Information systems and technologies security
type: channel
publisher: Київський національний університет імені Тараса Шевченка
language: en
publication name: Information systems and technologies security
issn: 2707-1758
items: Methods for determining the equilibrium state of a network with given flows in nodes of information networks of cyber-physical systems
items: Fast fourier transform in ofdm: algorithmic approaches and their role in information technologies
items: Spam detection in text messages using logistic regression based on gradient descent
items: Implementation of web application security on node.js: main threats and security methods
items: Mathematical model of steganography using suboptimal decisions in data compression algorithms
items: The use of artificial intelligence for ensuring the security of data centers
items: Hybrid approach to information security risk management
items: Methods for detection and analysis of misconfiguration-based attacks in cloud services
items: Quantitative risk assessment using the fuzzy sets method
items: Social media automated account (bot) detection system architecture
items: CLUSTRER STATE COORDINATION REDUCERS BASED ON RSDP
items: A method for modeling hybrid influence on government services using an agent-Based Approach
items: MATHEMATICAL MODEL OF THE SIGNAL EMISSION DYNAMICS IN SEISMIC-ACOUSTIC MONITORING SYSTEMS OF BUILDING STRUCTURES
items: EXISTING SECURITY PROTOCOLS IN CFS
items: SECURITY OF REST API: THREATS AND PROTECTION METHODS
items: AUTHORIZATION MODELS FOR TRUSTLESS NODE INTERACTION IN PUBLIC DECENTRALIZED NETWORKS
items: USAGE OF OPEN-SOURCE INTELLIGENCE FOR SECURITY OF CRITICAL INFRASTRUCTURE
items: ARTIFICIAL INTELLIGENCE SYSTEMS IN CYBER SECURITY AND THEIR CAPABILITIESFRONT MODERN CYBER THREATS
items: METHODS OF EXTRACTING CYBERSECURITY OBJECTS FROM ELECTRONIC SOURCES USING ARTIFICIAL INTELLIGENCE
items: PROTECTION MODEL AGAINST DISTRIBUTED GRADUAL DEGRADATION ATTACKS BASED ON STATISTICAL AND SEMANTIC APPROACHES
items: JAVASCRIPT-BASED WEB EXPLOIT ANALYSIS MODEL
items: OPTIMIZATION OF BUFFER AND PRIORITIES FOR ENSURING SECURITY IN BLUETOOTH NETWORKS
items: IMPROVING THE METHOD OF DETECTING RADIO SIGNALS USING TOPOLOGICAL THREAT IDENTIFICATION
items: BENEFITS AND DANGERS OF USING CHATGPT
items: STUDY OF THE THEORETICAL CORRESPONDENCE INDICES FOR THE UKRAINIAN ALPHABET WITH SPACES
items: MODEL OF IMPLEMENTATION OF MANAGEMENT OF ACCESS TO INFORMATION ASSETS IN THE CONCEPT OF ZERO TRUST
items: COMPARISON OF POST-QUANTUM STANDARDS IN TERMS OF IMPLEMENTATION IN CLASSICAL ELECTRONIC SIGNATURE ALGORITHMS
items: COMPARISON OF MATURITY MODELS OF INFORMATION SECURITY PROCESSES OF AN ORGANISATION (COMPANY)
items: PECULIARITIES OF ENSURING THE SECURITY OF CRITICAL INFRASTRUCTURES
items: IMPROVEMENT OF COMPUTER SYSTEM PROTECTION ASSESSMENT METHODS AGAINST HARMFUL SOFTWARE CODE

Methods for determining the equilibrium state of a network with given flows in nodes of information networks of cyber-physical systems
type: item
description: Background. The multidimensionality of cyberspace and the high level of informatization of critical infrastructure objects, both in Ukraine and globally, pose a threat to humanity at the global level in the foreseeable future. The situation is complicated by the fact that critical infrastructure objects, which operate within a unified information space and support a wide range of modern information technologies, remain vulnerable to new types of threats, despite tremendous efforts to counteract external cyber intrusions. Methods. It has been identified that the study of complex systems employs modern mathematical methods such as topology, graph theory, and linear algebra. Results. The entropic method for analyzing complex systems has found wide application in practical