D. S. Lavrova, V. M. Bogina, D. P. Zegzhda, E. Yu. Pavlenko
{"title":"Probabilistic Approach to Estimate the Cyber Resistance of Mobile Networks Based on Their Connectivity","authors":"D. S. Lavrova, V. M. Bogina, D. P. Zegzhda, E. Yu. Pavlenko","doi":"10.3103/S0146411623080151","DOIUrl":"10.3103/S0146411623080151","url":null,"abstract":"<p>In the paper, we propose an approach to estimate the cyber resilience of mobile networks based on an estimate of the probability that the network will remain connected in the face of random movement of its nodes. The approach is aimed at countering attacks specific to mobile networks by capturing and impersonating one or more nodes, as a result of which the network loses the ability to perform its target function.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"57 8","pages":"1103 - 1115"},"PeriodicalIF":0.6,"publicationDate":"2024-02-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140001604","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Risk Assessment of Using Open Source Projects: Analysis of the Existing Approaches","authors":"M. A. Eremeev, I. I. Zakharchuk","doi":"10.3103/S0146411623080059","DOIUrl":"10.3103/S0146411623080059","url":null,"abstract":"<p>This article analyzes the existing approaches to assess and account for the components used in software, including open source software. The existing frameworks for assessing software development processes, including information security, are analyzed. The typical risks of using open source components and free licenses are considered. The possibility of assessing development processes to identify threats to information security in open source projects and the need to automate this process in order to ensure the efficiency of dependence management in projects that use open components as dependencies are noted.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"57 8","pages":"938 - 946"},"PeriodicalIF":0.6,"publicationDate":"2024-02-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140889950","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Confidentiality of Machine Learning Models","authors":"M. A. Poltavtseva, E. A. Rudnitskaya","doi":"10.3103/S0146411623080242","DOIUrl":"10.3103/S0146411623080242","url":null,"abstract":"<p>This article is about ensuring the confidentiality of models using machine learning systems. The aim of this study is to ensure the confidentiality of models when using machine learning systems. This study analyzes attacks aimed at violating the confidentiality of these models and methods of protection from this type of attack, as a result of which the task of protecting against this type of attack is formulated as a search for anomalies in the input data. A method is proposed for detecting abnormalities in the input data based on the statistical data, taking into consideration the resumption of the attack by the intruder under a different account. The results obtained can be used as a base for designing components of machine learning security systems.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"57 8","pages":"975 - 982"},"PeriodicalIF":0.6,"publicationDate":"2024-02-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140889776","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
M. V. Shakurskii, O. A. Karaulova, E. S. Kartashevskaya
{"title":"Resistance of a Two-Component Steganographic System to Unauthorized Information Extraction","authors":"M. V. Shakurskii, O. A. Karaulova, E. S. Kartashevskaya","doi":"10.3103/S014641162308028X","DOIUrl":"10.3103/S014641162308028X","url":null,"abstract":"<p>In the classical sense, steganography does not pursue the goal of protecting information from extraction, but the use of a two-component steganographic system ensures not only information masking but also cryptographic strength. The article examines the resistance of the steganographic system for embedding a two-component container to information extraction.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"57 8","pages":"862 - 867"},"PeriodicalIF":0.6,"publicationDate":"2024-02-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140001810","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Assessing the Security of a Cyber-Physical System Based on an Analysis of Malware Signatures","authors":"D. A. Moskvin","doi":"10.3103/S0146411623080175","DOIUrl":"10.3103/S0146411623080175","url":null,"abstract":"<p>The structure and basic properties of a generalized cyber-physical system are studied. Information security problems and basic approaches to ensuring the cyber security of these systems are analyzed. A method based on the analysis of the indicators of compromise for assessing the degree of compromise of a generalized cyber-physical system is presented.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"57 8","pages":"894 - 903"},"PeriodicalIF":0.6,"publicationDate":"2024-02-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"142414911","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Application of a Neocortex Model to Identify Contextual Anomalies in the Industrial Internet of Things Network Traffic","authors":"G. A. Markov","doi":"10.3103/S0146411623080163","DOIUrl":"10.3103/S0146411623080163","url":null,"abstract":"<p>This paper examines the problem of identifying network anomalies when processing data streams in industrial systems. A network anomaly refers to a malicious signature and the current context: network environment and topology, routing parameters, and node characteristics. As a result of the study, it is proposed to use a neocortex model that supports the memory mechanism to detect network anomalies.