{"title":"ИСПОЛЬЗОВАНИЕ ДОПОЛНИТЕЛЬНЫХ МЕТОДОВ АВТОРИЗАЦИИ ПОЛЬЗОВАТЕЛЕЙ","authors":"Бахыт Каиркеновна Султанова, А.С. Щербов","doi":"10.37943/aitu.2020.89.25.011","DOIUrl":"https://doi.org/10.37943/aitu.2020.89.25.011","url":null,"abstract":"Статья рассматривает методы дополнительной авторизации пользователей информационных систем, их достоинства и недостатки, типичные примеры использования. Мульти (много) факторная авторизация становится стандартным инструментом для подтверждения личности и прав доступа информационных систем, от банковских операций, до доступа к базам данных предприятия. С расширением сфер использования различных информационных систем, приложений и сервисов, пользователи систем получают новые возможности, удобство и мобильность. Но в то же время, возникает проблема безопасного и контролируемого доступа, авторизация и идентификация пользователя, подтверждение его полномочий. Авторы проанализировали различные методы, наиболее широко распространённые на рынке безопасности, их возможности, преимущества и недостатки. Рассматриваемые варианты не могут относиться только к одной лишь сфере предоставления услуг: механизмы могут и должны быть использованы в различных комбинациях. Помимо анализа, были проведены опыты по внедрению и тестированию механизмов дополнительной авторизации, собраны отзывы конечных пользователей. Каждый из методов был оценён со множества сторон: лёгкость внедрения, простота использования конечным пользователем, доступность и адекватность применения. В то же время нет возможности выявить оптимальный и универсальный метод дополнительной авторизации, поскольку различные сферы услуг предъявляют собственные требования к доступности, надёжности и безопасности. Как наиболее перспективные направления для внедрения, можно выделить корпоративные сервисы, которые предоставляют обмен данными, их обработку или аналитику или сервисы удалённого управления, в частности управления промышленными сетями. Авторы не ставили целью выдвижение одного выделенного механизма как приоритетного, поэтому и не даются рекомендации по использованию отдельного взятого метода.","PeriodicalId":112618,"journal":{"name":"Scientific Journal of Astana IT University","volume":"26 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-12-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130552034","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Zhibek N. Sarsenova, Sholpan Saimassayeva, A. Smaiyl
{"title":"DETERMINATION OF THE MOST POLLUTED ATMOSPHERIC AIR POLLUTION CATEGORY OF ALMATY CITY","authors":"Zhibek N. Sarsenova, Sholpan Saimassayeva, A. Smaiyl","doi":"10.37943/aitu.2020.94.34.004","DOIUrl":"https://doi.org/10.37943/aitu.2020.94.34.004","url":null,"abstract":"This article discusses the impact of suspended particles on human health, by providing small definitions of PM2.5, including how they appear, what particles they consist of, and how they harm the respiratory and circulatory systems. In addition, the analysis of the pollution level of the city of Almaty for the last three years from March 22, 2017, to October 6, 2020, with categorical intermediate values of suspended particles was carried out. Careful work was done with the SCV file such as data was skipped in the cells, that is, there were empty values; translation to a single data type; filling in empty cells. It also considers making a decision on the six categories provided to identify the average meeting categories. The authors identified specific categories based on digital readings of values received from sensors, where each category has its own verbal values that are understandable for each person. The indicator displays with weights as a graph for a specific Seifullin-Dulatov sensor location with categorical and without categorical division. Then for each intersection or location of the sensors is shown in a table. It is also revealed which level or category is the rarest among the others and the most common category as well.","PeriodicalId":112618,"journal":{"name":"Scientific Journal of Astana IT University","volume":"92 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-12-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131052214","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
S. Stetsenko, L. Sorokina, A. Goiko, T. Tsyfra, N. Bolila
{"title":"CALS-MODEL FOR FORMING THE ANTI-CRISIS POTENTIAL OF CONSTRUCTION ENTERPRISES","authors":"S. Stetsenko, L. Sorokina, A. Goiko, T. Tsyfra, N. Bolila","doi":"10.37943/aitu.2020.80.41.006","DOIUrl":"https://doi.org/10.37943/aitu.2020.80.41.006","url":null,"abstract":"Abstract: This paper considers the peculiarities of the formation of economic immunity of construction companies. A system has been proposed to improve the mechanisms of preventive protection and securement of enterprises from loss of viability and subsequent self-liquidation or bankruptcy, which allows effectively identifying existing risks and threats from micro-, meso- and macro-environments and responding to them with the preventive means through economic immunity. A new definition for the term «economic immunity» of the enterprise is proposed, which includes subsystems of monitoring, early detection of internal and external threats, assessment of the degree of danger (risks), diffusion, elimination or neutralization, and formation of «memory» of the threat through a system of indicators. The differences of economic indicators of construction enterprises, which are characterized by different levels of the anti-crisis potential use, are studied, the five most significant indicators of the use of the anti-crisis potential are identified. The rules-conditions for determining the level of activation of anti-crisis opportunities and vulnerability of enterprises to threats for economic security are formulated. Methods of identification and control of the level of anticrisis potential use of the construction enterprise in the context of digital transformation which allows estimating quality and expediency of administrative actions are developed.