problems related to the study of natural, technical, and cyber-physical systems. This method has long been used to develop efficient systems for coding, encryption, and information protection. With the increase in computational power, the practical value of researching dynamic systems – including those based on entropy – has grown, as entropy serves as a good indicator for selecting certain states of a system from the set of all its possible states. Conclusions. Since the study of structures and general patterns is common across many branches of science and technology, tasks of a general nature – where the specific nature of the system is not taken into account – remain relevant. This study presents an algorithm for determining the state of a multi-node information flow network in which its entropy reaches a maximum value. The algorithm is based on analytical expressions for entropy and its first and second derivatives, derived by the authors and defined on the set of kernel solutions of a system of linear equations to which the original problem is reduced. Experimental results are presented for determining the solution set and solving the optimization problem of finding the state with the maximum ent…
subject: Information systems and technologies
  topic: section
subject: software complex
  topic: keywords
subject: network traffic
  topic: keywords
subject: matrices
  topic: keywords
subject: graphs
  topic: keywords
subject: entropy
  topic: keywords
subject: Hessian matrices
  topic: keywords
subject: submatrix
  topic: keywords
creator: Ruslan POLITANSKYI
creator: Valentyn LESINSKYI
creator: Serhii HALIUK
creator: Andrii KULKO
rights: Copyright (c) 2025 Information systems and technologies security https://creativecommons.org/licenses/by/4.0
date: 2025-08-29
publication date: 2025-08-29
starting page: 93
ending page: 101
doi: 10.17721/ISTS.2025.9.93-101

Fast fourier transform in ofdm: algorithmic approaches and their role in information technologies
type: item
description: Background. Orthogonal Frequency Division Multiplexing (OFDM) is a key technology in modern information systems and is widely used in mobile networks such as 4G and 5G, the IEEE 802.11 standard (Wi-Fi), and digital television (DVB-T). The increase in the communication channel bandwidth requires an optimal selection of signal transformation parameters for efficient use of the hardware resources of Field-Programmable Gate Arrays (FPGA) in the implementation of OFDM. Methods. The following methods were used: modeling of an OFDM-based communication system in the Simulink environment, which allowed for the study of signal processing transformations, as well as the analysis of the bit error rate (BER) for different modulation parameters. The implementation of FFT algorithms was carried out using HDL coding to compare the efficiency of the Fast Fourier Transform (FFT) algorithms Streaming Radix-2² and Burst Radix-2. Results. Simulation results showed that using signal resampling at the transmitter improves the channel energy efficiency, reducing the required power level by 12 dB. The relationship between the bit error rate and the signal-to-noise ratio (SNR) demonstrates that increasing the FFT length from 512 to 2048 points requires a 6 dB increase in the SNR. The analysis of the cyclic prefix (CP) impact showed that the optimal CP length is 1/16 of the OFDM symbol, which reduces transmission speed losses. The effect of modulation on the bit error rate (BER) indicates the need for increased power when transitioning to higher-order Quadrature Amplitude Modulation (QAM). Conclusions. It was concluded that the parameters of FFT and signal resampling are critical for the efficiency of the OFDM system. The results obtained can be used to optimize the implementation of OFDM on FPGA.
