Proceedings of the International Scientific and Practical Conference on Computer and Information Security最新文献

{"title":"Cyber Fraud as a Relevant Internet of Things Security Threat","authors":"O. Afanasyeva, Valentina I. Shiyan, M. Goncharova","doi":"10.5220/0010619600003170","DOIUrl":"https://doi.org/10.5220/0010619600003170","url":null,"abstract":": Based on the official statistical reports of the Ministry of Internal Affairs of the Russian Federation for 2018-2020 and the results of criminological studies on cybercrime, the article describes the relevance of the cyber fraud threat to the security of the Internet of Things. The main indicators characterizing cyber fraud are given - the state, dynamics, structure, amount of damage caused; the number of persons identified for their commission, and the number of victims. The specificity of the method of committing cyber fraud is revealed. The tendencies of cyber fraud, which are the most relevant for the current period, are identified. A conclusion is made about the need to improve the effectiveness of countering cyber fraud by improving the legal mechanisms regulating information legal relations, including international ones, as well as improving the qualifications of the personnel in the field of information security and activating joint comprehensive and coordinated preventive measures of law enforcement agencies.","PeriodicalId":185931,"journal":{"name":"Proceedings of the International Scientific and Practical Conference on Computer and Information Security","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114144311","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"Information Security in the System of Economic Security of Companies","authors":"T. Grafova, I. Kirishchieva, Ekaterina Gomeleva","doi":"10.5220/0010620200003170","DOIUrl":"https://doi.org/10.5220/0010620200003170","url":null,"abstract":": One of the areas of economic security is information security, which implies the implementation of effective information and analytical support for the economic activities of the enterprise. Now, more than ever, it is relevant to ensure the information security of companies, since every year the growth of information security violations is increasing exponentially. In the age of information technology and the daily development of new methods of stealing information, it is necessary to pay full attention to the issue of protecting information of commercial enterprises. To do this, it is necessary to clearly define the legal norms for the protection of secrets, as well as a system of control over the protection of commercial secrets and its nondisclosure.","PeriodicalId":185931,"journal":{"name":"Proceedings of the International Scientific and Practical Conference on Computer and Information Security","volume":"16 10","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"113941816","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"An Approach to Identifying the Process of Implementing a Distributed Denial of Service Attack based on a Probable Graph Model","authors":"Dmitriy A. Bachmanov, M. Putyato, A. Makaryan","doi":"10.5220/0010620100003170","DOIUrl":"https://doi.org/10.5220/0010620100003170","url":null,"abstract":"","PeriodicalId":185931,"journal":{"name":"Proceedings of the International Scientific and Practical Conference on Computer and Information Security","volume":"26 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121897732","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"Prerequisites for Improving Information Security of the Enterprise","authors":"M. Skorev, N. Shevkunov, A. Zhigunova","doi":"10.5220/0010616900003170","DOIUrl":"https://doi.org/10.5220/0010616900003170","url":null,"abstract":"","PeriodicalId":185931,"journal":{"name":"Proceedings of the International Scientific and Practical Conference on Computer and Information Security","volume":"84 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114706394","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"Managing the Process of Ensuring Information Security based on the Law of «Preserving the Integrity of the Object»","authors":"D. Ukraintseva, V. Burlov, V. Gryzunov","doi":"10.5220/0010619500003170","DOIUrl":"https://doi.org/10.5220/0010619500003170","url":null,"abstract":": Information security management requires forming processes with predefined properties. However, analysis-based models are usually used for management. This requires solving a direct management problem. And its solution does not allow us to fully meet the formulated requirements. The article presents a management concept based on synthesis, which already allows us to meet these requirements more fully. The new approach is based on solving the inverse control problem. The solution of the inverse control problem allows you to create conditions for the application of methods and models of program-target control. The result is the creation of a mathematical model of managerial decisions. The concept of synthesis-based management is presented.","PeriodicalId":185931,"journal":{"name":"Proceedings of the International Scientific and Practical Conference on Computer and Information Security","volume":"897 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123261056","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"A Method for Determining the Credibility of Intrusion Detection based on a Probabilistic Graph Model in the Proactive Protection Subsystem of the Operational Cybersecurity Center","authors":"Andrey R. Ocheredko, M. Putyato, A. Makaryan","doi":"10.5220/0010620400003170","DOIUrl":"https://doi.org/10.5220/0010620400003170","url":null,"abstract":": The threat landscape is expanding rapidly, which has a number of consequences for most organizations and individuals. This is evidenced by a large number of cyber attacks which constantly occur in cyberspace. Although several defensive approaches have recently been proposed and implemented, the most of them are entirely theoretical. Others remain unfeasible due to the computational requirements of their implementation. The issue of computational complexity becomes extremely significant for methods which have proven to be implementable, because they often tend to consume a large amount of computational resources. Also most of these methods are reactive which means that they can only be initiated after an incident has already occurred. Moving from reactive approach to proactive one is currently one of the greatest challenges in the sphere of cybersecurity research.","PeriodicalId":185931,"journal":{"name":"Proceedings of the International Scientific and Practical Conference on Computer and Information Security","volume":"354 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124067699","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"Development of Cyber-Physical System Security Management Process Model on the Example of Smart Home","authors":"V. Burlov, E. Grozmani, S. Petrov","doi":"10.5220/0010617900003170","DOIUrl":"https://doi.org/10.5220/0010617900003170","url":null,"abstract":"Cyber-physical