Cybersecurity: Education, Science, Technique

24-36

Authors: Anna Ilyenko , Sergii Ilyenko , Diana Kvasha

Considering computer-integrated aviation systems that provide a link between civil aviation activities within the ground-to-air and air-to-air channels, the question of the safe operation of such aviation systems from an ever-increasing cyber threats, and the decline in cybersecurity for the aviation industry as a whole. The protection status of ground-to-air and air-to-air channels in such aviation systems is at different levels and depends directly on the activity of all components of aviation activity (airport-aircraft-information network-air traffic management, etc.). To date, some communication channels are not secure at all and are in an open state, which provokes a rapid growth of cyber-attacks and requires the introduction and application of modern information and communication technologies in such communication channels. In view of the ever-increasing cyber statistics on the work of civil aviation worldwide, the authors of the article highlighted the current state of cyber security and protection of ground-to-air and air-to-air channels of the aircraft fleet of Ukrainian airlines, and take a closer look at the world experience. The authors comprehensively covered all components of the aviation system, with particular attention given to aircraft designed by Antonov Design Bureau with the time evolution of tire development and data networks of the world's leading aviation industry leaders (such as Airbus and Boeing). Also, attention is given to the present state and mechanisms of data transmission of the ground-to-air and air-to-air channels and the architecture of the modern air-network of computer-integrated aviation systems. The authors plan a number of scientific and technical solutions for the development and implementation of effective methods and means to ensure the requirements, principles and sub-approaches to ensure cyber security and the organization of protection of ground-to-air and air-to-air channels in experimental computer-integrated aviation systems.

45-58

Authors: Valerii Lakhno, Borys Husiev, Andrii Blozva, Dmytro Kasatkin, Tetiana Osypova

The paper proposes an algorithm with self-learning elements for intrusion detection systems, as well as an improved clustering technique which is recorded by the data system concerning information security events. The proposed approaches differ from those known using an entropy approach allowing data to be presented as homogeneous groups, moreover, each such group (or cluster) may correspond to predetermined parameters. The proposed solutions relate to the possibilities of assessing dynamic dependencies between clusters characterizing the analysed classes of invasions. The studies have found that in case of manifestation of new signs of information security events, the corresponding scale changes and describes the distances between clusters. A computational experiment was conducted to verify the operability and adequacy of the proposed solutions. During the computational experiment, it has been found that step-by-step calculation of parameters of informative characteristics of network attacks allows to form sufficiently informative cluster structures of data having characteristic attributes. These attributes further become the basis for the knowledge base of intelligent network attack detection systems. Dynamic dependencies between clusters are calculated allowing for a sufficiently accurate definition of the many information security events that can become the source data for further automatic assessment of current threats extent detected by attack detection systems. The methodology and algorithm presented in the paper for clustering the signs of network attacks, in our opinion it is simpler for software implementation than existing analogues.

69-84

Authors: Oleksandr Belei, Oksana Svatiuk

An analysis of the physical characteristics of the node, which can be attacked by an attacker. A method of detecting a damaged node with a violation of the physical characteristics of the network node, which is based on the use of probability functions, calculation of the confidence interval and the probability of deviation of current values from the confidence interval. Its novelty lies in the possibility of detecting a damaged node by estimating the current value of the function in the confidence interval, without comparing the distribution function of the current node with the reference distribution. The analysis of physical parameters of network nodes for detection of the malefactor in contrast to existing systems of detection of attacks which allow to carry out only the analysis of network traffic is carried out. Based on the developed algorithm by modeling the transmission of chaotic signals in a wireless sensor network, the effectiveness of attack detection is determined through the analysis of residual energy and node congestion parameters, expanding the range of attacks that the network is able to counteract compared to system analogues. During the simulation of the behavior of the wireless sensor network, it was determined that the data transmission processes are chaotic. Therefore, to enhance the security of data transmission in a chaotic mode, we have proposed an encryption algorithm using dynamic chaos, coordinate delay methods and singular spectral analysis. A comparative analysis of the parameters of the input and output sequences of the developed encryption algorithm based on dynamic chaos with standard data encryption algorithms is performed. It is established that the encryption parameters that are characteristic of the original sequences of the encryption algorithm using dynamic chaos are not worse than the encryption parameters obtained for the source sequences of standard encryption algorithms. Estimation of node load by means of threshold analysis of their current values in the confidence interval is used to detect network deviations during a cyberattack. The developed algorithm allows to diagnose attacks such as "Denial of Service" and "Sibyl" at the beginning of their appearance and to determine possible ways to avoid them.

93-103

Authors: Tetyana Shabelnik , Serhii Krivenko , Olena Koneva

One of the most pressing problems of piloting unmanned aerial vehicles (UAV) in the absence of radio communication is considered in the article. Therefore, the aim of the article is to develop an algorithm and method of automatic piloting of UAV in terms of loss of radio control signal using the methods of technical vision. The most effective methods of tracking, identification and detection of landmarks are based on the comparison of reference information (database of known navigation objects) with the observation scene in real time.Working system of automatic piloting of UAVs in the conditions of loss of radio control signal or GPS-navigation developed. The hardware and software of the UAV provides full automatic control. The programming of the system consists of two stages: planning the flight task and calculating the trajectory of the UAV in flight. The planning of the flight task is carried out by setting the topographic landmarks and flight parameters in relation to them. At this stage, the criteria for the generalization of the various components of the landscape are formed and their division by gradations. This work is combined with the recognition of points with altitude marks, and fixing the heights of horizontal surfaces available in the area. All horizontal surfaces are tied with the shortest shooting strokes to at least of three points with elevations. The process of topography-based object selection is directly related to its segmentation, the results of which significantly affect the further process of image analysis and UAV control. The calibration of the starting point of the route occurs during the launch of the UAV. The control system automatically monitors the location of the UAV throughout the trajectory of the movement on a topographic basis relative to the prespecified landmarks. Structured shots of the terrain and topographic bases are compared during the flight. The algorithm is based on the comparison of geometric parameters of landmarks. The parameters of the geometric center O(x, y) and the area S are taken into account by such parameters. The control signal in the three axes OX, OY and OZ is determined for the first time by the method of least squares depending on the values ​​of the calculated coefficients of the original equations.