subject: Information systems and technologies
  topic: section
subject: Orthogonal Frequency Division Multiplexing (OFDM)
  topic: keywords
subject: Fast Fourier Transform (FFT)
  topic: keywords
subject: Information Systems
  topic: keywords
subject: Bit Error Rate (BER)
  topic: keywords
subject: Field-Programmable Gate Array (FPGA)
  topic: keywords
creator: Juliy BOIKO
creator: Ilya PYATIN
creator: Volodymir DRUZHYNIN
creator: Oleksander EROMENKO
rights: Copyright (c) 2025 Information systems and technologies security https://creativecommons.org/licenses/by/4.0
date: 2025-08-29
publication date: 2025-08-29
starting page: 81
ending page: 92
doi: 10.17721/ISTS.2025.9.81-92

Spam detection in text messages using logistic regression based on gradient descent
type: item
description: Background. With the increasing volume of email communication, the problem of spam filtering is becoming more and more relevant. According to statistical research, spam constitutes a significant portion of global email traffic, creating risks both for security and for the efficiency of electronic communication. In this context, natural language processing (NLP) and machine learning methods are gaining particular importance. The aim of this study is to develop a model for classifying email messages into spam and non-spam using logistic regression implemented via gradient descent, in combination with text data processing methods. Methods. The model was trained on a dataset containing over 5,000 email messages labeled as spam or non-spam. The data were preprocessed by removing noise components such as punctuation, numbers, stop words, and short tokens, followed by lemmatization. The cleaned texts were converted into numerical format using TF-IDF vectorization with L2 normalization. To address the class imbalance, the SMOTE method was applied. The model was trained using a classical gradient descent scheme with a sigmoid activation function and a logarithmic loss function. Results. The resulting model achieved high performance on the test set: overall accuracy was 98%, with an F1-score of 0.92 for the spam class and 0.99 for the non-spam class. The recall for spam reached 0.90, indicating the model's ability to detect most unwanted messages without excessive false positives. The balance between precision and recall is also reflected in macro and weighted average F1-scores, both exceeding 0.96. Conclusions. The findings demonstrate the effectiveness of combining logistic regression, gradient descent, and text preprocessing for the spam classification task, even in the presence of imbalanced data. The proposed approach is both efficient and interpretable, making it suitable for practical implementation in email filtering systems.
subject: Computer science
  topic: section
subject: machine learning
  topic: keywords
subject: natural language processing
  topic: keywords
subject: gradient optimization
  topic: keywords
subject: email filtering
  topic: keywords
subject: text preprocessing
  topic: keywords
subject: classification
  topic: keywords
creator: Viktor MOROZOV
creator: Vladyslav DEINEHA
rights: Copyright (c) 2025 Information systems and technologies security https://creativecommons.org/licenses/by/4.0
date: 2025-08-29
publication date: 2025-08-29
starting page: 74
ending page: 80
doi: 10.17721/ISTS.2025.9.74-80

Implementation of web application security on node.js: main threats and security methods
type: item
description: Background. The intensive development of web technologies and the growing popularity of web applications developed on the Node.js platform open new opportunities for digital business while simultaneously increasing cyber threat risks. One of the key problems of modern cybersecurity is protecting such systems from unauthorized access, data integrity violations, and ensuring their stable operation. In the context of increasing attacks on web resources, security measures that can be integrated without significant performance degradation become particularly relevant. The application of multi-level mechanisms, including access control, input validation, and database query parameterization, forms the foundation of the modern approach to secure development. Methods. This work conducted a systematic analysis of modern methods for ensuring web application security, particularly in the Node.js context. Methods of theoretical modeling, comparative analysis, practical testing of security systems, and effectiveness analysis of various strategies were used. Special attention was paid to the integration of protection mechanisms such as rate limiting, parameterized SQL query processing, user input filtering, and application of the principle of least privilege. For each method, the level of performance load, attack detection accuracy, and compatibility with Node.js architecture were evaluated. Results. The analysis showed that the most effective approach to web application protection is combining several complementary strategies. For example, using parameterized queries significantly reduces the risk of SQL injections, while access control to critical resources prevents unauthorized data modification. It was proven that combining rate limiting and input filtering significantly increases application resistance to brute force and script injection attacks. At the same time, such measures do not create substantial system load, allowing their implementation in real-world conditions. Opti…
