Cybersecurity: Education, Science, Technique

Journal Information
EISSN: 26634023
Total articles ≅ 211

Latest articles in this journal

Cybersecurity: Education, Science, Technique, Volume 1, pp 128-144; https://doi.org/10.28925/2663-4023.2022.17.128144

Abstract:
The properties of quadratic and twisted supersingular Edwards curves that form pairs of quadratic twist with order over a prime field are considered. A modification of the CSIDH algorithm based on odd degree isogenies of these curves is considered. A simple model for the implementation of the CSIDH algorithm in 3 minimal odd isogeny degrees 3, 5, 7, with the prime field modulus and the order of supersingular curves is constructed. At the precipitation stage, the parameters of isogenic chains of all degrees for these two classes of supersingular Edwards curves are calculated and tabulated. An example of the implementation of the CSIDH algorithm as a non-interactive secret sharing scheme based on the secret and public keys of Alice and Bob is given. A new randomized CSIDH algorithm with a random equiprobable choice of one of the curves of these two classes at each step of the isogeny chain is proposed. The choice of the degree of each isogeny is randomized. The operation of the randomized algorithm by an example is illustrated. This algorithm as a possible alternative to "CSIDH with constant time" is considered. A combination of the two approaches is possible to counter side channel attacks. Estimates of the probability of a successful side-channel attack in a randomized algorithm are given. It is noted that all calculations in the CSIDH algorithm necessary to calculate the shared secret are reduced only to calculating the parameter of the isogenic curve and are performed by field and group operations, in particular, scalar point multiplications and doubling points of the isogeny kernel. In the new algorithm we propose to abandon the calculation of the isogenic function of random point , which significantly speeds up the algorithm.
Iryna Pazynina, Ruslan Korchomnyi
Cybersecurity: Education, Science, Technique, Volume 1, pp 159-166; https://doi.org/10.28925/2663-4023.2022.17.159166

Abstract:
For several years in a row, Ukrainian organizations (first due to the Covid-19 pandemic and its consequences, and now military operations) and in general the world, have been forcibly transferring employees to a more optimal work format - this is remote work (work at home). According to statistics, this practice has shown its positive side in terms of higher labor productivity (less time spent on moving around the city, comfortable home conditions, etc.), however, from the point of view of cyber security, there has been an increase in cases of cyber threats (hereinafter - cyber threats) and the activation of cyber criminals. Remote work mode means full or partial transition to the use of personal devices by employees. Setting up remote work of employees requires a clear preparation of information systems within the organization, therefore information security (hereinafter - IS) and information technology (hereinafter - IT) services must ensure the security and continuity of the organization's business processes. Because remote work is associated with a high risk of cyber threats and the intervention of cybercriminals. Cybernetic threats (cyberthreats) are existing and/or potentially possible phenomena and factors that pose a danger to the vital interests of a person and citizen, society and the state, the implementation of which depends on the proper functioning of information, telecommunication, and information-telecommunication systems [1]. The formation and effective implementation of cyber security, within the framework of which a set of recommendations and measures for predicting and countering cyber threats is developed, is a necessary condition for the safe and continuous functioning of the organization.
Lesya Kozubtsova, Igor Kozubtsov, Tetiana Tereshchenko, Tetiana Bondarenko
Cybersecurity: Education, Science, Technique, Volume 1, pp 76-90; https://doi.org/10.28925/2663-4023.2022.17.7690

