Розвиток та застосування Повітряних Сил, інших видів ЗС України, удосконалення їх системи управління

13

UDC 342:9(477) DOI: 10.30748/nitps.2018.30.02

K. Sokolov

Information technologies Department, Ministry of Defense of Ukraine, Kyiv

ANALYSIS OF GENERAL APPROACHES FOR THE CONSTRUCTION OF INFORMATION SECURITY SYSTEM

In this article, was conducted an analysis of approaches of building an information security system in the lead-ing countries of the world. The analysis of the approaches of building an information security system in the leading countries of the world found that the information security system relates to complex. However, there is currently no single approach of the synthesis of its structure. The author of this article propose to implement the synthesis of in-formation security system by forming the properties of the system, requirements for it and the performed functions the structural synthesis of its system - the formation of elements of the system and then perform a parametric synthe-sis of the system with the definition of parameters of the structure elements. Formation of system properties, re-quirements to it and performed functions is carried out on the basis of analysis features of the applicability of the developed system and tasks performed with its using. Also, an analysis of traditional approaches to the implementa-tion of structural synthesis of the glass-bottom system, namely, the heuristic synthesis of the structure and methods of one-and-many and multi-criteria optimization. Alternative variants of system construction can be formed as heu-ristic methods, and with using of mathematical synthesis methods. In turn, the procedure of choosing the optimal structure of the system from the set of alternatives can be realized by using the optimization methods as one-factorial, and multicriterion model. Thus, during the synthesis of the information security system of the state power bodies of Ukraine, an approach was developed for the formation of multicriterial mathematical models of structural and parametric synthesis of information systems with the accumulation of targeted information.

Keywords: situational management, information security system, decision making support system.

Introduction

Ukrainian society today urgently needs a decisive and scientifically grounded state policy. Complex prob-lem that needs urgent resolution is the issue of creating a mechanism for effective state solutions.

In all spheres of management, the amount of in-formation exchange and its dynamics increased, the necessity of an operative and adequate response to com-plex political, socio-economic and military situations was aggravated. Constantly increasing amount of in-formation with difficulty subject to comprehensive ac-counting and analysis. Even experts in a certain subject area encounter the inability to review all published, shown and voiced on a particular issue.

The issue of making effective decisions in the sphere of national security of the state in the conditions of state administration in emergency (crisis) situations becomes of paramount importance.

In addition, the problem of information and cyber-netic security, the comprehensive using of technical types of intelligence, information and psychological, cybernetic, electronic counteraction and influence, spe-cial operations units, modern control systems and ro-botic tools for solving the most important tasks of pro-viding defense capabilities of the state deserves special attention.

This is proved by the experience of most countries of the world and the reality of the present. An analysis

of the latest developments in Ukraine in the military-political situation shows the implementation of a sce-nario of promising wars with the key role of information and psychological operations. For using of traditional forces is given auxiliary function. Under such condi-tions, the issue of strengthening the structures of infor-mation security becomes more urgent.

In view of the above, it is foreseen to create the in-formation security system of the state power bodies of Ukraine, which will be accumulated in present and fu-ture forces of information-psychological and cybernetic security, intelligence, cybernetic, radio-electronic and information-psychological counteraction.

In its basis, the information security system is a complex, distributed ergative information system with a static structure. At the same time, the system should effectively solve the tasks of collecting, accumulation, processing and forecasting in order to fulfill the tasks of the intended using under the conditions of an intensive flow of applications for adequate functioning with a dynamic change in the internal state of the system and external situations, both under a priori uncertainty and significant redundancy information about the current situation. This creates an objective conflict between the statics of the excessive structure of the information se-curity system, requiring a significant dynamics of its functioning in the difficult conditions of the current situation.

© Sokolov K., 2018

Наука і техніка Повітряних Сил Збройних Сил України, 2018, № 1(30) ISSN 2223-456Х

The conflict resolution is seen in the substantiation of the structure of the information security system, the development of methodological foundations and the mathematical support that must implement the situ-ational management of the information security system of the Ministry of Defense and the Armed Forces of Ukraine with full consideration of the vector require-ments for the effectiveness of the implementation of this process.

