Annotation:

Methodological approach to evaluating the effectiveness of information protection in the information and control subsystem of a complex dynamic system is offered. As a performance indicator it is proposed to use the degree of opportunity implementation driven dynamic system in view of prevention of damage, expressed in the change life cycle management from destructive influences that violates the completeness, integrity, precision, reliability, accessibility and efficiency of processing required for managerial decision-making information.

Keywords:

Management of a Complex Dynamic System, Information and Control Subsystem, Information Protection, Efficiency.

Pages 9-16

Annotation:

An approach to detecting computer attacks is proposed, which consists in identifying abnormal network traffic using Tsetlin machine. Experimental studies conducted for various types of network attacks have demonstrated the effectiveness of the proposed approach.

Keywords:

Network Attacks, Network Traffic Classification, Tsetlin Machine, Tsetlin Automate.

Pages 17-23

Annotation:

This paper provides an overview of network attacks and vulnerabilities of TCP / IP model. The purpose of this study is to identify the most common types of vulnerabilities for network protocols. So, for example, the ability to change the values of the IP address field to the victim's address is not vulnerability that is not accepted by the protocol specification, but the misuse of flags fragmentation – is a vulnerability.

Keywords:

Network Attacks, TCP/IP Model, Vulnerability Search, Network Security.

Pages 24-32

Annotation:

Two methods for cipher modification, which can be used to pre-embed messages are proposed. These modifications preserve the cryptographic resistance of the embedded messages, but violate the pseudo-randomness of cryptograms, which protects stegosystem from detection based on the use of NIST tests. The experimental results on the stegosystem detection efficiency after cipher modification and depending on the embedding rate are also presented.

Keywords:

Block Cipher, Stegosystem, Pseudo Randomness, NIST Tests, Deflate Compression Algorithm, Arithmetic Coding.

Pages 33-43

Annotation:

Important task of designing a steganographic system is the selection of a key. The main requirement for the key is to ensure consistently high sensitivity of the system to the key variation and minimum change in this sensitivity during the formation of the container. The paper provides an analysis of the invariant two-component steganographic system in terms of sensitivity to variations in various parameters and values of embedded signals.

Keywords:

Two-Component Steganographic System, Invariance to Masking Signal, Steganographic Container, Key Coefficient.

Pages 44-49

Annotation:

A ring signature-based group authentication mechanism with linking-based revocation is proposed. The possibility of using this approach in Smart Grid as an example of industrial Internet of Things systems is discussed.

Keywords:

Authentication, Industrial Internet of Things, Ring Signature, Linking-Based Revocation, Lattices.

Pages 50-57

Annotation:

Task relevance of protecting critical facilities is determined. The technological process of designing physical protection systems for critical facilities is considered. For each stage of the design, solvable problems and problems are considered. Based on the analysis, possible directions for solving these problems are proposed.

Keywords:

Design of Physical Protection Systems, Critically Important Object.

Pages 58-67

Annotation:

Types of electromagnetic interference affecting the communication channels of an unmanned vessel are described. The interference is classified according to their source, spectral and temporal characteristics. The approach to evaluating the noise immunity characteristics of transponders for unmanned vessels is described.

Keywords:

Global Navigation Satellite System, Unmanned Navigation, Automated Vessel Traff Control Systems.

Pages 68-72

Annotation:

Сyber-physical system is considered as an object of information security management. The corresponding threat model from the point of view of the automatic control theory is presented. The characteristics of security monitoring are proposed.

Keywords:

Information Security, Cyber-Physical Systems, CFS, Threat Model, Monitoring, Security Management.

Pages 73-88

Annotation:

Use of modern artificial neural networks to detect cyber threats in the networks of the industrial Internet of Things is proposed. The modeling of the industrial system under the influence of cyberattacks has been carried out. As a result of the experiments, the optimal configuration parameters of a recurrent LSTM network with a confirmed number of layers and states were determined.

