Solve Information Security Problems Research Articles

Information Security Protection of Internet of Energy Using Ensemble Public Key Algorithm under Big Data

This work aims to solve the specific problem in the Power Internet of Things (PIoT). PIoT is vulnerable to monitoring, tampering, forgery, and other attacks during frequent data interaction under the background of big data, leading to a severe threat to the power grid’s Information Security (ISEC). Cryptosystems can solve ISEC problems, such as confidentiality, data integrity, authentication, identity recognition, data control, and nonrepudiation. Thereupon, this work expounds on cryptography from public-key encryption and digital signature and puts forward the model of network information attack. Then, the security of the two cryptograms is certified against the two cyberattack modes. On this basis, an Identity-based Combined Encryption and Signature (IBCES) ensemble scheme is proposed by combining public-key encryption with the digital signature. Finally, the security of the proposed IBCES’s encryption and the signature schemes is verified, and the results prove their feasibility. The results show that the proposed IBCEs are effective and feasible, fully meeting the information confidentiality requirements. Additionally, smart grid against Information Security (ISEC) algorithms must comprehensively consider network resources and computing power. This work creatively combines the two cryptosystems. The proposal breaks the traditional key segmentation principle by applying the same key to different cryptosystems and ensures the independent security of the two cryptosystems. The conclusion provides technical support for future research on cryptography.

Robust Steganography Technique for Embedding Secret Images

Steganography is a technique used to disguise the existence of a secret communication. It is used in many fields to solve information security problems. Steganography is a technique to embed secret data in a carrier image and obtain a new image that can't actually be distinguished from the original image. This paper proposes steganography method based on least significant bit (LSB) replacement and integer wavelet transform IWT through lifting scheme to achieve high quality of stego image. we will do some pre-processing on the secret image before embedding process. IWT transforms the secret image from spatial domain to a frequency domain and will be divided it into a group of sub-bands, some of which we will use for their utmost importance and ignore some of them.
 We have embedded the secret image in a sequential LSB method and in a randomly LSB method and also by the method LSB matching. But after applying our proposed method to the secret image and then embedded it in each of the three above-mentioned methods, it was found that it had a higher degree of imperceptibly and obtained a higher rate of PSNR and the possibility of recovering the secret image without errors. By using the randomly and LSBM methods gives a higher security and resistance to extraction by attackers.

SIMULATION OF INFORMATION SECURITY RISKS OF AVAILABILITY OF PROJECT DOCUMENTS BASED ON FUZZY LOGIC

The widespread use of computer technology, its rapid development and use in almost all areas of human activity requires constant updating of information security issues. The activities of many enterprises in the field of IT, construction, and other areas are of a project nature and therefore further research on information security management of projects is relevant. Appearance of changes and the current state of the project results at certain points of time describe the documents that accompany it. In this paper, the information structure of the project is considered as a set of specific documents. During the life cycle of each project document, which includes the creation, transfer, preservation and transformation, there are generally threats to its confidentiality, integrity, accessibility and authenticity. This paper develops a method for assessing the risks of violation of the availability of project documents in solving information security problems. A formal description of many project documents in the form of a generalized hierarchical structure is presented, the connection of documents with the operations performed on them and information systems used during these operations is formalized. Given the incompleteness and dimension of the data, the based on fuzzy logic model was developed to assess the risk of document accessibility. Approaches to the assessment of the damage from the violation of the availability of the project document and the method of calculating the overall assessment of the risk of violation of the documents availability are proposed. The results presented in this paper can be used in decision-making processes regarding information security of projects in organizations that have project activities. The approaches proposed in this paper can serve as a basis for the creation of specialized information technologies to automate the calculation of project risk assessments.

