Cybersecurity: Education, Science, Technique

6-18

Authors: Olexander Belej, Lohutova Tamara

The article discusses the MQTT protocol for the Internet of Things and touch wireless networks, its features, applications, and specific procedures. The information elements and principles of the message owner are analyzed. This article covers topics such as secure storage of the Internet of Things, the transfer of that data through the secure interface of mobile devices and web applications. It also looks at all the key tools provided by MQTT for information security. The proposed identification of users in this article is to identify them from the Cloudant database. This application works on the Node.js server in IBM Bluemix and provides an API or RESTful that requires mobile client authentication. The mobile client access service is designed to call these two APIs in any authentication application. It is suggested to use separate authentication approaches: for the web application - on the Cloud Directory and for the mobile application - MobileFirst Client Access. However, both the web and mobile applications use the same level of application security to allow the user to access device data. To improve the security of messages, it is suggested to use a transport layer security protocol that uses different cryptographic methods. We are offered homomorphic encryption of these protocols. The transport layer security protocol increases the performance of the protocol and reduces the computational cost, but it does not apply when initially connecting to the server or when a previous session has already expired. The article presents an algorithm for the detection of weak symmetry breaking for the analysis of the chance of a recovered e-mail. A method of homomorphic encryption and authentication of users and their emails in wireless sensor networks of the Internet of Things is proposed.

32-45

Authors: Davyd Kurbanmuradov, Volodymyr Sokolov, Volodymyr Astapenya

The problem of data security in IEEE 802.15.4 systems on Pololu Wixel devices is solved, examples of hardware and software implementation of encryption and decryption of different devices on the same platform are given. The proposed approaches can be used in the development, implementation and operation of wireless enterprise, industrial, and personal systems. Possible areas of development for this work are related to research on improving encryption algorithms (increasing key length, using asymmetric ciphers, etc.), comparing their performance, and implementing a complete data exchange protocol. During the work there were problems in the implementation of encryption algorithms on low-power processors. During the work, a number of issues were resolved regarding type reduction, addressing, memory space, buffer overflow, and more. Issues resolved with reconciliation of receiver and transmitter operation. Examples of hardware and software implementation of encryption and decryption of different devices based on Pololu Wixel are given in the paper. The basic task of building a secure communication channel by encrypting data in the channel was solved and firmware and application software were obtained to fully validate the devices. In addition, this work has great application potential, since the implementation of encryption in existing systems will have a small impact on implementation and will not affect the project budget, but will dramatically improve the security of data transmission in these networks. The proposed approaches can be used in the development, implementation and operation of wireless enterprise, industrial, and personal systems. Continuing this work may be to test the performance of other protocols on this and similar hardware for systems that may be embedded in short-range wireless communication projects of short-range standards.

57-70

Authors: Valeriy Lakhno, Volodymyr Malukov, Dmytro Kasatkin, Andriy Blozva, Taras Litovchenko

Creating a multi-factor decision support model for a group of investors for Smart City development. The article describes the method of using of the mathematical decision support model in the evaluation of investment projects. The results are based on the decision of a bilinear multi-step quality game with several terminal surfaces. The model is focused on further software implementation of the decision support system (DSS) or expert system for cross-platform software products. In doing so, players control a dynamic system in multidimensional project spaces. The scientific novelty of the article is that, in contrast to the existing solutions and close to the conceptual focus of research, in the article, for the first time we consider a new class of bilinear multiplayer games. For the first time, we have proposed a solution that allows us to appropriately and correctly describe the investment processes, considering the multifactorial nature of the problem. Computational experiments were performed in MatLab to find sets, investor preferences, and their optimal financial strategies in the analysis of Smart City development projects. The results of the computational experiments confirmed the correctness and capability of the model. In terms of practical importance, the scope of investing in Smart City development projects is considered, given the multifactorial nature of the task and the potential financial strategies of investor groups. The model makes it possible to evaluate the attractiveness for the investor groups (players) of the projects being analyzed.