Keywords:

Artificial Intelligence, Cyber Threats, Neural Networks, Industrial Systems, IIoT, LSTM.

Pages 89-95

Annotation:

Problem of detecting the abnormal functioning of «Industry 4.0» devices based on behavioral patterns using acoustic channel information is explored. The possibility of using external systems for monitoring the status of objects under the influence of threats to information security breaches is considered. An experiment was conducted aimed at analyzing the status of «Industry 4.0» devices in normal and abnormal operating modes.

Keywords:

Behavioral Patterns, Acoustic Channel, Industry 4.0 Devices, Information Security Monitoring Systems, Signal Analysis.

Pages 96-102

Annotation:

Analysis of feature selection methods of network traffic is provided. A prototype of an attack detection system with a module for network traffic feature selection is developed. The method of network traffic feature selection is proposed. The accuracy and time of detecting network attacks by proposed prototype was assessed.

Keywords:

Intrusion Detection System, Networks Attacks Detection, Feature Selection of Network Traffic, Genetic Algorithm.

Pages 103-110

Annotation:

The paper reviews the main trends of modern cars’ infrastructure. It discusses modern attacks, which are possible now due to implementation of V2X and IVI technologies, and the main methods for their detection and prevention are analyzed. Considers their possibility and limitation of addressing the described problem. A set of requirements for the new information security method, suited for new-generation connected cars, is proposed.

Keywords:

Vehicle Cyber Security, Mobility-as-a-Service, Automotive, Connected Cars, In-Vehicle Infotainment, Controller Area Network, Intrusion Detection System, Fingerprinting ECU.

Pages 111-119

Annotation:

In the paper the language of data presentation in the task of remote localization of failures and errors in a distributed information and computing system is built. The main idea is to reflect data of sensors on the oriented graph generated by the influence of some components of the distributed information and computing system on others. The main results of the paper are the conditions of unambiguous localization of implicit failures and errors based on information received from sensors, which revealed anomalies of some processes.

Keywords:

localization of failures and errors, metadata, remote system administration.

Pages 9-15

Annotation:

The paper considers the issues of automating the process of analyzing the registry of personal information operators to monitor measures taken to protect and increase the level of security information. The methodology for solving the problem of automating information retrieval and field analysis of the register of personal information operators is determined. A block diagram of an information-analytical system for monitoring the implementation of legal requirements in the field of personal data has been developed.

Keywords:

personal information, register of personal information operators, information-analytical system

Pages 16-23

Annotation:

Purpose of article: Determination of the possibility of using artificial neural networks to assess the probability of implementing information security threats and the software creation. Method: probability of threat realization analysis. Result: the possibility of using artificial neural networks to assess the probability of information security threats is shown. An application has been developed to assess the probability of threat implementation

Keywords:

information security threats, probability threats, neural network

Pages 24-31

Annotation:

This article examines the issues of building a model of an information system, suitable for further use in the problem of automating penetration testing using methods of reinforcement machine learning. The article defines the basic requirements for such a model, a prototype of the architecture of such a system is proposed.

Keywords:

machine learning, reinforcement learning, penetration testing, information system modeling.

Pages 32-39

Annotation:

The present article dwells upon an approach of covert channel detection (C2-channels) on the basis of DNS protocol based on finding specific traffic signatures - beacon-signals which are, in turn, suggestive of malicious software operation (MS). A real DNS-traffic samples analysis followed by approximation with known statistical distribution is conducted. Timing specifications of beacon-signals with different frequency of their sending are simulated and optimal value (upon Neyman–Pearson's criterion) of limit of detectability, that keep to a minimum corresponding false alarm probability, are determinated. The researches will make it possible to improve the presetting process of the Intrusion Detection Systems (IDS) applying statistical methods of network traffic performance analysis.

Keywords:

covert channels, DNS, network traffic, the Neyman-Pearson criterion.