Under these conditions, the issue of considering the issue of finding the most appropriate variant of the synthesis of the structure of the Information Security System of the state power bodies of Ukraine on the ba-sis of multicriteria models of structural-parametric syn-thesis.

Synthesis of multipositional complex systems and systems of accumulation, archiving of target information (information systems (then – IS)) involves the definition of their structure and parameters, which were considered in the works of A. Tsvirkun, I. Kuzmina, Yu. Ziatdinova, G. Baranova, T. Brahmana, M. Buslenko, A. Voronina, V. Chernyak, E. Churova, Yu. Vermysheva, G. Antushev [1–13] and others.

In view of the above, the purpose of this article is to analyze common approaches to building an informa-tion security system.

Main part

With regard to situational management, the main way to overcome this contradiction include the using of modern technologies and methods of preparation and decision making in Situation Centers (then SC), which represent an innovative set of methodical, informational and hardware-software tools intended for the work of managers and experts.

Modern research in this direction is carried out: within the theory of decision-making and policy

analysis and are devoted to their particular aspects con-cerning the issue of the formation and implementation of managerial decisions, the formation and development of systems for the adoption of public-management deci-sions by public administration experts, such as: O. Amosov, V. Bakumenko, A. Degtyar, N. Nyzhnik, G. Pocheptsov, V. Rebkalo, S. Somin, V. Tertychka, T. Saati, etc., concerning the information-analytical provision of state administration, the works are devoted to their adoption M. Demidov, M. Ilyin. , R. Marutian, E. Naumova, E. Novikova, A. Koshkin, A. Morozov and others.

The problems of information and analytical sup-port and organization of the work of the SC in terms of the application of the mathematical apparatus and the implementation of hardware and software computing complexes were investigated by such domestic scientists as V. Wyun, V. Kosolapov, V. Koss, G. Kuzmenko, V. Litvinov, A. Morozov. The activities of the SC as

one of the tools of strategic state administration in the sphere of national security were considered by V. Syt-nik and R. Marutian.

The collective of authors under the direction of M. Ilyin conducted a deep study of theoretical founda-tions and generalization of practical experience in the construction and operation of SC in state structures of the Russian Federation (RF) within the framework of the theory and practice of ensuring national and interna-tional security and devoted to their separate aspects, it is necessary to distinguish the works of domestic scien-tists: V. Horbulin, G. Sitnik, O. Bodruk, V. Bogdano-vich, A. Semenchenko, V. Kosevtsov, B. Parakhonsky, foreign scientists: A. Vozzhenkov, E. Azer, R. Jackson, V. Kaufman, Ch. Mur, P. Hata, A. Volfers, G. Daem, R. Koena, M. Mihalky and others.

Traditionally, during the synthesis of the structure of the system, the optimization problem is formalized in a one-part form or does not involve obtaining an ana-lytical solution that does not ensure the consideration of external conditions and the flexible integration of the meters into a single system. In practice, procedures for optimizing the structure of information systems are im-plemented mainly for single-criteria models, which re-duces the adequacy of the task mapping and the effi-ciency of the solutions.

In this article I want to attract attention to the tradi-tional approaches to the structural and parametric syn-thesis of complex information systems. Any complex system is defined by three categories: elements, rela-tions, properties. The unambiguous and complete de-scription of these categories determines the system, its structure, parameters and efficiency. The purpose of the synthesis of the system is to specify and determine the optimal (rational) solutions for the specified categories. In turn, the synthesis of a complex system involves solving structural and parametric synthesis problems.

Therefore, the purpose of this article is the synthe-sis of the system in the general case is the specification and definition of the rational composition of its struc-tural elements, relations between them and parameters [14]. Thus, the general methodology of synthesis of complex IP can be described in the following steps:

1) formation of the properties of the system, re-quirements for it and the performed functions;

2) structural synthesis of the system – the forma-tion of elements of the system;

3) parametric synthesis of the system – definitionof parameters of elements of structure.