Abstract:
The subject of research in the scientific article is the state of cybersecurity of the Armed Forces of Ukraine from the gambling dependence of military personnel. Purpose of the article. Study of the psychological and pedagogical problem of gambling addiction among military personnel with the involvement of cellular communications as a new problem in ensuring cybersecurity of the Armed Forces of Ukraine. The result of the study. Sociological studies have shown that people spend more than four hours with their smartphones every day. Smartphone addiction, "nomophobia" is caused by the problem of excessive internet use or internet addiction disorder. Addiction occurs from games, game apps, and online games. This article discusses individual augmented reality geolocation games and their appeal. It is established that the imposition of geolocation games on military personnel is aimed at collecting confidential information about critical infrastructure facilities of the Armed Forces of Ukraine under vivid psychological pleasure. All of them are aimed at where to structure the cybersecurity system of the Armed Forces of Ukraine, and the leakage of geographic information from the location of military facilities is their natural appearance. scientific novelty. For the first time, it is proposed to include the psychological and pedagogical problem of gambling addiction of military personnel on cellular communications in the group of factors that cause cybersecurity violations in the Armed Forces of Ukraine. The practical significance of the obtained scientific result gives grounds for developing recommendations for preventing the leakage of confidential information and conducting explanatory work with the personnel of the Armed Forces of Ukraine about the dangerous consequences both personally for them and for state security through the use of intrusive geolocation games. The presented study does not exhaust all aspects of this problem. The theoretical and practical results obtained in the course of scientific research form the basis for its further study in various aspects.
Oleksii Baidur
Cybersecurity: Education, Science, Technique, Volume 1, pp 31-45; https://doi.org/10.28925/2663-4023.2022.17.3145

Abstract:
The article considers the possibilities of improving the cyber defense system of the Armed Forces of Ukraine and the Ministry of Defense of Ukraine in accordance with the goals and objectives defined in the decisions of the National Security and Defense Council of Ukraine and the Laws of Ukraine. A review of the requirements of normative documents on information and cyber security of Ukraine and similar documents of the United States of America was carried out. The considered algorithm for developing a risk management system in the direction of information security is outlined in the USA national standards. The scientific novelty of the work is that in the process of developing the risk management system in the information and communication systems (ICS) of the Armed Forces of Ukraine and the Ministry of Defense of Ukraine, it was proposed to create an decision support system that will be based on a specialized knowledge base capable of accumulating experience both during cyber-defense measures of the ICS and during the implementation of cyber-influences on the ICS of the enemy. An overview of open international standardization methods and relevant knowledge bases that can be used to update information on vulnerabilities and countermeasures in IC systems was carried out. The joint to use of open knowledge bases and specialized knowledge bases potentially can create new opportunities not only during cyber defense, but also during the implementation of cyber influences on the ICS of the enemy, therefore, this direction of research is promising and corresponds to the national interests of Ukraine
, Sergii Ilyenko, Iryna Kravchuk, Marharyta Herasymenko
Cybersecurity: Education, Science, Technique, Volume 1, pp 46-56; https://doi.org/10.28925/2663-4023.2022.17.4656

Abstract:
The main problems of the network security at the moment are the difficulty of combining existing systems from different vendors and ensuring their stable interaction with each other. Intrusion detection is one of the main tasks of a proper level of network security, because it is they who notify about attacks and can block them when detected. Today, monitoring and analyzing the quality of traffic in the network, detecting and preventing intrusions is helped by IDS systems and IDS systems of the new generation IPS. However, they have been found to have certain drawbacks, such as the limitations of signature-based systems, as static attack signatures limit the flexibility of systems and pose the threat of missing detection of other attacks not entered into the database. This gives rise to the creation of more and more new hybrid systems, but the challenge is to ensure their efficiency and flexibility, which is helped by the use of artificial neural networks (ANNs). This paper considers ways to improve the use of the convolutional neural network model itself by means of modified processing, data analysis, the use of Softmax and FocalLoss functions to avoid the problem of uneven distribution of sample data by the ratio of positive and negative samples, based on training using the KDD99 dataset. The article provides practical examples of possible integration of IDS and ANN systems. Combinations of backpropagation neural networks and radiant-basis neural networks, which showed some of the best results and proved that the combination of networks helps to increase the efficiency of these systems and create a flexible network adjusted to the needs and requirements of the systems. Although the use of artificial neural networks is a popular tool, it has identified a number of disadvantages: critical dependence on the quality of the dataset, which pours both the quality of networking and the amount of data (the more data, the better and more accurate the network training). But if the data is excessive, there is a chance of missing such implicit, but also dangerous attacks as R2L and U2R.
Illia Laktionov, Andrii Kmit, ,
Cybersecurity: Education, Science, Technique, Volume 1, pp 91-111; https://doi.org/10.28925/2663-4023.2022.17.91111

