Providing Information Security Research Articles

Risk Management as Element of Economic Security in Companies Working with Digital Technologies

The article shows the essence of economic security and identifies its key elements, the general classification of threats to economic security is provided. Special attention is paid to information security as a key component of economic security in IT companies. The authors study the notion of digital infrastructure in the company and highlight key threats to information security and ways of its provision. The researchers focus on necessity to use complex and systemic approaches to providing information security. Principle methods of providing information security were analyzed, including legal, technical and organizational. At the same time advanced technologies of information protection were mentioned, such as blockchain, big data, artificial intellect, computer learning, and neuron nets.

The main ways to improve the effectiveness of electronic document management protection

Information resources and information systems are among the main protected elements in all spheres of life of modern enterprises [11-15]. Today, the means of negative information impact on these elements are actively developing, the counteraction of which requires extensive diverse research and development of relevant concepts, programs for organizing specific work in the field of creating tools, methods and techniques for ensuring information security. Illegal distribution of digital documents by authorized but unscrupulous users is a growing threat to the confidentiality of organizations, which a document management system using only encryption methods cannot fully cope with. This problem occurs together with access to a digital document by unauthorized users. In this article, as a countermeasure to protect digital documents from these two threats, a new approach is proposed that carefully combines encryption and fingerprinting methods at certain stages of the digital document lifecycle. Within this scenario, a full analysis was carried out, in which the main constituent elements, their interaction, data flow and the provision of security services were identified. This protection system guarantees a sufficient level of security, since it uses standard cryptographic algorithms and recommended key sizes. The purpose of this approach is to provide information security services such as confidentiality, integrity, authentication, non-repudiation and user tracking, thereby protecting digital documents throughout their entire life cycle.

Advance in Applied Cryptography Theory: Survey and New Results. Part 1. Key Cryptography

In the current paper, consisting from two parts, are presented both results already published before (but hard for access) and new once. Actuality of this work is firstly in a fact that recently has been obtained a number of new results in area of applied cryptography that are needed both in a clarification and be put into practice. This is namely the main goal of the current paper. The setting problem in the first paper part concerns to a complexity of symmetric cipher breaking while in the second part of the paper is discussed, so called, keyless cryptography, namely: wiretap channel concept, execution of communication channels which allow to provide information security without of key exchange procedure between legal correspondences. In the part widely used methods of applied mathematics, namely: algebra, number, probability and information theories. Computer simulation also used there. A novelty of the first part of work consists in the following: first of all it is clarified the sense of a key lifetime limitation for different symmetric cipher modes, secondly, it is explained an approach of cipher breaking by the use of quantum computers, finely, the key authentication for the Diffie ‒ Hellman protocol based on the mobile device pairing technology is investigated in detail. In the second part of the current paper has been presented a vulnerability of Dean ‒ Goldsmith cryptosystem under some extension of attacks. The main results of this paper are: estimation of the key lifetime of single key for symmetric cipher in CBC mode, clarifying of Grover’s algorithm breaking of symmetric ciphers by brute force attack, development of a method for authentication of Diffie ‒ Hellman values based on pre-distributed sequences, selection of ciphers which allow to execute with Shamir’s protocol without any key sharing in advance, breaking of Dean ‒ Goldsmith protocol under some conclusions, proof the fact regarding of a possible breakability of the key sharing protocol over noiseless communication channels. Practical application of paper results consists in the fact of stimulation the correct choice of ciphers and their parameters in order to provide their resistance to different attacks and more attention to algorithms of keyless cryptography.

