Stability Verification of Self-Organized Wireless Networks with Block Encryption

Sokolov, Volodymyr; Skladannyi, Pavlo; Hulak, Hennadii

doi:10.32782/cmis/3137-19

Cited by 2 publications

(1 citation statement)

References 14 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Одним з ефективних методів зменшення ймовірності перетворення вразливості на інцидент безпеки є впровадження стратегії глибинного захисту 'Defense in Depth' (DiD) -багаторівневого підходу до безпеки, який передбачає розгортання декількох заходів безпеки на різних рівнях інформаційної системи. Цей підхід спрямований на створення надлишкових рівнів безпеки, що ускладнює зловмисникам успішну експлуатацію вразливостей: захист периметра [4], контроль доступу [5], керування виправленнями [6],сегментація мережі [7], шифрування [8],виявлення та моніторинг вторгнень [9], безпека додатків [10], тренінги персоналу [11], план реагування на інциденти [12], регулярні оцінки та аудити [13], резервне копіювання та аварійне відновлення [14].…”

Section: вступunclassified

Methodology for Assessing Comprehensive Damages From an Information Security Incident

Sokolov,

Skladannyi

2023

Cybersecurity

Self Cite

View full text Add to dashboard Cite

Security incidents can have significant economic consequences for public authorities. To mitigate the economic impact of cybersecurity incidents, public authorities must invest in robust countermeasures, and collaboration with other government agencies, private sector partners, and international organizations can help increase resilience and response capacity to cyber attacks. The article uses the analysis of various vulnerabilities and the mechanism of transformation into a security incident, as well as analyzed approaches to monitoring existing threats and methods of countering them. International and national organizations and associations can act as data sources. Results from various reports are aggregated depending on the field of work of a certain organization and its form of ownership. Consideration of the mechanics of the transition of vulnerabilities into security incidents allows the creation of formalized models for audit systems and analysis of detected incidents or real-time monitoring. One of the main criteria is the assessment of cyber security risks. The publication proposes a method that takes into account the interrelationship of system components and allows taking into account the sequence of engagement of these components. Sources of operational and reporting information on security incidents are considered as international and national experiences. As a result, measures are proposed to reduce the risk of using existing vulnerabilities for state information networks and systems. Since the only method of qualitative transition to reduce losses from cyber incidents is to improve the quality of cyber security specialists, the article proposes a new retraining program for specialists from related fields: information technology, telecommunications, electronics, radio engineering, programming, etc. As a result of this study, it can be seen that the formation of security policy for state institutions should also take into account the economic impact and probable losses from cyber attacks. Further research is aimed at validating the proposed recommendations for the formation of security policy for state and commercial institutions and organizations.

show abstract

Section: вступunclassified

Methodology for Assessing Comprehensive Damages From an Information Security Incident

Sokolov,

Skladannyi

2023

Cybersecurity

Self Cite

View full text Add to dashboard Cite

show abstract

Pre-Project Solutions for Building an Authorization System Based on the Zero Trust Concept

Kriuchkova,

Skladannyi,

Vorokhob

2023

Cybersecurity

View full text Add to dashboard Cite

This article describes the task of building effective solutions to increase the level of cyber security of state-level information systems in the conditions of weapons of aggression and powerful cyber attacks on critical infrastructure. A descriptive supplement to the security threat model has been developed, taking into account the concept of Zero Trust, and the threat model has been visualized, which allows you to determine the potential vulnerabilities of existing solutions regarding the construction of identification and access control subsystems. Requirements for contactless authentication hardware are defined. A functional diagram of the interaction of radio frequency identification components with passive electrical oscillating circuits has been built. A block diagram has been created algorithm of the identification system to the hardware authentication device. Defined functional and engineering solutions for the construction of contactless hardware authentication of clients during access to system devices. Grounded sketch decisions regarding the construction of a steganographic data exchange protocol in identification and access management procedures.

show abstract

Stability Verification of Self-Organized Wireless Networks with Block Encryption

Cited by 2 publications

References 14 publications

Methodology for Assessing Comprehensive Damages From an Information Security Incident

Methodology for Assessing Comprehensive Damages From an Information Security Incident

Pre-Project Solutions for Building an Authorization System Based on the Zero Trust Concept

Contact Info

Product

Resources

About