AUTOMATIC CONTROL AND COMPUTER SCIENCES最新文献

{"title":"Generalized Method for Comparative Analysis of Fuzz-Testing Tools","authors":"R. A. Ognev,&nbsp;D. P. Zegzhda","doi":"10.3103/S0146411625700774","DOIUrl":"10.3103/S0146411625700774","url":null,"abstract":"<p>A systematic analysis of methods for evaluating the effectiveness of fuzzers is conducted. A minimal but complete set of metrics is identified: branch coverage, number of unique crashes, and time to first crash. A normalized integral indicator is proposed that allows post hoc comparison of the results of different tools without reruns.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"59 8","pages":"1253 - 1259"},"PeriodicalIF":0.5,"publicationDate":"2026-02-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147341760","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"Optimization of Data Obfuscation in Big Data Processing and Storage Systems","authors":"M. A. Poltavtseva,&nbsp;O. A. Izotova,&nbsp;D. V. Ivanov,&nbsp;D. P. Zegzhda","doi":"10.3103/S0146411625701020","DOIUrl":"10.3103/S0146411625701020","url":null,"abstract":"<p>This paper studies the problem of reducing the attack surface from an internal attacker in heterogeneous systems for processing and storing big data by selecting the optimal data obfuscation method based on anonymization technologies. The study analyzes the terminology and systematizes data-hiding methods to reduce the attack surface in big data processing and storage systems. A formal formulation of the problem of finding the optimal data obfuscation method and an algorithm for solving it across various types of datasets are proposed, taking into account evaluation criteria specific to each class of methods. The implementation of a software prototype for supporting decision-making and selecting the optimal method for solving practical problems is described. Experimental testing and analysis of its results are carried out.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"59 8","pages":"1464 - 1474"},"PeriodicalIF":0.5,"publicationDate":"2026-02-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147341526","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"Analysis of the Potential for Using Biometric Characteristics to Identify Insider Threats Based on Psycho-Emotional State","authors":"S. V. Kornienko,&nbsp;S. E. Adadurov,&nbsp;A. A. Kornienko,&nbsp;E. D. Osipenko","doi":"10.3103/S014641162570107X","DOIUrl":"10.3103/S014641162570107X","url":null,"abstract":"<p>The main biometric characteristics reflecting changes in the psycho-emotional state of a user of an information system are examined. They are ranked using the pairwise comparison method, as a result of which voice and keystroke dynamics are identified as most suitable for further research. Criteria for the preliminary identification of potential internal information security violators based on changes in the considered biometric characteristics are defined. A convolutional neural network model is developed and tested to solve the stated problem.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"59 8","pages":"1504 - 1511"},"PeriodicalIF":0.5,"publicationDate":"2026-02-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147341578","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"Detection of Honeypot Systems Based on a Comprehensive Analysis of Node Performance Indicators","authors":"T. D. Ovasapyan,&nbsp;D. A. Ponomarev,&nbsp;D. V. Ivanov,&nbsp;E. V. Zavadskii","doi":"10.3103/S0146411625700889","DOIUrl":"10.3103/S0146411625700889","url":null,"abstract":"<p>The principles of construction and operation of honeypot systems are studied. Existing detection methods are analyzed, and their advantages and disadvantages are highlighted. A detection method based on the analysis of command execution delays is proposed. A universal detection method based on combining the results of the methods is proposed. A software prototype of the detection system is developed and tested.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"59 8","pages":"1338 - 1344"},"PeriodicalIF":0.5,"publicationDate":"2026-02-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147341581","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"Lattice-Based Commitment Scheme for Proving Linear Relations between Hidden Values","authors":"E. B. Aleksandrova,&nbsp;D. M. Samareva","doi":"10.3103/S0146411625700944","DOIUrl":"10.3103/S0146411625700944","url":null,"abstract":"<p>A hybrid lattice-based commitment scheme is proposed for anonymous proofs between hidden values. The method is based on a modification of the BDLOP zero-knowledge proof (ZKP) scheme by replacing the learning with errors (LWE) problem with a learning with rounding (LWR) problem, which theoretically makes it possible to reduce the size of the parameters and reduce the complexity of parameter selection. It is shown that the proposed scheme preserves the property of additive homomorphism, which makes it possible to apply it to prove linear relations. The obtained results can be applied to construct electronic voting protocols or conduct anonymous transactions.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"59 8","pages":"1387 - 1394"},"PeriodicalIF":0.5,"publicationDate":"2026-02-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147341589","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"Memory-Based Covert Channels in the TLS Protocol","authors":"M. A. Finoshin,&nbsp;I. D. Ivanova,&nbsp;I. Yu. Zhukov,&nbsp;A. V. Zuikov","doi":"10.3103/S0146411625700853","DOIUrl":"10.3103/S0146411625700853","url":null,"abstract":"<p>Methods of protection against memory-based covert channels in the TLS protocol, which use the Random and SessionID service fields of the ClientHello message, are proposed. Protection tools implementing the proposed methods are developed: a module for the Suricata IDS/IPS that filters TLS packets depending on the contents of the SessionID service field, and a proxy server that reformats packets transmitted into the communication environment. A comparative analysis of the implemented security tools is carried out in terms of their impact on the communication channel throughput and their effectiveness in countering the transmission of confidential information. The developed protection tools can be implemented into existing systems for protection against network covert channels. Recommendations are provided for the application of the proposed protection mechanisms, depending on the desired level of security.