Vulnerabilities of Short Message Encryption in Mobile Information and Communication Systems of Critical Infrastructure Objects

Self Cite

Security incidents can have significant economic consequences for public authorities. To mitigate the economic impact of cybersecurity incidents, public authorities must invest in robust countermeasures, and collaboration with other government agencies, private sector partners, and international organizations can help increase resilience and response capacity to cyber attacks. The article uses the analysis of various vulnerabilities and the mechanism of transformation into a security incident, as well as analyzed approaches to monitoring existing threats and methods of countering them. International and national organizations and associations can act as data sources. Results from various reports are aggregated depending on the field of work of a certain organization and its form of ownership. Consideration of the mechanics of the transition of vulnerabilities into security incidents allows the creation of formalized models for audit systems and analysis of detected incidents or real-time monitoring. One of the main criteria is the assessment of cyber security risks. The publication proposes a method that takes into account the interrelationship of system components and allows taking into account the sequence of engagement of these components. Sources of operational and reporting information on security incidents are considered as international and national experiences. As a result, measures are proposed to reduce the risk of using existing vulnerabilities for state information networks and systems. Since the only method of qualitative transition to reduce losses from cyber incidents is to improve the quality of cyber security specialists, the article proposes a new retraining program for specialists from related fields: information technology, telecommunications, electronics, radio engineering, programming, etc. As a result of this study, it can be seen that the formation of security policy for state institutions should also take into account the economic impact and probable losses from cyber attacks. Further research is aimed at validating the proposed recommendations for the formation of security policy for state and commercial institutions and organizations.

Section: вступunclassified

Methodology for Assessing Comprehensive Damages From an Information Security Incident

Sokolov,

Skladannyi

2023

Self Cite

Information Technology: Approaches to Definition, Principles of Construction

Makoiedova¹

2022

The research is dedicated to the concept of "information technology". The purpose of the article is to analyze the scientific and methodological literature, clarify the essence and structure of information technologies, generalize the classification of information technologies based on the works of foreign and Ukrainian scientists. The subject of research is the concept of "information technology". As part of the analysis of the concept of "information technology", the legislative definition of this term was considered, it was clarified how this category is disclosed in the state standards of Ukraine (in particular, DSTU 5034:2008, DSTU 2226-93, DSTU 2481-94, DSTU 7448:2013) , the wording of the definition in terminological dictionaries was analyzed, the definition of "information technology" defined by the international organization UNESCO was considered. The formulation of the concept of "information technology" in the scientific works of foreign researchers was studied. On the basis of the conducted analysis, the lack of existing definitions was identified and an aggregated definition of the concept of "information technology" was synthesized. The principles that became the basis for the formation of information technologies were analyzed. These principles remain relevant to this day. The publication contains an overview of the main structural components of information technology. Contradictions regarding the definition of the list of structural components of information technology in the works of various scientists have been studied. In addition, the publication provides an infographic of generalized approaches to the classification of information technologies. The work proposes the classification of information technologies according to their intended use, establishes typical components of information technology, and specifies twelve criteria for the classification of information technologies.

Pre-Project Solutions for Building an Authorization System Based on the Zero Trust Concept

Kriuchkova,

Skladannyi,

Vorokhob

2023

This article describes the task of building effective solutions to increase the level of cyber security of state-level information systems in the conditions of weapons of aggression and powerful cyber attacks on critical infrastructure. A descriptive supplement to the security threat model has been developed, taking into account the concept of Zero Trust, and the threat model has been visualized, which allows you to determine the potential vulnerabilities of existing solutions regarding the construction of identification and access control subsystems. Requirements for contactless authentication hardware are defined. A functional diagram of the interaction of radio frequency identification components with passive electrical oscillating circuits has been built. A block diagram has been created algorithm of the identification system to the hardware authentication device. Defined functional and engineering solutions for the construction of contactless hardware authentication of clients during access to system devices. Grounded sketch decisions regarding the construction of a steganographic data exchange protocol in identification and access management procedures.