Pages 40-49

Annotation:

The paper presents the developed method for a network traffic analyzing based on the global alignment algorithm of Needleman-Wunsch. A prototype of intrusion detection system for the Internet of Things has been designed. The results of our experimental study have shown a promise of the proposed approach.

Keywords:

Bioinformatics, Global Alignment, Internet of Things, Intrusion Detection System, Needleman-Wunsch Algorithm, Network Attacks, IoT.

Pages 50-58

Annotation:

This article suggests improving the method of a two-stage system for detecting DDOS attacks in large-scale networks using a mechanism for adapting to constant changes in network load and the level of heterogeneity in large-scale networks. The following parameters are highlighted, which are corrected by the traffic adaptation block: time intervals of network data analysis, the ratio of intersected time Windows, the extracted network parameters themselves, and the level of wavelet transform decomposition.

Keywords:

backbone networks, attack detection, DDoS attack, wavelet analysis, adaptation mechanism.

Pages 59-64

Annotation:

This paper considers the NB-Fi protocol that provides secure communication channel between IoT devices and controlling servers. The version of the protocol described in the preliminary national standard of Russian Federation does not provide confidentiality and integrity of transmitted data in the considered adversary model. We propose a modification of the protocol that provides these properties.

Keywords:

Internet of Things, cryptography, transport protocol.

Pages 65-73

Annotation:

Two attacks on the random gamming code are given with the calculation of the complexity and reliability.

Keywords:

random gamming code, the complexity of the cryptographic method, the reliability of the cryptographic method.

Pages 74-81

Annotation:

Currently, the problem of providing a qualitative analysis of information messages, evaluating publications on the Internet is becoming more relevant than ever. A large number of publications on various events in the world appear on the Internet; the nature of these publications may affect the political and social atmosphere of society. As part of ensuring the safety of the population of the Russian Federation and fulfilling the requirements of regulatory documents, a methodology for the mediaametric analysis of information using machine learning algorithms is proposed. Based on the results of a study of work in this area, the main approaches to media-metric analysis of information are currently identified. The paper proposes an approach for determining the tonality of publications using the Word2Vec model and machine learning algorithms for natural language processing. Based on the proposed approach, a technique is formulated in the paper that takes into account the technical features of the publication source and existing methods of media-metric analysis of information. Using real informational publications, the results of the steps of the method of mediaametric analysis and determining the tonality of messages are presented.

Keywords:

media-metric analysis of publications, word cloud, tonality of information messages, data mining, frequency analysis of words, machine learning libraries for Python.

Pages 82-91

Annotation:

This paper examines a timing attack using the example of IoT devices based on the ATmega32 AVR microcontroller. The principle of a timing attack aimed at identifying authentication data is demonstrated.

Keywords:

Internet of things, embedded systems, microcontrollers, microcontroller architecture, security hardware.

Pages 92-96

Annotation:

The article deals with the problem of identifying the state of information security by external behavioral features of transport system objects. In this article, as a source of information about the state, side signals from the components of objects that occur during the operation of devices are considered.

Keywords:

information security, remote autonomous objects of transport systems, information security system, counteraction to information attacks.

Pages 97-102

Annotation:

The work is devoted to the automated search for vulnerabilities in IoT devices based on the ARM architecture. The problems of using symbolic execution to detect vulnerabilities are investigated. To improve the efficiency of searching for vulnerabilities, an approach based on concolic execution with taint analysis is proposed, which eliminates the problems that arise when using classical symbolic execution.

Keywords:

symbolic execution, ARM, taint analysis, The Internet of Things (IoT), cyber-physical system, fuzzing

Pages 103-113

Annotation:

In this paper, continuing the topic of analyzing approaches to ensuring information security of cyber-physical systems (CPS), a detailed review is given with a deep comparison of existing methods for solving problems that appear during the analysis of mathematical models of CPS in the field of the Industrial Internet of Things, followed by summing up and highlighting additional recommendations for use by the authors. Alternative approaches to the construction of models and solutions in this area are proposed. The purpose of this study is to systematize, generalize, analyze and supplement the existing experience in the field of describing and solving problems of information security of cyber-physical systems; to draw up a general information basis for the subsequent implementation of our own approach to building a model and solving problems in the field of the industrial Internet of things.

