Digital Technology Security最新文献

Application of the Blue Team expertise tools in the process of monitoring information systems on the example of the TI platform (Threat Intelligence) 蓝队专业工具在信息系统监控过程中的应用(以TI平台(威胁情报)为例)

Digital Technology Security Pub Date : 2023-06-28 DOI: 10.17212/2782-2230-2023-2-34-51

A. V. Ivanov, Ivan V. Nikroshkin, Igor A. Ognev, Maksim A. Kiselev

{"title":"Application of the Blue Team expertise tools in the process of monitoring information systems on the example of the TI platform (Threat Intelligence)","authors":"A. V. Ivanov, Ivan V. Nikroshkin, Igor A. Ognev, Maksim A. Kiselev","doi":"10.17212/2782-2230-2023-2-34-51","DOIUrl":"https://doi.org/10.17212/2782-2230-2023-2-34-51","url":null,"abstract":"The purpose of this scientific study is to analyze the possibilities of increasing the effectiveness of protection against cyber threats through the use of Blue Team expert systems. The paper provides an overview of various Blue Team expert systems, including advanced detection and response (XDR) systems, information security incident response platforms (IRPs), incident management, automation and response (SOAR) systems, as well as cyber intelligence systems for threat analysis (TI). Threat Intelligence processes are analyzed, including the collection, analysis and interpretation of information about cyber threats. Particular attention is paid to the cyber intelligence platform for threat analysis – TI MISP, including the analysis of the data model of this platform. An example of working with the CVE-2022-26134 vulnerability is provided, demonstrating the effectiveness of using the TI MISP platform to identify threats and take measures to prevent them. At the end of the work, conclusions were drawn about the advantages and disadvantages of using a cyber intelligence platform for threat analysis. In this regard, the use of Blue Team expert systems, including the TI platform, in the process of monitoring information systems can significantly increase the efficiency of identifying computer incidents and provide more reliable protection of information infrastructure, despite their shortcomings.","PeriodicalId":207311,"journal":{"name":"Digital Technology Security","volume":"2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130154581","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Examination of the information security threats model for information systems 检查信息系统的信息安全威胁模型

Digital Technology Security Pub Date : 2023-06-28 DOI: 10.17212/2782-2230-2023-2-52-70

V. Selifanov, P. Zvyagintseva, Elena A. Plahotnikova

引用次数: 0

Remote monitoring of the condition of the grounding device 远程监控接地装置的状态

Digital Technology Security Pub Date : 2023-06-28 DOI: 10.17212/2782-2230-2023-2-9-20

V. E. Mitrokhin, A. Naumov

引用次数: 0

Modal design of a polynomial control system for the inverted pendulum with two degrees of freedom 二自由度倒立摆多项式控制系统的模态设计

Digital Technology Security Pub Date : 2023-06-28 DOI: 10.17212/2782-2230-2023-2-21-33

V. Shipagin, V. Filiushov

{"title":"Modal design of a polynomial control system for the inverted pendulum with two degrees of freedom","authors":"V. Shipagin, V. Filiushov","doi":"10.17212/2782-2230-2023-2-21-33","DOIUrl":"https://doi.org/10.17212/2782-2230-2023-2-21-33","url":null,"abstract":"An example of calculating an automatic control system for a multi-channel linearized model of a control object is given ‒ a 2-degree of freedom pendulum on a cart with the ability to move, for a mobile board and a support rack, in two planes. This model is described by a non-square matrix transfer function with a large number of output parameters compared to the number of input parameters. A description of a linear model of an object is obtained through the state space and through a matrix transfer function. According to the obtained descriptions, it can be seen that for a linearized version of the description of the object, for different coordinate axes, the description of the system is symmetrical. In this regard, there is an approach to synthesizing the control system for each coordinate of the mobile platform separately. However, with the further transition to a nonlinear description of the system, the symmetry of the description will be violated and it will be problematic to apply the obtained regulators for a nonlinear object in some cases. In this article, the work of the algorithm for the synthesis of the control system of the mobile platform for stabilizing the support rack to a vertical position and bringing the mobile platform to a given position at both coordinates at the same time is illustrated. The calculation was carried out using the algorithm of synthesis of the controller by a modular method using a polynomial matrix decomposition of the matrix transfer functions of the object and the controller. The simulation of the operation of the resulting automatic control system shows that the controller copes with the task of stabilizing the angle of the support post in the vertical position and bringing the mobile platform to the desired position.","PeriodicalId":207311,"journal":{"name":"Digital Technology Security","volume":"38 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122337338","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Using the IDEF0 methodology in monitoring system development 使用IDEF0方法监测系统开发

Digital Technology Security Pub Date : 2023-06-28 DOI: 10.17212/2782-2230-2023-2-71-81

Nikolay Y. Tsiberman, Viktor M. Belov

引用次数: 0

Analysis of security protocols based on the licensed content distribution system 基于授权内容分发系统的安全协议分析

Digital Technology Security Pub Date : 2023-03-29 DOI: 10.17212/2782-2230-2023-1-26-35

Andrey D. Anikin, Kirill A. Biryukov, A. B. Arkhipova

引用次数: 0

Personal information security issues in the context of digital transformation of the economy, management and public communications 经济、管理和公共通信数字化转型背景下的个人信息安全问题

Digital Technology Security Pub Date : 2023-03-29 DOI: 10.17212/2782-2230-2023-1-36-52