Network intrusion classification for IoT networks using an extreme learning machine

The detection of intrusions has a significant impact on providing information security, and it is an essential technology to recognize diverse network threats effectively. This work proposes a machine learning technique to perform intrusion detection and classification using multiple feature extraction and testing using an Extreme learning machine (ELM). The model is evaluated on the two network intrusion datasets (NSL-KDD and UNSW-NB15), which consist of real-time network traffic. The arithmetic, gradient, and statistical features were extracted and evaluated with the proposed model. The method’s efficacy is assessed using accuracy, sensitivity, specificity, precision, and F1-score. The proposed method achieves 94.5%, 97.61%, 96.91%, 96.51%, and 97.05% accuracy, sensitivity, specificity, precision, and F1-score for NSL-KDD and 94.3%, 98,36%, 99.31%, 99.67% and 99.01% of accuracy, sensitivity, specificity, precision and F1-score for the UNSWNB-15 dataset respectively, which is better performance outcomes when compared to other existing works.

The Use of Means of Military Diplomacy in Providing Information Security as a Peacebuilding Factor

The research aims to determine the role of military diplomacy in providing information security as a key factor in building peace through the identification of key measures to counter information threats in the digital environment. The research employed the following methods: content analysis, rating analysis, and survey results processing. As a result of the conducted research, the place of digital diplomacy was determined concerning military diplomacy as a special form of its implementation to provide information security. The security of cyber-physical systems has been proven to be one of the most important approaches to data protection in military diplomacy because, among other things, the security of critical infrastructures depends on it. The research findings can be used by diplomatic service officers to increase the effectiveness of military diplomacy in the digital environment by implementing the proposed measures and directions in their activities.

Идеологема «коллективный Запад»: русскоязычные vs англоязычные СМИ

The use of ideologemes in the political media discourse of one linguistic culture, and how they are represented in the context of another linguistic culture, can be a powerful tool for influencing audiences through shared cultural attitudes. This also presents an intriguing and promising area of research. The ideologeme “collective West” has firmly entered the political media discourse, the number of its uses is growing rapidly, but the connotation of this lexeme remains understudied. In this article, based on news publications of Russian and English media for 2022–2023, the connotation of the ideologeme “kollektivny Zapad” and its English version “collective West” is explored, using the methods of content, component and discourse analyses. The features of its functioning in Russian-language media texts are described, namely, the use of evaluative epithets and markers of alienation (quotation marks and the adjective “so-called”). The lexeme has a negative connotation and consists of the components confrontation, aggression, hegemony, decline, hypocrisy, etc. In the English-language media, the lexeme “collective West” is placed in quotation marks more often than its Russian-language version, it is used with almost the same frequency with the adjective “so-called”, and its connotation consists of such components as confrontation, active participation in the Russian-Ukrainian conflict, aggression, hegemony, backwardness, etc. The negative connotation of the lexeme “collective West” is softened by the absence of evaluative epithets and various techniques of linguistic manipulation (depersonalization, personification, distortion in translation). The results of the research can be used in the study of information warfare techniques, language manipulation in media texts, the representation of Russia in English-language media in order to provide information security and teach media literacy.

MEDIA FREEDOM IN UKRAINE: WAR CHALLENDES AND MORE

Abstract. Ukraine has always had problems with media freedom. But due to the full-scale invasion of Russia, Ukraine faced a new challenge – how to provide information security and preserve the European principles of freedom of speech. The article describes the problems that have arisen in Ukraine due to the war and proposes ways to solve them. Also, there is a brief analysis of the newly adopted Law of Ukraine "On Media", which is important on Ukraine's path to EU membership. Special attention is paid to the telethon "United news", which, in the author's opinion, should be terminated.

Trade Reliability for Security: Leakage-Failure Probability Minimization for Machine-Type Communications in URLLC

How to provide information security while fulfilling ultra reliability and low-latency requirements is one of the major concerns for enabling the next generation of ultra-reliable and low-latency communications service (xURLLC), specially in machine-type communications. In this work, we investigate the reliability-security tradeoff by defining the leakage-failure probability, a metric that jointly characterizes both reliability and security performances for short-packet transmissions. We discover that the system performance can be enhanced, counter-intuitively, by allocating fewer resources for the transmission with finite blocklength (FBL) codes. In order to solve the corresponding optimization problem for the joint resource allocation, we propose an optimization framework, that leverages lower-bounded approximations for the decoding error probability in the FBL regime. We characterize the convexity of the reformulated problem and establish an efficient iterative searching method, the convergence of which is guaranteed. To show the extendability of the framework, we further discuss the blocklength allocation schemes with practical requirements of reliable-secure performance, as well as the transmissions with the statistical channel state information (CSI). Numerical results verify the accuracy of the proposed approach and demonstrate the reliability-security tradeoff under various setups.