Formation of system properties, requirements to it and performed functions is carried out on the basis of analysis of the features of the applicability of the devel-oped system and tasks performed with its using. Tradi-tional approaches to the implementation of structural synthesis of a complex system can be divided into two classes.

14

Розвиток та застосування Повітряних Сил, інших видів ЗС України, удосконалення їх системи управління

The first of these is the heuristic synthesis of the structure, which is based on the definition of the com-ponents of the system and the relationships between them based on the analysis of the functions performed and the requirements to it. The result of this approach is purely subjective decisions about the composition and structure of the system in the form of one non-alternative option. This approach is used, as a rule, in the case of a complex mathematical description (formal-ization) of the synthesis problem, and the stage of for-mation of the structure is often called development [11; 14–15].

The second option for realizing the process of con-structing (synthesizing) the structure of a complex sys-tem is based on the using of optimization methods and consists of choosing from excessive number of options for constructing a system of optimal structure according to the chosen criterion or system of criteria. Alternative variants of system construction can be formed as heuris-tic methods, and with the using of methods of mathe-matical synthesis. In turn, the procedure for choosing the optimal structure of the system from a set of alterna-tives can be realized using optimization methods as a one-and two-criterion model [2–3; 5; 16]. Single-criterion optimization models have relatively simple implementation of the stages of structural synthesis, however, in comparison with multicriteria models, do not provide comprehensive consideration in the final synthesis results of the whole set of conflicting require-ments to it.

For multicriteria problems, the application of a se-ries (vector) of contradictory criteria is inherent. It is precisely the existence of a contradiction between the partial criteria of the system's optimality and does not allow solving the synthesis problem by the approaches typical of one-criterion problems. The contradiction between the partial criteria of optimality is manifested in the fact that it is not possible to reach the optimum by all criteria at the same time. That is, the improvement of one criterion leads to deterioration (sometimes signifi-cant) of other criteria. In this case, special methods of solving multicriteria problems are used [1; 3; 5]. In gen-eral, four classes of basic methods for solving vector optimization problems can be distinguished [1]: optimi-zation of the sequence of partial criteria when introduc-ing priorities and assigning concessions; allocation of pareto-optimal solutions; optimization based on com-promise relationships; approximation to a certain ideal value. Methods of these classes differ in the amount of additional information on the solution of the optimiza-tion problem, as well as the complexity of computa-tional procedures.

The advantage of methods of the first class is the ordering of criteria for significance and the construction of sequential optimization procedures for each partial criterion. The disadvantage of this is that it is difficult to

justify the ranking of partial criteria, which sometimes turns into a separate problem.

The third class of methods – optimization based on compromise ratios – consists in determining a certain optimal solution with a known concession between par-tial optimality criteria. In this case, a generalized opti-mality criterion is generated from the set of partial ones according to a certain rule and its extremum is deter-mined in relation to the desired optimization parameter. That is, in fact, the multicriteria problem is reduced to a one-criterial form. There are a large number of ways to formulate a generalized criterion, in particular, additive, multiplicative criteria with weighted and unweighted partial criteria, convolution criteria, etc. [1; 3; 5].

The advantage of this class of methods is the af-filiation of the Pareto area solution. These methods are widely used for the analysis of complex systems. The complexity of the methods of the third group should include the restrictions associated with determining the weighting coefficients of the partial criteria.

Methods of the fourth class consist in the introduc-tion of a certain ideal point belonging to the Pareto re-gion and the approximation of the optimal values – of the required parameters to it by all partial criteria. That is, the optimization problem is reduced to obtaining a set of solutions close to the ideal point, and the choice of which of the criteria is the closest to the ideal value. The variety of approximation criteria generates, accord-ingly, the diversity of existing methods of this class – in terms of the quadratic, linear norm, and others [13]. The main disadvantage of such methods is the uncertainty or complexity in the formation of an ideal point.

Analysis shows that the most widely used methods of multi-criteria optimization, belonging to the third and fourth classes, but in each case the choice to use a par-ticular method depends on the specifics and features of a particular task.

