Method of Network Security Situation Analysis

+ Linear and dynamic models of the system of information security in social networks, taking into consideration the relationships between users, were studied and the resistance of the security system was analyzed. There is a practical interest in studying dependence of the behavior of the system of social network security on the parameters of users’ interaction. Dynamic systems of information security in social networks in the mathematical sense of this term were considered. A dynamic system refers to any object or process, for which the concept of state as a totality of certain magnitudes at a given time is unambiguously defined and the law that describes a change (evolution) of the initial state over time was assigned. The network of social interactions consists of a totality of social users and a totality of the relations between them. Individuals, social groups, organizations, cities, countries can act as users. Relations imply not only communication interactions between users but also relations of the exchange of various resources and activities, including conflict relations. As a result of research, it was found that the security systems of a social network are nonlinear. Theoretical study of the dynamic behavior of an actual object requires the creation of its mathematical model. The procedure for developing a model is to compile mathematical equations based on physical laws. These laws are stated in the language of differential equations. Phase portraits of the data security system in the MATLAB/Multisim program, which indicate the stability of a security system in the working range of parameters even at the maximum value of the impacts, were determined. Thus, the influence of users’ interaction parameters on the parameters of the system of social network security was explored. Such study is useful and important in terms of information security in the network, since the parameters of users’ interaction significantly affect, up to 100 %, the security indicator.

It is a multiple criteria problem to evaluate the security of information networks. However, one key issue which is not fully considered in extant studies is how to obtain the values of these multiple evaluation criteria, and in most evaluation models some redundant criteria values are calculated. Motivated by this, in the work we first use the pairwise comparison method to attain the values of each evaluation aspect of the security of information networks, and then develop a novel similarity-based M(1, 2, 3) approach to rate the security of alternative networks. Application study shows that the proposed approach could rate the overall security of alternative information networks and recognize the most vulnerable aspects of each information network, which provides good supports for making policies to enhance the security of alternative information networks.

Control modeling and optimization of network information security system based on deep learning data interaction

With the rapid development of information technology and the rapid popularization of the Internet, while people enjoy the convenience and efficiency brought about by new technologies, they are also suffering from the harm caused by cyber attacks. In addition to efficiently thwarting network assaults, a high volume of complicated security event data might unintentionally increase the strain of policy makers. At present, NS threats mainly include network viruses, trojans, DOS (Denial-Of-Service), etc. For the increasingly complex Network Security (NS) problems, the traditional rule-based network monitoring technology is difficult to predict the unknown attack behavior. Environment-based, dynamic and integrated data fusion can integrate data from a macro perspective. In recent years, Machine Learning (ML) technology has developed rapidly, which could easily train, test and predict existing third-party models. It uses ML algorithms to find out the association between data rather than manually sets rules. Support vector machine is a common ML method, which can predict the security of the network well after training and testing. In order to monitor the overall security status of the entire network, NS situation awareness refers to the real-time and accurate reproduction of network attacks using the reconstruction approach. Situation awareness technology is a powerful network monitoring and security technology, but there are many problems in the existing NS technology. For example, the state of the network cannot be accurately detected, and its change rule cannot be understood. In order to effectively predict network attacks, this paper adopted a technology based on ML and data analysis, and constructed a NS situational awareness model. The results showed that the detection efficiency of the model based on ML and data analysis was 7.18% higher than that of the traditional NS state awareness model.

Electronic networks have become one of the necessities of our modern era, such that they have become indispensable in institutions, companies, governments, and even in homes. Wherever you are, you will find around you many types of computer networks that transfer a huge amount of information and data between people and institutions at the world level, and they vary. This information and data, in its importance and degree of confidentiality, range from ordinary general and scientific information to government information and statistics, state budgets, and extremely dangerous and confidential intelligence information. All of these types of information and data are transmitted and preserved in most cases via computer networks of various types and locations. Hence the importance of these networks in the contemporary world and in daily interactions between humans in general, and from this importance stems the danger represented by the security of these networks and the security of the information that is circulated through their lines. Here we are trying to clarify the importance of the security of information networks and what are the risks that threaten them? How to combat and protect against these risks.

Information attacks and security in wireless sensor networks of industrial SCADA systems

Security related data in cyberspace is multi-source and heterogeneous, so it cannot be effectively used in network security analysis. To solve this problem, a network security ontology model for network node security analysis is proposed. The model reflects the security status of network nodes through three key sub domains: network assets, security information, defense strategy, and modeling concepts and relationships in a hierarchical and structured form. Ontology related language is used for query, and user-defined rules are used to enhance the reasoning ability of ontology, so as to assist network security analysis. Experiments and quality evaluation results show that the ontology model can integrate multi-source data, query and reason the network security status, and has higher quality evaluation than the same type of ontology.