Abstract:
To date, information technologies have entered all the spheres of society. Due to the rapid development of scientific and technological progress, the traditional methods of introduction of wars, which are currently underway not only in the field of hostilities, but also in the cybernetic space of society, are also changing. The modern world is characterized by active wars in cyberspace, where one of the most common attacks is DDoS-attack, including critical infrastructure. This is primarily due to the extreme density of integration into the life and activities of the society of various gadgets, electronic devices and the Internet, the violation of which can cause significant damage - both psychological and significant damage to the enemy from the inside. One of the simplest and most popular methods for violating such normal functioning is the use of resource overload, which can even lead to their complete inaccessibility. One of the ways of overload is the use of DDoS-attacks in case of refusal of service. Mass sending external requests to the attacked resource leads to the fact that such a resource in a short period of time is trying to develop a significant number of requests, which will lead to a significant slowdown in its work or even lead to a complete stop of the resource. This work is devoted to the study of the methods by which DDoS-atack are carried out. The most common methods for their implementation and the main methods of protection against them are considered in detail. This work has examined in detail the technologies and methods of protection against DDoS attacks analyzed and relatively existing solutions of ready-made companies for protection. But since information technologies are developing rapidly, DDoS attacks will develop. Consequently, the problem of protection against them is relevant, especially in the conditions of cyber.
Andrii Stupin, Liudmyla Hlynchuk, Tetiana Hryshanovych
Cybersecurity: Education, Science, Technique, Volume 1, pp 65-75; https://doi.org/10.28925/2663-4023.2022.17.6575

Abstract:
The work describes the algorithms for connecting the two most common payment services in Ukraine - Fondy and LiqPay - to software tools (websites, mobile applications with Internet connection). Currently, such a topic is quite relevant, since not only the domestic economy, but also the world economy is actively transitioning to cashless payments. And this, in turn, poses challenges not only to economists, but also to information technology specialists. Now it is difficult to imagine a catalog site or a service site without online payment for purchased goods. Using non-cash payments, it is possible to pay almost everything: from goods to utilities and administrative fines. The purpose of our research is the development of an algorithm for connecting online payment services to websites and mobile applications connected to the Internet, and the software implementation of such an algorithm. Each service for making online payments has documentation and a set of development tools, utilities and documentation that allows you to create applications based on a certain technology or for a certain platform (SDK). SDKs typically have test credentials and test keys to enable test payments. Analysis of the scheme by which funds are debited from the client shows that two main methods must be implemented for the site server. These methods are: creation of a web form to proceed to the next stage of filling in payment details and receiving webhooks (a mechanism for sending requests when events occur in the system) from the service server. In our work, we describe a method for generating a web payment form and a method for processing webhooks. The proposed software solution is only a wrapper that facilitates the interaction of the payment service with the code by providing the opportunity to connect several services and combine them under one interface. This in turn removes the direct dependency on a specific SDK implementation. It also makes sense to write a similar interface for sites with one payment service, as there are often customers who, for certain reasons, decide to replace the payment service on their site. If a similar interface is implemented there, then replacing the payment service practically boils down to the implementation of several methods from the interface with the new SDK. And this will not bring changes to the already working logic with orders.
Olha Tkachenko, Kostiantyn Tkachenko, Oleksandr Tkachenko
Cybersecurity: Education, Science, Technique, Volume 1, pp 112-127; https://doi.org/10.28925/2663-4023.2022.17.112127

