Issue of criminal liability for offences against critical infrastructure objects in nuclear industry

The article analyzes the existing legal mechanisms for managing critical information infrastructure in Ukraine. The instruments for their improvement are proposing in this article. An important component of critical infrastructure is its information component – a critical information infrastructure. The sphere of protection of critical information infrastructure in Ukraine is at the initial stage of formation. The current legislation defines only certain objects of socio-economic sphere, in which extraordinary events can lead to socially dangerous consequences. In view of the fact, that the term “critical information infrastructure” does not having a consistent interpretation in different countries, we propose our opinion. “Critical information infrastructure is a system of information management of critical facilities and information and communication networks that provide defense capabilities and security of public and private institutions, whose operation may flow to the national security of Ukraine” (KII). In the KII we can identified information and network components. Information environment of KII is a system for information management of critical objects, including computing and information resources that form automated control systems (ACS). The network component of KII consists of a set of telecommunication devices, communication lines and network equipment, systems of open protocols for the exchange of information between elecommunication devices, global system of digital addresses and digital identifiers, software. The Internet network can be considered as a technological add-on over a telecommunication network that provides the provision of data transmission and processing services (e-mail, teleconferencing, file transfer, access to computing and information systems in local area networks). The main threat to the safety of ACS of critical information infrastructure objects is targeted actions on information systems, information and telecommunication networks by software and hardware. KII legal security include two main components – national and international. The national component may be forming by a set of principles, legal institutions and norms, which are enshrined in the national legislation regulating public relations in Ukraine in the area of counteracting the security threats of the ACS of critical objects. In order to protect the most important objects of KII, it is necessary to identify these objects. The current legislation defines such categories of objects, for which special conditions for ensuring their protection and functioning are established. Some of them, in whole or in part, may be classifying as objects of critical infrastructure. The specificity of providing information security was reflecting in such Ukraine laws like “On the Fundamentals of National Security of Ukraine”, “On the Concept of the National Program of Informatization”, “On the National Program of Informatization”. As well as the Concept of Development of the Security and Defense Sector of Ukraine, the National Security Strategy of Ukraine, the Strategy of Cybersecurity Of Ukraine. The National Security Strategy identifies actual threats to national security and sets priorities for information security, cyber security and security of information resources and critical infrastructure. At the same time, the implementation of the state policy in the field of security of KII requires the further development of legal principles and norms governing the relevant social relations, that is, the national component of the legal security of KII. Ukraine should ensure the establishment of a nationwide system for assessing risks and threats to critical infrastructure, and after the legislative definition of the main terms, the implementation of the Identification of Critical Information Infrastructure objects. Identification of objects of critical information infrastructure can be accomplishing by introducing the certification of objects of critical information infrastructure. Such passports must contain general data about the facility, data on the main sources of danger, data on hazardous natural conditions, technological processes and response to threats. The international component of the legal security of KII provides for the regulation of a set of principles and norms defined by international treaties and recognized by the state, regulating issues of international cooperation in this area. Ukraine has signed the Convention on Cybercrime together with the member states of the Council of Europe and other States. It is aiming at stopping actions against the confidentiality, integrity and availability of computer systems, networks and computer data, as well as abusing such systems, networks and data by installing the criminal responsibility for such behavior, the provision of powers sufficient to combat criminal offenses, and the conclusion of agreements on rapid and reliable international cooperation. In addition, the plan of measures for 2017 on implementation of the Cybersecurity Strategy of Ukraine provides for the implementation of Directive 2008/114/EC on the protection of critical infrastructure, in particular on cybersecurity and cyber defense of critical infrastructure objects. Development of the system of international information security, the following main groups of international relations that requirenormative legal regulation within the framework of the legal security of KII: definition of the boundaries of the national KII in the global information and communication infrastructure and fixing signs of computer incidents in the control system of critical objects information infrastructure. The absence of generally recognized borders of state sovereignty of States in this space is a significant obstacle to the application of international law to the actions of other states. In particular, this impedes the establishment of limits of responsibility of states for violating the security of the KII and organizing international cooperation in the field of countering computer crime. The urgency of the legislative consolidation of signs of computer incidents in the automated control system of critical information infrastructure objects suggests the widespread use of the concept of “incident” in international law. An incident in cyberspace usually associated with a violation of the functioning of the components of cyberspace – an electronic collection environment and automated processing of information that determines the processes of the implementation of these operations, as well as information systems and automated control systems. The essence of the general definition of the “international incident” in the field of KII will be determining, firstly, by the nature of international relations between states that are violating by the “incident”. This event may be the result of unforeseen actions of the state, including actions that harm the interests of public bodies of one or more states, or, conversely, be one of many intentional but minor provocations carried out by agents of one state against another state. Given that international relations in the field of incidents in the field of KII are not regulating by international treaties, the main and, in fact, the only source of international law in this case serves as an international custom, however, its application to the sphere of KII is accompanying by considerable difficulties. For Ukraine, it is possible to introduce the positive experience of other states in the security of the KII. In particular, the problem of security of information technologies has been enshrined in the international standard ISO / IEC 15408 “General criteria for assessing the safety of information technology”.