M. E. Bocharnikova, T. M. Pestunova, V. Selifanov

{"title":"Personal information security issues in the context of digital transformation of the economy, management and public communications","authors":"M. E. Bocharnikova, T. M. Pestunova, V. Selifanov","doi":"10.17212/2782-2230-2023-1-36-52","DOIUrl":"https://doi.org/10.17212/2782-2230-2023-1-36-52","url":null,"abstract":"The article analyzes the main aspects of personal information security, the knowledge of which is important for a person in conditions of high rates of digitalization of social and economic spheres. They are aimed at the formation of a personal information digital space and its management in the conditions of changing technologies and the legal field in accordance with the private and business interests of the individual. The first task in this case is to make a person aware of their interests and needs in the use of the digital environment, to assess the significance of the issues of the security of their personal data. Further, attention is drawn to the development of skills for analyzing and evaluating Internet resources in the context of the reliability and purposes of information dissemination, the development of methods and means of managing your personal data available within the framework of current legislation. Examples of a number of other relevant tasks, existing opportunities for practical acquisition of knowledge and formation of skills for safe work in a digital environment for various categories of users at the current level of information technology development are considered, and those aspects that remain outside the scope of methods and technologies that are massively used to increase the level of digital literacy of the population are also identified.","PeriodicalId":207311,"journal":{"name":"Digital Technology Security","volume":"55 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-03-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115765724","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Issues of assessing the credibility of the risk management system 评估风险管理体系可信度的问题

Digital Technology Security Pub Date : 2023-03-29 DOI: 10.17212/2782-2230-2023-1-69-82

V. Selifanov, Veronika V. Anikeeva, Igor A. Ognev

{"title":"Issues of assessing the credibility of the risk management system","authors":"V. Selifanov, Veronika V. Anikeeva, Igor A. Ognev","doi":"10.17212/2782-2230-2023-1-69-82","DOIUrl":"https://doi.org/10.17212/2782-2230-2023-1-69-82","url":null,"abstract":"This article is devoted to the assessment of confidence in the risk management system. The term trust in relation to information systems is practically not used nowadays. The author proposes a procedure for assessing confidence in the risk management system, which consists of four stages: compliance with the requirements of Russian legislation and national standards, assessing the optimality of the existing risk management system and reassessing risks. A description of existing methods for assessing confidence in risk management systems has been given. It is concluded that at present there are no existing requirements to the system of risk assessment even in some segments. The paper proposes to use a pre-agreed by stakeholders’ selection of criteria for assessing risks from a system of standards that describe the process of risk assessment in terms of systems engineering. The criteria and indicators used in the standards that define systems analysis are considered. Probabilistic assessment of a few indicators is taken as the basis of risk assessment: risk of violation of reliability of process implementation without regard to information protection requirements; risk of violation of information protection requirements in the process; integral risk of violation of process implementation with regard to information protection requirements. To calculate these risk indicators the investigated entities are examined in the form of a modeled system of a complex structure. A mathematical model for assessing risks in accordance with the provisions of systems engineering standards is presented.","PeriodicalId":207311,"journal":{"name":"Digital Technology Security","volume":"367 2","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-03-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134323261","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Modal synthesis of controllers by a polynomial method for automatic control systems with excessive dimension of the control vector 针对控制向量维数过大的自动控制系统，采用多项式方法进行控制器模态综合

Digital Technology Security Pub Date : 2023-03-29 DOI: 10.17212/2782-2230-2023-1-53-68

A. Voevoda, V. Shipagin

{"title":"Modal synthesis of controllers by a polynomial method for automatic control systems with excessive dimension of the control vector","authors":"A. Voevoda, V. Shipagin","doi":"10.17212/2782-2230-2023-1-53-68","DOIUrl":"https://doi.org/10.17212/2782-2230-2023-1-53-68","url":null,"abstract":"When using polynomial methods of synthesis of multichannel regulators, there is a need for polynomial matrix calculus. However, when using this method, objects with the number of output channels equal to the number of input channels are mainly considered. This is necessary for the convenience of solving a system of linear algebraic equations in matrix polynomial computation. At the same time, a fairly large number of real technical systems have an unequal number of input and output channels. At the same time, the issue of the synthesis of generators by the polynomial method for multichannel objects with an unequal number of input and output impacts has not been worked out sufficiently deeply. One of the special cases of such systems can be considered systems with excessive dimension of the control vector. Within the framework of this work, examples of such systems and the purposes of their use are given. An illustrative example of a linear model of an unstable object with three channels for input action and two channels for output action is given. It is necessary to achieve certain quality indicators of the output vector quantity, while the control is carried out in the feedback of the system and is summed up with the input effect. The simplicity of the system under consideration is connected with the convenience of demonstrating on this example a modal synthesis method using a polynomial matrix decomposition of the transfer functions of an object and a controller for such a class of objects. In accordance with the recommendations presented in the algorithm for synthesizing regulators for objects with a non-square matrix transfer function, to solve the problem of synthesizing a regulator for systems with an excessive dimension of the control vector, the transfer function of the control object is represented as a right polynomial matrix decomposition, and the regulator is represented as a left one. During the demonstration of the example of the algorithm, some clarifications and edits are proposed in it.","PeriodicalId":207311,"journal":{"name":"Digital Technology Security","volume":"182 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-03-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114647146","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Formation of a stepped signal with minimum levels of the third harmonic 形成具有最小三次谐波电平的阶跃信号

Digital Technology Security Pub Date : 2023-03-29 DOI: 10.17212/2782-2230-2023-1-9-25

Michael M. Babichev, Daniil A. Grigoriev

引用次数: 0