Annotation:

This article contains a definition of formal security model for virtual machine hypervisors in cloud systems based on graph theory. This formal model defines security properties and data access operations hierarchy executing inside virtual machines and hypervisors in the cloud. Purposed model allows formalizing major security issues of cloud systems, to define tasks for hypervisor security with solution methods and to define security condition for the virtual machine hypervisor.

Keywords:

Annotation:

Constraints and triggers verification in databases is an actual area of scientific researches and practical activities. This article considers a method of formal verification which is based on integrity demands metamodel and allows to check a functional correctness of constraints and triggers in relational databases.

Keywords:

Annotation:

This paper proposes new generalized model of software reliability assessment of modern training simulator systems based on probability-possibility submission.

Keywords:

Annotation:

The paper discusses method of control and functional efficiency measuring proposed for software-defined networks (SDN). Methods are based on multiobjective optimization done on the set of quality of service (QoS) parameters of network traffic streams. Methods provide traffic balancing, performance, availability and fault-tolerance increasing for OpenFlow-switches and routers being used in SDN.

Keywords:

Annotation:

The paper proposes method of providing high availability in software-defined networks (SDN). Method is based on calculation of routing rules priority and allows reducing the routing time lag up to 35%.

Keywords:

Annotation:

The paper proposes a model for designing secure embedded devices on the basis of combinations of particular security components. A notion of configuration is introduced. It represents a set of security components, which provide the device with some security functional. Through an analysis of components’ properties a set of admissible configurations is formed and used to deduce the most effective ones on the base of set optimality criteria. Architecture of a software tool of the configuration mechanism is presented on the basis of UML diagrams. A demonstration example of embedded devices is given to highlight applicability of the model in practice.

Keywords:

Annotation:

Nowadays systems of network traffic security analysis have to evaluate characteristics of large volumes of traffic for security analysis. Proposed architecture of a system of network traffic parallel processing on multiprocessor clusters which allows to eliminate existing deficiencies of platforms for traffic processing for security analysis and to reduce redundancies for traffic processing by switching equipment and network secure systems.

Keywords:

Annotation:

An important task in the field of information security is to find bugs and vulnerabilities in operating systems, implementations of network protocols and software products. One of the most popular approaches to vulnerability scanning nowadays is fuzzing. It is popular due to high level of automatization abilities, but at the same time fuzzing usually requires a lot of time resources. Proposed network protocol fuzzing system architecture is based on implementation of multiprocessor x86-server architecture and virtualization technology. This feature allows to organize parallel fuzzing and therefore significantly reduce time amount, required for vulnerability scan. Moreover, applied methods provide high scalability of fuzzing system.

Keywords:

Annotation:

This paper presents a simulation model of computer attack for synthesizing of network traffic. The generated traffic is then used for testing and evaluation of network intrusion detection systems. The model is based on the mathematical apparatus of generalized stochastic Petri Nets with special delays, inhibitor arcs and weighted transitions.

Keywords:

Annotation:

This paper proposes an algorithm to hash the data, based on the increase of entropy in the simulation of physical processes. As a system of two-dimensional Ising model is selected. A computer experiment to detect collisions and determine the avalanche effect.

Keywords:

Annotation:

Under unsecured channel Id-based cryptography allows secured transmitting the same data to multiple users more efficiently (for large number of receivers) than classical public key cryptography. In order to form recommendations of choosing some scheme based on the requirements of the system (public or private system, how often a set of receivers is change, the level of security, etc.) different Id-based Broadcasting schemes are analyzed.

Keywords:

Annotation:

In [11] author proposed the method of virtual isomorphisms for cryptanalysis. Ciphers y = C(x, k) and Y= D(X, K) are isomorphic if there exists invertible computable in both directions map y <-> Y, x <-> X, k <-> K. Cipher is vulnerable to an attack iff isomorphic cipher is vulnerable to it. If S is a substitution and T is encryption operator, its conjugate STS-1 is cipher isomorphism. For cryptanalysis it is useful to choose S in such a way, that it has many fixed points. It is shown that j has at most 130 fixed points. Isomorphic AES (IAES) is proposed that has one non-linear operation - isomorphic image of XOR. Maximal probabilities of differentials are increased by 8.5 times; maximal bias is increased by 3 times. IAES has differentials with zero output difference of probability 1. Briefly the strength of AES against differential/linear attacks is decreased to a square root of initial strength.