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"59 8","pages":"1315 - 1321"},"PeriodicalIF":0.5,"publicationDate":"2026-02-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147341634","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"Architecture of a Software System for Protecting Wireless Ad Hoc Networks from Active Network Attacks","authors":"M. A. Pakhomov,&nbsp;E. Yu. Pavlenko,&nbsp;D. S. Lavrova","doi":"10.3103/S0146411625701081","DOIUrl":"10.3103/S0146411625701081","url":null,"abstract":"<p>Software solutions for detecting and countering active network attacks on wireless ad hoc networks are analyzed. Requirements for the developed architecture of a software package for protecting wireless ad hoc networks from active network attacks are formulated. An architecture that meets the stated requirements is proposed. A software prototype implementing the proposed solution is developed and evaluated.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"59 8","pages":"1512 - 1518"},"PeriodicalIF":0.5,"publicationDate":"2026-02-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147341579","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"On the Applicability of the Chi-Square Statistic in the Problem of Determining the Parameters of Block Encryption Algorithms","authors":"V. O. Mironkin,&nbsp;N. A. Yurasov","doi":"10.3103/S0146411625700932","DOIUrl":"10.3103/S0146411625700932","url":null,"abstract":"<p>This article presents the results of practical application of statistical methods for analyzing block encryption algorithms operating in the ECB mode. In particular, in cases of incorrect use of plaintext encryption algorithms, it is shown that it is possible to determine the block size of the encryption algorithm based on the analysis of the chi-square statistics computed from the available ciphertext volume.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"59 8","pages":"1377 - 1386"},"PeriodicalIF":0.5,"publicationDate":"2026-02-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147341635","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"Using Entropy Metrics to Detect Data Integrity Attacks in Real Time","authors":"T. D. Ovasapyan,&nbsp;T. A. Bondarenko,&nbsp;A. A. Piskov","doi":"10.3103/S0146411625701019","DOIUrl":"10.3103/S0146411625701019","url":null,"abstract":"<p>Existing methods for detecting attacks on data integrity in file systems are studied. A detection method based on the use of several entropy metrics is proposed. The effectiveness of the proposed method is evaluated using the example of detecting existing ransomware programs.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"59 8","pages":"1457 - 1463"},"PeriodicalIF":0.5,"publicationDate":"2026-02-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147341658","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

{"title":"Protection of DevOps Pipelines: Automation of Security within DevSecOps","authors":"S. V. Bezzateev,&nbsp;A. V. Blinov","doi":"10.3103/S0146411625701123","DOIUrl":"10.3103/S0146411625701123","url":null,"abstract":"<p>The research focuses on methods for automating security in DevOps pipelines within the DevSecOps framework, emphasizing the integration of tools, processes, and cultural shifts to enhance the security of software products. The research set the following tasks: analysis of modern DevSecOps methodologies and tools; assess the potential of using artificial intelligence and machine learning to automate information security tasks; identify the main problems and barriers to integrating DevSecOps into continuous integration and delivery (CI/CD) processes; identify promising areas for automation development in the field of security. The study uses a comparative analytical review method, including an analysis of scientific literature, industrial practices and documentation of modern DevSecOps tools, the “Shift-Left Security” and “Security as Code” approaches. Open sources, CI/CD platform documentation, and data on the use of AI in information security were used. The research identifies key principles for integrating security into DevOps: early vulnerability detection, automation of security processes, implementation of “Security as Code,” and enhanced threat monitoring. Modern DevSecOps tools are reviewed, including static and dynamic code analysis, security policy management systems, secret management solutions, and AI-powered proactive threat detection mechanisms. The study finds that automation minimizes human error, accelerates vulnerability detection and remediation processes, and ensures compliance with regulatory requirements. However, certain limitations were also identified, including the complexity of tool integration, a shortage of DevSecOps specialists, and resistance to changes within development and operations teams. Future trends indicate further advancements in AI-driven solutions and automated frameworks for security manage-ment. This research contributes to the field of information security by uncovering methods for automating DevSecOps integration into CI/CD processes and exploring the potential of AI for predictive threat analytics. It highlights key trends in security automation within modern cloud and containerized environments.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"59 8","pages":"1527 - 1535"},"PeriodicalIF":0.5,"publicationDate":"2026-02-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147341659","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}