115-125

Authors: Volodymyr Barannik, Yurii Babenko , Valeriy Barannik , Valerii Yroshenko , Sergii Shulgin

The presence of an imbalance caused by an insufficient level of performance of modern and promising infocommunication technologies with respect to the information intensity of bit streams is shown. It is substantiated that a decrease in the level of imbalance is organized as a result of an increase in the efficiency of information processing technologies. It is substantiated that at the moment the JPEG platform is the basic concept for building compression technologies. In accordance with this, it is proposed to organize the further development of methods for processing video resources using individual components of the JPEG platform in the direction of increasing the integrity of information while ensuring the required level of its availability. The development of a syntactic representation of a significant microsegment of a video frame in spectral space based on local-positional coding of structural vectors of significant transformant components and lengths of zero components with the subsequent formation of uniform codograms, the positioning of which is determined by the dynamic ranges of the corresponding code values ​​using structural bases, is presented. It is shown that the created video resource encoding methods based on the developed concept of processing significant segments provide a reduction in the delivery time of information under the conditions of the required level of its integrity, i.e. an increase in the level of information security is achieved.

140-148

Authors: Oleksandra Tsyra, Nataliia Punchenko, Oleksii Fraze-Frazenko

The article analyzes the main aspects of creating virtual assistants that are part of intelligent computer programs – artificial intelligence systems (AI). The main task of “artificial intelligence” is to ensure effective communication of intelligent robotic systems (including unmanned vehicles) with humans. The basis of the above is in-depth training (systematic machine translation, speech recognition, processing of complex texts in natural languages, computer vision, automation of driving, etc.). This machine learning subsystem can be characterized using neural network models that mimic the brain. Any neural network model learns from large data sets, so it acquires some “skills”, but how it uses them remains for engineers, which ultimately becomes one of the most important problems for many deep learning applications. The reason is that such a model is formal and without an understanding of the logic of its actions. This raises the question: is it possible to increase the level of trust in such systems based on machine learning? Machine learning algorithms are complex mathematical descriptions and procedures and have a growing impact on people's lives. As the decision is increasingly determined by the algorithms, they become less transparent and understandable. Based on the foregoing, the paper considers the issues of the technological component and the algorithms of virtual digital assistants, conducts information modeling based on the conceptual model of the interaction of the virtual assistant with the database, and analyzes the scope and further development of the IT-sphere.

159-169

Authors: Volodymyr Buriachok , Nataliia Korshun , Svitlana Shevchenko , Pavlo Skladannyi

The article is devoted to the problem of practical skills building and development of students majoring in 125 "Cybersecurity". An analysis of the professional competencies of future cybersecurity professionals, in particular, related to technical protection of information. It is proved that the use of virtual laboratories in the educational process helps to increase the efficiency of the educational process and allows to form and improve the professional competencies of the future cybersecurity engineer. Education becomes practice-oriented. The possibilities of a virtual laboratory workshop based on the NI Multisim environment are considered in the study of disciplines "Theory of circles and signals in information and cyberspace", "Component base and elements of circuitry in information security systems", "Signals and processes in information security systems". The Multisim system is used as part of the training of future cybersecurity professionals at Borys Grinchenko Kyiv University and has proven its effectiveness in practice.

22-33

Authors: Hennadii Hulak, George Otto

Methods and models of systems for remote measurement and recording of vibrations with amplitude less than 10 nanometers are investigated on the basis of coherent laser sources. The mathematical model of the Doppler effect is analyzed. The basic characteristics of perspective measurement systems are determined. The modern tendencies of development of the direction of laser Doppler vibrometers and the scope of their application are revealed, as well as the expediency of further researches is substantiated. Observations of vibrations of various objects, their registration and analysis in the natural and applied sciences are one of the main methods on which the study of natural objects and phenomena, diagnostics in medicine and technology, the solution of special problems in military and law enforcement activities, ensuring information security at the objects of information activity, etc. In many cases, due to the specificity of the investigated objects, direct access to them is not possible or approaching the measurement object is unsafe for the researcher. The above determines the relevance of research into the problems and principles of building reliable information technologies for remote measurement of vibration, ensuring their high guaranteeability, including information security, resolution. Of particular interest in practical applications are technologies capable of distinguishing vibrations with an amplitude of less than 10 nanometers (hereinafter referred to as nanovibrations). Therefore, to select the essential parameters of designing a domestic product (laser vibrometer) and look for opportunities to increase the sensitivity of such products, the article elaborated and formed a set of qualitative and technical characteristics of existing devices for remote measurement of nanovibrations and provided comments on the solution of the sensitivity problem.

49-60

Authors: Roman Drahuntsov, Dmytro Rabchun, Zoreslava Brzhevska

In this article common attack vectors on the information systems, which are based on the Android client applications, are observed, analyzed and compared. The purpose of this analysis consists in creating the theoretical base for development the practical principles of securing the architecture level of such systems. To accomplish the aims set, there was conducted the categorization of attacks and vulnerabilities specific to the Android information infrastructure and environment. There were also conducted analysis of Android application functional components and typical underlying infrastructure which have possible impact on a system security. Available data about the widespread vulnerabilities of the described elements was analyzed in context of possible exploitation. Based on the Android application usage model there were figured out several adversary models and attack vectors related to the researched information system type. Developed adversary models were formed with a focus on technical possibilities and threat abstraction. Mentioned vectors can be used by an attacker to violate the confidentiality and integrity of critical information in the system. The carried out research was used to form the characteristic comparison of the mentioned vectors and adversary models to evaluate the attack surface on the different parts of information system represented as attack vectors. As a result, we have developed the theoretical principles for securing the architecture of Android applications-driven information systems. Achieved results can be used to form the threat and adversary model, create practical recommendations for the information risk reducing practices in Android-applications driven information systems and to develop the technical requirements for security testing and development.

