Cybersecurity: Education, Science, Technique

22-33

Authors: Hennadii Hulak, George Otto

Methods and models of systems for remote measurement and recording of vibrations with amplitude less than 10 nanometers are investigated on the basis of coherent laser sources. The mathematical model of the Doppler effect is analyzed. The basic characteristics of perspective measurement systems are determined. The modern tendencies of development of the direction of laser Doppler vibrometers and the scope of their application are revealed, as well as the expediency of further researches is substantiated. Observations of vibrations of various objects, their registration and analysis in the natural and applied sciences are one of the main methods on which the study of natural objects and phenomena, diagnostics in medicine and technology, the solution of special problems in military and law enforcement activities, ensuring information security at the objects of information activity, etc. In many cases, due to the specificity of the investigated objects, direct access to them is not possible or approaching the measurement object is unsafe for the researcher. The above determines the relevance of research into the problems and principles of building reliable information technologies for remote measurement of vibration, ensuring their high guaranteeability, including information security, resolution. Of particular interest in practical applications are technologies capable of distinguishing vibrations with an amplitude of less than 10 nanometers (hereinafter referred to as nanovibrations). Therefore, to select the essential parameters of designing a domestic product (laser vibrometer) and look for opportunities to increase the sensitivity of such products, the article elaborated and formed a set of qualitative and technical characteristics of existing devices for remote measurement of nanovibrations and provided comments on the solution of the sensitivity problem.

49-60

Authors: Roman Drahuntsov, Dmytro Rabchun, Zoreslava Brzhevska

In this article common attack vectors on the information systems, which are based on the Android client applications, are observed, analyzed and compared. The purpose of this analysis consists in creating the theoretical base for development the practical principles of securing the architecture level of such systems. To accomplish the aims set, there was conducted the categorization of attacks and vulnerabilities specific to the Android information infrastructure and environment. There were also conducted analysis of Android application functional components and typical underlying infrastructure which have possible impact on a system security. Available data about the widespread vulnerabilities of the described elements was analyzed in context of possible exploitation. Based on the Android application usage model there were figured out several adversary models and attack vectors related to the researched information system type. Developed adversary models were formed with a focus on technical possibilities and threat abstraction. Mentioned vectors can be used by an attacker to violate the confidentiality and integrity of critical information in the system. The carried out research was used to form the characteristic comparison of the mentioned vectors and adversary models to evaluate the attack surface on the different parts of information system represented as attack vectors. As a result, we have developed the theoretical principles for securing the architecture of Android applications-driven information systems. Achieved results can be used to form the threat and adversary model, create practical recommendations for the information risk reducing practices in Android-applications driven information systems and to develop the technical requirements for security testing and development.

73-84

Authors: Mykhailo Tyhanskyi, Andrii Partyka

The goal of this work is to find ways of enhancing the speed of computer memory cells by using structures that employ operating principles other than those of traditional semiconductors’ schemes. One of the applications of the unique properties of Josephson structures is their usage in novel superfast computer memory cells. Thanks to their high working characteristic frequencies close to 1 THz, the Josephson structures are most promising candidates to be used in petaflop computers. Moreover, both Josephson cryotrons and Josephson SQUIDs can be used in qubits, which are basic units in quantum computers, and also for describing a macroscopic quantum behavior, for example, during read-out processes in quantum computations. In the present work, we have created a mathematical model of transition processes in Josephson cryotrons during direct, “1” → ”0”, as well as inverse, “0” → “1”, logical transitions. We have considered controlling the logical state of Josephson memory cells based on Josephson tunneling junctions of the S-I-S type via external current pulses. By means of mathematical modelling, we have studied transition processes in cryotrons during the change of their logical state and calculated their transition characteristics for working temperatures T1 = 11.6 K and T2 = 81.2 K, which ale close to the boiling temperatures of helium and nitrogen, respectively. It has been shown that such memory cells can effectively operate at the working temperature T2 = 81.2 K. We have determined commutation times for both the direct “0” → “1” and inverse “0” → “1” transitions. We have also identified peculiar behaviors of the Josephson cryotrons based memory cells and studied the stability of their operation.