OVERVIEW OF BEHAVIORAL ANALYTICS SYSTEMS FOR INFORMATION PROTECTION

Methods of behavioral analysis came into business and management practice from psychology, and in recent years have found application in the protection of information infrastructure. Behavioral analysis technologies have been developed and implemented in the form of information security software abroad; now they are all actively used by Russian companies to detect and respond to information security threats. User and Software Entity Behavior Analysis (UEBA) automatically detects suspicious user activity or other events in the protected information infrastructure that indicate the risk of a threat being implemented in order to promptly suppress such threats. An analytical review of specific implementations of UEBA technology for solving information security problems has been performed.

UNIVERSITY INFORMATION SECURITY AUDIT

The paper presents the results of a search for information security vulnerabilities as a result of penetration testing carried out in the corporate networks of some higher education institut. Subject of study. The subject of the research is the information resources of various education organizations. Method. Methodology and requirements for conducting audits in accordance with the developed algorithm, as well as ISO27000, ISO017799, ISO15408 standards. Main results. Report on the specific vulnerabilities found typical for universities, as well as recommendations for their elimination. Practical significance. The results of the work can be used for modeling and assessing the security of networks and information systems of universities to solve information security problems.

Combined architecture of an intelligent agent using models

The article considers the problem of building a multi-agent system for solving information security problems of automated process control systems. The architecture of an intelligent agent is proposed and studied, the features of which are the presence of a set of models used both for assessing the security of a certain node of the security object – an automated system, and for making decisions aimed at increasing the level of security. The results obtained in the course of research improve both the scientific and methodological apparatus for integrating methods of multi-agent technologies, and expand the areas of its practical application.

Application of artificial intelligence methods in solving information security problems: effectiveness and relevance of research results of Russian scientists

The purpose of this study is to evaluate the effectiveness of research results of Russian scientists and specialists in 2013–2019 in the field of artificial intelligence methods in solving information security problems. The analysis was carried out on the basis of RSCI databases (Russian science citation index), taking into account a number of scientometric indicators: the publication activity of researchers – the annual number of their publications based on research results, as well as the citation of these publications and the demand for the results of work.The author identify the dynamics of the formation of indicators of publication activity: there is a continuous increase in the number of publications in this field of knowledge throughout the analyzed period up to 2019 inclusive. At the same time, the growth in their number in 2019 exceeded the figures of 2013 by more than six times. This fact indicates the explosive growing interest of Russian researchers in the analyzed area of knowledge (even in the 2014 crisis). It is noted that the citation index, despite its minimum value in 2015, reaches its maximum in 2017, exceeded the value in 2013 more than twofold.The most popular research results are highlighted in 2017. The minimum demand was observed in 2 015 (this indicator may have been affected by the 2014 crisis). At the same time, the maximum of 2017 was 20% higher than the value of 2013 and more than twice the minimum value of demand for 2015. Small indicators of demand for research results in 2019 are obviously due to the same reason as for low citation indicators this year: the slow "response" of the scientific community to the current year's publications.The directions of research in the field of information security, the results of which were distinguished by their high demand, were determined.The article provides illustrations reflecting the results of the study.

АНАЛІЗ СУЧАСНИХ ЗАГРОЗ ІНФОРМАЦІЙНІЙ БЕЗПЕЦІ ДЕРЖАВИ

In today's world it is difficult to imagine a person who would be deprived of access to information resources, because informatization has penetrated into all spheres of public life, is one of the factors of effective socio-economic, cultural and spiritual development of everyone in the future. Along with development, the information sphere also has a threat, which is a key element in the hybrid war against Ukraine, the real threat of which is not only inciting citizens, but also creating real threats to national security throughout the country. The next decades for all countries of the world will be conditioned by specific tests and development of information and communication technologies. Each country has its own laws, customs, traditions, norms of behavior and ideological values. Therefore, one of the main tasks among people, organizations and throughout the country is the protection of national security and protection of the information space is the basis for ensuring information security. Faster formation of an informatized society, its spread and rooting becomes especially important in solving information security problems. Unlike other spheres of life, information does not exist for the purpose of potential earnings, as the sphere needs significant investments to protect institutions from losses associated with the leakage of information resources. Given all the factors - threats to information security are quite common, due to the fact that criminals find vulnerabilities that can damage information resources. Citizens' mobility is daily, but not all users care about the protection of personal data, their safety and inviolability. Scientists from around the world have studied existing threats, but not everyone has been able to make a clear division of threats and their prevention, which is why the chosen research topic is relevant and needs detailed study and practical solutions. The development and implementation of practical measures to combat information security threats is possible through the constant interaction of all subjects of information interaction with public authorities, as discussed in the article. The purpose of the article is to analyze the current threats to information security of the state in the context of ensuring the national security of Ukraine.

