; Existing methods of modeling current threats to information security and assessing the effectiveness of the information protection system cannot be used at all stages of the life cycle of distributed information systems - they do not take into account the following indicators in the complex: IT infrastructure of distributed information systems, current threats to information security, security requirements for confidential information, a list of means of protecting confidential information and their value as important indicators when solving these problems.&#x0D; In order to achieve the goals of ensuring the security of confidential information, it is necessary to: organize the effective creation of an information protection system (information security system), effective modeling (identification of the list) of current threats to information security, identification of the current violator, and also provide the opportunity to conduct a qualitative assessment of the effectiveness of the information security (protection) system.&#x0D; One of the most important tasks of ensuring the security of confidential information is the assessment of the effectiveness of the protection (security) system. In this regard, the goal of the work (research) is to improve the quality of the evaluation of the effectiveness of the protection (security) systems of distributed information systems by determining sufficient and necessary evaluation indicators using modern (promising) information technologies that allow the most effective solution of the following tasks: determination operating parameters of adaptive production fuzzy neural systems, which are most suitable for solving the tasks, application of Data Science technologies in data processing, fuzzy output algorithms.

Development of the sociocyberphysical systems` multi-contour security methodology

The constant increase in the number of threats to the security of critical infrastructure objects, which include socio-cyberphysical systems, leads to a decrease in the quality of security services and the level of security of infrastructure elements. The object of research is the process of building a complex system of protection in socio-cyberphysical systems. The imperfection of the mechanisms for ensuring the security of critical infrastructure objects, which include socio-cyberphysical systems, the technological complexity of identifying new security threats necessitates an urgent need for a radical revision of the current approaches to its provision. So, it becomes clear that the development of a new approach to ensuring the security of information resources in socio-cyberphysical systems is needed. The article proposes a new approach to the methodological foundations of building multi-contour information protection systems with internal and external circuits on each of the platforms of socio-cyberphysical systems. This approach is based on a universal classifier of threats, which takes into account not the technical aspect of threats, but also their integration with social engineering methods, their synergy of hybridity. The sociopolitical influence on the realization of threats is taken into account, and practical mechanisms for providing basic security services based on post-quantum algorithms are also proposed. To provide basic security services in the proposed multi-contour protection system, it is proposed to use post-quantum algorithms – McEliece crypto-code constructions, which provide Perr=10-9–10-12, safe time Tsec=1025–1035 group operations. Within the framework of the proposed approach, the problem of increasing the level of information security has been formalized and further ways of solving it have been determined

HR TECHNOLOGIES IN PERSONNEL MANAGEMENT AS A COMPONENT OF THE FINANCIAL AND ECONOMIC SECURITY OF ENTERPRISES IN THE CONDITIONS OF DIGITAL TRANSFORMATION

Today, for some enterprises of Ukraine, there is a threat to their activities associated with active hostilities on a large territory, as well as constant cyber attacks from the Russian Federation. Also, the main factor in ensuring the company's competitiveness is the digital transformation of business processes, which ensures an increase in productivity and efficiency. The use of digital technologies in business requires more and more protection to minimize future threats from information leakage through cyber-attacks or rogue employees. Increasingly, there are cases where personnel are not responsible for disclosing information that poses a threat to the financial and economic activity of the enterprise. That is why there is a need to improve the use of HP technology in management personnel as a component of the financial and economic security of enterprises in the conditions of digital transformation. The method of writing the article is the study of HP technologies in personnel management as a component of the financial and economic security of enterprises in the conditions of digital transformation. The study of HP technologies in management personnel as a component of the financial and economic security of enterprises in the conditions of digital transformation was carried out. The advantages of HP technologies in management personnel are characterized and the importance of increased protection is emphasized. External and internal threats and risks affecting the financial and economic security of the enterprise are considered. It was determined that external threats have an unregulated nature and systematically affect the company's activities. Internal ones, in their situation, are more regulated and have local influence. It is proposed to develop the mechanism of financial and economic security of the enterprise taking into account the methods and tools of personnel management based on HR technologies. It is emphasized that for modern conditions it is important to pay considerable attention to the formation of the personnel management subsystem on the basis of HR technologies as a component of the financial and economic security of the enterprise, which ensures its strengthening. It was determined to increase the protection of information systems used by management personnel to ensure the reduction of leakage of corporate and personal information, which strengthens the financial and economic security of the enterprise.