97-112

Authors: Danylo Svatiuk, Oksana Svatiuk , Oleksandr Belei

The article is devoted to analyzing methods for recognizing images and finding them in the video stream. The evolution of the structure of convolutional neural networks used in the field of computer video flow diagnostics is analyzed. The performance of video flow diagnostics algorithms and car license plate recognition has been evaluated. The technique of recognizing the license plates of cars in the video stream of transport neural networks is described. The study focuses on the creation of a combined system that combines artificial intelligence and computer vision based on fuzzy logic. To solve the problem of license plate image recognition in the video stream of the transport system, a method of image recognition in a continuous video stream with its implementation based on the composition of traditional image processing methods and neural networks with convolutional and periodic layers is proposed. The structure and peculiarities of functioning of the intelligent distributed system of urban transport safety, which feature is the use of mobile devices connected to a single network, are described. A practical implementation of a software application for recognizing car license plates by mobile devices on the Android operating system platform has been proposed and implemented. Various real-time vehicle license plate recognition scenarios have been developed and stored in a database for further analysis and use. The proposed application uses two different specialized neural networks: one for detecting objects in the video stream, the other for recognizing text from the selected image. Testing and analysis of software applications on the Android operating system platform for license plate recognition in real time confirmed the functionality of the proposed mathematical software and can be used to securely analyze the license plates of cars in the scanned video stream by comparing with license plates in the existing database. The authors have implemented the operation of the method of convolutional neural networks detection and recognition of license plates, personnel and critical situations in the video stream from cameras of mobile devices in real time. The possibility of its application in the field of safe identification of car license plates has been demonstrated.

124-134

Authors: Anna Ilyenko , Sergii Ilyenko , Tatiana Kulish

The article deals with the problem of ensuring information security of the Windows operating system and identifying promising security methods. This article identifies that the basic approach to operating system security is the "hardening of the operating system" process. The study presents statistics on the distribution of popular operating systems, namely Windows, Mac, Linux, Chrome, BSD. The analysis and classification of modern vulnerabilities of the operating system is made and the consequences of their action are given in the examples. These deficiencies can cause a computer system to intentionally violate the confidentiality, integrity and accessibility of information and the system as a whole. Based on the vulnerability analysis, the basic approaches and methods for the organization of protection of the operating system are determined. Standard approaches are discussed, namely the use of built-in security software, Active Directory security, and virtualization to deter attacks. Today, much attention is paid to cryptography and the principles of network, system, organizational and operational security, including risk analysis and disaster recovery, to ensure the security of the operating system. These approaches are basic and are a component of security in today's operating systems, but nowadays, using integrated approaches is more effective. A quick response to the violation of the integrity and accessibility of the operating system in combination with quenching, here are the main directions of development and improvement of the operating system. A rather new approach proposed in the article to protect Windows products is to use the Blockchain direction. It is currently used to validate digital certificates and can be said to have potential in other areas of operating system security. This paper shows examples of Blockchain implementation for certificate validation, taking into account some of the variations of validation. The examples are implemented in Python 3.0. The research of prospective methods and remedies of the operating system conducted in the article suggests that the use of system hardening is one of the effective and comprehensive approaches to providing security information, which will allow timely detection of vulnerabilities and timely response to violations of the basic properties of the operating system.

149-164

Authors: Volodymyr Hrytsyk , Mariya Nazarkevych , Andrij Dyshko

Today, in an era of integration of artificial intelligence systems in almost every industry, very demand are studies of classification methods that, prior to their introduction into decision support systems. Compare analysis of the secant planes method, method of the potentials and potential method in the field of receptors are shown in the paper. At first, in introduction, authors shew needs of autonomic systems of adaptive perception on visible diapason of specter. As particularly aim, these methods are compared by criteria of speed, accuracy and amount of storage used after training. As general idea we are looking for we are looking for methodic of the best combination of method for different condition on observe field of visual spectral diapason. Theories of the every method are presented, and then tables of compare analysis of results are shown. Step-by-step comparative experiments are described in detail. Changes at each step are shown in detail in the tables of the corresponding signs. Moreover, at the end of the paper, comparative characteristics of each method with the same learning time in same type of experiments for each method are presented. As a result, in the first group of tables , we see a difference in the recognition time and the amount of memory required for correct operation. Those are truth tables for two points, three points, two points and two planes, three points and two planes, three points and three planes, three points and seven planes. The conclusion gives a thorough explanation of where to use the best method. The needs of the system for computing resources in the application of each mode are presented and corresponding dependencies are derived. Next, If you train several times on the same object (ie, train several times), you can expect that the errors in the breakdown of the receptor space will be different. In this case, you can improve the performance of the algorithm by parallelizing its process into several threads. Using this method simultaneously and independently of each other on the same image is multi-threaded learning on multiple computer kernels. When recognizing new objects, they will refer to some image, not necessarily the same. The final decision is made by "vote" - the object refers to the image to which it was attributed to a greater number of parallel streams.

174-191

Authors: Oleg Burba, Yuriy Kopytin, Olga Pasichnyk, Andriy Piskun

The article covers outputs of the research on development of methodological aspects applied under digital transformation of public services and based on the procedures suggested for formalizing the reengineering process used for related service provision administrative processes in accordance with the capacity delivered by advanced information technologies. The Introduction outlines the issue in general, which is mostly related to the fact that the most of the general population enjoy no public services at all despite the implementation of the e-governance concept. It also analyzes the reasons resulting in a problematic situation described above which, among others, include complicated procedures used to both provide and access public (administrative services); lack of related information; lengthy terms of service provision caused by unavailability of information systems capable of ensuring proper data exchange between state electronic information resources and administrative bodies or agencies; lack of state standardization efforts in public service provision, etc. The analysis used to study recent research and publications confirmed that only general aspects of administrative processes used prior to public service provision in the electronic format has been more or less fully processed so far. As for the formalization of public service digitalization implemented through methodological approaches deemed as compatible for use, the matter at hand remains open and requires further research. With the above in mind, the paper states the purpose of related research formulated as the development of methodological support to digital transformation of public services while objectives of the above are focused on the formalization of the reengineering process for public services and development of related procedures fit for practical use. The outputs of the research describe the general methodological approach to digital transformation of public services based on “as is” and “to be” models. The paper proposes to consider the Administrative Service Register as the information basis used to develop an “as is” model. A register as such contains unified service names, documents, standardized administrative process descriptions as well as results of an audit covering state electronic information resources. The developed “as is” model should be used as a frame to define service information links, to implement audit and streamlining (reengineering) of public service provision procedures (administrative processes) as well as to integrate real life services. As a result, there will be designed the vision of public service provision (a “to be” model) to be implemented further on. The vision is defined as a technical option used to provide public services as a synthesis of service provision administrative processes and information processing tools. At the same time, the objective implying the vision development for a set of public services involves the selection of a specific option used to implement a set of related administrative processes while ensuring ultimate performance in terms of provision of a public service set concerned. The idea of the formalized objective is to select a set of administrative processes used for public service provision at service providers and data exchange between them with the use of related technologies ensuring minimum costs for the whole service set. According to the objective defined and aggregative–decomposition method applied, a respective solution is brought down to two stages: building a graph-based structure for administrative process options used under a certain set of public services (the “as is” model) in accordance with their links; afterwards, the above graph-based structure allows tracking the shortest route to define the appropriate option for administrative processes to be applied under the whole set of public services with the use of respective information technologies (the “to be” model, vision). The Conclusion describes the major research outputs and further explorative prospects.