In today's world, where the number and complexity of cyber threats, especially those targeting strategic state assets, are growing rapidly, there is an urgent need to develop effective, flexible, and adaptive mechanisms for assessing the current level of cyber security. In view of this need, an analysis of existing approaches to assessing the level of cyber security was conducted. Among them are models based on maturity, risk, and compliance. The results of the analysis showed that none of these approaches is completely universal or sufficient for a comprehensive assessment of critical information infrastructure objects in the context of the national legislative field. In particular, approaches based solely on compliance may not take into account real risks, while approaches based on maturity are often too subjective. To address these systemic shortcomings, a hybrid approach was proposed. This approach integrates the best features of previous models, combining the objectivity of compliance testing, the flexibility and process orientation of maturity assessment, and risk-based prioritization. Based on the hybrid approach, a method for calculating the level of cyber protection of critical information infrastructure objects was developed. A component of this method is the introduction of weighting coefficients for different criteria systems. To determine these weighting coefficients, which should ensure an objective reflection of expert knowledge, the hierarchy analysis method was chosen. The proposed method allows qualitative characteristics (e.g., binary “yes/no” answers) to be transformed into a single quantitative indicator. This indicator is calculated in a standardized range from 0 to 1, which facilitates comparison and monitoring. The resulting numerical value is further interpreted on a five-level maturity scale (from “Initial” to “Optimized”), which provides a clear idea of the steps needed for improvement. Thus, the developed method is hierarchical, multi-criteria, and adaptable to current Ukrainian legislation in the field of cyber protection and cyber security. In further research, it is planned to conduct an experimental study and verify the method on three critical infrastructure objects in the fuel and energy sector, as well as to compare the results obtained using the author's software and two other tools.

The article addresses the pressing issue of ensuring cyber security for critical information infrastructure, which is associated with the development of modern information technologies and the increased potential for cyber attacks from criminal groups and potential adversary state entities. An analysis of the scientific literature indicates the necessity of preventive measures and scientific research, which involve monitoring the cyberspace. The application of sentiment analysis is proposed to detect the emotional sentiment towards critical information infrastructure objects. Following a defined algorithm, a sentiment analysis model is constructed based on an artificial neural network using open-source Python programming language libraries. The model's distinguishing feature is the consideration of emoticons to determine the intensification of emotional attitudes towards conducting cyber attacks on critical information infrastructure objects. A dataset related to cyber attacks from social media platforms such as Twitter and Instagram is collected to train the neural network. The results of training and testing the neural network provide grounds to assert that the network's accuracy of 0.7852 is relatively high, enabling its application by cyber reconnaissance units for early detection of cyber threats to critical infrastructure objects in combination with other tools.