Provision of Security Information and Conflict Resolution in Rivers State

This study was conducted to investigate the relationship between provision of security information and conflict resolution in Rivers State. Two research questions and two hypotheses were formulated to guide the study. Survey research design was adopted for the study. The population of the study was 2550 intelligence agency serving in Rivers State. A sample of 486 police officers and others were used for the study using simple random sampling technique. A researcher made questionnaire entitled “provision of security information and conflict resolution Questionnaire (PSICRQ) was used in collecting data for the study. The instrument was face validated by three experts. Internal consistency reliability was conducted for the instrument and a coefficient of 0.81 was obtained. Pearson Product Moment Correlation was used in answering the research questions and in testing the hypotheses. The finding of the study indicated that there is relationship between provision of security information and conflict resolution in Rivers’ State. It was recommended among others that citizens should readily provide security information to the Law enforcement agency for the maintenance of law and order in Rivers State.

High Security Image Cryptographic Algorithm Using Chaotic Encryption Algorithm with Hash-LSB Steganography

In the latest, digital images are frequently used for storage, communication, medical imaging, etc. Such images possibly involve private data, which accordingly handed an important role to information security. Image encryption and steganography are two widely used techniques for providing information security. Cryptography is the technique of protecting information by encryption and decryption. In steganography, the message is inserted in an image with changes entitled a cover image. The principal purpose of the study is to improve the current secure data communication techniques, by combining cryptography with steganography. Steganography and cryptography are two examples of the multiple methods used to guarantee secrecy and privacy throughout data communication. The suggested approach achieves encryption and decryption utilizing chaotic encryption technique and employing hash-least significant bit (HLSB) as steganography which is a significant method of embedding data bits in LSB bits of RGB pixels of the cover image.  The suggested image encryption method is validated by experimental results to be highly secure and resistant to a variety of attacks. Additionally, compared to several conventional picture encryption techniques, it offers higher performance. Peak signal-to-noise ratio (PSNR) and mean square error (MSE)calculations are used to provide security evaluations. PSNR is infinite and MSE is 0 for a secret image. PSNR and MSE for the cover image are 65 and 0.02 dB respectively. The results of this research reveal a high level of similarities between stego and cover images, and between recovered and secret images, as seen in the histogram analysis of secret images. These techniques are accomplished effectively by using the MATLAB program.

Bayesian Modeling for Differential Cryptanalysis of Block Ciphers: A DES Instance

Encryption algorithms based on block ciphers are among the most widely adopted solutions for providing information security. Over the years, a variety of methods have been proposed to evaluate the robustness of these algorithms to different types of security attacks. One of the most effective analysis techniques is differential cryptanalysis, whose aim is to study how variations in the input propagate on the output. In this work we address the modeling of differential attacks to block cipher algorithms by defining a Bayesian framework that allows a probabilistic estimation of the secret key. In order to prove the validity of the proposed approach, we present as case study a differential attack to the Data Encryption Standard (DES) which, despite being one of the methods that has been most thoroughly analyzed, is still of great interest to the scientific community since its vulnerabilities may have implications on other ciphers.

