Main principles of designing the modern protection systems architecture

Buinevich, Mikhail; Izrailov, Konstantin; Pokusov, V.; Yaroshenko, A. V.

doi:10.37468/2307-1400-2020-3-51-58

National Security and Strategic Planning

2020

DOI: 10.37468/2307-1400-2020-3-51-58

|View full text |Cite

Main principles of designing the modern protection systems architecture

Mikhail Buinevich

Konstantin Izrailov

V. Pokusov³

et al.

Abstract: The problem of building a unified protection system based on qualitatively different sub-systems responsible for their classes of attacks is considered. The following five basic principles of designing architectures of such systems are proposed: artificial decomposition, necessity and sufficiency of subsystems, structural invariance, universalization of interaction, and a single in-formation space. Graphical diagrams of examples of application of the principles are given.

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2021

2023

Publication Types

Select...

Article5

Relationship

Self Cite0

Independent5

Authors

Journals

Cited by 8 publications

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

Application of Categorical Division to Classify Motivation For Insider Activities

Vlasov

2023

Telecom IT

View full text Add to dashboard Cite

Statement of the problem: identifying insider activities in organizations that lead to threats to information security, one of the first steps of which should be the study of the motivation that pushes employees to illegal actions. The purpose of the work is to synthesize the main classes of insider motivations; at the same time, the classes must cover all possible situations, and each of the classes must not overlap with others. Methods used: categorical division to identify classes and their practical justification. Novelty: in contrast to the existing motivations of insiders, the proposed classification meets the criteria of necessity and sufficiency, thereby being initially sufficiently consistent and covering all cases; Moreover, all classes are obtained theoretically using the strict logic of categorical division. Result: the use of categorical division identified 3 pairs of categories (Internal vs External, Physical vs Psycho-emotional, Benefit or good intentions vs Harm or malicious intent), which made it possible to form 8 unique classes of insider motivations based on their combinations. The existence of each class is confirmed by the presence of a corresponding publication. Theoretical relevance: a unified set of insider motivation classes was obtained that meets the criteria of necessity and sufficiency. Practical relevance: the resulting classes of insider motivations can be used to understand the reasons for such illegal activities and, therefore, to create effective ways to counteract them.

show abstract

Application of Categorical Division to Classify Motivation For Insider Activities

Vlasov

2023

Telecom IT

View full text Add to dashboard Cite

show abstract

Combining of Heterogeneous Destructive Impact on the Information System and Countering Attacks (on Example by Insider Activity and DDoS-Attack)

Buinevich,

Moiseenko

2023

Telecom IT

View full text Add to dashboard Cite

Problem statement. By now, information security specialists have developed a sufficiently broad pool of mechanisms and means of countering cyberattacks for virtually all classes of destructive effects on information systems. Therefore, in order to break the relative parity "attack vs defense", attackers intensify their onslaught on information security systems by combining heterogeneous destructive influences, thus hampering the ability to counteract them. Despite a significant number of publications devoted to such information confrontation, there are no scientific studies devoted to analyzing this relatively new phenomenon in terms of identifying the limits of combinations, as well as the ability to counteract possible combinations in the public domain. The aim of the work is to study the phenomenon of combining heterogeneous destructive influences on the information system and counteracting such attacks. Methods used. The possibility of combining qualitatively heterogeneous attacks on the information system of the organization is studied. In order to classify and distinguish such attacks, categorical division apparatus is applied using the following pairs: Human vs Automaton, Inside vs Outside, Single vs Multiple. Result. The application of categorical division allowed to distinguish 8 classes of attacks from the position of their realization mechanism; the interpretation of each of the classes is given and an example is given. Novelty. The combination of two seemingly unrelated destructive influences – insider activity and DDoS-attack – is considered for the first time; their generalized scheme, stages of their implementation, as well as the complexity of counteraction to them are given.

show abstract

Formalization and determination of the protocol correctness for information and technical interaction (on the example of integrated information security system)

Pokussov¹

2021

Informatization and Communication

View full text Add to dashboard Cite

The article deals with the problem of designing protocols for information and technical interaction, which have a sign of correctness. For this, its model is built in graphical and analytical form, as well as using a modified adjacency matrix. A classification of modules participating in the interaction is proposed, namely the following: terminal sensor and executor, degenerate handler, object storage, intermediate handler. Five correctness requirements for the protocol are introduced: the need and sufficiency of exchange objects, input and output terminality of modules, and their involvement. For each of the requirements, a formal definition is given - in terms of an adjacency matrix, as well as an algorithm for their verification. The synthesized requirements and algorithms are used for the author›s protocol of information and technical interaction in an integrated information security system. As a result, the correctness of the protocol is proved.

show abstract

scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.

Contact Info

customersupport@researchsolutions.com

10624 S. Eastern Ave., Ste. A-614

Henderson, NV 89052, USA

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Blog Terms and Conditions API Terms Privacy Policy Contact Cookie Preferences Do Not Sell or Share My Personal Information

Made with 💙 for researchers

Part of the Research Solutions Family.

Main principles of designing the modern protection systems architecture

Cited by 8 publications

References 5 publications

Application of Categorical Division to Classify Motivation For Insider Activities

Application of Categorical Division to Classify Motivation For Insider Activities

Combining of Heterogeneous Destructive Impact on the Information System and Countering Attacks (on Example by Insider Activity and DDoS-Attack)

Formalization and determination of the protocol correctness for information and technical interaction (on the example of integrated information security system)

Contact Info

Product

Resources

About