Abstract:
The article considers an ontological approach to the creation and use of learning information systems and learning process management systems that operate in a cloud environment. The proposed ontological approach provides an opportunity to implement learning processes, supporting the sharing of both users (students, teachers, methodologists, etc.) and different training courses of common learning content stored in the cloud. The result of using cloud technologies and ontologies is the ability to make the necessary adjustments to the set of goals and objectives of the learning process, the learning process, the course, the requirements for the level of knowledge and competence of students. An ontological approach to building learning systems operating in a cloud environment is proposed. It is advisable to use the developed ontological model when implementing learning system in managing learning processes in higher educational institutions. The constructed ontological model provides an opportunity to implement continuous improvement of learning processes, supporting the sharing by both users (students, teachers, methodologists, etc.) and different training courses of common training content stored in the cloud. The result of using cloud technologies and ontologies is the possibility of making the necessary adjustments to the set of goals and objectives of the learning process, to the learning process, the training course, to the requirements for the level and competencies of trainees on the part of employers and / or the state. The developed ontological model of learning processes allows, using cloud technologies, to form a space of learning content. Sharing learning content across learning systems has not only enabled the use of ready-made, high-quality learning materials developed by the best teachers, but also reduced the time and resources spent on transferring content from one system to another. The proposed approach uses the integration of technologies such as: ontological modeling, intellectualization and informatization, as well as cloud technologies. The use of these technologies makes it possible to predict the occurrence of emergency situations in the learning process.
Cybersecurity: Education, Science, Technique, Volume 1, pp 21-30; https://doi.org/10.28925/2663-4023.2022.17.2130

Abstract:
The article analyzes the main methods of artificial intelligence in the task of recognizing drawings and transforming a 2D model into a 3D model. With the rapid development of information technologies, and especially in the pursuit of the most realistic reproduction of the project of the future product/house and other objects in digital form, the question of recognizing drawings and transforming a 2D model into a 3D model is very acute. As the number and complexity of tasks arising from the digitization of existing paper-based drawing and technical documentation grows, and the parallel need to transform two-dimensional models into three-dimensional models for visualization in three-dimensional space of complex objects, researchers have drawn attention to the possibilities of applying technologies and systems of artificial intelligence in the processes of drawing recognition and transformation of two-dimensional models into three-dimensional models. The first studies devoted to the application of artificial intelligence in the tasks of recognizing images on drawings began to appear in the early 90s of the 20th century. The analysis of approaches to the recognition of drawings allows us to consider the potential of using different methods of artificial intelligence in the task of recognizing drawings and transforming two-dimensional models into three-dimensional models. To analyze the potential of improving the work of CNN, as well as its architecture, without resorting to extensive expansion of the convolutional neural network (CNN) architecture, as well as taking into account the need to solve the task related to the logical vectorization of primitives and/or conditional graphics recognized by means of a convolutional neural network markings on drawings to perform 2D to 3D transformation. In the future, this stimulates researchers to look for alternative methods and models for image recognition systems on drawings.
, Vasyl Kinzeryavyy, Yuliia Polishchuk, Olena Nechyporuk, Bohdan Horbakha
Cybersecurity: Education, Science, Technique, Volume 1, pp 167-186; https://doi.org/10.28925/2663-4023.2022.17.167186

Abstract:
The rapid development of unmanned aerial vehicles (UAVs), as well as the expansion of the list of actions performed by modern UAVs, led to increased requirements for the safety and reliability of data transmission. In the context of warfare, when confidential information is collected, the protection of such information is a top priority. The practical level of conducting aerial reconnaissance during current warfare demonstrates the urgent need to create UAV which capable of performing flight tasks and aerial reconnaissance in the mode of installed radio interference, and also emphasizes the importance of ensuring the data confidentiality about target objects transmitted by an optical channel for the implementation of their processing in automated systems. The paper provides a review and comparative analysis of modern cryptoalgorithms that are used to ensure data confidentiality during their transmission by radio channel from UAV to ground objects. There are the system of criteria (multi criteria analysis) was used to compare following cryptographic algorithms (similar to AES, NESSIE, etc competitions): block and key sizes; modes of operation; encryption speed; memory requirements; resistance (security) to cryptanalysis. The conducted analysis showed that each cryptographic algorithm has advantages and disadvantages. Also, there is no universal cryptographic algorithm that capable to resolve all privacy problems in UAV. According to the limited resources in the process of UAV operation, it is necessary to create a universal set (dataset) of cryptographic algorithms that could solve various problems in different conditions including different aspects of UAV exploitation. It is these studies that will be devoted to the further work of the authors within the framework of the ongoing scientific project.
Back to Top Top