Development of methods for neutralizing «Zero-day» threats

Objective. The purpose of this study is to develop and analyze methods for neutralizing «zero-day» threats in order to increase the level of cybersecurity and protection of information systems. Method. In this article, a behavioral analysis of the threat is used. The characteristic features of the zero-day exploit behavior have been studied. The threat model is based on solving the tasks of timely detection and neutralization of the threat. Result. The actual problem of information systems security - the threat of «zero-day» is considered. The review of existing neutralization methods and discussion of effective new approaches were carried out. It has been revealed that the main vulnerability is outdated threat signatures. Threat detection is based on a study of the behavior of software a comparison with the previous day tracking is possible mainly by analyzing log files taken from an automated workplace. Conclusion. The content of this work emphasizes the importance of developing methods to neutralize «zero-day» threats in order to avoid the centralized spread of vulnerability and infection of a large number of automated workplaces, which can lead to the suspension of production processes within a large enterprise.

On certain aspects of standardization and operating conditions of automated systems

Objective. In this paper, the main aspects of the operating conditions of the AS are considered, as well as the issues of standardization of the stages of the life cycle of the AS (creation, commissioning, maintenance, etc.) at the state level. In this subject area, the technological features of building an AS based on various technical architectures are briefly considered, since both foreign processors based on x86-64 architectures and processors of domestic development based on the Advanced RISC Machine architecture are currently applicable. The use of various components of the AS requires additional study in terms of ordering the composition and configuration of specific SPI. Since each processor has a multi-level architecture, this fact objectively complicates the possibilities for full security testing and detection of all vulnerabilities. Method. In the course of the work, the threats and vulnerabilities of individual components of the AS from the point of view of intentional and unintentional threats are considered. The information on the main state standards applied to ensure the protection of information in the AS at the present time is summarized. Result. The main features of the operating conditions of the AS are considered and it is determined that the vulnerabilities of the components are due to the imperfection of the procedures for developing and covering testing of hardware and software. It is determined that in order to protect information in the AS, it is necessary to build a multi-level protection system with state accreditation. Conclusion. Proposals are presented for the application of state standardization for the protection of information in the AS, taking into account the current and prospective threat landscape, including taking into account the design features (undeclared capabilities) of the components. Overcoming threats is possible with the creation of a multi-level information protection system with state accreditation.

The method of multi-criteria selection of the optimal variant of the information protection system for the information and communication system of the enterprise

The development of any complex technical system is usually associated with solving an optimization problem. In the case of designing an information protection system for an information and communication system of an enterprise, it is a search for the optimal variant of a set of protection means from the entire set of possible ones. Like any complex system, the information protection system of the information and communication system of the enterprise is characterized by a set of performance indicators that characterize the protection system from the point of view of countermeasures: the intrusion of intruders into the system; threats to confidentiality, integrity and availability of information; malicious software, etc. The article considers the method of multi-criteria selection of the optimal version of the information protection system for the information and communication system of the enterprise. 5 approaches to choosing the architecture of a complex system are offered. The approaches under consideration are illustrated on a model example of choosing one of the four options for the information protection system of the information and communication system of the enterprise. A simple and fairly visual method of choosing the optimal variant of the information protection system for the information and communication system of the enterprise from a set of possible options is proposed. This method allows you to solve the problem directly on the set of quality indicators without collapsing the criteria into a complex indicator. The prospects for the development of the proposed method are its improvement in order to realize the possibility of giving preference to certain criteria.

MATHEMATICAL METHODS IN CYBER SECURITY: CLUSTER ANALYSIS AND ITS APPLICATION IN INFORMATION AND CYBERNETIC SECURITY

The huge number of information threats and their complexity prompts research and modeling of new methodologies and information protection systems. The development and improvement of information and cyber security systems includes the creation and processing of mathematical models using information technologies. This article is a follow-up study on the application of mathematical methods and technologies in cyber security, namely: methods of cluster analysis. The modern development of computer technology and the growth of their power have contributed to the wide implementation of Data Mining algorithms for processing large volumes of information in various fields of society and science, in particular in the field of cyber security. Cluster analysis allows the set to be divided into subsets, so that the elements of each subset are similar to each other, and the elements of different subsets are the most different. This provides an opportunity to eliminate the shortcomings of the qualitative approach in assessing information risks. The paper reviews scientific sources regarding the applied aspect of the application of clustering methods in security systems, because timely forecasting of possible incidents allows you to manage information risks and make effective decisions to ensure confidentiality, availability and integrity of information. The stages of the clustering procedure are characterized, the issues of choosing the distance measure and the similarity measure for the objects under study are highlighted. The comparative characteristics of the most popular methods of cluster analysis are presented: the “nearest neighbor” algorithm, “k-means”, “fuzzy c-means”, “cosine similarity”, their advantages and disadvantages are defined. This study can be useful and used in the educational process of students of the specialty 125 “Cyber security and information protection”.