Визуальная аналитика для информационной безопасности: оценка эффективности и анализ методов визуализации

The purpose of the article: to identify and systematize information security problems that are solved using visual analytics methods, applied data visualization models and methods for assessing the effectiveness of visualization models. Research method: a systematic analysis of the application of visual analytics methods for solving information security problems. Analysis of relevant work in the field of information security and data visualization, as well as methods for assessing visualization. The objects of research are: solving information security problems through visual analysis and methods for assessing the effectiveness of visualization models. The result obtained: an interactive map of visualization models and their areas of application is presented, which will allow researchers and developers to choose the visualization models that are most appropriate for specific applied information security problems. A classification of methods for assessing visualization is presented. The scope of the proposed approach is the creation of visualization models that can be used to increase the efficiency of operator interaction with information security applications. The proposed article will be useful both for students studying in the direction of training “Information Security”, and for specialists who develop information security systems.

Визуальная аналитика для информационной безопасности: области применения, задачи и модели визуализации

The purpose of the article: to identify and systematize the areas and problems of information security that are solved using visual analytics methods, as well as analysis of the applied data visualization models and their properties that affect the perception of data by the operator. Research method: a systematic analysis of the application of visual analytics methods for solving information security problems. Analysis of relevant papers in the field of information security and data visualization. The objects of research are: theoretical and practical solutions to information security problems through visual analysis. Visual analytics in the article is considered from several sides: from the point of view of the areas of application of visual analysis methods in information security, from the point of view of the tasks solved by the security analyst, from the point of view of the visualization models used and the data structures used, as well as from the point of view of the properties of data visualization models. The result: classification of visualization models is proposed, which differs from analogs in that it is based on the analysis of areas and tasks of information security and comparison of visualization models to them. The scope of the proposed approach is the creation of visualization models that can be used to increase the efficiency of operator interaction with information security applications. The proposed article will be useful both for specialists who develop information security systems and for students studying in the direction of training “Information Security”.

Assessment of confidentiality risks of information security of projects based on fuzzy logic

One of the main components of enterprise information security management is its risk assessment. This is especially true for critical infrastructure enterprises and their business partners, including construction companies. However, measuring cybersecurity, even with the current skyrocketing costs of cybersecurity, remains an underdeveloped topic, so developing and agreeing on reliable ways to measure its risks and effectiveness is relevant for research. In many industries, the activities of enterprises are of a design nature and information security management must also be implemented within the framework of the project, which requires further research in this area. Given the incompleteness and vagueness of information about the components of information security, fuzzy logic is actively used in risk assessment models. The article proposes an approach for assessing the risks of violating the confidentiality of documents when solving information security problems of projects. The set of project documents is formalized in the form of a generalized hierarchical structure and the relationship of documents with operations and information systems that are used during operations with documents is determined. Based on the formalized structure of documents, a model has been developed for assessing the risk of violating the confidentiality of a document based on fuzzy logic, which allows one to take into account the incompleteness and blurring of data. The results of the work can be used when making decisions on information security measures for projects at enterprises with project activities, including at critical infrastructure enterprises, IT enterprises, construction companies and others. The proposed approaches can serve as a basis for the development of information technologies to automate the assessment of information security risks of projects.

