Application TRIKE Methodology When Modeling Threats to APCs Information Security

Subject. In the modern information society, ensuring information security is one of the key tasks of organizations, especially in the context of growing cybersecurity threats. Every year, companies face increasingly complex and diverse threats that can cause significant damage to both the financial resources and reputation of the organization. In this context, ensuring information security becomes an important strategic task for enterprises in various fields of activity. Information security plays a critical role in protecting information confidentiality, ensuring the integrity and availability of information, as well as the security of information systems and networks. Goal. The main goal of the research in this work is a comprehensive study of the technology for ensuring the protection of information, preventing unauthorized actions with it, in particular, its use, disclosure, distortion, modification, research and destruction, as well as the correct strategy for information protection of data from external and internal threats. Method or methodology. The research is based on general scientific methodology, which involves the use of a systematic approach and general scientific methods of cognition. The results of the work. In the course of the study, the authors of the article tried to resolve the problem of the interdependence of information security and the strategy for information protection of data from external and internal threats by structuring the subject area of information security policy, which made it possible to set priorities in solving the problems of ensuring the required level of security of information resources and supporting infrastructure in the context of the development of digital technologies. When analyzing problems related to information security, the authors note the importance of mechanisms for generating new solutions that allow, at a minimum, to adequately respond to threats to information security or to anticipate new threats and be able to resist them. Conclusions. The study found that information security plays a critical role in the modern world, ensuring data protection, privacy and sustainability of business processes. In an environment of constantly changing and evolving threats, maintaining a reliable information security system becomes an integral part of the success of organizations and personal security. This is an important step towards creating an information security management system at the enterprise, with the help of which constant and effective monitoring of the effectiveness of security measures is carried out, timely correction of actions taken and revision of existing provisions to ensure maximum security.

Information security is an imperative factor in organizational success, driven by the need to protect information assets. The continuous evolution of external and internal threats and the associated need to protect and secure information from exploitation of vulnerabilities has become a struggle for many organizations in both the public and private sectors. This struggle is the direct result of the narrow focus on operational security. Just as the lines between business and information technology have disappeared, so have the lines between business and information security. Some organizations simply “check the box” by performing the minimum actions required to pass or meet mandated compliance standards. Without practicing due diligence and by only meeting the minimum requirements, leads to the reactive response of exploited vulnerabilities in addition to the increase of after the fact incident investigations. Organizations need to take a proactive approach using established methodologies known to incorporate security into information technologies and systems. The Sherwood Applied Business Security Architecture (SABSA) is a solution oriented methodology for any business enterprise that seeks to enable its information infrastructure by applying security solutions within every layer of the organization. This article describes how SABSA can be integrated into organizations' existing architectures utilizing organizational business drivers.

The purpose of this work is to improve quality of developed threat models for automated process control system (APCs) information security. In accordance with the purpose of the work the authors set the task to develop a method for identifying potential vulnerable elements typical for multi-level APCs and their assessing in order to calculate probability of vulnerability implementation. The peculiarities of APCs that determine occurrence of threats to information security and vulnerable elements are considered. Possible types of threats to information security that can be implemented by an intruder in APCs are given. While carrying out the task the authors propose a method for identifying actual vulnerable system elements. The estimation of APCs security on the basis of the applied security measure analysis is carried out. A way to determine the probability of favorable conditions when using vulnerabilities and formation of the final list of vulnerable elements of APCs is proposed. While confirming efficiency of the developed method, the authors calculate assessment of implementation probability of APCs vulnerabilities through actual vulnerable elements. Implementation of the results into APCs will increase fault tolerance, find potential weaknesses of developed APCs and decrease their operation and protection costs. The results of the research are recommended to use when designing information security systems in APCs.

Information security of an enterprise is a functional element of the system for ensuring its strategic development. Its main task is to ensure the stability of the enterprise's existence in the present and the prospects for its sustainable development in the future. The integrated system for ensuring the information security of enterprises takes into account modern legal and organizational and managerial measures, as well as software and hardware tools for countering external and internal threats, which ensures the state of information security and the prospects for the development of information technologies. The organizational level of information protection includes organizational regulation, organizational regulation and organizational instruction and ensures the organization of security, regime, work with personnel, with documents, standards for the use of technical security means and procedures for information and analytical activities of the enterprise to identify threats. The organizational aspect of ensuring the information security of an enterprise is one of its most important elements, since the effectiveness of all activities to support the information security system at the proper level largely depends on the actions taken for implementation. The main task is to characterize the information security system at the enterprise. The research of the information security system at the enterprise was carried out. It has been determined that the correct solution to the issue of creating information security bodies will help accelerate the integrated implementation and maintenance of an integral information security system, coordinate legal, administrative, organizational, technological, scientific, technical and physical measures to protect information. It is given that information security programs should take into account how an organization and its people, processes and technologies interact; and how organizational governance, culture, human factors, and architecture support or hinder an enterprise's ability to protect information and manage risk. It is highlighted that information security managers should do their best to create programs that meet the goals and priorities of the enterprise, benefit the enterprise and support the ability of management to innovate while controlling risks.