Methodology of analysis and assessment of the security of information protection systems taking into account the degree of overlapping threats

Currently, information protection in automated systems has become an integral part of the vast majority of activities in various fields of human activity. The article examines the impact of threats on objects subject to protection. The main attention is paid to the analysis of the main cases of exposure to threats and the reaction of protective mechanisms to external intervention. Moreover, the protection system is considered as a complex, as several protective mechanisms with possible interrelationships and their own effectiveness in countering certain types of threats. The architecture of the protection system is imperfect and misses some threats in the protection area, which creates a danger to information. Based on the analysis of the main possible cases, a model of the information protection system with full overlap of threats is proposed, which allows taking into account the internal interrelationships of threats, the actual architecture of the protection system and possible objects of protection, and also allows revealing the structure of the information protection system, evaluating its effectiveness barriers to known types of threats or their combinations. The authors carried out a quantitative assessment of the optimal probabilities of protective mechanisms, which allow to ensure the least passage of threats in the area of protection. Unlike known models, the model of the information protection process with full overlap of threats allows you to take into account the internal relationships between threats, information protection systems and protection objects, and also allows you to reveal the structure of the system, highlight and evaluate the effectiveness of barriers that cover areas of vulnerability information protection mechanisms.

Library Data Protection and Threat Detection System Based on Network Security

Library Data Protection and Threat Detection System Based on Network Security

Protect Information Systems to Preserve Attention

Protect Information Systems to Preserve Attention

PENETRATION TESTING USING DEEP REINFORCEMENT LEARNING

Traditionally, penetration testing is performed by experts who manually simulate attacks on computer networks to assess their security and identify vulnerabilities. However, recent research highlights the significant potential for automating this process through deep reinforcement learning. The development of automated testing systems promises to significantly increase the accuracy, speed and efficiency of vulnerability detection and remediation. In the pre-testing phase, artificial intelligence can be used to automatically create a realistic network topology, including the development of a tree of possible attacks. The use of deep learning methods, such as Deep Q-Learning, allows the system to determine the best attack paths, making the penetration process more strategic and informed. Automated penetration testing systems can serve as effective training tools for cybersecurity professionals. They allow attacks to be simulated in a controlled training environment, providing users with the opportunity to analyse different intrusion strategies and techniques, and serve as a training tool for detecting and responding to real-world attacks. This approach promotes a deep understanding of potential threats and develops the skills to effectively defend against them. In addition, the use of machine learning can help solve the problem of large numbers of false positives, which is a common problem in traditional security systems. Deep reinforcement learning offers the opportunity to create more adaptive scanning systems that can learn and adapt to changing threat patterns. Such systems are not only more efficient, but also able to operate with fewer errors, reducing the burden of human error. As a result, they can identify vulnerabilities that humans may not, providing a deeper and more comprehensive security analysis. This approach has the potential to revolutionise the cybersecurity industry, offering new strategies for protecting information systems and creating more robust network structures.

Protection of the EU's Critical Infrastructures: Results and Challenges

At the end of 2022 and the beginning of 2023, the EU adopted several new legislative acts aimed at improving the resilience and protection of network and information systems and critical entities across the Union. The objective of this research is to list the said acts, show their interconnections and focus specifically on the analysis of potential weaknesses of two legislative acts, namely: the NIS2 Directive and the CER Directive. The NIS2 Directive is a significant piece of legislation that aims to improve the cybersecurity of the European Union, while the CER Directive is a crucial piece of legislation that aims to improve the physical security of critical entities in the Union. These two documents are applied in parallel and contain many mutual references, which means that weaknesses in one document can have significant consequences in the implementation of the other. Therefore, through standard desk-top analysis of primary and secondary sources, this paper reviews the protection of the EU's critical infrastructures results and challenges by primarily focusing on these two documents. The research found certain weaknesses, explained them and suggested possible solutions.

Determining quality indicators for projects of information protection of information activity objects

The design and analysis of the effectiveness of modern integrated information protection systems (IIPS) is complicated by the influence of the designer's subjective decisions regarding methods and means of protection, the need to determine the quality criteria for the functioning of the designed objects. The work is aimed at improving the technology of automated design of IIPS by determining the quality of projects. When creating a database (DB) of objects with such "qualitative" performance indicators of information protection systems, it is possible to compare existing and new protection objects and to adjust the protection projects of existing objects. Moreover, the ontological properties of active and threat-resistant objects are taken into account. To illustrate the use of the methodology for determining and comparing the quality of projects, an example of comparing the quality of projects obtained in different ways is given. One way currently operating involves the use of expert evaluation of the quality of protection projects for existing facilities. The second way is intended for objects defined as objects of protection of the general structure (OPGS) and involves a principally objective assessment of design quality using known quality diagrams and control of Ishikawa and Pareto design consequences. As a result of the given example, it was determined that the quality of projects according to quality diagrams and control of design consequences should increase by more than two times. The proposed method of comparing the quality of information protection projects for different objects or different protection projects of one object allows to improve the process of creating information protection projects. At the same time, it is possible to exclude the human controller from the process of determining the reliability of object protection. It also allows you to automate the design process, reduce the time and cost of design costs