The practical implementation of the process of structural synthesis of complex systems is devoted to a significant number of works, which to some extent im-plement the using of existing approaches. The most re-vealing results of this process are given in the works [1; 5–6; 15–21].

The analysis of existing approaches shows that in most cases, the structural and parametric synthesis of IC is carried out according to one-criterion models, which does not fully take into account the entire spectrum of conflicting requirements to the system and leads to a decrease in the quality of the synthesis results. In addi-tion, in each specific case, appropriate methods are cho-sen for determining the optimal structure and IP pa-rameters, taking into account the specifics of the solv-able target tasks. In this regard, it is necessary to formu-late multicriterial mathematical models of structural and parametric synthesis of ICs for the accumulation of tar-geted information.

15

Наука і техніка Повітряних Сил Збройних Сил України, 2018, № 1(30) ISSN 2223-456Х

16

Thus, during the synthesis of the information secu-rity system of the state power bodies of Ukraine, the approach of forming multicriteria mathematical models of structural and parametric synthesis of ICs for the ac-cumulation of targeted information is chosen.

Conclusion

In the article analyzes the general approaches to building an information secure system of the state pow-er bodies of Ukraine.

The system should effectively solve the tasks of collecting, accumulation, processing and forecasting in order to fulfill the tasks of the intended using under the conditions of an intensive flow of applications for ade-quate functioning with a dynamic change in the internal state of the system and external situations, both under a

priori uncertainty and significant redundancy informa-tion about the current situation. This creates an objec-tive conflict between the statics of the excessive struc-ture of the information security system, requiring a sig-nificant dynamics of its functioning in the difficult con-ditions of the current situation.

According to the results of the analysis of traditional approaches, the expediency of synthesis of the informa-tion security system of the state power bodies of Ukraine has been determined by forming multicriteria mathemati-cal models of structural and parametric synthesis of IC for the accumulation of targeted information.

The direction of further research should be consid-ered development of the methodology of information security management of the state power bodies of Ukraine.

References

1. Antushev, G.S. (1986), “Metody parametricheskogo sinteza slozhnykh tekhnicheskikh sistem” [Methods of parametricsynthesis of complex technical systems], Science, Moscow, 88 p.

2. Baranov, G.L. and Makarov, A.V. (1986), “Strukturnoye modelirovaniye slozhnykh dinamicheskikh system” [Structuralmodeling of complex dynamic systems], Scientific thought, Kyiv, 272 p.

3. Brahman, T.R. (1984), “Mnogokriterial'nost' i vybor al'ternativ v tekhnike” [Multicriteria and choice of alternatives intechnology], Radio and communication, Moscow, 288 p.

4. Vermishev, Yu.H. (1982), “Metody avtomaticheskogo poiska resheniy pri proyektirovanii slozhnykh tekhnicheskikh sis-tem” [Methods of automatical solutions for design of complex technical systems], Radio and communication, Moscow, 152 p.

5. Voronin, A.N. (1992), “Mnogokriterial'nyy sintez dinamicheskikh system” [Multicriteria synthesis of dynamic systems],Scientific thought, Kyiv, 160 p.

6. Voronin, A.N., Ziatdinov, Yu.K., Harchenko, A.V. and Ostashevskiy, V.V. (1997), “Slozhnyye tekhnicheskiye i erga-ticheskiye sistemy: metod ispol'zovaniya” [Complex technical and ergatic systems: method of using], Fact, Kharkiv, 240 p.

7. Voronin, A.N. (2003), “Vlozhennyye skalyarnyye svertki vektornogo kriteriya” [Embedded scalar convolutions of thevector criterion], Problems of information management, No. 5, pp. 10-21.

8. Voronin, A.N., Kolos, L.N. and Podgorodetskaya, L.V. (2004), “Metodika mnogokriterial'noy otsenki effektivnostinauchnykh kosmicheskikh proyektov” [Methods of multicriteria evaluation of the effectiveness of scientific space projects], Problems of information management, No. 5, pp. 46-56.