Модель интеллектуальной системы управления информационной безопасностью для цепей поставок на основе пространственных концепций акторно-сетевой теории

Aim. The use of modern information technologies makes it possible to achieve a qualitatively new level of control in supply chains. In these conditions, ensuring information security is the most important task. The article shows the possibilities of applying the spatial concepts of the actor-network theory in the interests of forming a relevant intelligent information security management system for supply chains. Materials and methods. The article discusses a new approach based on the provisions of the actor-network theory, which makes it possible to form the structure of an intelligent information security control system for supply chains, consisting of three main functional blocks: technical, psychological and administrative. The incoming information security threats and the relevant system responses generated through the interaction of the system blocks were considered as enacting the three Law’s spaces: the space of regions, the space of networks and the space of fl uids. Results. It is shown that the stability of this system in the space of networks is a necessary condition for its successful functioning in the space of regions, and its resilience in the space of fl uids gained through the dynamic knowledge formation helps overcome the adverse effects of the fl uidity. The problems of the intentional / unintentional nature of information security threats, as well as the reactivity / proactivity of the corresponding responses of the intelligent information security management system for supply chains are investigated. Conclusions. The proposed approach showed the possibility of using such an interdisciplinary tool in the fi eld of information security as the concepts of the actor-network theory. The intelligent information security control system built on its basis ensures that almost all the features of solving information security problems in supply chains are taken into account.

Modeling and Analysis of Information Security Threats in Wireless Sensor Networks

The paper presents results of analysis of information security threats in wireless sensor networks and means for their modeling. Research subject. The subject of the research is means for modeling and analyzing information security threats to wireless sensor networks. Method. The work uses methods of mathematical modeling and system analysis. Core results. The analysis of actual threats to information security of wireless sensor networks is performed. A comparative analysis of means for simulation modeling of wireless sensor networks and attacking influences is performed. Two models of presentation of wireless sensor networks are proposed for solving the problems of threat modeling. Practical significance. The results of the work can be used for modeling and evaluation of security of complex wireless sensor networks with a large number of nodes in conditions of organizational complexity of using full-featured instances of wireless sensor networks to solve information security problems.

Deep Learning Based Multi-Channel Intelligent Attack Detection for Data Security

Deep learning methods, e.g., convolutional neural networks (CNNs) and Recurrent Neural Networks (RNNs), have achieved great success in image processing and natural language processing especially in high level vision applications such as recognition and understanding. However, it is rarely used to solve information security problems such as attack detection studied in this paper. Here, we move forward a step and propose a novel multi-channel intelligent attack detection method based on long short term memory recurrent neural networks (LSTM-RNNs). To achieve high detection rate, data preprocessing, feature abstraction, and multi-channel training and detection are seamlessly integrated into an end-to-end detection framework. Data preprocessing provides high-quality data for subsequent processing, then different types of features are extracted from the processed data. Multi-channel processing is used to generate classifiers by training neural networks with different types of features, which preserve attack features of input vectors and classify the attack from normal data. With the results of the classifier's attack detection, we introduce a voting algorithm to decide whether the input data is an attack or not. Experimental results validate that the proposed attack detection method greatly outperforms several attack detection methods that use feature detection and Bayesian or SVM classifiers.

USING A CRYPTO-STEGANOGRAPHIC APPROACH TO SOLVE INFORMATION SECURITY PROBLEMS

The paper substantiates the feasibility of integrating as one software solution cryptographic and steganographic ap-proaches to information security and developed two cryptoseganosystems to protect sensitive information and their trans-mission through open communication channels. The principle of implementation of RC4 stream cipher and block AES is described; the essence of the steganographic LSB method, the application of which involves the concealment of information in digital objects, socalled containers. In this paper, the RGB images and WAVE audio files are used as steganocontainers. In the case of a container image, the steganographic protection of the cryptographically enclosed RC4 information algorithm is accomplished by embedding it in the least significant bits of pseudo-randomly selected pixels. The choice of an RGB bitmap is because this type of image consists of a set of pixels of red, green and blue components, which in turn creates enough redundancy and the ability to embed large amounts of information. The embedding of an AES encrypted text message into an audio file is done by block hiding. The simplicity of the WAVE file structure makes it easy to implement any steganographic methods of hiding data without much effort. Software complexes have been developed based on crypto-steganographic systems. The conclusions about the prospects of the crypto-steganographic approach and the feasibility of further research in this direction have been made. The integration of cryptography and steganography makes it possible to get rid of the vulnerabilities of the known methods of information protection and to develop new methods of solving information security problems from the standpoint of computational complexity and resistance to hacking.