systems (CPS) combine general-purpose information and telecommunication systems and industrial networks and devices (controllers), forming a heterogeneous hierarchical distributed information technology computing environment designed for control and monitoring of technological processes. FSCs are being actively implemented in the industrial, urban and household spheres, allowing for more efficient use of resources, as well as transferring management and feedback processes to a new level. CPS are formed as a result of the aggregation of several heterogeneous information and telecommunication systems, which makes them susceptible to the destructive factors of the digital environment – cyber attacks. The peculiarities of the construction and functioning of the CPS require a new approach to defining attack surfaces and modelling threats. This is due to the fact that the \"traditional\" goals of attackers - the availability, integrity and confidentiality of information processed in the system - are not the only ones. In addition, the value of the information itself can be extremely low. At the same time, control and feedback processes play a decisive role in a cyber-physical system. Their stability directly affects the ability of the FSC to perform target functions, as well as the physical safety of technological facilities, personnel and consumers. Depending on the degree of criticality of the technological processes of the real world, which are controlled by the cyber-physical system, the violation of these flows inside it can lead to serious consequences, such as large material damage or a threat to the life and health of people. The severity of the identified threats is confirmed by the constantly growing number of attacks on CPS and the consequences, including potential ones, to which these attacks lead. In addition, it should be noted that in the context of the rapid development and improvement of programmable control devices (Programmable Logic Controller (PLC)), making them more accessible in the mass market segment, as well as the proliferation of high-speed wireless data transmission networks, the concept of a smart home is gaining wider application. This approach implies the integration of PLCs that interact with each other and the control centre via multi-service broadband wireless networks into the domestic environment. Thus, the concept of a smart home is based on the implementation of FSCs in places of permanent residence of people with the transfer of automatic control functions of climatic equipment, lighting, household appliances, physical elements of protection against intrusions to them. At the same time, it is extremely important to ensure the information security of the CFS. To ensure the required level of their security, it is necessary to effectively solve the problems of managing the process of ensuring their information security. The article proposes an approach to the development of a model for the information s","PeriodicalId":185931,"journal":{"name":"Proceedings of the International Scientific and Practical Conference on Computer and Information Security","volume":"2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125576067","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"Blockchain in the Field of Voting","authors":"O. Safaryan, Kirill Lemesko, E. Pinevich","doi":"10.5220/0010617200003170","DOIUrl":"https://doi.org/10.5220/0010617200003170","url":null,"abstract":": Using a distributed ledger allows you to create a simple and at the same time reliable system for storing and processing any digital data. So, on the basis of a distributed ledger, the Blockchain technology was developed, which is a sequential combination of blocks (a specific set of data) into a chain. This chain is protected by methods of hashing and cryptography, which makes it very difficult for an unauthorized user to access the data. Blockchain found active use of in the financial sector, where most modern cryptocurrencies are built on its basis. Over time, it became clear that Blockchain technology can be used in many areas of activity, for example, in the field of electronic voting. Research on the development and implementation of a Blockchain-based electronic voting system is underway in many developed countries and universities. In this article, we consider and analyze the prospects for the transition from the traditional voting system to voting based on Blockchain technology, as well as the possible risks of using the technology. Also, within the framework of the article, an example of software implemented on the principles of Blockchain technology is presented, illustrating the main functions of working with data.","PeriodicalId":185931,"journal":{"name":"Proceedings of the International Scientific and Practical Conference on Computer and Information Security","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125973149","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"Probabilistic Analysis of an Impact of Information Security on Standard Process Performance in a Life Cycle of Systems","authors":"A. Kostogryzov","doi":"10.5220/0010619300003170","DOIUrl":"https://doi.org/10.5220/0010619300003170","url":null,"abstract":": A methodological approach is proposed that allows to analyse an impact of information security on the performance of standard agreement processes, organizational project-enabling processes, technical management processes and technical processes according to ISO/IEC/IEEE 15288. Using the proposed probabilistic approach to risks prediction in a life cycle of systems helps to identify \"bottlenecks\" and define measures and actions for reducing risks when performing standard processes, considering threats to system information security. The usability of the approach is illustrated by examples.","PeriodicalId":185931,"journal":{"name":"Proceedings of the International Scientific and Practical Conference on Computer and Information Security","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131007856","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"Research of Social Engineering Mechanisms and Analysis of Counteraction Methods","authors":"Vyacheslav Evglevsky, M. Putyato, A. Makaryan","doi":"10.5220/0010620000003170","DOIUrl":"https://doi.org/10.5220/0010620000003170","url":null,"abstract":": This article provides an overview of various methods used in social engineering. Also, it examines various threats, their relevance and the harm that may follow after applying a particular method. The relevance of the chosen topic is due to the wide development of science and technology in conjunction with financial, economic and socio-political instability, which is a catalyst for the use of social engineering methods for personal gain.","PeriodicalId":185931,"journal":{"name":"Proceedings of the International Scientific and Practical Conference on Computer and Information Security","volume":"68 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115057070","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}