\u0000The formation mechanism of the anti-crisis potential of the construction enterprise is developed. Its structure is defined, conceptual foundations of the integrated information system creation of the construction enterprise that should provide the possibility of interaction of various subsystems within the enterprise and the analysis of threats from interaction with various stakeholders are substantiated.","PeriodicalId":112618,"journal":{"name":"Scientific Journal of Astana IT University","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-12-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131152810","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"DISTRIBUTION OF ETHEREUM BLOCKCHAIN ADDRESSES","authors":"A. Seitenov, G. Smagulova","doi":"10.37943/aitu.2020.36.57.005","DOIUrl":"https://doi.org/10.37943/aitu.2020.36.57.005","url":null,"abstract":"Abstract: In the contemporary world, Ethereum is a very reliable financial saving among cryptocurrencies. It is also well known as a blockchain platform for creating and launching its own cryptocurrency. The applications run on Ethereum executed by a platform-specific cryptographic token, ether. During 2014, Ethereum had launched a pre-sale for ether, which had received an overwhelming response. Ether is used broadly for two purposes: it is traded as a digital currency exchange like other cryptocurrencies, and it is used inside Ethereum to run applications and even to monetize work. It should be noticed that the smart contract has brought a significant share of the success to Ethereum. The smart contract is a computer programme that independently performs assigned tasks between network participants without the participation of a third trusted party. Smart contracts and their intranet transactions have facilitated the rapid expansion of the Ethereum network. Smart contracts are widely represented on the market, either as electronic transaction payments or as applications for the implementation of logistics supplies, gambling, and other sectors. These transactions are irreversible and fully tracked online. Whereas the electronic records are available in a public distributed ledger and include data about user addresses, whereas the real names are hidden. The article explains the usage of decentralized accounts and their electronic transactions in the Ethereum network. The results are presented through different application sectors. Additionally, a new method for extracting blockchain records through node cluster via IPFS path is implemented in the research.","PeriodicalId":112618,"journal":{"name":"Scientific Journal of Astana IT University","volume":"78 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-12-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131809217","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"PROTEIN IDENTIFICATION USING SEQUENCE DATABASES","authors":"Y. Golenko, A. Ismailova, Ye Rais","doi":"10.37943/aitu.2020.91.98.002","DOIUrl":"https://doi.org/10.37943/aitu.2020.91.98.002","url":null,"abstract":"The bottom-up proteomics approach (also known as the shotgun approach), based on the digestion of proteins in peptides and their sequencing using tandem mass spectrometry (MS/MS), has become widespread. The identification of peptides from the obtained MS/MS data is most often done using available sequence databases. In this paper, we present a detailed overview of the peptide identification workflow and description of the main protein bioinformatics databases. Choosing the correct search parameters and the sequence database is essential to the success of this method, and we pay special attention to the practical aspects of searching for efficient analysis of MS/MS spectra. We also consider possible reasons why database search tools cannot find the correct sequence for some MS/MS spectra, and highlight the issues of misidentification that can significantly reduce the value of published data. To help assess the assignment of peptides to MS/MS spectra, we will look at the scoring algorithms that are used in the most popular database search tools. We also analyze statistical methods and computational tools for validating peptide compliance with MS/MS data. The final part describes the process of determining the identity of protein samples from a list of peptide identifications and discusses the limitations of bottom-up proteomics","PeriodicalId":112618,"journal":{"name":"Scientific Journal of Astana IT University","volume":"96 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-12-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121830146","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
I. Chupryna, V. Pokolenko, M. Horbach, O. Bolebrukh, D. Hrabchak
{"title":"MODEL OF STRATEGIC ANALYSIS OF FORMATION AND ADMINISTRATION OF INVESTMENT ACTIVITY OF STOCKHOLDER CONSTRUCTION COMPANY","authors":"I. Chupryna, V. Pokolenko, M. Horbach, O. Bolebrukh, D. Hrabchak","doi":"10.37943/AITU.2020.19.30.005","DOIUrl":"https://doi.org/10.37943/AITU.2020.19.30.005","url":null,"abstract":": The article analyzes the market position of construction companies and builds a justification for updated methodological and analytical tools for evaluating, selecting, and building a productive system of portfolio administration of housing projects, which are implemented in a single operating system of the development company. The problems of investment activity of stakeholder construction companies, which have been constantly carried out in many countries by prominent foreign and domestic scientists, have been studied. Several variants of circumstances that shape the external and internal environment of the developer are analyzed, which must be taken into account when determining the strengths and weaknesses of the enterprise, its capabilities and threats, which provides a general picture of the internal situation and is important for developing optimal strategy for the enterprise. The operating system is determined by the introduction of fundamentally new updated scientific and applied tools designed to provide the development company with a clear for-malization and proper analytical support of the processes of formation, analysis, and productive subsequent administration: the leading innovation of the tools introduced commercial housing construction, which are implemented in a complex economic and managerial format – production-technological, resource-logistical and administrative management of the content of business processes of project cycles as part of the portfolio of housing construction projects of the