73-84

Authors: Mykhailo Tyhanskyi, Andrii Partyka

The goal of this work is to find ways of enhancing the speed of computer memory cells by using structures that employ operating principles other than those of traditional semiconductors’ schemes. One of the applications of the unique properties of Josephson structures is their usage in novel superfast computer memory cells. Thanks to their high working characteristic frequencies close to 1 THz, the Josephson structures are most promising candidates to be used in petaflop computers. Moreover, both Josephson cryotrons and Josephson SQUIDs can be used in qubits, which are basic units in quantum computers, and also for describing a macroscopic quantum behavior, for example, during read-out processes in quantum computations. In the present work, we have created a mathematical model of transition processes in Josephson cryotrons during direct, “1” → ”0”, as well as inverse, “0” → “1”, logical transitions. We have considered controlling the logical state of Josephson memory cells based on Josephson tunneling junctions of the S-I-S type via external current pulses. By means of mathematical modelling, we have studied transition processes in cryotrons during the change of their logical state and calculated their transition characteristics for working temperatures T1 = 11.6 K and T2 = 81.2 K, which ale close to the boiling temperatures of helium and nitrogen, respectively. It has been shown that such memory cells can effectively operate at the working temperature T2 = 81.2 K. We have determined commutation times for both the direct “0” → “1” and inverse “0” → “1” transitions. We have also identified peculiar behaviors of the Josephson cryotrons based memory cells and studied the stability of their operation.

97-112

Authors: Danylo Svatiuk, Oksana Svatiuk , Oleksandr Belei

The article is devoted to analyzing methods for recognizing images and finding them in the video stream. The evolution of the structure of convolutional neural networks used in the field of computer video flow diagnostics is analyzed. The performance of video flow diagnostics algorithms and car license plate recognition has been evaluated. The technique of recognizing the license plates of cars in the video stream of transport neural networks is described. The study focuses on the creation of a combined system that combines artificial intelligence and computer vision based on fuzzy logic. To solve the problem of license plate image recognition in the video stream of the transport system, a method of image recognition in a continuous video stream with its implementation based on the composition of traditional image processing methods and neural networks with convolutional and periodic layers is proposed. The structure and peculiarities of functioning of the intelligent distributed system of urban transport safety, which feature is the use of mobile devices connected to a single network, are described. A practical implementation of a software application for recognizing car license plates by mobile devices on the Android operating system platform has been proposed and implemented. Various real-time vehicle license plate recognition scenarios have been developed and stored in a database for further analysis and use. The proposed application uses two different specialized neural networks: one for detecting objects in the video stream, the other for recognizing text from the selected image. Testing and analysis of software applications on the Android operating system platform for license plate recognition in real time confirmed the functionality of the proposed mathematical software and can be used to securely analyze the license plates of cars in the scanned video stream by comparing with license plates in the existing database. The authors have implemented the operation of the method of convolutional neural networks detection and recognition of license plates, personnel and critical situations in the video stream from cameras of mobile devices in real time. The possibility of its application in the field of safe identification of car license plates has been demonstrated.

124-134

Authors: Anna Ilyenko , Sergii Ilyenko , Tatiana Kulish

The article deals with the problem of ensuring information security of the Windows operating system and identifying promising security methods. This article identifies that the basic approach to operating system security is the "hardening of the operating system" process. The study presents statistics on the distribution of popular operating systems, namely Windows, Mac, Linux, Chrome, BSD. The analysis and classification of modern vulnerabilities of the operating system is made and the consequences of their action are given in the examples. These deficiencies can cause a computer system to intentionally violate the confidentiality, integrity and accessibility of information and the system as a whole. Based on the vulnerability analysis, the basic approaches and methods for the organization of protection of the operating system are determined. Standard approaches are discussed, namely the use of built-in security software, Active Directory security, and virtualization to deter attacks. Today, much attention is paid to cryptography and the principles of network, system, organizational and operational security, including risk analysis and disaster recovery, to ensure the security of the operating system. These approaches are basic and are a component of security in today's operating systems, but nowadays, using integrated approaches is more effective. A quick response to the violation of the integrity and accessibility of the operating system in combination with quenching, here are the main directions of development and improvement of the operating system. A rather new approach proposed in the article to protect Windows products is to use the Blockchain direction. It is currently used to validate digital certificates and can be said to have potential in other areas of operating system security. This paper shows examples of Blockchain implementation for certificate validation, taking into account some of the variations of validation. The examples are implemented in Python 3.0. The research of prospective methods and remedies of the operating system conducted in the article suggests that the use of system hardening is one of the effective and comprehensive approaches to providing security information, which will allow timely detection of vulnerabilities and timely response to violations of the basic properties of the operating system.

149-164

Authors: Volodymyr Hrytsyk , Mariya Nazarkevych , Andrij Dyshko

Today, in an era of integration of artificial intelligence systems in almost every industry, very demand are studies of classification methods that, prior to their introduction into decision support systems. Compare analysis of the secant planes method, method of the potentials and potential method in the field of receptors are shown in the paper. At first, in introduction, authors shew needs of autonomic systems of adaptive perception on visible diapason of specter. As particularly aim, these methods are compared by criteria of speed, accuracy and amount of storage used after training. As general idea we are looking for we are looking for methodic of the best combination of method for different condition on observe field of visual spectral diapason. Theories of the every method are presented, and then tables of compare analysis of results are shown. Step-by-step comparative experiments are described in detail. Changes at each step are shown in detail in the tables of the corresponding signs. Moreover, at the end of the paper, comparative characteristics of each method with the same learning time in same type of experiments for each method are presented. As a result, in the first group of tables , we see a difference in the recognition time and the amount of memory required for correct operation. Those are truth tables for two points, three points, two points and two planes, three points and two planes, three points and three planes, three points and seven planes. The conclusion gives a thorough explanation of where to use the best method. The needs of the system for computing resources in the application of each mode are presented and corresponding dependencies are derived. Next, If you train several times on the same object (ie, train several times), you can expect that the errors in the breakdown of the receptor space will be different. In this case, you can improve the performance of the algorithm by parallelizing its process into several threads. Using this method simultaneously and independently of each other on the same image is multi-threaded learning on multiple computer kernels. When recognizing new objects, they will refer to some image, not necessarily the same. The final decision is made by "vote" - the object refers to the image to which it was attributed to a greater number of parallel streams.