9. Narimanov, G.S. and Tihomirov, M.K. (1972), “Osnovy teorii poleta kosmicheskikh apparatov” [Fundamentals of thetheory of space vehicles flight], Carbuilding, Moscow, 608 p.

10. Tsvirkun, A.D., Akinfiev, V.K. and Filippov, V.A. (1985), “Imitatsionnoye modelirovaniye v zadachakh sinteza struk-tury slozhnykh sistem (optimizatsionno-imitatsionnyy podkhod)” [Simulation modeling in the problems of synthesis of the struc-ture of complex systems (optimization-simulation approach)], Science, Moscow, 173 p.

11. Tsvirkun, A.D. (1982), “Osnovy sinteza struktury slozhnykh system” [Fundamentals of synthesis of the structure ofcomplex systems], Science, Moscow, 200 p.

12. Chernyak, V.S. (1993), “Mnogopozitsionnaya radiolokatsiya” [Multiposition radiolocation], Radio and communica-tion, Moscow, 415 p.

13. Churov, E.P. (1977), “Mnogopozitsionnaya radiolokatsiya” [Satelite sysytems of radionavigation], Soviet Radio, Mos-cow, 392 p.

14. Kuzmina, I.V. (1981), “Osnovy modelirovaniya slozhnykh system” [Fundamentals of modeling complex systems], Highschool, Kyiv, 360 p.

15. Ankudinov, G.I. (1986), “Sintez struktury slozhnykh ob’yektov: logiko-kombinirovannyy pokhod” [Synthesis of thestructure of complex objects: a logical combination trek], Publ.house Leingrad university, Leningrad, 260 p.

16. Dubov, Yu.A., Travkin, S.I. and Yanishets, V.N. (1986), “Mnogokriterial'nyye modeli formirovaniya i vybora varian-tov system” [Multicriteria models of the formation and selection of system variants], Science, Moscow, 296 p.

17. Gerasimov, B.M., Divizinuk, M.M. and Subach, I.Yu. (2004), “Sistemy podderzhki prinyatiya resheniy: proyektiro-vaniye, primeneniye, otsenka effektivnosti” [Decision support systems: design, application, performance evaluation], Pupl. house SNIYAE and P, Sevastopol, 320 p.

18. Dodonov, V.A. (2007), “Metodologiya sistemnogo proyektirovaniya i razrabotki avtomatizirovannykh sistem obrabotkiinformatsii i upravleniya” [Methodology of system design and development of automated information processing and control systems], Registration of storage and processing of data, No. 4, Vol. 9, pp. 91-106.

19. Kozheskurt, V.I., Lutsuk, S.L. and Smertenko, E.V. (2007), “Metodologiya sinteza arkhitekturi programno-tekhnicheskogo kompleksa avtomatizirovannoy sistemy monitoringa obstanovki” [Methodology of the synthesis of the architec-

Розвиток та застосування Повітряних Сил, інших видів ЗС України, удосконалення їх системи управління

ture of the software and hardware complex of the automated system of monitoring of the situation], Registration of storage and processing of data, No. 4, Vol. 9, pp. 76-90.

20. Putyatin, V.G., Valetchin, V.A. and Dodonov, V.A. (2007), “Sistemnyy podkhod k proyektirovaniyu avtomatiziro-vannykh sistem obrabotki informatsii i upravleniya” [System approach to the design of automated information processing and management systems], Registration of storage and processing of data, No. 1, Vol. 9, pp. 56-72.

21. Sokolyanska, N.I. (2007), “Orhanizatsiyno-funktsional’na model’ struktury informatsiyno-analitychnoyi systemy” [Or-ganizational-functional model of the structure of the information-analytical system], Registration of storage and processing of data, No. 4, Vol. 9, pp. 91-106.

