{"title":"在自适应日志记录方法的背景下比较消息传递系统","authors":"I. Suprunenko, V. Rudnytskyi","doi":"10.35546/kntu2078-4481.2024.2.32","DOIUrl":null,"url":null,"abstract":"Computer software is an important part of technological progress. As it becomes more and more complex and sophisticated, so does the need to protect it. Apart from typical information security aspects of integrity, availability and confidentiality, the scale and complexity of modern computer systems require a high level of control and observability. The main goal of this research is to build upon the foundations laid by the general idea of an adaptive logging method and introduce the next iteration of its design in the form of an appropriate message passing system to be used to propagate required changes to corresponding implementation in an effective and performant manner. Four different message passing system models are introduced, based on different technologies such as RabbitMQ message broker, communication channels in PostgreSQL database management system, general web server architecture and Linux-based process signaling interface. For each of those an overview description and graphical model is presented. Finally, the resulting comparison is conducted, comparing aspects such as reliance on third-party software, communication medium, error surface increase and authentication related considerations. As a result, the design based on process signaling approach is determined to be the most suitable for adaptive logging method, as it does not introduce any third-party software (and as such affects error surface in a somewhat negligible manner), binds directly to an observed application, is built using low level concepts that should be present in multiple different platforms and programming languages and should be able to reuse authentication logic that is already used when accessing computational machine where observed program is executed.","PeriodicalId":518826,"journal":{"name":"Вісник Херсонського національного технічного університету","volume":null,"pages":null},"PeriodicalIF":0.0000,"publicationDate":"2024-07-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"COMPARISON OF MESSAGE PASSING SYSTEMS IN CONTEXT OF ADAPTIVE LOGGING METHOD\",\"authors\":\"I. Suprunenko, V. Rudnytskyi\",\"doi\":\"10.35546/kntu2078-4481.2024.2.32\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Computer software is an important part of technological progress. As it becomes more and more complex and sophisticated, so does the need to protect it. Apart from typical information security aspects of integrity, availability and confidentiality, the scale and complexity of modern computer systems require a high level of control and observability. The main goal of this research is to build upon the foundations laid by the general idea of an adaptive logging method and introduce the next iteration of its design in the form of an appropriate message passing system to be used to propagate required changes to corresponding implementation in an effective and performant manner. Four different message passing system models are introduced, based on different technologies such as RabbitMQ message broker, communication channels in PostgreSQL database management system, general web server architecture and Linux-based process signaling interface. For each of those an overview description and graphical model is presented. Finally, the resulting comparison is conducted, comparing aspects such as reliance on third-party software, communication medium, error surface increase and authentication related considerations. As a result, the design based on process signaling approach is determined to be the most suitable for adaptive logging method, as it does not introduce any third-party software (and as such affects error surface in a somewhat negligible manner), binds directly to an observed application, is built using low level concepts that should be present in multiple different platforms and programming languages and should be able to reuse authentication logic that is already used when accessing computational machine where observed program is executed.\",\"PeriodicalId\":518826,\"journal\":{\"name\":\"Вісник Херсонського національного технічного університету\",\"volume\":null,\"pages\":null},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2024-07-02\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Вісник Херсонського національного технічного університету\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.35546/kntu2078-4481.2024.2.32\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Вісник Херсонського національного технічного університету","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.35546/kntu2078-4481.2024.2.32","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0
摘要
计算机软件是技术进步的重要组成部分。随着软件变得越来越复杂和精密,对其进行保护的需求也越来越大。除了完整性、可用性和保密性等典型的信息安全方面,现代计算机系统的规模和复杂性还要求高度的可控性和可观测性。本研究的主要目标是在自适应日志记录方法的总体思路所奠定的基础上,以适当的消息传递系统的形式引入其设计的下一次迭代,以有效和高性能的方式将所需的更改传播到相应的实现中。本文介绍了四种不同的消息传递系统模型,它们基于不同的技术,如 RabbitMQ 消息代理、PostgreSQL 数据库管理系统中的通信通道、通用网络服务器架构和基于 Linux 的进程信号接口。每个模型都有一个概述和图形模型。最后,对结果进行了比较,比较的方面包括对第三方软件的依赖、通信介质、错误率的增加以及与身份验证相关的考虑因素。结果,基于进程信号方法的设计被认为是最适合自适应日志记录方法的,因为它不引入任何第三方软件(因此对错误面的影响可以忽略不计),直接绑定到观察应用程序,使用底层概念构建,可用于多种不同平台和编程语言,并且能够重复使用访问执行观察程序的计算机器时已经使用的验证逻辑。
COMPARISON OF MESSAGE PASSING SYSTEMS IN CONTEXT OF ADAPTIVE LOGGING METHOD
Computer software is an important part of technological progress. As it becomes more and more complex and sophisticated, so does the need to protect it. Apart from typical information security aspects of integrity, availability and confidentiality, the scale and complexity of modern computer systems require a high level of control and observability. The main goal of this research is to build upon the foundations laid by the general idea of an adaptive logging method and introduce the next iteration of its design in the form of an appropriate message passing system to be used to propagate required changes to corresponding implementation in an effective and performant manner. Four different message passing system models are introduced, based on different technologies such as RabbitMQ message broker, communication channels in PostgreSQL database management system, general web server architecture and Linux-based process signaling interface. For each of those an overview description and graphical model is presented. Finally, the resulting comparison is conducted, comparing aspects such as reliance on third-party software, communication medium, error surface increase and authentication related considerations. As a result, the design based on process signaling approach is determined to be the most suitable for adaptive logging method, as it does not introduce any third-party software (and as such affects error surface in a somewhat negligible manner), binds directly to an observed application, is built using low level concepts that should be present in multiple different platforms and programming languages and should be able to reuse authentication logic that is already used when accessing computational machine where observed program is executed.