A Survivable Scheme for Critical Information System

2008 ◽  
Author(s):  
Jianming Zhu ◽  
Chao Wang
Keyword(s):  
Information System ◽  
Critical Information

IRISK METHOD FOR SECURITY ESTIMATION OF THE SIMULATION POLYGON FOR THE PROTECTION OF CRITICAL INFORMATION RESOURCES

2019 ◽  
Author(s):  
Bogdan Korniyenko ◽  
Lilia Galata
Keyword(s):  
Risk Assessment ◽  
Information System ◽  
Information Security ◽  
Risk Analysis ◽  
Information Resources ◽  
Security System ◽  
Assessment System ◽  
Automated System ◽  
Information Risk ◽  
Critical Information

In this article, the research of information system protection by ana­ ly­ zing the risks for identifying threats for information security is considered. Information risk analysis is periodically conducted to identify information security threats and test the information security system. Currently, various information risk analysis techni­ ques exist and are being used, the main difference being the quantitative or qualitative risk assessment scales. On the basis of the existing methods of testing and evaluation of the vulnerabilities for the automated system, their advantages and disadvantages, for the possibility of further comparison of the spent resources and the security of the information system, the conclusion was made regarding the deter­ mi­ nation of the optimal method of testing the information security system in the context of the simulated polygon for the protection of critical information resources. A simula­ tion ground for the protection of critical information resources based on GNS3 application software has been developed and implemented. Among the considered methods of testing and risk analysis of the automated system, the optimal iRisk methodology was identified for testing the information security system on the basis of the simulated. The quantitative method Risk for security estimation is considered. Generalized iRisk risk assessment is calculated taking into account the following parameters: Vulnerabili­ ty  — vulnerability assessment, Threat — threat assessment, Control — assessment of security measures. The methodology includes a common CVSS vul­ nerability assessment system, which allows you to use constantly relevant coefficients for the calculation of vulnerabilities, as well as have a list of all major vulnerabilities that are associated with all modern software products that can be used in the automated system. The known software and hardware vulnerabilities of the ground are considered and the resistance of the built network to specific threats by the iRisk method is calculated.

scholarly journals POSSIBLE APPROACHES TO CATEGORIZATION OF CRITICAL INFORMATION INFRASTRUCTURE OBJECTS

2019 ◽  
Vol 6 (1) ◽  
pp. 128-133 ◽  
Author(s):  
Kirill Shchelkin ◽  
Polina Zvyagintseva ◽  
Valentin Selifanov
Keyword(s):  
Information System ◽  
Information Infrastructure ◽  
Critical Information

The main aspects of categorization of critical information infrastructure objects, regardless of whether an object is significant or not, are considered, in particular those objects that are already certified or have passed classification of information system earlier.

Critical Aviation Information Systems

2019 ◽  
pp. 423-448 ◽  
Author(s):  
Sergiy Gnatyuk ◽  
Zhengbing Hu ◽  
Viktoriia Sydorenko ◽  
Marek Aleksander ◽  
Yuliia Polishchuk ◽  
...  
Keyword(s):  
Information System ◽  
Information Systems ◽  
Data Model ◽  
State Level ◽  
Information Infrastructure ◽  
The State ◽  
Civil Aviation ◽  
Critical Information ◽  
Special Software ◽  
Specialized Technique

This chapter is devoted to developing formalization methods for identification and security objects of critical information infrastructure (CII) in civil aviation. The analysis of modern approaches to the CII identification was carried out that gave a possibility to determine weaknesses and to formalize a scientific researches task. As a result, the unified data model was developed for formalizing the process of a list of CII objects forming in certain field and at the state level. Moreover, the specialized technique was developed. Besides, the identification method was proposed, and it gives a possibility to determine elements of CII field, mutual influences, and influence on functional operations of critical aviation information system. Furthermore, special software was developed and implemented that can be useful for CII elements identification and also for determining its influences on functional operations. Also, the basic aspects of cybersecurity ensuring for identified critical aviation information system were described in this chapter.