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"57 8","pages":"1018 - 1024"},"PeriodicalIF":0.6,"publicationDate":"2024-02-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140888813","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Data Modeling in Big Data Systems Including Polystore and Heterogeneous Information Processing Components","authors":"M. A. Poltavtseva","doi":"10.3103/S0146411623080266","DOIUrl":"10.3103/S0146411623080266","url":null,"abstract":"<p>This paper is studies modeling data in big data systems, including polystores and other heterogeneous information processing components. Currently, several works propose to harmonize polystore data models in this domain. This study considers various proposed methods; however, these solutions are not suitable for direct use for solving information security problems. Requirements on modeling the considered objects for solving security tasks and the level-sensitive modeling method based on the general security concept of polystores within a consistent approach are formulated. This study presents an authentic classification of the structure of data models of modern polystores and DBMSs, taking into account the mathematical framework in use. A new methodology of three-level modeling of data and processes in an object for protection is proposed; and the basics of models for all data representation levels are formulated. The results of this study lay the foundation for the integrated representation of data and processes for solving security problems and analyzing the security of big data systems.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"57 8","pages":"1096 - 1102"},"PeriodicalIF":0.6,"publicationDate":"2024-02-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140888888","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Empirical Study of the Stability of a Linear Filter Based on the Neyman–Pearson Criterion to Changes in the Average Values","authors":"R. A. Ognev, D. P. Zegzhda","doi":"10.3103/S0146411623080199","DOIUrl":"10.3103/S0146411623080199","url":null,"abstract":"<p>The statement about the stability of a linear filter built based on the Neyman–Pearson criterion is verified by performing falsifying experiments. No relationship is found between the number of small eigenvalues of the noise covariance matrix and network stability.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"57 8","pages":"933 - 937"},"PeriodicalIF":0.6,"publicationDate":"2024-02-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140001603","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"A Decentralized Approach to Intrusion Detection in Dynamic Networks of the Internet of Things Based on Multiagent Reinforcement Learning with Interagent Interaction","authors":"M. O. Kalinin, E. I. Tkacheva","doi":"10.3103/S0146411623080096","DOIUrl":"10.3103/S0146411623080096","url":null,"abstract":"<p>The application of multiagent reinforcement learning technology to solve the problem of intrusion detection in the Internet of Things (IoT) systems is considered. Three models of a multiagent intrusion detection system are implemented: a completely decentralized system, a system with the transfer of forecast data, and a system with the transfer of observation data. The experimental results are given in comparison with the Suricata open-code intrusion detection system. The considered architectures of multiagent systems are shown to be free from the shortcomings of the existing solutions.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"57 8","pages":"1025 - 1032"},"PeriodicalIF":0.6,"publicationDate":"2024-02-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140888803","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Method for the Adaptive Neutralization of Structural Breaches in Cyber-Physical Systems Based on Graph Artificial Neural Networks","authors":"E. B. Aleksandrova, A. A. Shtyrkina","doi":"10.3103/S0146411623080011","DOIUrl":"10.3103/S0146411623080011","url":null,"abstract":"<p>This paper presents a model of threats in cyber-physical systems (CPSs) with examples of attacks and potential negative consequences for systems for various purposes. It is concluded that the critical consequences of attacks are associated with data exchange breaches within a system. Therefore, the CPS security problem is confined to restoring the data exchange efficiency. To neutralize the consequences, which are negative for data exchange, it is proposed to use graph artificial neural networks (ANNs). The contemporary architectures of graph ANNs are reviewed. An algorithm for the generation of a synthetic training dataset is developed and implemented to model the network traffic intensity and load of devices in a system based on graph centrality measures. A graph ANN is trained for the problem of reconfiguring the graph of a CPS.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"57 8","pages":"1076 - 1083"},"PeriodicalIF":0.6,"publicationDate":"2024-02-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140888805","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}