Today, with the continuous development of globalization, Internet technology has achieved unprecedented leap-forward development. On the one hand, data in all fields of society is growing at an explosive rate, and the development of the Internet has brought about profound changes in the way of data transmission, storage and processing. The development of big data and related technologies enables the transmission and exchange of massive data and information to cross the limitations of time and space, and people's dependence on databases and information systems is also increasing. However, on the other hand, the development of the Internet is also a double-edged sword. For network users, once the data information on the network is leaked in large quantities, there will be unpredictable information security risks. In this context, the problem of network information security has become particularly serious, and the impact and harm to the entire society are very huge. It is necessary to strengthen the response, processing and management to fully guarantee the security of the Internet. In the existing legal governance system for network information security, our country’s network security legislation has made rapid progress in recent years. In comparison, there is still a big gap. There are still many problems in China’s network legislation, law enforcement entities, administrative supervision, governance strategies, and social law-abiding awareness, and it is impossible to effectively prevent various security problems that may occur in a comprehensive manner. This article will find out the problems we have in the legal governance of network information security from the actual situation in China. And by comparing and referring to the latest foreign research progress, it puts forward feasible suggestions and measures for the current China’s network information security governance.KeywordsGlobalizationInternet developmentNetwork information securityRule of law governance

Subject. In the modern information society, ensuring information security is one of the key tasks of organizations, especially in the context of growing cybersecurity threats. Every year, companies face increasingly complex and diverse threats that can cause significant damage to both the financial resources and reputation of the organization. In this context, ensuring information security becomes an important strategic task for enterprises in various fields of activity. Information security plays a critical role in protecting information confidentiality, ensuring the integrity and availability of information, as well as the security of information systems and networks. Goal. The main goal of the research in this work is a comprehensive study of the technology for ensuring the protection of information, preventing unauthorized actions with it, in particular, its use, disclosure, distortion, modification, research and destruction, as well as the correct strategy for information protection of data from external and internal threats. Method or methodology. The research is based on general scientific methodology, which involves the use of a systematic approach and general scientific methods of cognition. The results of the work. In the course of the study, the authors of the article tried to resolve the problem of the interdependence of information security and the strategy for information protection of data from external and internal threats by structuring the subject area of information security policy, which made it possible to set priorities in solving the problems of ensuring the required level of security of information resources and supporting infrastructure in the context of the development of digital technologies. When analyzing problems related to information security, the authors note the importance of mechanisms for generating new solutions that allow, at a minimum, to adequately respond to threats to information security or to anticipate new threats and be able to resist them. Conclusions. The study found that information security plays a critical role in the modern world, ensuring data protection, privacy and sustainability of business processes. In an environment of constantly changing and evolving threats, maintaining a reliable information security system becomes an integral part of the success of organizations and personal security. This is an important step towards creating an information security management system at the enterprise, with the help of which constant and effective monitoring of the effectiveness of security measures is carried out, timely correction of actions taken and revision of existing provisions to ensure maximum security.

Wireless sensor network is a tremendous emerging technology provides communication services for environmental monitoring and target tracking for mass public and military. With increasing of this smart network popularity sensor network faced various challenges and threats. The inclusion of wireless sensor nodes also incurs different types of security threats in network. Mostly networks are using shared key approaches to make less communication overhead, but still network compromise with replay impersonation and compromise attacks. The existing proposed schemes are not fully addressed other network resources such as energy and speed, etc. The intent of this paper is to provide a comprehensive security requirement, detail about security attacks in network and discuss the existing security schemes.

With the development of network technology and the diversification of network applications, network environment is becoming increasingly complex which leads to various network attacks. Malicious traffic, such as DDOS and infiltration attacks, may degrade the network quality, or even block the network directly. Now, traditional network security methods are difficult to meet the needs for network security and information security. Due to the high recognition accuracy and strong generalization of deep neural network (DNN), deep learning based abnormal traffic detection methods have become a research hotspot. However, there are obvious problems containing high false positive rate poor robustness. We propose a novel abnormal traffic detection method based on attention-guided bidirectional gated recurrent unit (Att-BiGRU). Different from the traditional feature extraction methods in DNNs, we use stacked sparse Auto-encoder (SSAE) to extract traffic features for interference factors filtering. The extracted features can reproduce the original input samples as much as possible which enhances the representation of traffic features and effectively improves the robustness of anomaly detection traffic. Then, attention mechanism was introduced to optimize the traffic features. Extensive experiments on UNSW-NB15 show that the proposed scheme has the impressive performance. Compared with recent abnormal traffic detection algorithms, the proposed scheme achieves better results with 89.67% accuracy and 4.2% FAR.

Hearing attacks in network data: An effectiveness study

Technological developments to date continue to grow. These developments have an impact on the security of the system in it. So that the Organization becomes more vulnerable to threats or network attacks or information security caused by various sources, both from internal personnel activities or hacker attacks. Therefore, this research will carry out security on the Mikrotik router by using the port knocking, port blocking and arp methods which are a special program made for the security of the Mikrotik Router OS network, in this study the aim is to make security on the Mikrotik router in a network by making 3 rules Port knocking, Port blocking, and ARP and making port knocking steps so that only clients who know the authentication code can access the port service. Based on this research, it can be concluded that the port knocking, port blocking and arp methods have succeeded in creating a network security where port services can only be accessed by specified users by carrying out several steps that have been made.

The virtual machine technology as new teaching aids in the teaching of computer network security has very good application prospect. At the same time, the virtual machine technology is adopted to simulate the real network teaching environment and improve teachers' teaching effect and has become a kind of effective means to ensure the quality of teaching. The virtual machine technology is adopted to enhance the teaching effect of Network Security. The installation and use of the virtual machine software VMware,setting a virtual network environment on single computer, and simulating attacks and defense on network safety, the teaching effect in both theory and practice teaching is promoted.The virtual machine technology application in computer network has very broad prospects.

The efficiency of the functioning wireless cellular networks using modern information and computer technologies is analyzed. The constituent technical components of the vector quality of functioning of a wireless network segment in the event of a threat to the security of a telecommunication system and eliminating the threat of vulnerability have been studied. Some aspects information security of wireless cellular networks are considered from the point view of the characteristics information protection system and the reliability of the communication network.