Keywords:

industrial Internet of things, IIoT, information security models, cyberphysical systems.

Pages 114-123

Annotation:

In the paper, a survey of modern Industrial Internet of Things definitions is proposed. Based on the research the most comprehensive definition is chosed. After that the phenomenon of cyber-resilience is researched in the context of cyber-physical industrial systems. As a result, cybersecurity requirements to the Industrial Internet of Things are proposed. An accomplishment of these requirements will provide cyber-resilience of modern digital manufacturing systems.

Keywords:

digital manufacturing, cybersecurity, industry 4.0, industrial internet of things, critical information infrastructure.

Pages 123-129

Annotation:

The paper is devoted to the presentation of the method for solving the problem of localization of the initial cause (root cause) of anomaly in a distributed information and computer system. The main idea of the proposed approach is an approximate estimate of the set of elements of distributed information and computer system containing the cause of the anomaly. To describe the original cause of the anomaly, two algorithms are used: an algorithm that generates a parameter that shows the anomaly and a displaying algorithm. About the first algorithm there is a fragmentary information and reliable information that there is an anomalous transformation in it. The second algorithm is simple and allows you to identify the existence of an anomaly. The anomaly is detected by abnormal values of the parameter whose values these algorithms calculate. Such parameters are called integral. A number of properties of integral parameters and relations of these algorithms have been investigated. Methods for finding the region of the root cause of the anomaly using chains of integral parameters are constructed.

Keywords:

Information Security, Root Cause Anomaly Localization, Causal Relationships

Pages 9-16

Annotation:

The classification and comparative analysis of proactive and reactive methods of protection against logical inference in relational DBMS are made. The description of the most used algorithms, their advantages and disadvantages is given. The assessment of information disclosure risks is given.

Keywords:

Information Security, Logic Inference, Proactive Methods, Reactive Methods, Perturbed Methods

Pages 17-25

Annotation:

There is considered usage of generation synthetic data methods for increasing the dataset and subsequent detection of the accuracy of network attacks on an IoT devices using machine learning methods. The methods of "augmentation" and "generative adversarial network" are used to increase the set of initial data. The IOT Network Intrusion Dataset is used as the initial dataset, which includes network traffic during various attacks (DoS, MiTM, Scan), including attacks from one of the most widespread botnets in the context of the Internet of Things (Mirai botnet).

Keywords:

Generative Adversarial Network, Machine Learning, Internet of Things, Cyber-Physical Systems, Intrusion Detection System

Pages 26-34

Annotation:

The paper presents a model that allows, based on the use of simulation models, probability theory and optimization, as well as efficiency theory, operations research and game theory, to assess the security of computer networks from various types of computer attacks. The presented model allows us to obtain quantitative estimates of security, taking into account various goals and strategies for using computer attacks, network topology, and the qualitative and quantitative composition of elements included in the specified network. The approach used in modeling allows to significantly reducing the computational needs of software tools that implement the elements of the model, without losing the reliability of the simulation results.

Keywords:

Computer Attacks, Computer Networks

Pages 35-46

Annotation:

Technologies for increasing the level of cryptographic protection of information in data processing, storage and transmission systems are considered. The main encryption standards and algorithms are compared. The possibilities of their application in microcontrollers and microprocessor systems on a chip are analyzed. Schemes of devices for implementing encryption algorithms are given

Keywords:

Cryptographic Protection, Information, Data, Algorithm, Controller, Standard, System on a Chip, Cryptomodule

Pages 47-52

Annotation:

The paper presents an approach to determining the state of information security based on an analysis of the secondary electromagnetic radiation of electronic components. A schematic diagram of the digitization and processing of the frequency and amplitude of signals is presented. The results of the experiment on the removal of the amplitude-frequency characteristics of the secondary EMP are shown. Frequency distribution of signals is given.