scholarly journals Provision of security of the Unified Federal Information Register Containing Data on the Population of the Russian Federation

2020 ◽  
pp. 10-18
Author(s):  
Artem Nikolaevich Gulemin
Keyword(s):  
Information System ◽  
Public Relations ◽  
Russian Federation ◽  
Personal Data ◽  
Information Infrastructure ◽  
Legal Regulation ◽  
Critical Information ◽  
The Russian Federation ◽  
The Government ◽  
Legal Security

The object of this research is the public relations with regards to processing of information in the Unified Federal Information Register Containing Data on the Population of the Russian Federation n. Besides the Federal Law “On the Unified Federal Information Register Containing Data on the Population of the Russian Federation”, the subject of this research is legislation in the area of personal data and legislation on the critical information infrastructure. Based on the main formal and substantive aspects, the author defines the indicated register as a variety of register-based information; substantiates the relevance of application of the principles of framework regulation of information law in the context of creating the register; raises the question on the need to recognize the information system that processes data contained in the register as a valuable object of critical information infrastructure. The novelty of this research consists in the fact that this article is one of the first works dedicated to provision of legal security of the Unified Federal Information Register Containing Data on the Population of the Russian Federation. The following conclusions and proposals on improvement of legislation are formulated: 1) The principles of legal regulation established by legislation with regards to information as the object of legal regulation should be applied to the created register; any unauthorized actions with a separate register entry should be viewed as violation of integrity of the entire object. 2) Due to critical importance of the data contained in the register, it is essential to set confidentiality restrictions, and recognize the federal nformation system that processes data contained in the register as a valuable object of critical information infrastructure. 3) In the text of the Law “On the Unified Federal Information Register Containing Data on the Population of the Russian Federation”, it is necessary to specify the responsibilities of operator of the federal information system who maintains the federal register and compliance with the requirements of legislation on the security of critical information infrastructure. It is also necessary to clarify the provisions of the Decree of the Government of the Russian Federation that establishes a list of criteria of importance of the objects of critical information infrastructure of the Russian Federation and their value.

scholarly journals Optimization of the management system for mitigating the consequences of water area pollution during the crisis

2021 ◽  
pp. 118-123
Author(s):  
S.V Kotenko ◽  
N.D Maslii ◽  
V.A Kasianova ◽  
M.G Bezpartochnyi ◽  
I.I Nadtochii
Keyword(s):  
Mathematical Model ◽  
Information System ◽  
Delay Time ◽  
Management System ◽  
Information Management System ◽  
Effective Management ◽  
Utilization Factor ◽  
Critical Information ◽  
Extreme Load ◽  
Crisis Situations

Purpose. The study is aimed at optimizing and reducing delays in crisis situations in the operation of decision support systems to eliminate the consequences of pollution of water areas. Methodology. The presented study uses the fundamental provisions of modern science to find the optimal solution in crisis situations. Methods of abstraction and mathematical formalization were used to solve the problem of minimizing the delay time of information packets in providing critical information in conditions of overloading information channels. Findings. It has been proven that a decrease in the volume of losses is possible in the case of effective management of the elimination of pollution, prompt minimization of its consequences. It has been established that the effectiveness of management to minimize the consequences of an accident is determined by the effectiveness of the information system, and largely depends not only on relevant information, but also on the timeliness of its receipt by the subject of decision-making. A mathematical model and an algorithm for optimizing information flows have been created, which provide minimal delays in obtaining information even under conditions of extreme load of the information system. It has been proven that the task of effective management of an information system can be reduced to minimizing the delay in the provision of critical information. As a result of the study, it was found that for a large information system, which includes more than forty subunits and satellite systems, the use of the proposed approach provides a decrease in the response delay to an information request of time, which does not exceed a minute. Originality. To prevent delays in the operation of the information management system for the elimination of pollution of water areas, a scientific and applied approach to optimize the information system is proposed, which uses the theory of graphs and Ant Colony Optimization Algorithm and implements effective management of information flow. A mathematical model and an original algorithm have been developed that allow reducing delays in work and providing a resource utilization factor better than the existing analogues. Practical value. The presented approach will make it possible to increase the efficiency and reliability of information systems for managing technogenic pressure on water areas in crisis situations, reduce the time for providing the necessary information and, thereby, reduce the consequences of pollution and the costs associated with their neutralization. The data obtained in the course of the study are approximated by a polynomial equation, making it possible to evaluate the effectiveness of using the proposed method depending on the number of nodes of the information system and the requirements for limiting the delay time of information.

