Cybersecurity: Education, Science, Technique

24-36

Authors: Anna Ilyenko , Sergii Ilyenko , Diana Kvasha

Considering computer-integrated aviation systems that provide a link between civil aviation activities within the ground-to-air and air-to-air channels, the question of the safe operation of such aviation systems from an ever-increasing cyber threats, and the decline in cybersecurity for the aviation industry as a whole. The protection status of ground-to-air and air-to-air channels in such aviation systems is at different levels and depends directly on the activity of all components of aviation activity (airport-aircraft-information network-air traffic management, etc.). To date, some communication channels are not secure at all and are in an open state, which provokes a rapid growth of cyber-attacks and requires the introduction and application of modern information and communication technologies in such communication channels. In view of the ever-increasing cyber statistics on the work of civil aviation worldwide, the authors of the article highlighted the current state of cyber security and protection of ground-to-air and air-to-air channels of the aircraft fleet of Ukrainian airlines, and take a closer look at the world experience. The authors comprehensively covered all components of the aviation system, with particular attention given to aircraft designed by Antonov Design Bureau with the time evolution of tire development and data networks of the world's leading aviation industry leaders (such as Airbus and Boeing). Also, attention is given to the present state and mechanisms of data transmission of the ground-to-air and air-to-air channels and the architecture of the modern air-network of computer-integrated aviation systems. The authors plan a number of scientific and technical solutions for the development and implementation of effective methods and means to ensure the requirements, principles and sub-approaches to ensure cyber security and the organization of protection of ground-to-air and air-to-air channels in experimental computer-integrated aviation systems.

45-58

Authors: Valerii Lakhno, Borys Husiev, Andrii Blozva, Dmytro Kasatkin, Tetiana Osypova

The paper proposes an algorithm with self-learning elements for intrusion detection systems, as well as an improved clustering technique which is recorded by the data system concerning information security events. The proposed approaches differ from those known using an entropy approach allowing data to be presented as homogeneous groups, moreover, each such group (or cluster) may correspond to predetermined parameters. The proposed solutions relate to the possibilities of assessing dynamic dependencies between clusters characterizing the analysed classes of invasions. The studies have found that in case of manifestation of new signs of information security events, the corresponding scale changes and describes the distances between clusters. A computational experiment was conducted to verify the operability and adequacy of the proposed solutions. During the computational experiment, it has been found that step-by-step calculation of parameters of informative characteristics of network attacks allows to form sufficiently informative cluster structures of data having characteristic attributes. These attributes further become the basis for the knowledge base of intelligent network attack detection systems. Dynamic dependencies between clusters are calculated allowing for a sufficiently accurate definition of the many information security events that can become the source data for further automatic assessment of current threats extent detected by attack detection systems. The methodology and algorithm presented in the paper for clustering the signs of network attacks, in our opinion it is simpler for software implementation than existing analogues.

69-84

Authors: Oleksandr Belei, Oksana Svatiuk

An analysis of the physical characteristics of the node, which can be attacked by an attacker. A method of detecting a damaged node with a violation of the physical characteristics of the network node, which is based on the use of probability functions, calculation of the confidence interval and the probability of deviation of current values from the confidence interval. Its novelty lies in the possibility of detecting a damaged node by estimating the current value of the function in the confidence interval, without comparing the distribution function of the current node with the reference distribution. The analysis of physical parameters of network nodes for detection of the malefactor in contrast to existing systems of detection of attacks which allow to carry out only the analysis of network traffic is carried out. Based on the developed algorithm by modeling the transmission of chaotic signals in a wireless sensor network, the effectiveness of attack detection is determined through the analysis of residual energy and node congestion parameters, expanding the range of attacks that the network is able to counteract compared to system analogues. During the simulation of the behavior of the wireless sensor network, it was determined that the data transmission processes are chaotic. Therefore, to enhance the security of data transmission in a chaotic mode, we have proposed an encryption algorithm using dynamic chaos, coordinate delay methods and singular spectral analysis. A comparative analysis of the parameters of the input and output sequences of the developed encryption algorithm based on dynamic chaos with standard data encryption algorithms is performed. It is established that the encryption parameters that are characteristic of the original sequences of the encryption algorithm using dynamic chaos are not worse than the encryption parameters obtained for the source sequences of standard encryption algorithms. Estimation of node load by means of threshold analysis of their current values in the confidence interval is used to detect network deviations during a cyberattack. The developed algorithm allows to diagnose attacks such as "Denial of Service" and "Sibyl" at the beginning of their appearance and to determine possible ways to avoid them.