The purpose of the research is to substantiate the possibility of using the tensor and cluster analysis methodology to simulate the processes associated with the assessment of the functional state of critical information infrastructure (CII) objects in conditions of destructive electro-magnetic influences that cause functional damage to the microelectronic component of the information processing tools (routers, controls, computer equipment and monitoring) critical information infrastructure. Methods . A systematic approach was used to model processes, as well as methods of tensor and cluster analysis in the framework of assessing the functional state of objects of critical information infrastructure in conditions of destructive effects. The integration of these approaches makes it possible to optimize the parameters of networks and communication nodes, as well as to increase their resistance to non-smooth destructive effects. Results . A mathematical model has been developed to describe the state of the critical information infrastructure, based on the principles of tensor and cluster analysis, as well as on the hierarchical procedure for "degradation of the critical information infrastructure by watering" under conditions of destructive electromagnetic exposure. The proposed model is intended for the formation and implementation of decisive rules aimed at ensuring the stable functioning of critical information systems. Conclusion . Based on the study, the possibility of applying tensor and cluster analysis to process modeling was proved related to the assessment of the functional state of critical information infrastructure objects under conditions of destructive electromagnetic influences and the hierarchical procedure of "degradation of critical information infrastructure by absorption" with the formulation and implementation of decisive rules during the investigated process, that will make it possible to subsequently apply the developed models and methods to increase protection of object elements and critical information infrastructure from individual external destructive electromagnetic effects.

Olena Afanasieva, Oleksii Basmanov, Serhii Novikov FORMATION OF THE CONCEPT OF CRITICAL INFRASTRUCTURE OBJECTS TAKING INTO ACCOUNT THE FEATURES OF POTENTIALLY DANGEROUS OBJECTS OF UKRAINE The paper identifies the main provisions of the methodological apparatus of civil protection in relation to the paradigm - the object of critical infrastructure, taking into account the characteristics of potentially dangerous objects and the regulatory framework of Ukraine. The nature of the origin of the paradigm "object of critical infrastructure" is considered. Global trends in the formation of the paradigm of "critical infrastructure object" in the context of solving problems of civil protection are identified. The existing domestic legislative basis for the formation of a modern type of paradigm "critical infrastructure object" in the context of solving problems of civil protection is analyzed. The latter made it possible to determine the following - to date, and in the European Union has formed a definition of critical infrastructure, which includes physical objects, resources, services and information technology, networks and other infrastructure assets, violation or destruction of which leads to serious consequences for the health, safety and economic well-being of citizens and to the disruption of the effective functioning of government. Ukraine has passed and is in force laws that to some extent provide for measures to prevent emergencies caused by accidents and catastrophes at protected potentially dangerous facilities, the consequences of which can lead to infection, disease and death. Therefore, as a definition of critical infrastructure in the work, it is proposed to identify a set of enterprises, networks, systems, failure or disruption of which can cause loss of management and cause serious damage at the national, regional or local level. It includes nuclear and hydroelectric power plants, chemical and petrochemical plants, metallurgical plants and many other state-owned enterprises and private strategic institutions, which are not only protected, but also have special organizational and technical systems of physical protection. At the next stage of the work, the authors plan to join the development of the State system of critical infrastructure protection, which should include: creation of a state system of critical infrastructure protection; to determine the state structure responsible for the coordination of activities for the protection of critical infrastructure; to form the basis of public-private partnership and resource provision in the field of critical infrastructure protection; to promote the development of international cooperation in the field of critical infrastructure protection. Key words: emergency situation, object of critical infrastructure, civil protection, normative-legal basis

Relevance. All healthcare institutions, including ophthalmology, belong to critical information infrastructure, which is described in law on «the security of critical information infrastructure of the Russian Federation» 26.07.2017 No. 187-FL. It is mandatory to carry out the compliance of critical information infrastructure objects with the established criteria and indicators of significance for these institutions. The article deals with the issues of information security risk assessment and categorization in relation to organizations working in the field of ophthalmology. The research was carried out as part of the implementation of the federal project «Information Security» of the national program «Digital Economy of the Russian Federation». Purpose. Analysis of the features of the categorization process for ophthalmology organizations, designing decision-making algorithm for assigning a category of significance. Material and methods. The article deals with the issues of information security risk assessment and categorization in relation to ophthalmology organizations. The study was carried out as part of the implementation of the federal project «Information Security» (the national program «Digital Economy of the Russian Federation»). Results. The consequences of the implementation of attacks on information systems that are significant for specific types of critical information infrastructure objects in the healthcare sector (in the field of ophthalmology) were considered. The choice of significance criteria was substantiated. An algorithm for making a decision on assigning a category of significance was developed. Conclusion. An analysis of current threats to critical information infrastructure facilities in the healthcare sector was explored. It was found that in the proposed methodologies, the detection of the possibility of detecting an object under the first detection is not wide enough, which may seem to be based on unreasonable costs to ensure the necessary level of security for healthcare and ophthalmology facilities. Keywords: critical information infrastructure, healthcare institution, ophthalmology, information security threats, intruder model, actual threats, computer incidents