scholarly journals Critical information infrastructure: sustainability assessment

2018 ◽  
Vol 28 (4) ◽  
pp. 59-67
Author(s):  
V. A. Minaev ◽  
I. D. Korolev ◽  
E. V. Zelentzova ◽  
R. I. Zakharchenko
Keyword(s):  
Information System ◽  
Sustainability Assessment ◽  
Resistance Index ◽  
Information Infrastructure ◽  
System Stability ◽  
Practical Significance ◽  
Critical Information ◽  
The Stability ◽  
Main Components ◽  
Definition Of

The paper considers the approach to the assessment of critical information infrastructure circulating in the information system in terms of confrontation. The novelty of the study is a promising method allowing assessment of complex technical systems with a high degree of criticality and uncertainty of description. The value of the integral criterion is proposed as an assessment of the ability to implement the objective function of critical information infrastructure at each time point. Based on this method, it became possible to improve the quality of substantiation of new ways of confrontation in the information space. The paper addresses the problem of information system stability. Its main components and management properties that determine the stability of the system functioning as a whole are considered. A classification of critical information infrastructure systems is proposed. A formal definition of the cyber resistance index, as well as method and algorithm for its calculation, are given. The practical significance is that the new method of assessment can be used to improve the efficiency of critical information infrastructure management.

scholarly journals CRITICAL INFORMATION SYSTEM

2016 ◽  
Vol 6 (4) ◽  
pp. 83-85
Author(s):  
A.A. Medvedev ◽  
◽  
E.N. Sozinova ◽  
Keyword(s):  
Information System ◽  
Critical Information

Critical Aviation Information Systems

2021 ◽  
pp. 341-366
Author(s):  
Sergiy Gnatyuk ◽  
Zhengbing Hu ◽  
Viktoriia Sydorenko ◽  
Marek Aleksander ◽  
Yuliia Polishchuk ◽  
...  
Keyword(s):  
Information System ◽  
Information Systems ◽  
Data Model ◽  
State Level ◽  
Information Infrastructure ◽  
The State ◽  
Civil Aviation ◽  
Critical Information ◽  
Special Software ◽  
Specialized Technique

This chapter is devoted to developing formalization methods for identification and security objects of critical information infrastructure (CII) in civil aviation. The analysis of modern approaches to the CII identification was carried out that gave a possibility to determine weaknesses and to formalize a scientific researches task. As a result, the unified data model was developed for formalizing the process of a list of CII objects forming in certain field and at the state level. Moreover, the specialized technique was developed. Besides, the identification method was proposed, and it gives a possibility to determine elements of CII field, mutual influences, and influence on functional operations of critical aviation information system. Furthermore, special software was developed and implemented that can be useful for CII elements identification and also for determining its influences on functional operations. Also, the basic aspects of cybersecurity ensuring for identified critical aviation information system were described in this chapter.

scholarly journals The mathematical model of cyber attacks on the critical information system

2019 ◽  
Vol 1202 ◽  
pp. 012013 ◽  
Author(s):  
S S Kochedykov ◽  
E V Grechishnikov ◽  
A V Dushkin ◽  
D E Orlova
Keyword(s):  
Mathematical Model ◽  
Information System ◽  
Cyber Attacks ◽  
Critical Information ◽  
The Mathematical Model
Sign in / Sign up

Export Citation Format

Share Document