Security–Reliability Tradeoff Analysis for SWIPT- and AF-Based IoT Networks With Friendly Jammers

Radio-frequency (RF) energy harvesting (EH) in wireless relaying networks has attracted considerable recent interest, especially for supplying energy to relay nodes in the Internet of Things (IoT) systems to assist the information exchange between a source and a destination. Moreover, limited hardware, computational resources, and energy availability of IoT devices have raised various security challenges. To this end, physical-layer security (PLS) has been proposed as an effective alternative to cryptographic methods for providing information security. In this study, we propose a PLS approach for simultaneous wireless information and power transfer (SWIPT)-based half-duplex (HD) amplify-and-forward (AF) relaying systems in the presence of an eavesdropper. Furthermore, we take into account both static power splitting relaying (SPSR) and dynamic power splitting relaying (DPSR) to thoroughly investigate the benefits of each one. To further enhance secure communication, we consider multiple friendly jammers to help prevent wiretapping attacks from the eavesdropper. More specifically, we provide a reliability and security analysis by deriving closed-form expressions of outage probability (OP) and intercept probability (IP), respectively, for both the SPSR and DPSR schemes. Then, simulations are also performed to validate our analysis and the effectiveness of the proposed schemes. Specifically, numerical results illustrate the nontrivial tradeoff between reliability and security of the proposed system. In addition, we conclude from the simulation results that the proposed DPSR scheme outperforms the SPSR-based scheme in terms of OP and IP under the influences of different parameters on system performance.

Staff assistance of educational programs in the sphere of information security: design and development problems

An increase in civilization risks and threats, and the development of information technologies actualize the questions of information security. The need for information security specialists is sharply increasing. This requires the solution of a number of managerial, organizational, substantive issues related to the organization and implementation of educational programs on information security including staffing issues. In such conditions the issues of teaching staff potential development, formation of the necessary up-to-date knowledge and competences of teachers for qualitative training of future specialists become urgent and in-demand. Mass retraining of teachers becomes the most important task in providing information security specialists for the digital economy. The methodological basis of the study is the provisions of education sociology reflecting the problems of matching the human resources needs for the digital economy, import substitution and national security with the quantity and quality of specialist training in higher educational institutions of vocational education.The aim of the research is to identify employers' demands for information security specialists' competences for formation of professional educational programs and demands of teachers engaged in information training for actual knowledge, abilities, skills, which availability will ensure innovativeness in training of young specialists. The main hypothesis was that there is a mismatch between the demands of the external environment of higher education, above all, employers and the capabilities of the educational system, there is an urgent need to increase the capacity of teachers involved in training professionals in the field of information security. The reasons for this mismatch are (1) the dynamic development of technology, the emergence and increase of cyber threats and cyber incidents, (2) the presence of objective problems in the development of educational institutions staff capacity - the low proportion of young personnel, inadequate interaction between educational institutions and industrial and research centers, inadequate scientific and educational mobility of teaching staff for skills development.The needs of employers and teachers have been identified on the basis of empirical research (autumn, 2021) conducted by the authors. 103 teachers and 109 employees of enterprises which carry out functions on maintenance of information security of organizations and enterprises (mainly SFD) participated in sociological research.Results: requirements of employers and teachers on information security actual knowledge, abilities, actual programs of professional development and professional retraining were revealed. The practical significance of the results is that the study can reveal the problems of design and development of educational programs on information security and formulate recommendations for the design.

Countering fake information as a guarantee of state information security

The article focuses on the notion of fake information as a tool of psychological influence in the context of hybrid wars. Works of the prominent academicians in the area of manipulation studies constitute the theoretical framework of this research. Empirical research methods such as observation, comparison, generalization and expert evaluation are used. First of all, types and methods of psychological influences used by mass media and social networks with a view to manipulate public opinions are distinguished. Moreover, the impact of emotions on the critical perception of the news is highlighted. The indicators of manipulative influence are defined in order to resist them. Besides, the ways of creating and distributing false information are described. In addition, the development of fakes identification mechanisms is considered a priority for the governmental and other public institutions. This is illustrated by a range of technologies developed to automatically detect fake news. Apart from that, the degrees of the information reliability are explored. Furthermore, structural elements of fake messages, which include the source and the message itself, are discussed. Misinformation of the public, promotion of certain opinions, encouragement of aggressive actions and instalment of doubts are singled out as the main tasks of fake information. Additionally, stages of countering fakes are distinguished. Finally, the specific features of the forensic expertise procedure are determined in order to provide information security in Ukraine. The research demonstrates the importance of an efficient security system, which would identify fake information and limit its propagation.