The security state of critical information infrastructure objects was analyzed. The problem of protecting the objects of critical information infrastructure was formulated in conjunction with the information protection systems state. The provisions of the state unity concept of the information protection system and the critical information infrastructure object were formed. A set-theoretical development model of an educational laboratory complex for the study of critical information infrastructure objects security is proposed. The mathematical formulation of the research problem was formulated. A model generator of critical information infrastructure objects of various complexity levels has been developed. A technique for the model synthesis of information protection systems based on a functional approach was proposed. The technique of improving the training of specialists through the introduction of educational laboratory complexes was presented. An implementation example of the methodology based on the introduction of a security measure against unauthorized access Dallas Lock 8.0-K was presented.

In such a tense geopolitical situation, and as a result, the tightening of the legislation of the Russian Federation regarding the requirements for information protection systems for critical information infrastructure objects, it becomes especially important to ensure the security of critical information infrastructure. Every year, the requirements for the information security system of significant objects of critical information infrastructure become more and more serious. The use of heterogeneous information security tools creates a contradiction, which consists in the presence of such information security tools and the impossibility of their centralized management. Such a contradiction can be resolved by developing an information security management system with a formed structure of the functions of such a system. This article presents the concept of solving the problem of forming the structure of the functions of the information security management system of a significant object of critical information infrastructure, the concept of building an information security management system of a significant object of critical information infrastructure, as well as the concept of checking the effectiveness of such a system.

The paper describes motor vehicles’ flow in controlled zones in the vicinity of critical infrastructure facilities using the mathematical apparatus of Markov processes. It is shown that there is a functional dependence that connects the average statistical intensity of motor vehicle traffic to any fragment of the situational background of motor vehicles operating in controlled zones near critical infrastructure objects. It is determined by the active fragment of the traffic background with the intensity of traffic vehicles registered for a period of time by the system operator and the number of violators recorded during the same time. A mathematical description of the situational background of motor vehicles in controlled zones near critical infrastructure objects using the mathematical apparatus of Markov processes is presented. It is shown that the number of violators or abnormal situations detected with motor vehicles operating near the protected critical infrastructure depends on the number of fragments of the traffic background, number of working video systems in the controlled area and their mode of operation. One of the options for bringing situational background of motor vehicles in the controlled zones near critical infrastructure objects from an extreme state to a stationary one is proposed based on the solution of the Kolmogorov-Chapman equation and the original interpretation of this solution. It is shown that return of the background from abnormal state to normal state will be determined by the number of measures taken by the physical protection service of the protected object together with the competent state authorities.

The article examines approaches to solving the terminological problem of defining the concept and content of “countering criminal offenses”, which is used in the context of the activities of the Security Service of Ukraine at critical infrastructure facilities. According to the results of the analysis of the scientific achievements related to the author’s subject, based on fundamental developments, the laws of logic and methods of cognition, the concept of the term and its meaning are formulated, the ways of solving the specified problem are determined, and the directions of further investigations are also proposed. The author, in particular, proved that the terms “fighting criminal offenses”, “crime”, “criminal misdemeanor”, “fighting crime”, “fighting crime”, “fighting crimes” are dialectically interrelated, but they are not identical its essence The fight against crime at the objects of critical infrastructure of Ukraine is a type of social activity, one of the main tasks of which is to combat criminal offenses. It is proposed to consolidate the definition of the term “counteraction to criminal offenses” in the context of the activity of the Security Service of Ukraine at critical infrastructure objects, as an object of social management, which is a specific activity of the special service in interaction and coordination with other subjects of the national system of critical infrastructure protection in Ukraine with the use of special forces, means, types, forms and methods of activity provided for by the legislation, which is organized on the basis, within the limits of authority, competence and in the manner provided for by the Constitution and laws of Ukraine, in the form of a task performance system: warning; detection; termination; disclosure of criminal offenses aimed at finding ways, means and other possibilities of effective influence on criminal offenses in order to reduce the intensity of the processes of their determination at all levels and stages, as well as to neutralize the effect of their consequences, while ensuring the protection of critical infrastructure. It is indicated that the content of the counteraction of the Security Service of Ukraine to criminal offenses at critical infrastructure facilities is the activity of the special service regulated by law with the use of special forces, means, types, forms and methods, which is aimed at the fulfillment of tasks: prevention, detection, termination and disclosure of criminal offenses at critical infrastructure projects of Ukraine, in order to ensure the protection of critical infrastructure.