АНАЛІЗ СТАНУ КІБЕРБЕЗПЕКИ В ПРОВІДНИХ КРАЇНАХ СВІТУ

The article is devoted to the study of trends in cybercrime, which is a threat to the country's information security. The place and role of cybersecurity in the system of national security are determined. The state of the system of protection against cyber attacks in the developed countries of the world, such as France, Japan, China, South Korea and the United Kingdom, was analyzed. The main shortcomings and perspectives of protection of cyberspace are revealed. The use of modern information technologies in state structures, as well as in society in general, proposes solving information security problems as one of the main ones. The economy, logistics and security of the country increasingly depend on the technical infrastructure and its security. To improve the effectiveness of the fight against cybercrime, developed countries have long started the appropriate work needed to create their own cyber security strategy. Incidents in the field of cybersecurity affect the lives of consumers information and many other services and cyber attacks aimed at various objects of infrastructure of electronic communications systems or technological processes management. Modern world trends in the development of cybercrime and the strengthening of cyber attacks indicate an increase in the value of combating it for the further development of society, which in turn predetermines the assignment of certain groups of social relations of the cybersphere to the competence of legal regulation. The current situation with cybercrime requires constant improvement of methods the fight against cybercrime, the development of information systems and methods aimed at ensuring the cyber security of the country. Necessary tasks are the development of a national strategy on cybersecurity, which will include tactical and strategic priorities and tasks in this area for state bodies. So, the issue of cyberspace security, the fight against cybercrime is relevant both at the international level and at the level of the individual country, and therefore needs further consideration.

Improvement of the quadratic sieve method on the basis of the extended factor base and using available quantity of B – smooth numbers

In information and telecommunication systems, RSA algorithms are often used to solve information security problems. At the core of the cryptostability of the most popular today asymmetric cryptographic algorithm RSA is the complexity of the factorization of large integers. Quadratic sieve method is the best for factorization of integers under 110 decimal digits or so. The most time consuming part of the algorithm of a quadratic sieve is the sieving process. The size of the factor base is one of the key parameters that determine the effectiveness of the sieving algorithm. Too large factor base requires the search for a large number of B–smooth numbers, which increases the total execution time of the algorithm. When the size is less than necessary, it will not be possible to find a sufficient number of B–smooth numbers. In this paper, the method for determining and applying a sufficient size of B–smooth numbers with doubling the factor base size in comparison with the basic algorithm of a quadratic sieve is proposed. With the expansion of the factor base, the number of N numbers increases, which can be decomposed into factors by the quadratic sieve method. It is also noted that its increase leads to an increase in computational complexity, since it is advisable to find a greater number of B–smooth numbers. However, when conducting numerical experiments, where the size of the factor base increased twice, it turned out that using the proposed algorithm, the time necessary to find a sufficient number of B-smooth numbers, on the contrary, decreased.

Information literacy and digital inequality: child protection in the modern information space

This article is devoted to researching and solving information security problems and ways to safeguard the child from the negative impacts of information. The proposals are given for the improvement of information literacy and bridging the digital divide in Ukraine.

On some artificial intelligence methods and technologies for cloud-computing protection

An overview of data-mining technologies used in applied information security systems is presented. The focus is made on a new and actively developing trend, cloud-computing media (including the socalled fog computing). The status and promising opportunities of using artificial intelligence models and methods to solve information security problems are also discussed.

Modeling of Individual and Group Behavior in P-adic Coordinate Systems in Order to Solve Information Security Problems

In this paper, we propose a formal model of individual and group behavior based on p-adic coordinate system. The model developed allows description and prediction of behavioral reactions of the personnel of critically important objects under conditions of external destructive informational impacts.