Keywords:

Information Security, Spurious Emission, Amplitude-Frequency Characteristics

Pages 53-57

Annotation:

The paper develops a method for stable marking of digital audio signals, focused on the transmission of marked audio signals in an airborne audio channel. Particular attention is paid to the development of a method for detecting the presence of a marker in a digital audio signal by an authorized recipient. An algorithm for detecting a marker in a digital audio signal is proposed. The article contains the results of field experiments to assess the noise immunity of the transmission of marked audio signals through an air audio channel.

Keywords:

Audio Signal, Steganography, Audio Signal Marking, Airborne Audio Channel, Communication Noiseproof

Pages 58-71

Annotation:

The urgent task of organizing environmental monitoring of the seaport was considered. The classification of information sources in the environmental monitoring system of the port water area is given. It is shown that it is advisable to use the vessel traffic control radars available in the port, which is justified by economic factors and the possibility of full coverage of the port water area with a radio signal. The energy characteristics of the sea surface sounding by ground radars of the ship traffic control system are considered. The ratios of assessing the quantitative characteristics of the use of radars of the ship traffic control system for detecting inhomogeneities of sea waves caused by oil and other pollution of the water surface are obtained. The graphical dependences of the signal-to-noise ratio are presented, demonstrating the possibilities of using radars of the vessel traffic control system in port waters for environmental monitoring of the sea surface.

Keywords:

Port Water Area, Environmental Monitoring, Radar Station, Sea Surface Anomaly Detection

Pages 72-78

Annotation:

The paper contains the efficiency analysis results of development different approaches of functional and vulnerability and undeclared software capabilities detection effectiveness in software (trustlets) for trusted execution environment based on TrustZone technology. The work presents also trusted operational systems for computers based on ARM CPU comparative analysis. In addition, the authors describe the classification of vulnerabilities and features of trusted secured operational systems based on ARM CPU. The possibilities of using modern source texts static analysis means for the development of trustlets binary files are considered. The comparative description of truslet`s binary code format is presented. Based on the well-known format of trustlets, an analysis tool based on Python tools, the IDA API and the IDA Pro disassembler is developed. The main ability of developed mean is to study the statistical distribution of instructions in trustlets and determine the probability of vulnerabilities and undeclared software capabilities.

Keywords:

Vulnerabilities, Undeclared Capabilities, Trusted Execution Environment, TrustZone, ARM, Trustlet

Pages 79-87

Annotation:

The actual problem of choosing information protection methods for systems such as a smart home is considered. It is shown that the low performance of smart devices does not allow using protection methods that are successfully used in infrastructure communication networks. It is proposed to choose effective ways to protect information in a smart home system based on the characteristics of consumed resources: energy, time, computing power. It is shown the description of the layout that simulates the functions of the smart home system, on which the indicators of consumed resources were measured. The measurement results allow a reasonable approach to the choice of encryption algorithms and ensuring data

Keywords:

Smart Home, Protection of Transmitted Data, Data Package, Consumed Resources, Layout, Experiment, Measurement

Pages 86-94

Annotation:

The paper deals with the problem of data-driven modeling industrial cyber-physical systems. The author considers the features of industrial cyber-physical systems from the point of view of their modeling in security monitoring systems. An analysis of modeling methods, including data-driven modeling, is provided. An approach to modeling industrial cyber-physical systems for solving the problem of information security monitoring based on associated graphs is proposed.

Keywords:

Information Security, Cybersecurity, Cyber-Physical Systems, CPS, Industrial Cyber-Physical Systems, Security Object Modeling, Data-Diven Modeling, Graph Model, Associated Graphs

Pages 95-106