Received by Editorial Board 28.12.2017 Signed for printing 1.02.2018

Відомості про авторa: Cоколов Костянтин Олександрович Начальник Управління інформаційних технологій Міністерства оборони України, Київ, Україна https://orcid.org/0000-0002-3804-9884 e-mail: kost_sokolov@ukr.net

Information about the author: Kostiantyn Sokolov Chef of Department of Informational Technologies of Ministery of Defence of Ukraine, Kiev, Ukraine https://orcid.org/0000-0002-3804-9884 e-mail: kost_sokolov@ukr.net

АНАЛІЗ ЗАГАЛЬНИХ ПІДХОДІВ ЩОДО ПОБУДОВИ СИСТЕМИ ІНФОРМАЦІЙНОЇ БЕЗПЕКИ

К.О. Соколов

В зазначеній статті було проведено аналіз підходів щодо побудови системи інформаційної безпеки провідних кра-їн світу. Під час аналізу підходів побудови системи інформаційної безпеки провідних країн світу з’ясовано те, що сис-тема інформаційної безпеки відноситься до складних інформаційних систем. Проте, єдиного підходу до синтезу її структури на даний час не існує. Автором зазначеної статті пропонується здійснювати синтез системи інформацій-ної безпеки шляхом формування властивостей системи, вимог до неї та виконуваних функцій; структурним синтезом її системи – формування елементів системи, а після чого здійснювати параметричний синтез системи з визначенням параметрів елементів структури. Формування властивостей системи, вимог до неї та виконуваних функцій здійсню-ється на підставі аналізу особливостей застосовності розроблюваної системи та виконуваних з її використанням за-вдань. Також проведено аналіз традиційних підходів до реалізації структурного синтезу складної системи, а саме ев-ристичний синтез структури та методів однокритеріальної та багатокритеріальної оптимізації. Альтернативні варіанти побудови системи можна формувати як евристичними методами, так і з використанням методів матема-тичного синтезу. В свою чергу, процедуру вибору оптимальної структури системи із сукупності альтернатив можна реалізувати з використанням оптимізаційних методів як за однокритеріальною, так і за багатокритеріальною модел-лю. Таким чином, при синтезі системи інформаційної безпеки органів державної влади України вибраний підхід форму-вання багатокритеріальних математичних моделей структурного та параметричного синтезу інформаційних систем з накопиченням цільової інформації.

Ключові слова: ситуаційне управління; система інформаційної безпеки; система підтримки прийняття рішень.

АНАЛИЗ ОБЩИХ ПОДХОДОВ К ПОСТРОЕНИЮ СИСТЕМЫ ИНФОРМАЦИОННОЙ БЕЗОПАСНОСТИ

К.А. Соколов

В указанной статье был проведен анализ подходов к построению системы информационной безопасности веду-щих стран мира. При анализе подходов построения системы информационной безопасности ведущих стран мира выяс-нено, что система информационной безопасности относится к сложным информационным системам. Однако, едино-го подхода к синтезу ее структуры в настоящее время не существует. Автором данной статьи предлагается осуще-ствлять синтез системы информационной безопасности путем формирования свойств системы, требований к ней и выполняемых функций; структурным синтезом ее системы – формирование элементов системы, а после этого осуще-ствлять параметрический синтез системы с определением параметров элементов структуры. Формирование свойств системы, требований к ней и выполняемых функций осуществляется на основании анализа особенностей применимо-сти разрабатываемой системы и выполняемых с ее использованием задач. Также проведен анализ традиционных под-ходов к реализации структурного синтеза сложной системы, а именно эвристический синтез структуры и методов однокритериальной и многокритериальной оптимизации. Альтернативные варианты построения системы можно формировать как эвристическими методами, так и с использованием методов математического синтеза. В свою оче-редь, процедуру выбора оптимальной структуры системы из совокупности альтернатив можно реализовать с исполь-зованием оптимизационных методов как по однокритериальной, так и по многокритериальной модели. Таким образом, при синтезе системы информационной безопасности органов государственной власти Украины выбран подход фор-мирования многокритериальных математических моделей структурного и параметрического синтеза информацион-ных систем с накоплением целевой информации.

Ключевые слова: ситуационное управление; система информационной безопасности; система поддержки приня-тия решений.

17