174-191

Authors: Oleg Burba, Yuriy Kopytin, Olga Pasichnyk, Andriy Piskun

The article covers outputs of the research on development of methodological aspects applied under digital transformation of public services and based on the procedures suggested for formalizing the reengineering process used for related service provision administrative processes in accordance with the capacity delivered by advanced information technologies. The Introduction outlines the issue in general, which is mostly related to the fact that the most of the general population enjoy no public services at all despite the implementation of the e-governance concept. It also analyzes the reasons resulting in a problematic situation described above which, among others, include complicated procedures used to both provide and access public (administrative services); lack of related information; lengthy terms of service provision caused by unavailability of information systems capable of ensuring proper data exchange between state electronic information resources and administrative bodies or agencies; lack of state standardization efforts in public service provision, etc. The analysis used to study recent research and publications confirmed that only general aspects of administrative processes used prior to public service provision in the electronic format has been more or less fully processed so far. As for the formalization of public service digitalization implemented through methodological approaches deemed as compatible for use, the matter at hand remains open and requires further research. With the above in mind, the paper states the purpose of related research formulated as the development of methodological support to digital transformation of public services while objectives of the above are focused on the formalization of the reengineering process for public services and development of related procedures fit for practical use. The outputs of the research describe the general methodological approach to digital transformation of public services based on “as is” and “to be” models. The paper proposes to consider the Administrative Service Register as the information basis used to develop an “as is” model. A register as such contains unified service names, documents, standardized administrative process descriptions as well as results of an audit covering state electronic information resources. The developed “as is” model should be used as a frame to define service information links, to implement audit and streamlining (reengineering) of public service provision procedures (administrative processes) as well as to integrate real life services. As a result, there will be designed the vision of public service provision (a “to be” model) to be implemented further on. The vision is defined as a technical option used to provide public services as a synthesis of service provision administrative processes and information processing tools. At the same time, the objective implying the vision development for a set of public services involves the selection of a specific option used to implement a set of related administrative processes while ensuring ultimate performance in terms of provision of a public service set concerned. The idea of the formalized objective is to select a set of administrative processes used for public service provision at service providers and data exchange between them with the use of related technologies ensuring minimum costs for the whole service set. According to the objective defined and aggregative–decomposition method applied, a respective solution is brought down to two stages: building a graph-based structure for administrative process options used under a certain set of public services (the “as is” model) in accordance with their links; afterwards, the above graph-based structure allows tracking the shortest route to define the appropriate option for administrative processes to be applied under the whole set of public services with the use of respective information technologies (the “to be” model, vision). The Conclusion describes the major research outputs and further explorative prospects.

17-30

Authors: Tamara Radivilova, Lyudmyla Kirichenko, Maksym Tawalbeh, Petro Zinchenko, Vitalii Bulakh

he problem of load balancing in intrusion detection systems is considered in this paper. The analysis of existing problems of load balancing and modern methods of their solution are carried out. Types of intrusion detection systems and their description are given. A description of the intrusion detection system, its location, and the functioning of its elements in the computer system are provided. Comparative analysis of load balancing methods based on packet inspection and service time calculation is performed. An analysis of the causes of load imbalance in the intrusion detection system elements and the effects of load imbalance is also presented. A model of a network intrusion detection system based on packet signature analysis is presented. This paper describes the multifractal properties of traffic. Based on the analysis of intrusion detection systems, multifractal traffic properties and load balancing problem, the method of balancing is proposed, which is based on the funcsioning of the intrusion detection system elements and analysis of multifractal properties of incoming traffic. The proposed method takes into account the time of deep packet inspection required to compare a packet with signatures, which is calculated based on the calculation of the information flow multifractality degree. Load balancing rules are generated by the estimated average time of deep packet inspection and traffic multifractal parameters. This paper presents the simulation results of the proposed load balancing method compared to the standard method. It is shown that the load balancing method proposed in this paper provides for a uniform load distribution at the intrusion detection system elements. This allows for high speed and accuracy of intrusion detection with high-quality multifractal load balancing.

43-62

Authors: Tetyana Smirnova, Liudmyla Polishchuk , Oleksii Smirnov, Kostiantyn Buravchenko, Andrii Makevnin

In order to determine the basic conditions for further research to identify threats to cloud technologies and measures for their counteraction, the article provides an extended analysis of cloud computing as a service. Among the above services, the basic services IaaS, SaaS, PaaS are selected, which are the basis for the existence of more unified services (CaaS, MCaS, DaaS, FaaS, IPaaS, MBaaS, NaaS, SeCaa, DBaaS, MaaS, DBaaS, MaaS, DBaaS, MaaS that increase the scope. Listed are possible service providers, including Ukrainian. It is determined that in order to transfer the work of systems of engineering calculations and computer-aided design (CAD) systems to a cloud platform, a rather new promising service CAEaaS (Cоmputеr Аidеd Еnginееrіng аs а Sеrvіcе) – computer engineering systems as a service. The most popular SAEs are used in the following industries: mechanical engineering and machine tools, defense and aerospace, energy, shipbuilding, semiconductor production, telecommunications, chemical, pharmaceutical and medical industry, construction, production of heating, air conditioning, ventilation. The success of a project decision depends on the awareness of responsible choice in the very first stage. Unfortunately, in support of the CAEaaS cloud service, Ukraine is only making the first steps and can provide the technological needs of enterprises, provided the involvement of foreign suppliers. According to the authors of the article, the future of the Ukrainian industry according to the cloud service SAEaS. Because CAE helps reduce the cost and time of product development, improve product quality and durability. Design decisions can be made based on their impact on performance. Designs can be evaluated and refined using computer modeling rather than physical prototype testing, saving money and time. This article is the basis for further research on the identification of threats to cloud technologies and their response.

72-84

Authors: Svitlаnа Rzаiеvа , Dmуtrо Rzаiеv, Valeriy Kraskevich, Andrii Roskladka, Volodymir Gamaliy

The article addresses one of the most pressing problems for a trading enterprise, namely the problem of routing logistics flows for efficient enterprise management. To optimize itineraries, we use state-of-the-art electronic navigation and mapping systems that can be implemented in modern computer technology, from online services available on any computer to mobile devices. Navigation and mapping systems are distributed software complexes with an array of information stored in database management systems. They involve millions of static objects and huge amounts of dynamic data around the world. To optimize the logistics flows, an algorithm for an automated routing system is described. This system solves the problems of automatic calculation of the construction and recognition of the optimal route between the specified points of its beginning and the end, tracking of movement on a given route and, in the case of congested roads, redirection of logistics flows. Based on the researches and experiments on the formation of a cognitive map in the human mind and the perception of the route description, an algorithm for storing and displaying route data is considered. This algorithm takes into account the personal psychology of perception of cartographic information. Developing an algorithm for describing the routing of trading enterprise traffic flows is creating a model of automatically found path between the predetermined points of its beginning and end. This mapping information is personalized, easy to read, fast to remember, and insensitive to user errors. The proposed algorithm is universal and can be used to solve a wide range of problems of logistic flows optimization.

95-102

Authors: Mikola Zaharchenko, Matin Hadzhyiev, Nariman Salmanov, Denis Golev, Natalya Shvets

The advantages of digital methods of processing, displaying, storing and transmitting information. Currently, various conversion methods and efficient coding methods are used to increase the speed of information transfer, maintain high accuracy and provide the required latent accuracy. In particular, timer (temporary) signal constructions, which, in comparison with other coding methods, for example, positional (bitwise) coding, can reduce costs by more than two times. In the work, the information parameters of the code ensembles synthesized at a constant duration "m" are evaluated. Determined the conditions for the formation of a code ensemble and calculate the number of code dictionary implementations on a segment of a nyquist elements.In order to use the communication channel efficiently, the proposed increase in the entropy of the transmitted ensemble is due to the use of code sets with different number of information segments and at a constant length of the code word. A significant increase in the weight of the synthesized ensemble ensured an increase in the value of the module А0 =19 integer times K є 8:18 .The maximum values of the module are calculated in which the greatest number of code words is synthesized: At: КА0 =13, Np=8; КА0 =14, Np=10 КА0 =15, Np=15; КА0 =17, Np=16 КА0 =18, Np=10; КА0 =19, Np=6 КА0 =20, Np=1 For these КА0 values, the entropy value is H=3.269, which is less than the entropy of the Russian text H=4.35. In accordance with code words that satisfy the conditions of the quality equation. The methods and algorithms of reliable reception of code words under the influence of interference in the channel used were analyzed.Studies and calculations have shown that the use of temporary signal structures synthesized on the basis of a one module can significantly reduce the value of entropy for the transmission of Russian text.

115-130

Authors: Mariya Nazarkevych, Yaroslav Voznyi, Sergiy Dmytryk

Biometric images were pre-processed and filtered in two ways, by wavelet- Gabor and wavelet Ateb-gabor filtration. Ateb-based Gabor filter is effective for filtration because it contains generalizations of trigonometric functions. The wavelet transform of Ateb-Gabor function was developed. The function dependence on seven parameters was shown, each of them significantly changes the filtering results of biometric images. The Ateb-Gabor wavelet research was performed. Graphic dependencies of the wavelet Gabor filter and the wavelet Ateb-Gabor filter were constructed. The appliance of wavelet transform makes it possible to reduce the complexity of calculating an Ateb-Gabor filter by simplifying function calculations and reducing filtering time. The complexities of algorithms for calculating the wavelet Gabor filter and the wavelet Ateb-Gabor filter have been evaluated. Ateb-Gabor filtration allows you to adjust the intensity of the entire image, and to change certain ranges, thereby changing certain areas of the image. Biometric images should have this property, on which the minucius should be contrasting and clear. Ateb functions have the property of changing two rational parameters, which will allow to make more flexible control of filtration. The properties of the Ateb function, as well as the possibility of changing the amplitude of the function, the oscillation frequency by the numerical values of the Ateb-Gabor filter, were investigated. By using the parameters of the Ateb function, you can get a much larger range of shapes and sizes, which expands the number of possible filtration options. You can also perform filtration once, taking into account the direction of the minucius and reliably determine the sharpness of the edges, rather than perform filtration many times. The reliability of results were tested using NIST Special Database 302 and good filtration results were shown. This is confirmed by the comparison experiment between the wavelet-Gabor filter and the wavelet Ateb-Gabor function based on the PSNR signal-to-noise ratio measurement.

153-164

Authors: Hennadii Hulak

The components of ensuring the warranty of automated systems, which are subject to increased requirements in connection with their use in many sensitive areas of public activity, including national security and defense, critical industrial technologies, energy and communications, banking, environmental protection , technologies of legitimate distance learning, etc. Certain components can significantly affect the quality and reliability of information services in regulatory conditions. In particular, the special role of the functional security of the cryptographic subsystem in terms of supporting the performance of the automated system for its tasks and functions in general, as well as in terms of ensuring the confidentiality and integrity of information. The components of the cryptographic subsystem have been identified, the poor or incorrect operation of which negatively affects the security of these subsystems. The types of the most dangerous attacks on these subsystems are analyzed, their classification from the point of view of possibility of realization in modern scientific and technical conditions and depending on capacity of available computing means and technologies on the basis of which the most real and dangerous variant of realization of remote attacks on software implementation of cryptographic subsystem is defined. . Based on the analysis, a method for evaluating the quality of cryptographic transformations based on a modified algorithm for solving the problem of finding solutions of systems of linear equations with distorted right-hand parts using the so-called decoding based on "lists" of first-order "shortened" Reed-Muller codes is proved. the correctness of the proposed algorithm.

29-44

Authors: Andrii Halchenko, Sergiy Choporov

The deniable encryption algorithms productivity increasing is investigated in this paper. This investigation is relevant because of effective schemes for information and its users protection. But these algorithms is very complex and lumped. It really affects them. That's why deniable encryption algorithms have not been widespread in data processing and information security systems. The execution time reducing methods and tools exploration is the main goal of this work. The divide and conquer method has been discussed and investigated in this paper. It has been implemented into the data processing system of the deniable encryption algorithms. Nothing modifies have been implemented into the base algorithm. It allows to make it universal and apply to other deniable encryption algorithms. The series of experiments have been completed by authors to verify the hypothesis. The base deniable encryption algorithm discussing is the first stage of investigation. Its vulnerabilities have been found and investigated. Another algorithm is based on the divide and conquer method applying. It has been implemented into the modified data processing system. The both algorithms efficiency has been investigated by the experiments with the real with public and secret information files. The experiments have been completed on the prepared equipment. This equipment simulates the user's workplace with real hardware and software. According to the results the deniable encryption algorithms productivity has been reached by the divide and rule method. Also the method has been verified by the different size encryption keys. The base deniable encryption algorithms have not been modified. The results have been compared with other authors' investigations. In the end authors' hypothesis has been proved. But some restrictions of this results reaching have been set by the authors.

54-66

Authors: Andrii Karpenko, Tetiana Bondarenko, Viacheslav Ovsiannikov, Valerii Martyniuk

The problem of information security in wireless sensor networks is considered in this paper. An analysis of existing recommendations for information security in wireless sensor networks. It was found that one of the key problems of information security is the hardware limitations of the sensor nodes of the network. It is substantiated that the use of more complex cryptographic protection mechanisms will increase the load on the network. Safety requirements and their description are given. The main groups and types of information security threats in wireless sensor networks are considered. The classification of attacks and protection of wireless sensor networks according to the OSI model is presented. The existing solutions for information security are considered and analyzed. The shortcomings and vulnerabilities of the considered solutions are revealed. The method of public key cryptography is considered, the main advantages and disadvantages of this method are revealed. The analysis and comparison of ECC and RSA encryption methods are carried out. It is substantiated that the use of ECC in wireless sensor networks is more efficient than RSA. The method of cryptography with a symmetric key is considered, the main advantages and disadvantages of this method are indicated. It was found that cryptographic methods using a symmetric key are more priority for use in wireless sensor networks. Cryptographic key management protocols in wireless sensor networks are considered. The classification of key management protocols is given. Secure routing protocols are considered. The classification of secure routing protocols is given. Methods of secure data aggregation are considered. Contradictions between the requirements for confidentiality and data aggregation have been revealed. The method of intrusion detection is considered, the main advantages and disadvantages of this method are revealed. The results of this work should be used in the design of wireless sensor networks.

75-87

Authors: Anna Ilyenko , Sergii Ilyenko , Oleksandr Vertypolokh

This article discusses further ways to protect traffic from DPI systems. The possibilities of using network protocols and application of DPI systems are investigated in the article. The analysis of the problem made it possible to identify vulnerabilities in the DNS protocol, which is based on the UDP protocol. These vulnerabilities include spoofing, interception, and traffic tethering. Also on the basis of the analysis of methods of protection of DNS traffic from interference, the authors substantiate and define the following: 1) all DNS queries are transmitted in the open; 2) existing approaches to traffic protection do not use encryption and, consequently, do not ensure the confidentiality of information; 3) there is only confirmation of the authenticity of the records. The authors have created a summary table, which identifies reliable methods of protecting DNS traffic. The authors propose the development of a full-fledged local proxy server to provide DNS traffic that can access trusted public DNS resolvers using doh and dot protocols. To understand the principles of protocol interaction, we developed our own local implementation of the main components of the network, which are most often dealt with by network users, namely: 1) web server; 2) DNS server; 3) server providing cryptographic protection and hiding open requests. The practical value of the obtained results lies in the software implementation of methods to protect traffic from DPI systems in Visual Studio Code by using the Python 3.8 programming language, which allows to provide cryptographic protection of traffic. The proposed solution of the local proxying server can be improved in the future by introducing local caching with the addition of the ability to create rules for certain domains and their subdomains. The implemented test doh server can be deployed on a trusted dedicated server outside of possible filter equipment installation points. This implementation will allow you to fully control your own traffic for resolving domain names. The authors further plan a number of scientific and technical solutions to develop and implement effective methods, tools to meet the requirements, principles and approaches to cyber security and traffic protection from interference by DPI systems in experimental computer systems and networks.

98-112

Authors: Iryna Litvinchuk, Ruslan Korchomnyi , Nataliia Korshun , Maksym Vorokhob

The article is devoted to the assessment of information security risks in automated systems of class "1". An adapted approach to the assessment of information security risks in such automated systems using the Methodology and requirements of the standards of GSTU SUIB 1.0 / ISO / IEC 27001: 2010 and GSTU SUIB 2.0 / ISO / IEC 27002: 2010 is proposed. The efficiency and methods of implementation of the approach are proved on the example of consideration of real threats and vulnerabilities of class 1 automated systems. The main requirement for the creation of information security management system in the organization is risk assessment and identification of threats to information resources that are processed in information and telecommunications systems and speakers. The basic standards on information security in Ukraine are considered, which give general recommendations for the construction and assessment of information security risks within the ISMS. The most common methods and methodologies for assessing information security risks of international standard are analyzed, their advantages and disadvantages are identified. The order of carrying out of works on an estimation of risks of information security of the AS of a class "1" is defined. The vulnerabilities considered by the expert according to the standard ISO/IEC 27002:2005 and the Methodology are given. A conditional scale for determining the impact on the implementation of threats to integrity, accessibility, observation is given. Measures and means of counteracting the emergence of threats are proposed. This approach can be used both for direct information risk assessment and for educational purposes. It allows to get the final result regardless of the experience and qualifications of the specialist who conducts risk assessment, with the subsequent implementation and improvement of the existing risk management system in the organization.

123-134

Authors: Anna Ilyenko , Sergii Ilyenko , Olena Prokopenko

Today cryptographic systems provide secure communication between users. In the present paper we describe existing cryptographic systems such as: systems based on the complexity of factorization of a large integer (RSA); systems based on the complexity of solving a discrete logarithm in finite Galois field (eigamal, DSA); systems based on the complexity of solving a discrete logarithm in a group of points of an elliptic curve (ECC); lattice-based systems (NTRU). Authors focus their attention on ntruencrypt encryption and decryption algorithm. The ntruencrypt public key cryptosystem guarantees the integrity and confidentiality of information when transmitting, storing and processing information messages in modern computer systems and networks. The conducted studies of public key cryptosystem made it possible to determine the way of the improve ntruencrypt public key cryptosystem. In this paper, we present improved ntruencrypt public key cryptosystem which is based on the correct selection of parameters p and q. The authors concluded that, to reduce the difference between the length of ciphertext and plaintext, it is necessary to take p and q closer to each other. At the same time it is necessary to consider that at too close values p and q the cryptosystem can be weakened. The main difference between the proposed schemes was the reducing the size of ciphertext which can minimizes the time for software encryption and decryption operations. As a result is a software implementation of the procedure for the encryption and decryption of the improve ntruencrypt public key cryptosystem using a programming language Ruby 1.9.3 was obtained using the cryptolib library. Improved algorithm will be a perfect tool for ensuring the confidentiality of information, using “cloud” computing, because protecting information from unauthorized access is one of the most pressing problems. The authors further plan a number of scientific and technical solutions to develop and implement effective methods, tools to meet the requirements, principles and approaches to cyber security and cryptosystems for provide integrity and confidentiality of information in experimental computer systems and networks.

144-157

Authors: Oleh Harasymchuk, Ivan Opirskyy, Yaroslav Sovyn, Ivan Tyshyk, Yevhenij Shtefaniuk

This paper is devoted to the consideration of information security problems in distance learning systems (DLS), which are becoming widespread in the modern world of educational services, as one of the most effective and promising training systems. The basic information about DLS that exist in the Ukrainian and foreign educational markets is given. The general principle of application of such training, the main functional components and objects of interaction within the framework of DLS are considered. The basic problems of information protection in modern distance learning systems and threats from the point of view of information security for such systems are analyzed in detail, the main goals that an attacker may pursue while carrying out attacks on DLS and vulnerabilities due to which he carries out these attacks are listed. Threats and destabilizing effects of accidental nature are also mentioned. The most common DLS's are compared according to such key parameters as threats of corrupt registration and authentication, threats of reliability of knowledge control results and threats of malicious software implementation. The main focus is on the approaches to the protection of DLS from threats of user substitution (both during the authorization and for an authorized user), threats of the usage of software bots and scripts (by applying the method of protection against the use of scripts based on hidden elements and the method of protection based on behavioral analysis), and also threats to the usage of lectures, electronic reference books and other third-party teaching materials. The mechanism of protection against threats to the reliability of knowledge control results is proposed, which describes actions of the DLS user and the server at the following stages: registration, login, user in the process of filling in the questionnaire, user completed the questionnaire, user starts the test / task and completed testing. This algorithm can be used in any distance learning system to protect from threats to the authenticity of knowledge, and its novelty consists in the usage of methods of user authentication and limiting the functionality available to those users.

169-183

Authors: Serhii Tolіupa , Oleksandr Pliushch , Ivan Parkhomenko

Systems for detecting network intrusions and detecting signs of attacks on information systems have long been used as one of the necessary lines of defense of information systems. Today, intrusion and attack detection systems are usually software or hardware-software solutions that automate the process of monitoring events occurring in an information system or network, as well as independently analyze these events in search of signs of security problems. As the number of different types and ways of organizing unauthorized intrusions into foreign networks has increased significantly in recent years, attack detection systems (ATS) have become a necessary component of the security infrastructure of most organizations. The article proposes a software prototype of a network attack detection system based on selected methods of data mining and neural network structures. The conducted experimental researches confirm efficiency of the created model of detection for protection of an information network. Experiments with a software prototype showed high quality detection of network attacks based on neural network structures and methods of intelligent data distribution. The state of protection of information systems to counter cyber attacks is analyzed, which made it possible to draw conclusions that to ensure the security of cyberspace it is necessary to implement a set of systems and protection mechanisms, namely systems: delimitation of user access; firewall; cryptographic protection of information; virtual private networks; anti-virus protection of ITS elements; detection and prevention of intrusions; authentication, authorization and audit; data loss prevention; security and event management; security management.

19-31

Authors: Oleksandr Kurbatov, Pavlo Kravchenko, Nikolay Poluyanenko, Oleksiy Shapoval, Tetiana Kuznetsova

This article describes an approach to identification and certification in a decentralized environment. The protocol defines the way to integrate blockchain technology and web-of-trust concepts to create a decentralized public key infrastructure with easy user ID management. The essence of the scheme is to differentiate the entire infrastructure into 2 levels: the level of certification authorities (service providers) that jointly keep track of events related to user certificates; and the level of end users, systems and applications. During creating, updating, and revoking certificates, higher-level members reach a consensus on the confirmation of transactions associated with them, which ensures a higher level of validity of the certificates and synchronization of their status between certification centers. In turn, lower-level members do not need to perform complex verification procedures for a corresponding certificate: unlike the classic X.509 architecture and web-of-trust approach, the maximum number of checks in a chain can be two. An important feature of such a system is its ability to refuse certification centers: in the case of failure and / or compromise of the keys of one certification center, other network members continue to work seamlessly with others, and blockchain technology may make it impossible to add a certificate to a center whose keys have been compromised, because all the events in the system are connected by cryptographic methods. In particular, such a system can be used on the Internet of Things. Each individual sensor must communicate properly with other components of the system as a whole. In order to enable the secure interaction of these components, they must exchange encrypted messages to verify their integrity and authenticity, the provisioning scheme of which is in the described scheme.

46-56

Authors: Svitlana Kuznichenko, Iryna Buchynska

The article discusses the issues of improving the adequacy and validity of the results of the convolution of criteria evaluation into a generalized evaluation when conducting a multi-criteria analysis of the land suitability by choosing the appropriate type of aggregation operator that can be performed in the GIS environment and has the properties that allow the most complete formalization of expert knowledge about the features of this applied area. Based on the analysis of the causes of the fuzziness of information in multicriteria decision-making models, the properties that the aggregation operator must have are formulated. A comparative analysis of various aggregation operators for the construction of complex maps of the suitability of territories is carried out. The features of the execution of aggregation operators are investigated: minimum, maximum, arithmetic mean, weighted sum, OWA Yager operator. It is shown that the most justified choice is to use the OWA Yager operator with fuzzy quantifiers, which allows you to provide expert information on the acceptable form of a compromise between evalutions by individual criteria. The use a family of the RIM quantifiers to formalize the attitude of DM to risk in making decisions is proposed. An example of the use of the OWA Yager operator with fuzzy quantifiers for calculating the convolution of criteria evalutions is given. It is shown that the Yager OWA operator with fuzzy quantifiers is a universal aggregation operator, since it has the ability to implement a wide range of decision-making strategies: from minimum operator to maximum operator.