subject: Cybersecurity and information protection
  topic: section
subject: Node.js
  topic: keywords
subject: web application security
  topic: keywords
subject: SQL injections
  topic: keywords
subject: access control
  topic: keywords
subject: rate limiting
  topic: keywords
subject: input filtering
  topic: keywords
subject: multi-level protection
  topic: keywords
subject: data confidentiality
  topic: keywords
subject: software vulnerability
  topic: keywords
subject: cybersecurity
  topic: keywords
creator: Ivan OPIRSKYY
creator: Serhii KOREN
creator: Anton HUNDERYCH
rights: Copyright (c) 2025 Information systems and technologies security https://creativecommons.org/licenses/by/4.0
date: 2025-08-29
publication date: 2025-08-29
starting page: 61
ending page: 73
doi: 10.17721/ISTS.2025.9.61-73

Mathematical model of steganography using suboptimal decisions in data compression algorithms
type: item
description: Background. Protecting access to information in the digital age requires the development of digital tools to encrypt and hide the information from everyone who is not meant to be able to access it. While encryption is great at preventing unauthorized people from accessing the information, it lets people know that there is something hidden behind the transformation. Steganography instead allows us to obscure the fact of information concealment in the first place. Unfortunately, common types of steganography rely on altering the source signal, leaving subtle footprints of data manipulation that can be traced and detected. The goal of this research paper is to provide a model that has the potential of preserving the source signal in its entirety, instead relying on changing the way the source signal is represented in digital media in a way that allows us to encode secret data into the output stream. Methods. A theoretical analysis of steganography approaches on data compression algorithms was conducted. Methods of preserving source data stream were investigated. Results. A new model has been developed that uses decision-making processes in data compression algorithms to encode steganographic data in a resulting data stream. In lossless data compression schemes, it is possible to achieve perfect reproduction of source data stream, making detection through analysis of underlying signal encoded in data compression algorithms useless. Conclusions. The need for information security has been increasing over time, with tensions between countries resulting in new armed conflicts around the world. The ability to embed and covertly send data through steganography may provide a competitive economic, political, and/or military edge. The developed model can be applied to further develop specific methods of steganographic data encoding that is resilient to analysis and detection by existing approaches that rely on statistical analysis of underlying signal stream.
subject: Cybersecurity and information protection
  topic: section
subject: steganography
  topic: keywords
subject: data compression algorithms
  topic: keywords
subject: signal processing
  topic: keywords
subject: data security
  topic: keywords
subject: decision trees
  topic: keywords
creator: Yevhenii PONOMARENKO
creator: Oleksandr LAPTIEV
rights: Copyright (c) 2025 Information systems and technologies security https://creativecommons.org/licenses/by/4.0
date: 2025-08-29
publication date: 2025-08-29
starting page: 54
ending page: 60
doi: 10.17721/ISTS.2025.9.54-60

The use of artificial intelligence for ensuring the security of data centers
type: item
description: Background. In today's world, cyber threats to data centers (DCs) have become a significant concern due to their growing complexity and adaptability. Artificial Intelligence (AI) can greatly enhance monitoring and security processes, ensuring real-time threat detection and response. The aim of this study was to evaluate the effectiveness of AI methods for improving DC security and to demonstrate their practical applications. Methods. In today's world, cyber threats to data centers (DCs) have become a significant concern due to their growing complexity and adaptability. Artificial Intelligence (AI) can greatly enhance monitoring and security processes, ensuring real-time threat detection and response. The aim of this study was to evaluate the effectiveness of AI methods for improving DC security and to demonstrate their practical applications. Results. The use of the behavioral anomaly analysis method achieved an accuracy of 89% in detecting suspicious activities, while deep neural networks demonstrated up to 92% accuracy in predicting new threats. The average response time to potential attacks was reduced from 25 to 8 seconds, enabling timely blocking of suspicious actions. Practical applications include integrating these models into monitoring systems, allowing automatic threat detection and mitigation, reducing reliance on human intervention, and minimizing false positives. Conclusions. The study confirmed the effectiveness of AI as a tool for ensuring high levels of DC cybersecurity. AI enables quick and precise threat detection, preventing their realization and minimizing potential damage. However, to fully harness AI's potential, it is essential to consider the need for high-quality training data, computational resources, and algorithm transparency. Future research should focus on refining models to enhance their resistance to manipulation and adaptability to new types of threats.