Analysis of a Honeypot Intrusion Detection System for Medical and Healthcare Services

Cyber-attacks have been increasingly becoming alarming in recent years specifically for medical and healthcare systems. One of the cyber-attackers aims is to break into the medical or healthcare networks and gain access to the patient’s medical records. This paper deals with the honeypot-based intrusion detection system to provide information security for medical and healthcare systems. The proposed system utilizes the Dionaea and Kippo SSH (Kippo Secure Shell) honeypots to secure the medical and healthcare network infrastructure and analyze the activities of cyber-attackers. A possible Metasploit and Brute force attacks logged by the Dionaea and Kippo SSH will be analyzed to prepare the malware analysis report of the suspicious file download.

Evaluating the effectiveness of the information security system process based on the theory of stochastic indicators

Introduction: Under the conditions of imperfect methods and means of detection and response to computer attacks there is a constant growth of destructive impacts aimed at critical information systems. This generates a need to develop research methods for early warning systems to provide information security in case of malware attacks. One of the effective ways to solve this problem is to use the methods of the theory of stochastic indicators. Purpose: The development of a tool for evaluating the effectiveness of the information security system functioning. Results: We describe deterministic, random and indefinite components of the information security system functioning. Constant and functional indicators are constructed, their distinctive features are revealed. To solve the problem of evaluating the effectiveness of the process under consideration stochastic superindicators are constructed. We have also described the features of the construction of stochastic indicators of different ranks on the basis of the theory of the effectiveness of targeted processes and purposeful systems. Practical relevance: Through the developed stochastic time indicators, the probabilistic and temporal characteristics of the destructive impact are estimated, with the intervals and time points of its occurrence taken into account. This allows the system to be timely warned of a possible destructive impact scenario for the elements of critical information infrastructure.

Hybrid Cryptographic Scheme for Secure Communication in Mobile Ad Hoc Network-Based E-Healthcare System

The COVID-19 pandemic has affected people’s lives in all aspects. This pandemic has raised the usage of ubiquitous networks such as mobile ad hoc networks (MANETs) for information exchange in various domains. MANET is a group of versatile nodes that communicates with each other without relying on a fixed physical framework. One of the prominent features of MANET is its versatile topology. Because of this striking feature, MANETs are employed in various domains like defense and combat operations, disaster management, healthcare, and environmental monitoring. In this paper, we enlighten the significance of MANET in the smart healthcare system. The COVID-19 pandemic outbreak demanded the reshaping of the healthcare systems to combat the pandemic and similar cataclysms. Existing healthcare systems are proved inefficient in dealing with pandemic situations, because they are not fully automated and also vulnerable to various security attacks. Therefore, it is vital to empower the healthcare sectors by integrating ubiquitous networks and other emerging technologies. In this paper, we proposed a MANET-based secure healthcare system to exchange medical data among portable nodes. Ensuring secure communication in the MANET-based healthcare system is one of the challenging issues. Healthcare system demands the sharing of confidential medical data among mobile nodes. So it is essential to provide secure information exchange in healthcare system by using strong cryptographic schemes. In this paper, we proposed a hybrid cryptographic algorithm for secure medical information exchange among mobile healthcare nodes. The proposed cryptographic scheme uses logistic map for key generation. Logistic map exhibits high security with less computational power. Our simulation results show that the proposed hybrid cryptographic scheme exhibits better security against various attacks in MANET-based healthcare systems.