The present study explores contemporary approaches to the analysis, modelling and assurance of cyber security of critical information infrastructure in the face of modern threats. This text focuses on the utilisation of intelligent methods and advanced technologies for the protection of critical information infrastructure (CII). The objective of the present study is to employ an integrative approach to analysing, modelling, and ensuring the cyber security of CII in the face of contemporary threats. The methodological foundation of the study is a comprehensive analysis of scientific literature dedicated to the application of intelligent methods and technologies for the protection of CII. This includes both fundamental theoretical developments and practical aspects of implementing modern cyber security approaches, as well as experimental modelling of fraud detection processes in the CII of the financial sector. This modelling was conducted by the authors using artificial intelligence (AI) methods. A comparative analysis of concepts proposed by modern researchers is given particular emphasis, with the objective of identifying the main trends, development prospects, and potential areas for improving existing CII protection systems. In relation to the outcomes of the extension of scientific sources, it was determined that intelligent methodologies founded on machine learning and AI represent pivotal technologies for the effective safeguarding of critical infrastructure within the financial sector against contemporary cyberattacks and security threats. The results of the modelling of fraud detection processes in the CII of the financial sector of the economy allow an assessment of the effectiveness of the methods used, determination of their advantages and limitations, and formulation of recommendations for further improvement of cyber protection systems for the CII of the financial sector of the economy. The employment of an integrative approach, encompassing threat analysis, simulation modelling, artificial intelligence, and contemporary cyber defence technologies, facilitates the enhancement of the security of critical infrastructure and the effective response to emergent threats. The proposed solutions have the potential to facilitate the development of highly effective cyber defence systems in various critical infrastructure industries, including the financial, energy, and government sectors.

The objects of the critical transport infrastructure are located in all regions of Ukraine, and the question of the safety of these objects is extremely relevant. A functional approach should be used to form an effective safety management unit for critical transport objects. Therefore, in order to achieve an acceptable level of safety of the critical transport infrastructure, it is necessary to have an effective mechanism for achieving this result, which can be achieved through the formation and efficient management of regional programs for the safe operation of critical transport infrastructure objects. Management models for regional safety programs at critical transport infrastructure facilities based on the existing approaches to construction of models of program and project management are proposed in the article. Critical transport infrastructure includes highways, state-owned transport enterprises, subway facilities, gas stations, bridges, sea and river ports, airports, and pipelines. These facilities are strategic for the state, and as a consequence, vulnerable, so they require special protection. To form an effective apparatus for environmental safety management in critical transport infrastructure facilities, the application of a program approach is proposed in the article. To assess the life cycle of regional environmental safety programs of critical transport infrastructure facilities based on the Deming cycle, a spiral model was developed, which is the environment for the operation of schematic, system, and service models of the environmental safety management program. Development of approaches to the management of regional programs for the environmentally safe operation of critical transport infrastructure facilities, based on the formation of strategic objectives and their decomposition, will be aimed not only at solving existing problems of critical transport infrastructure in the region but factors related to the occurrence of dangerous events for them and the elimination of the causes leading to these problems. A system model for managing regional safety programs for objects of critical transport infrastructure is proposed.