developer.","PeriodicalId":112618,"journal":{"name":"Scientific Journal of Astana IT University","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-09-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117205373","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"COMPLEX EVENT PROCESSING APPROACH ON SUBSCRIBERS’ DATA OF TELECOM OPERATOR","authors":"А. Zhumekenov","doi":"10.37943/aitu.2020.95.28.005","DOIUrl":"https://doi.org/10.37943/aitu.2020.95.28.005","url":null,"abstract":"Nowadays, the usage of mobile phones reached extremely large worldwide proportions and increasing dramatically, there is a stronger need to decrypt the important information that is hidden among them. Even all needed information is gained, processes of companies remain static and can’t be changed dynamically to adapt to actual business needs, reducing the advantages that can be achieved. Every second, millions of raw information are generating by mobile users, which handled by Telecom operators in data servers. By using Complex Event Processing (CEP) approach in real-time, we can obtain the information that really matters to our business and use it to monetize the vast amount of data that is being collected through mobile phone usage. In this paper, we present an internally developed framework that combines the strengths of CEP and business process implementations, which allows us to react to the needs of today’s fast-changing environment and requirements. We demonstrate 3 simple use case scenarios to show the effectiveness of the CEP approach in our situation. The importance of implementing the CEP approach on subscribers’ data should not be overlooked as means of trying to capitalize on new services but have to be considered as a challenge to give subscribers the opportunity to get more customized offers and services.","PeriodicalId":112618,"journal":{"name":"Scientific Journal of Astana IT University","volume":"44 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-06-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129963706","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"THE EXPERT SYSTEM OF CONTROL AND KNOWLEDGE ASSESSMENT","authors":"V. Golovachyova, N. Tomilova, G. Abildaeva","doi":"10.37943/aitu.2020.1.63601","DOIUrl":"https://doi.org/10.37943/aitu.2020.1.63601","url":null,"abstract":"The article deals with the problem of objective knowledge assessment using expert automated systems for monitoring and evaluating knowledge. The expert systems of control and knowledge estimation are usually developed on the basis of different approaches to constructing a question and answer on test. The analysis of existing testing methods made it possible to conclude that questions with selective and selectively constructed types of answer do not always allow objectively assessing the knowledge of trainees, which reduces the stimulating effect of pedagogical evaluation on cognitive activity of trainees, and the quality of the learning process as a whole. The article proposes a method of knowledge estimation, which is based on a new approach to constructing a question and answer that allows a freely designed form of a test response. Such answer is analyzed by a set of criteria for its formation based on the developed algorithms for the criteria for assessing their quality. This makes it possible to apply the obtained results to solve the scientific problem of objective knowledge assessment using testing. The proposed approach gives an opportunity to expand the functions of tests, thereby increasing the approximation degree of the estimation for the test to the level of the real knowledge of students. The purpose of the article is to justify the effectiveness and develop the expert system of control and knowledge assessment. The article is addressed to a wide range of researchers and experts in the field of education and information technologies.","PeriodicalId":112618,"journal":{"name":"Scientific Journal of Astana IT University","volume":"29 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-03-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114684852","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
P. Kropachev, M. Imanov, J. Borisevich, I. Dhomane
{"title":"INFORMATION TECHNOLOGIES AND THE FUTURE OF EDUCATIONIN THE REPUBLIC OF KAZAKHSTAN","authors":"P. Kropachev, M. Imanov, J. Borisevich, I. Dhomane","doi":"10.37943/aitu.2020.1.63639","DOIUrl":"https://doi.org/10.37943/aitu.2020.1.63639","url":null,"abstract":"The aim of the article is a comprehensive approach to addressing the digitalization of education in the Republic of Kazakhstan based on identifying problems in this area, forming priority tasks and possible ways to solve them. Implementation of IT-programs in the learning process making serious additions to the pedagogical requirements, ethics, and discipline of students also the content of the disciplines. All these aspects are becoming especially relevant today when the quality of education is becoming a strategic task and the key to the successful development of the countrys economy in the digital era. The article touches on the problems of the modern digital generation, its dependence on communication in social networks and instant messengers, the impact of this dependence on health and the level of knowledge. The algorithm for educational technologies will be the main educational goals: the ability to think outside the box, be creative in solving problems, and develop logic and intelligence. Therefore, to formulate requirements for training ICTs, it is necessary to implement measures to assess the effectiveness of implemented programs based on experimental data. Such studies are being conducted today to improve the quality of the educational process, which means that they can be used for ICT. In conclusion, if to base on the results of the survey, the main problems were identified and a number of tasks were set for a deeper study, a general idea was formed on the scope of the forthcoming work and the goals for its achievement.","PeriodicalId":112618,"journal":{"name":"Scientific Journal of Astana IT University","volume":"27 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-03-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134224258","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}