Data visualization in the field of information security (IS) is becoming an urgent task. The more informative the visual display for the analyst, the faster and better he will be able to get the result. The visualization method is described in the article, which allows to reduce the time needed for determination the actual IS threats when processing the IS threat model. In the classic way of displaying, threat models are a list or a table of several tens of printed pages. To process such a volume of data, information security analysts need to spend a lot of time. It remains likely that the analyst will lose sight of important data. The article proposes a method for visualizing the spatio-temporal model of IS threats in three-dimensional and two-dimensional form. When visualizing a threat model, a surface with axes is used: time, risk, information asset. The proposed visualization of the IS threat model allows the analyst to identify current threats in less time. Scope - management of information security. The result of this work is a way to visualize the IS threat model, taking into account the spatio-temporal factor.KeywordsInformation securitySpatio-temporal modelVisualization

NPP APCS diagnostics implementation as a routine task of APCS

Current development of power engineering in Russia is characterized by deployment of power units with distributed multifunctional automatic process control systems (APCS) based on software and hardware systems (I&C) complex with hierarchical network structure. I&C is the backbone of this structure and APCS creates common information and technological environment of the power unit. Key issues of the multifunctional APCS are associated with lack of the technical efficiency of the I&C, usage of unproven control algorithms and immaturity of the system development technology. Overcoming the identified key issues in the development of the technology of creating I&C and APCS as a whole is associated with the formation of special functionality developed by I&C, their capabilities to use mathematical models of control objects and processes in real time (RT), assessing the information properties of controlled and uncontrolled parameters and generated signals. Performance paradigm (price/quality) of the APCS which answers on these questions can be received only after putting system in the operation and caring additional work on the assessment and optimization of information-functional and technical structures of APCS. The report discusses some new results in solving the indicated issues as part of improving the technology of modern APCS and prospects for their development as the main scientific direction of the Department of Automatic control Systems of ISPU.

The principal purpose of the study is to determine the main parameters of corporate security development in the enterprise in the context of determining the level of impact of external and internal threats. The study uses survey methods on the main internal and external threats that may affect the corporate security of enterprises. The purpose of the practical part of our study is to determine the level of these threats to corporate security. The methodological basis of our study is the method of expert evaluation, which was conducted by interviewing people involved in the process of corporate security management of enterprises, as well as methods of the hierarchical organization using matrices of pair-wise comparisons. The major results of the study can be considered determining the hierarchy of influence of each of the threats affecting the corporate security of industrial enterprises, which will allow optimizing the security system and directing its activities to more pressing issues. Our method of the hierarchical organization of threats to corporate security does not take into account the specifics of the corporate security system of industrial enterprises in most European countries and now can be freely implemented mainly in industrial enterprises of Eastern Europe. The proposed method of assessing external and internal threats is currently optimized for the activities of industrial enterprises in Eastern Europe, including Ukraine and Poland. In the following, at an expansion of the given research, there is a possibility of introducting this methodology to the enterprises of other countries or other profiles. The relevance of this study lies in determining the level of threats that affect the corporate security of industrial enterprises. The methodology for assessing the level of influence of these threats is universal, therefore it can be used in the event of a change in the main threats, it is extremely relevant in the context of rapid globalization changes in the world.

The issue of creating an information security system is very relevant in the world today. One of the urgent tasks is to solve the issues of effective protection of information from both external and internal threats through the creation and implementation of information security management systems in automated systems of enterprises, which, among other things, requires the formalization of the task of protecting information for its subsequent implementation by software and other means. Now there are security analysis systems, for example, that examine the security elements settings of workstations and servers operating systems, analyze the network topology, look for unprotected network connections, examine the settings of firewalls. The disadvantage of these systems is that they are not suitable for monitoring large volumes of network traffic. The solution to this problem is the use of monitoring tools capable of analyzing large amounts of data in real time. Therefore, a significant place in the article is given to the review of developments based on artificial intelligence technologies, namely multi-agent systems, review of information security models, threat risk assessment in automated systems. The functional architecture of the information security management system based on a multi-agent system has been proposed to search in real time for information security optimal solutions through the selection of such coalitions of protection mechanisms agents that will allow to build the optimal protection of the automated system according to the selected criteria. The model with complete overlapping of threats has been substantiated and adopted as a basis, which allows to analyze the overall situation and choose strategically important decisions directly during the organization of information security. The essence of of multi-agent systems functioning that implement a decentralized control system based on the work of autonomous agents that can be implemented programmatically has been revealed. The role of threat agents, resource agents, agents of protection mechanisms and their functional purpose have been defined. The problem of searching a set of protection mechanisms agents coalition for the current state of the automated system as a problem of optimal search by the criterion of protection cost, taking into account the value of information, has been generalized. Due to the modularity of the multi-agent system, the further work will be aimed at detailing its components and perfection.