82-93

Authors: Viktoria Grechko, Tetiana Babenko, Larysa Myrutenko

Adverse effects on information in the functioning computer systems of various purpose is carried out in order to violate their confidentiality, integrity and accessibility. These threats arise from software vulnerabilities and result in unauthorized access to data or leakage of sensitive information To solve this problem, firstly, an analysis of the software life cycle was carried out in order to determine the stages of software development. Secondly, taking into account the stages obtained, possible threats to information were identified. A buffer overflow vulnerability was considered as a basic example of a threat. Possible ways of exploiting this vulnerability are given, the pros and cons of detection and counteraction tools are analyzed. As a result, recommendations on the development of safe software are presented, both in general terms and more specific in order to avoid the buffer overflow vulnerability. Having using such recommendations, enterprises could reduce the risk of sensitive information breach and minimize outlane. The results obtained in the paper can also be used to make decisions about the possibility of operating the relevant software.

105-111

Authors: Vitaliy Petlitsky, Svitlana Shevchenko, Nataliia Mazur

This article addresses the problem of protecting the private property of a protected object, namely: it offers an algorithm for recognizing object movements using a neural network for the CCTV system. The ability of the perception of the outside world in the form of images allows to investigate with certain probability the properties of an infinite number of objects on the basis of acquaintance with their finite number, and the objective nature of the basic property of the images allows to model the process of their recognition. , namely "image", "feature", "vector implementation". The approaches, methods and technologies of object motion recognition are investigated, their qualitative characteristics and disadvantages are highlighted. Artificial neural networks have been found to be the most effective method for solving the object motion recognition task due to result accuracy, simplicity and speed. On the basis of the block diagram of the complex algorithm for image processing and analysis, the algorithm of object motion recognition using neural network for the video surveillance system was developed.

122-133

Authors: Svitlana Spasiteleva, Yulia Zhdanovа, Ivan Chychkan

The article deals with the security of universal data management systems. The analysis and classification of modern data management systems by different criteria has been made. Based on the analysis of the literature and the experience of creating corporate systems, two approaches to the organization of universal data management systems have been identified: the use of multimodel systems and integrated data management platforms. Based on the analysis of threats and data protection tools for database management systems SQL, NoSQL, NewSQL, Data Warehouse, Data Lake and data clouds, the main approaches to data protection of each product category have been identified. The current trends in the development of data management technologies and data security have been identified. The development of NoSQL, NewSQL systems and the exchange of functionalities between them has led to the development of systems, which have functions of many classes. The problems of data protection for multimodel database management systems and for integrated data platforms have been identified and ways to overcome the identified problems have been suggested. For a universal data management platform, it is not enough to combine security features of different types of DBMS but new approaches are needed. The Data Centric Security approach is suitable for integrated environments; it is focused on protecting critical data at all stages of their processing - from collection and transmission to analysis and deployment in data warehouses. The organization of access to data through logical data marts using semantic technologies, ontological data models provides the transformation of a set of different types of data into a single array by "data virtualization". The article has substantiated the relevance and feasibility of the use of cognitive technologies and artificial intelligence in the field of information security, which opened new opportunities for the creation of automated, "smart" security tools for data management systems. Such systems have the ability to self-analyse and configure. The use of machine learning technology allows to identify weaknesses in the database security system. The combination of intelligent security and management solutions with database technologies will allow developers to respond quickly to new challenges in the protection of integrated data management systems of various types.

142-153

Authors: Maria Nazarkevich, Yaroslav Vozny

The identification of fingerprints in the security information system is investigated. Fingerprints were performed, papillae thinning was performed, Sherlock and Monroe fields were oriented, Ateb-Gabor filtration was performed, and three-dimensional Ateb-Gabor properties were investigated for different rational parameters. Their effect on filtering and subsequently on identification has been identified. Ateb-Habor filtering for biometric prints is applied, which greatly expands classic filtering by introducing a wider set of filters and providing a holistic approach to identification. The skeleton was made using the Hilditch algorithm. The next step is to create guide fields using the method suggested by Sherlock and Monroe in forming the direction of the papillary lines. Uses a spine / nine pixel average. It simulates a sensor with a resolution of 500 dpi. Frequency in areas decreases depending on position. The Hilditch algorithm generates a vector image. This is an image of a loaded graph - that is, found endpoints, intersections of the top of the graph, and lines and arcs