93-103

Authors: Tetyana Shabelnik , Serhii Krivenko , Olena Koneva

One of the most pressing problems of piloting unmanned aerial vehicles (UAV) in the absence of radio communication is considered in the article. Therefore, the aim of the article is to develop an algorithm and method of automatic piloting of UAV in terms of loss of radio control signal using the methods of technical vision. The most effective methods of tracking, identification and detection of landmarks are based on the comparison of reference information (database of known navigation objects) with the observation scene in real time.Working system of automatic piloting of UAVs in the conditions of loss of radio control signal or GPS-navigation developed. The hardware and software of the UAV provides full automatic control. The programming of the system consists of two stages: planning the flight task and calculating the trajectory of the UAV in flight. The planning of the flight task is carried out by setting the topographic landmarks and flight parameters in relation to them. At this stage, the criteria for the generalization of the various components of the landscape are formed and their division by gradations. This work is combined with the recognition of points with altitude marks, and fixing the heights of horizontal surfaces available in the area. All horizontal surfaces are tied with the shortest shooting strokes to at least of three points with elevations. The process of topography-based object selection is directly related to its segmentation, the results of which significantly affect the further process of image analysis and UAV control. The calibration of the starting point of the route occurs during the launch of the UAV. The control system automatically monitors the location of the UAV throughout the trajectory of the movement on a topographic basis relative to the prespecified landmarks. Structured shots of the terrain and topographic bases are compared during the flight. The algorithm is based on the comparison of geometric parameters of landmarks. The parameters of the geometric center O(x, y) and the area S are taken into account by such parameters. The control signal in the three axes OX, OY and OZ is determined for the first time by the method of least squares depending on the values ​​of the calculated coefficients of the original equations.

115-125

Authors: Volodymyr Barannik, Yurii Babenko , Valeriy Barannik , Valerii Yroshenko , Sergii Shulgin

The presence of an imbalance caused by an insufficient level of performance of modern and promising infocommunication technologies with respect to the information intensity of bit streams is shown. It is substantiated that a decrease in the level of imbalance is organized as a result of an increase in the efficiency of information processing technologies. It is substantiated that at the moment the JPEG platform is the basic concept for building compression technologies. In accordance with this, it is proposed to organize the further development of methods for processing video resources using individual components of the JPEG platform in the direction of increasing the integrity of information while ensuring the required level of its availability. The development of a syntactic representation of a significant microsegment of a video frame in spectral space based on local-positional coding of structural vectors of significant transformant components and lengths of zero components with the subsequent formation of uniform codograms, the positioning of which is determined by the dynamic ranges of the corresponding code values ​​using structural bases, is presented. It is shown that the created video resource encoding methods based on the developed concept of processing significant segments provide a reduction in the delivery time of information under the conditions of the required level of its integrity, i.e. an increase in the level of information security is achieved.

140-148

Authors: Oleksandra Tsyra, Nataliia Punchenko, Oleksii Fraze-Frazenko

The article analyzes the main aspects of creating virtual assistants that are part of intelligent computer programs – artificial intelligence systems (AI). The main task of “artificial intelligence” is to ensure effective communication of intelligent robotic systems (including unmanned vehicles) with humans. The basis of the above is in-depth training (systematic machine translation, speech recognition, processing of complex texts in natural languages, computer vision, automation of driving, etc.). This machine learning subsystem can be characterized using neural network models that mimic the brain. Any neural network model learns from large data sets, so it acquires some “skills”, but how it uses them remains for engineers, which ultimately becomes one of the most important problems for many deep learning applications. The reason is that such a model is formal and without an understanding of the logic of its actions. This raises the question: is it possible to increase the level of trust in such systems based on machine learning? Machine learning algorithms are complex mathematical descriptions and procedures and have a growing impact on people's lives. As the decision is increasingly determined by the algorithms, they become less transparent and understandable. Based on the foregoing, the paper considers the issues of the technological component and the algorithms of virtual digital assistants, conducts information modeling based on the conceptual model of the interaction of the virtual assistant with the database, and analyzes the scope and further development of the IT-sphere.

159-169

Authors: Volodymyr Buriachok , Nataliia Korshun , Svitlana Shevchenko , Pavlo Skladannyi

The article is devoted to the problem of practical skills building and development of students majoring in 125 "Cybersecurity". An analysis of the professional competencies of future cybersecurity professionals, in particular, related to technical protection of information. It is proved that the use of virtual laboratories in the educational process helps to increase the efficiency of the educational process and allows to form and improve the professional competencies of the future cybersecurity engineer. Education becomes practice-oriented. The possibilities of a virtual laboratory workshop based on the NI Multisim environment are considered in the study of disciplines "Theory of circles and signals in information and cyberspace", "Component base and elements of circuitry in information security systems", "Signals and processes in information security systems". The Multisim system is used as part of the training of future cybersecurity professionals at Borys Grinchenko Kyiv University and has proven its effectiveness in practice.