The author in the article considers the problems of ensuring information security for the solution of which it is supposed to study methods and ways for identifying and preventing danger in the information sphere. The information security of society as a whole is determined by the rapidly growing technological capabilities of modern information systems, which in their influence on the politics, economy, and the spiritual and ideological sphere of people have now become decisive. Ensuring information security, which refers to the state of protection of the vital interests of the individual, society and the state in the information sphere from internal and external threats, seems to be a very important task in the modern world. The security of the information space are entails the protection of the rights and interests of man and citizen, society and the state in the information sphere from real and potential threats. The article also provides a generalized description of the international experience in the legal regulation of information security and the possibility of its application in the Republic of Kazakhstan.

Information attacks and security in wireless sensor networks of industrial SCADA systems

Today's thermal power plants (TPP) and combined heat and power plants (CHPP) cannot function without automated process control systems (APCS). An APCS is mainly intended to keep CHPP running in a steady state by controlling and adjusting the key process parameters, issuing commands to the controls, and visualizing the process data and core / auxiliary equipment status. An APCS is necessary for accident prevention as well as for the analysis and stabilization of parametric values. Automated control systems are what implements the company's economic and quality policies.

The study gives definitions of information security and related terms, such as cybersecurity, national security, and others, indicates the goals, objects, subjects of the concepts under consideration. The author also considers the features of the foundation and development of the information society in Ukraine, the components of its state information policy for ensuring information security, and identifies the key operations of activity of state bodies in the information sphere. The approaches of scientists who studied certain aspects of national and information security were analyzed, based on their work valuable conclusions were drawn and the conceptual basis of the article was formed. Independently, the definition and characteristics of external and internal threats to the information security of the country are given, methods for solving the problems arising in this connection are introduced, ways of ensuring the information security of the state are indicated. Information security in this study is considered as the central element of the national security of Ukraine, as well as a problematic issue in the field of information protection and ensuring the high-quality functioning of the information space. The author made an in-depth analysis of the existing regulatory and legal instruments for ensuring information security, pointed out their shortcomings, and gave recommendations for their further advancement. Also, recommendations are given to improve the current situation with the regulation of information security in the country, the directions of the state information policy are suggested and ways to ensure the continuity of the functioning of the information security system of Ukraine are indicated.

With rapid development of IT industry, wide use of internet in all walks of life,and the increasing emergence of various threat models, this paper proposes an important factor in information security- trusted programming technology after a comparison with traditional software quality analysis. Quality attributes and credibility attributes (software complexity, software availability, software reliability and so on) are studied with a focus on the analysis, calculation and measurement of code credibility. This technology expects great utility value to software quality assurance and information security.

INTRODUCTION Today, in large part, information security is the implementation of controls and best practices suggested by consultants, standard governing bodies (i.e. National Institute of Standards & Technology) (NIST), International Organization for Standardization / International Electrotechnical Commission (ISO/IEC), etc.), the organization's information security department and, sometimes, the organization's employees. While the use of global standards of practice, top management and the information security department within the organization to guide information security planning and implementations may be useful, existing research consistently shows a positive relationship exists between user involvement in planning and the effectiveness of the information systems function within organizations (Gottschalk, 1999; Sambamurthy et al., 1994; Segars & Grover, 1998). A deliverable of the information security planning process is the organization's information security policies and procedures. Standard governing bodies (NIST, ISO/IEC) and researchers (Bidgoli, 2003; Garrison & Posey, 2006) stress the importance of creating information security policies and provide guidance on the different types of information security policies that an organization may need. This research attempts to examine the impact of end-user involvement and formalized information security policies on the effectiveness of the information security function within organizations. Specifically, this study focuses on two antecedent variables, collaborative exchange and formalization, and how it impacts the effective utilization of the information security strategies of deterrence, detection and recovery. Collaborative exchange is an assessment of the extent of collaboration between upper-level management, end users and the information security function. Formalization is an assessment of the extent of established formal information security policies within an organization. The purpose of this research is twofold. First, this research aims to examine the individual effects of formalization and collaborative exchange on the effectiveness of information security detection, deterrence, and recovery activities. Much of the effort expended in the management of information security is in developing and enforcing information security policies. By examining formalization separately, the impact of information security policy development on effective utilization of information security strategies can be assessed. The second aim of this research is to examine the impact of collaborative exchange and formalization in concert on the effectiveness of information security detection, deterrence, and recovery activities. Evaluating complementary effect of collaborative exchange and formalization on effective utilization of information security strategies provides evidence supporting the importance of establishing information security policies with input and effort from all major constituencies within the organization. This study makes several contributions to the literature and practice. First, this research provides insight into how management choices in regards to establishing formal communication channels and developing information security policies may impact the effectiveness of the information security function. Second, the presence of the dependent variable, effectiveness of detection, deterrence and recovery activities, gives academics and practitioners a success measure which can guide more effective decision making in the information security domain. The remainder of this manuscript is organized as follows. The next section discusses the literature supporting the constructs of interest in this study. The following two sections will present the methodological approach taken in this study and the results of data collection. The next section will present the efforts in data analysis. The last section will present a discussion of the important findings and limitations of this research. …