Keywords:

Annotation:

The functions of filter and combining generators are presented as systems of logical functions. Polynomials over the integers, describing the operation of several steps of filtering and combining generators are constructed. The possibility of parallelizing the computation of the cryptographic functions of the blocks of filter and combining generators by using the resources of calculators, oriented on the arithmetic operations of addition and multiplication is considered.

Keywords:

Annotation:

The use of algorithms and methods for inverse design allows us to understand the principle of a series of FPGAs Virtex, evaluate the work of the target device, according to the stated specifications.

Keywords:

Annotation:

The article is devoted to the questions of electromagnetic immunity of automated identification systems (AIS) with simple signals at influence narrow-band hindrances.

Keywords:

Annotation:

On the basis of systematic approach formulates the principles and methods of building fuzzy cognitive models poorly structured and bad formalizable social engineering integrated information security systems. It was developed a method of synthesis of fuzzy control solutions together with a minimum of «cost».

Keywords:

Annotation:

The paper outlines a model checking based technique for verification of filtering rules of firewalls which is aimed to detect filtering anomalies. The paper proposes the main components of the technique – the models of the computer network, the firewall and filtering anomalies, as well as the algorithm of detection of such anomalies. The paper discusses the implementation aspects of the verification system – the architecture and the class diagram, and the results of experiments fulfilled.

Keywords:

Annotation:

In this article the questions of the distribution of powers between users in computer systems with role-based access control are investigated. The main attention is focused on adding a new member to the hierarchy of roles. For selecting one of several alternatives the method of analytic hierarchy process is used. We give a rationale for the selection criteria for the formation of a hierarchy first level.

Keywords:

Annotation:

It is shown that object-oriented HRU model of computer system is more general case of subject-object HRU model as well as of Typed Access Matrix (TAM) model. Some subject-object safety cases transferred to object-oriented HRU model.

Keywords:

Annotation:

This article describes an approach to solve the problem of identifying individuals with static or dynamic images, which uses the idea of a fractal image compression. The algorithms for processing etalon and current images are submitted. For the proposed algorithms computational complexity is approximated. In comparison to many other recognition algorithms the complexity of processing of the current image is linear in the size of the image. The disadvantages are the high complexity of the algorithm processing the etalon image and the linear dependence of the recognition speed of individual base’s size, but this algorithm can be effectively parallelized, e.g. with computing on GPU.

Keywords:

Annotation:

Paper contains a definition of formal model for cyber-attacks targeting virtualization software including hypervisors. This model allows defining a condition of hypervisor security based on low vulnerability properties. Model includes a definition of artifacts and vulnerability metric of hypervisor. Using this metric to differentiate multiple implementations of hypervisors and virtualization technics can guide to secure hypervisor architecture.

Keywords:

Annotation:

Sufficient conditions under which the periods of the sequences of maps generator IA divisible by 2n.

Keywords:

Annotation:

In this article the estimation of Mahlanobis’s distance” is observed, in conditions of dual channel receiving of binary signal. The biggest value of the probability value – correct receiving of signal – is corresponded to the biggest Mahlanobis’s distance, what is equal to the setting filter of interference in optimal state. The importance of estimation value is postulated by the size of controlling zone that is necessary before being provided the secured state of processing information, which is existed in spurious emission and is regulated by recommendations of FSTEK of Russia. Unlike to works made and published before the algorithms of estimation of value , which aren’t using the information about training, binary, referent sequence, are proposed. For dual channel receiving mode two types of algorithms are considered: moving estimates and Widrow-Hoff stochastic gradient descent.

Keywords:

Annotation:

We propose a method to protect a hardware implemented GOST cipher against side attacks on power consumption. It is based on a changing of conventional S-boxes to modified S-boxes with extension of substitution tables and with the use of random masks. We prove that such scheme is resistant against all known attacks based on the concept of DPA and HODPA.

Keywords:

Annotation:

The paper discusses model and algorithm of process scheduling for conveyor-parallel programs. Solution is based on monitoring of resource consumption and implemented in cloud framework what provides secure and highly available high-speed data processing due to hardware isolation, resource use control and optimization, and adaptive distribution of computational load.

Keywords: