Cybersecurity: Education, Science, Technique

16-30

Authors: Volodymyr Sokolov, Bohdan Vovkotrub, Yevhen Zotkin

The article presents the research and comparative analysis of the bandwidth of low-power wireless IoT devices as wireless switches. The following IoT devices were investigated: Raspberry Pi 3 Model B and Raspberry Pi Zero W. The DS18B20 and INA219 sensors investigated and analyzed the dependence of FTP multimedia data transmission speed on wireless Wi-Fi network on the temperature of the switch processor, temperature. The environment and the current and voltage consumed by the switch. Advantages of sensors with GPIO interface over analog meters for this experiment are revealed. Much of the work is devoted to the development of automation of results from GPIO interfaces, which helped eliminate human error and get more accurate metrics. Measurement automation was developed using Python 3.7 programming language. Using the INA219 library we were able to obtain current and voltage indicators from the ina219 board. To get temperature indicators sufficiently built into Python libraries to read temperature files in Raspbian. The article focuses on the synchronicity of measurement results records for more accurate analysis. Therefore, an FTP client was developed that measures the download speed of the file from the FTP server and records the results simultaneously with temperature, current and voltage measurements. To this end, attention is drawn to the multithreading in Python programming language and the transmission of commands using TCP sockets in that language. As a result, the dependence of the measured factors was calculated using the Pearson correlation formula. These measurement factors affect the autonomy and energy consumption, which is very important for IoT devices, and therefore, among the devices tested, recommendations were made regarding their choice when used depending on the conditions.

40-51

Authors: Alla Havrylova, Olha Korol, Stanyslav Milevskyi, Lala Bakirova

The subject of the research is a mathematical model of authentication of the transmitted message based on the McEliese scheme on shortened and elongated modified elliptic codes using the modified UMAC algorithm. The aim of this work is to develop such a scheme for the information exchange over Internet communication channels, which would ensure the proper level of verification and integrity of the transmitted information, taking into account the prevention of an increase in the costs of the actions taken. Tasks: analysis of existing ways to increase the resistance to hacking of transmitted messages over telecommunication networks; analysis of a message transfer scheme using blockchain technology; formalized description of a mathematical model for providing clear text authentication using a modified UMAC algorithm, as the formation of key data, a crypto-code construction (CCC) is used on the McEliese scheme on modified elliptic codes (MEС); development of data encryption and decryption algorithms using CCC based on McEliese on the MEC and UMAC algorithm. Аn approach was proposed to verify the authentication and verification of the information packet during transmission and reception via telecommunication channels, which allows using already known hashing methods to compare generated codegrams and transmitted messages for their correspondence, which increases the level of cryptographic stability of the transmitted data and the reliability of the received data. The developed schemes of algorithms for generating codеgrams and their decryption using the proposed approach make it possible to gradually demonstrate the implementation of procedures for generating codegrams and their hash codes using both shortening and lengthening the code. Further research should prove from a practical point of view the effectiveness of using this approach when transmitting a message regarding the preservation of its integrity and authenticity. Therefore, it is necessary to develop a test system that should implement the proposed approach, as well as evaluate the results obtained.

61-72

Authors: Yurii Borsukovskyi

Current article provides the analysis of recent trends in realization of cyber threats and collects the basic requirements for development of information security concept in hybrid threats conditions. It covers the key tendencies of realization at cyber space of principles of hybrid war. Envisages that preconditions for occurrence of such hybrid wars constitute the interest of governmental agencies in information that might be used by opposing parties in world`s competition and political battles, as well the possibility of effective monetization of harmful impact at information and automated systems of companies. The article defines the necessity in adaptive development of directions in application of preventive actions at information and cyber security. It underlines the absence, at most cases, of strategy to ensure security of the key information systems considering the existing risks. Article emphasize that the information security concept in hybrid threats conditions shall consider the possibility of complete compromising of systems of information and cyber security in case of targeted attack at information resources of structural units of state, banking and private organizations. It considers the model structure of information security concept in hybrid threats conditions to ensure the effectiveness of functioning of information and automated systems of information and cyber security in conditions of limited financing. It provides structure and content of the concept of information security in hybrid threats conditions. Article defines that the information security concept at hybrid threats conditions shall cover the main tasks and objectives, and the general strategy for development of IT and system for managing of information security within the company. It formulates the requirements and basic approaches to its implementation. The article defines that the possible way to optimize the financial resources assigned for IT systems and information and cyber security systems according to the risks defined, might be the use of the best world practices, as well the strict coordination of requirements to ensure the informatization and digital transformation from business and development of coordinated regulatory requirements to the certain businesses from information and cyber security perspective.

83-94

Authors: Anatolii Ilnitskiy, Oleg Burba

The procedures of comparative analysis using statistical criteria for evaluating the information content of radio sources of telecommunication networks and systems in their classification and recognition as a set of formalized rules for collecting, processing and analyzing the information obtained are considered. In the introduction, the general processes of recognition and classification of sources of radio emission of telecommunication networks are analyzed, the main statistical criteria for evaluating the information content of information features are given. It is noted that most of the mentioned criteria of recognition allow to carry out only ranking of signs and do not provide the solution of the problem of quantitative estimation of their informativeness by the criterion of minimum probability of error or maximum probability of true recognition. With this in mind, a research goal has been formed, which is to develop a procedure for comparative analysis using statistical criteria for evaluating the information content of radio sources of telecommunication networks and systems in their classification and recognition, as a set of formalized rules for collecting, processing and analyzing the information obtained. The study found that the exact value of the probability of error is difficult to obtain, since its estimation requires knowledge of decision thresholds. The integration in the calculation is only possible numerically. Therefore, in order to solve the recognition problem, it is advisable not to use the error probabilities, but their boundaries (upper and lower), which must be strict on the one hand and easily calculated analytically on the other. It should also be borne in mind that the probability of errors and their boundaries are uniquely related to the class distance (classes), which in turn must be clearly related to the probability of true recognition. Based on the analysis of analytical expressions of the statistical criteria for estimating interclass distances, recognition theory establishes mutual analytical relationships between the main criteria of interclass distances. It is substantiated and proposed to solve the problems of recognition by applying the Fali – Semmon transform, where the criterion of optimality is the maximum ratio of the mean differences of the projections of the vectors of the data of the classes to be recognized to the sum of the covariations in the middle of the classes in their projection to the parameter vector, resulting in a modified Fisher ratio. It is also determined that all the criteria considered are designed for a small number of recognition classes, whereas in practice the number of classes and their size is very large and their total number is unknown. Moreover, the recognition process is multi-parameter, which makes it difficult to solve the problems of classification and recognition of objects and sources of radio emission. To overcome this situation, it is proposed to use a criterion based on the coefficient of non-orthogonality of the conditional probability distributions of the probability of a trait, which can be considered as a variation of Bhattacharya distance for a large number of classes and their volume.