71-81

Authors: Oleksii Barybin, Elina Zaitseva, Volodymyr Brazhnyi

In the paper analysis of current trends in IoT technologies enabled us to identify a segment for which information security assurance may encounter a lack of its level. These are IoT devices based on ESP32 microcontroller, that designed and implemented at home by non-professionals. The physical model of a handmade IoT system that includes device for measuring temperature based on ESP32 (small-sized ESP32-based development board ESP32 devKit V2 produced by Espressif and digital temperature sensor DS18B20), WiFi home network (based on router TL-WR841N) and web interface (based on node-red-dashboard) was proposed and implemented upon laboratory scale. The initial conditions of the experiment included the following: the use of the UDP protocol, authentication and data encryption based on WPA2-PSK specification, attacker skill level sufficient for use Aircrack-ng tools, Airmon-ng, Airodump-ng, Aireplay-ng, Besside-ng, Wireshark. The result of the experiment based on this model to attempt to gain unauthorized access to the transmitted data was successful. Attack scenario was formulated and consist of four stages: 1 – gaining unauthorized access to a network (network card transfers to monitor mode (Airmon-ng), view available access points (Airodump-ng), handshake interception, guessing the password (Besside-ng); 2 – network traffic interception and analysis (Wireshark); 3 – creating fake ESP32 client using the captured data (Arduino) and connect it to the network; 4 – disconnecting original ESP32 from a server (Aircrack-ng). It is shown that the attacker, who has the basic knowledge and skills in working with common wireless network hacking tools and a basic knowledge of ESP32 and ESP32 programming skills can access the system and send fake information to the web interface. To reduce the probability of the proposed scenario it is recommended to use TCP protocol, which is in contrast to UDP ensures data integrity and sender notification of transmission results.

94-104

Authors: Banovsha Mekhdiyeva, Guluzade Rustam, Liliia Ivanova, Natalia Korshun, Pavlo Skladannyi

The article considers the problems of providing water, necessary for the needs of the population and the national economy on a global scale and for Azerbaijan in particular. One of the means for the accumulation and storage of water are artificial reservoirs formed, as a rule, in the river valley by water-supporting structures for the accumulation and storage of water for the purpose of its use in the national economy. The main parameters of reservoirs are considered in the article, such as: volume, area of the mirror and the amplitude of fluctuations in water levels in the conditions of their operation, as well as modes of their operation, which became the basis for constructing a mathematical model of the cascade reservoir, which reliably describes the hydrological processes that take place in the reservoirs. Monitoring the status of reservoirs will allow to plan activities, simulate the situation that may arise in other reservoirs that make up the cascade, and make forecasts. The article presents a data processing model in the MATLAB application development environment, which is one of the most popular software in the world. The model is based on the method of calculating differential indices based on multispectral data. Having a large number of additions to the main program in the form of toolboxes, or sets of specialized tools, makes it possible to apply MATLAB in a wide variety of areas of programming. The Mapping Toolbox is specifically designed to leverage MATLAB's richest geospatial capabilities. This article shows how to use Mapping Toolbox tools at all stages of working - from receiving and importing into the workspace of the program, processing and further outputting results in the form of files or finished electronic maps. The task of identifying and mapping the hydrological objects that make up the cascade of reservoirs on the largest waterway in Azerbaijan - the Kura River - was chosen as an example.

112-121

Authors: Yurii Borsukovskyi

Current article provides the trends of the hybrid threats landscape for 2020 and further. The key aspects of the implementation of hybrid threats and ways of counteracting them in cyberspace, which are closely related to the constant change of directions of cyber-attacks, improving their efficiency and speed of implementation, the use of artificial intelligence systems to ensure the security of information resources and the creation of adaptive systems of adversity to information and cyber threats , the use of machine learning techniques for a better understanding of the current state of threats, the application of artificial intelligence principles and responsive scenarios for predicting cyberattacks, developing customized action plans that rely on artificial intelligence systems to improve threat detection and response speed, utilize counterintelligence and counter-methods to respond quickly to any spyware before initiating active action, enhancing communication between law enforcement agencies to form a unified approach for interaction between law enforcement agencies at international and local levels, government organizations, the corporate sector and experts in the field of security. The article defines the necessity for development of experts validated strategies to protect against information and cyber-attacks by criminals. The article describes the object of protection with determination of purpose and basic functions of the system, group of tasks solved in the system, classification of users of the system, organizational structure of service personnel, structure and composition of a complex of software and hardware, types of information assets stored and processed in system, structure of information flows, characteristics of channels of interaction with other systems and entry points.

134-141

Authors: Anastasia Belova, Viktoria Onischenko

This study focuses on the problem of Internet of Things (IoT) security, namely: an overview of threats to the information security of a smart home and the analysis of existing security methods for its devices. The Internet of Things is experiencing an exponential growth in research and industry. At the same time, security threats to information programs and databases are increasing. As it is known, the foundation of Internet of Things security consists of four parts: communication security, device security, device monitoring and network interaction control. The sources of threats and vulnerabilities of IoT information security are accordingly investigated. Conventional security and privacy approaches are generally not applicable to IoT, mainly because of its decentralized topology and limited resources of most of its devices. The analysis of scientific sources has allowed us to explore different approaches to secure a smart home: an architectural method with three modules to protect the confidentiality of smart home data analysis; network-level constraint method; Blockchain technology. It is determined that the proposed blockchain smart home platform enables the security of information, taking into account the basic security goals - confidentiality, integrity and accessibility. Blockchain can be used to track sensor data measurements and prevent duplication of any other malicious data, for authentication and secure data transmission. This research will help design and develop new methods and technologies for smart home security.