A long short-term memory (LSTM)-based distributed denial of service (DDoS) detection and defense system design in public cloud network environment

The fact that cloud systems are under the increasing risks of cyber attacks has made the phenomenon of information security first a need and then a necessity for these systems. Distributed Denial of Service (DDoS) attacks can exploit, disrupt, change, prevent or damage cloud services. Accurate and timely detection and prevention of these attacks are very important in terms of ensuring information security. During the COVID-19 period, the increase in the use of information technologies and especially the internet has made cyber attacks a real concern. Deep learning (DL) has become widely used for the purpose of detecting and preventing cyber attacks to provide information security. In this study, a Long Short-Term Memory (LSTM) based system (LSTM-CLOUD) which was designed for the detection and prevention of DDoS attacks in a public cloud network environment was proposed. The design of the system is based on a signature-based attack detection approach. The LSTM-CLOUD has two modules defined in the study: detection and defense. The function of the first module of the system was determined as detecting the occurrence of DDoS attacks with the LSTM DL model developed in this study with an accuracy rate of 99.83% on the CICDDoS2019 data set. The function of the second module was determined as activating the defense mechanism to protect the cloud systems when attacks are detected. The comparison results showed that our LSTM model had a performance as good as those in the previous studies conducted with different DL algorithms on the same and different datasets. The results obtained show the effectiveness of the LSTM model developed in this study in detecting the occurrence of attacks.

Toward Multi-Functional 6G Wireless Networks: Integrating Sensing, Communication, and Security

Integrated sensing and communication (ISAC) has recently emerged as a candidate 6G technology, aiming to unify the two key operations of the future network in a spectrum/energy/cost-efficient way. ISAC systems communicate and sense for targets using a common waveform, a common hardware platform, and ultimately the same network infrastructure. Nevertheless, the inclusion of information signaling in the probing waveform for target sensing raises challenges from the perspective of information security. At the same time, the sensing capability incorporated in ISAC transmission offers unique opportunities to design secure ISAC techniques. This overview article discusses these unique challenges and opportunities for the next generation of ISAC networks. We first briefly discuss the fundamentals of waveform design for sensing and communication. Then we detail the challenges and contradictory objectives involved in securing ISAC transmission, along with state-of-the-art approaches to ensure security. We then identify the new opportunity of using the sensing capability to obtain knowledge target information as an enabling approach against the known weak-nesses of PHY security. Finally, we illustrate some low-cost secure ISAC architectures, followed by a series of open research topics. This family of sensing-aided secure ISAC techniques brings new insight on providing information security, with an eye on robust and hardware-constrained designs tailored for low-cost ISAC devices.

Challenge of the performance management of trust control systems with deep learning

Introduction. The significance of machine learning under the conditions of digital transformation of industry, and methods of implementing deep learning to provide the performance of trust management systems are considered. The necessity of using convolutional artificial neural networks for deep machine learning is determined. Various technologies and architectures for the implementation of artificial neural networks are briefly considered; a comparative analysis of their performance is carried out. The work objective is to study the need to develop new approaches to the architecture of computing machines for solving problems of deep machine learning in the trust management system implementation.Materials and Methods. In the context of digital transformation, the use of artificial intelligence reaches a new level. The technical implementation of artificial neural systems with deep machine learning is based on the use of one of three basic technologies: high performance computing (HPC) with parallel data processing, neuromorphic computing (NC), and quantum computing (QC).Results. Implementation models for deep machine learning, basic technologies and architecture of computing machines, as well as requirements for trust assurance in control systems using deep machine learning are analyzed. The problem of shortage of computation power for solving such problems is identified. None of the currently existing technologies can solve the full range of learning and impedance problems. The current level of technology does not provide information security and reliability of neural networks. The practical implementation of trust management systems with deep machine learning based on existing technologies for a significant part of the tasks does not provide a sufficient level of performance.Discussion and Conclusions. The study made it possible to identify the challenge of the computation power shortage for solving problems of deep machine learning. Through the analysis of the requirements for trust management systems, the external challenges of their implementation on the basis of existing technologies, and the need to develop new approaches to the computer architecture are determined.