Modern society cannot evolve and operate without critical infrastructures, most of which have become dependent of internet connectivity for a variety of information management, communications, and control functions. In many cases, information and communications technology has become all-embracing, connecting other infrastructures referred to as critical information infrastructure. The increased interdependency has made critical infrastructure particularly vulnerable to natural hazards, technical problems, cyber-attacks, and terrorism. The topic of critical information infrastructure protection thus is attracting increasing attention and is progressively considered to be an integral part of national sustainability strategies. This publication delivers best practices on this topic derived from case studies and the status quo in the region and proposes recommendations for the further development of a delineated framework.

Ensuring the safety of critical infrastructure facilities and other strategic objects is one of the main tasks of Ukraine as a state defending itself against military aggression. To accomplish this task, the authors developed a mathematical model of scenario management as a tool to ensure a strategic object’s security. However, the problem arises that, due to the nonlinearity of the processes under consideration, the theoretical solutions rely on assessing various controlling influences and, if necessary, their corrections to obtain the planned result. This article aims to develop a control algorithm for implementing a mathematical model to assess the effectiveness of scenario management as a tool for ensuring the security of a strategic object. For this, it is necessary to complete the following tasks: to consider a mathematical model for assessing the effectiveness of scenario management as a tool for ensuring the safety of a strategic object; develop the structure of the control algorithm for the implementation of this mathematical model; analyse the structure of the algorithm and make recommendations about the need to create the basic procedures for its implementation. A proposed control algorithm for implementing a mathematical model for assessing the effectiveness of scenario management as a tool for ensuring the security of a strategic object is a hierarchical structure of nine blocks (or modules) located at seven hierarchical levels, connected by direct and feedback links. It assesses the effectiveness of solving private tasks to ensure the security of a strategic object under protection, adjusting control influences aimed at implementing the selected scenario management option. At the first hierarchical level is the module for determining the parameters of systematisation of critical infrastructure conglomeration security data. The second level includes the object conglomeration module, which consists of submodules. The third hierarchical level contains the module for collecting data by parameters. The fourth level has two modules. The first is for performing calculations, and the second is for selecting evaluation parameters. It also aims to supplement or reject duplicate data. The fifth hierarchical level also contains two modules. The first is evaluating results according to particular criteria, and the second is the selection of evaluation criteria. The sixth level is the results interpretation module. This module provides the final assessment of the facility’s safety. The seventh hierarchical level is the module for making decisions on adjusting control actions. For the correct, practical application of this control algorithm to assess the effectiveness of solving private tasks to ensure the security of strategic and critical infrastructure objects under protection, it is necessary to develop the procedures for its application in detail. Keywords: critical infrastructure object, scenario management, algorithm, mathematical model, emergency.

This article explores the theoretical and practical aspects of protecting critical infrastructure as a strategic resource for improving the competitiveness of the state. In the article, the concept of critical infrastructure is defined and justified as a strategic resource for improving the competitiveness of the state. Also, a number of threats are identified that can affect the functioning of objects of critical infrastructure and cause instability at different levels, including national security, which significantly affects the competitiveness of the state. One of the directions for ensuring effective protection of critical infrastructure is to develop a policy of “efficiency” – to optimize the distribution and application of state security resources for localizing potential sources of threat and enhancing the competitiveness of the state. The approach to formulating content of the concept of “threat” in the context of competitiveness of the state is analyzed and improved. The focus is on identifying critical objects on national, regional and local levels of infrastructure as a strategic resource for improving the competitiveness of the state. The methodology for attributing objects of national infrastructure to the field of critical infrastructure in accordance with their importance functions and services that they perform is described. A list of vitally important functions and services provided by representatives that require protection is presented, as well as representatives that are objects of critical infrastructure in the context of national security and competitiveness of the state. The content of relevant normative-legal acts that provided grounds for specifying a list of threats to critical infrastructure and confirming its inclusion in strategic resources for ensuring national security and enhancing competitiveness of the state is analyzed. Based on a critical analysis, it is generalized that there are three main categories of threats to critical infrastructure: natural origin, technological nature and malicious actions. It is proposed to supplement this list with combined threats that can cause “synergy effect” destabilization of critical infrastructure, reducing competitiveness of the state.