subject: Cybersecurity and information protection
  topic: section
subject: artificial intelligence
  topic: keywords
subject: cybersecurity
  topic: keywords
subject: data centers
  topic: keywords
subject: anomaly analysis
  topic: keywords
subject: neural networks
  topic: keywords
subject: threat detection
  topic: keywords
creator: Serhii TOLIUPA
creator: Yanina SHESTAK
creator: Serhii Dakov
rights: Copyright (c) 2025 Information systems and technologies security https://creativecommons.org/licenses/by/4.0
date: 2025-08-29
publication date: 2025-08-29
starting page: 42
ending page: 46
doi: 10.17721/ISTS.2025.9.42-46

Hybrid approach to information security risk management
type: item
description: Background. The article explores a hybrid approach to information security risk management that combines quantitative and qualitative risk assessment methods. This approach improves accuracy, reduces subjective judgments, and enables the automation of the risk management process. The relevance of the topic is driven by the continuous increase in the number and complexity of cyber threats, which require the development and implementation of effective tools for risk management and mitigation of human factor impact. Methods. An integrated approach was applied, based on the FAIR and Monte Carlo methods for quantitative probability assessment, and CRAMM for qualitative risk analysis. International standards ISO 31000 and ISO/IEC 27005, which regulate risk management, were taken into account. Asset identification, vulnerability assessment, and threat classification were carried out according to the best practices of information security. The methodology for developing a risk assessment model that considers various levels of potential threats was substantiated. Results. The results confirmed the adequacy and effectiveness of the hybrid approach. The proposed model allowed for the identification of critical assets, risk level assessment, and the development of recommendations for implementing countermeasures. The Monte Carlo method was used to estimate the probability of successful attacks and calculate potential losses. CRAMM analysis helped identify system vulnerabilities and propose appropriate security measures. A comparative analysis of traditional risk assessment methods showed the advantages of the integrated approach in a dynamic information environment. Conclusions. The proposed hybrid approach contributes to minimizing human factor influence, improving assessment accuracy, and automating risk management. This will optimize organizational resources and support strategic information protection planning. Further research may focus on developing automation tools to in…
subject: Cybersecurity and information protection
  topic: section
subject: information security
  topic: keywords
subject: risk management
  topic: keywords
subject: Monte Carlo
  topic: keywords
subject: CRAMM
  topic: keywords
subject: threat assessment
  topic: keywords
subject: cybersecurity
  topic: keywords
creator: Volodymyr NAKONECHNYI
creator: Mykola MORDVYNTSEV
creator: Viktoriia HUSIEVA
creator: Vladyslav LUTSENKO
rights: Copyright (c) 2025 Information systems and technologies security https://creativecommons.org/licenses/by/4.0
date: 2025-08-29
publication date: 2025-08-29
starting page: 32
ending page: 41
doi: 10.17721/ISTS.2025.9.32-41

Methods for detection and analysis of misconfiguration-based attacks in cloud services
type: item
description: Background. With the advancement of cloud technologies, an increasing number of organizations are transitioning to the use of cloud services for data storage and computations. However, incorrect configuration (misconfiguration) of cloud services has become one of the main causes of vulnerabilities that can be exploited by malicious actors to carry out attacks. Misconfigurations can lead to unauthorized access to confidential data, system compromises, and other serious security consequences. The aim of this work is to investigate methods for detecting and analyzing attacks arising from misconfigurations in cloud services, as well as to develop recommendations for enhancing security levels. Methods. The study analyzes existing approaches to detecting misconfigurations, including the use of automated scanning tools, analysis of event logs, and the application of machine learning methods for anomaly detection. A hybrid method is proposed that combines static configuration analysis with dynamic monitoring of network traffic. A specialized algorithm has been developed to identify potential vulnerabilities and assess their criticality. Simulations of various types of attacks were conducted to evaluate the effectiveness of the proposed method. Results. The research results showed that the proposed hybrid method allows for highly effective detection of misconfigurations that can lead to attacks. Using the hybrid method increased the accuracy of anomaly detection by 23% compared to traditional methods. Analysis of real attack cases confirmed the method's effectiveness in detecting and preventing threats. The developed recommendations for configuration adjustments help reduce the risk of successful misconfiguration-based attacks. Conclusions. The proposed methods for detecting and analyzing misconfiguration-based attacks in cloud services demonstrated high effectiveness and can be integrated into organizations' security systems. They enable timely identification of vulnerabili…
subject: Cybersecurity and information protection
  topic: section
subject: мisconfiguration
  topic: keywords
subject: cloud services
  topic: keywords
subject: attack detection
  topic: keywords
subject: security
  topic: keywords
subject: vulnerability analysis
  topic: keywords
subject: machine learning
  topic: keywords
subject: monitoring
  topic: keywords
creator: Ivan PARKHOMENKO
creator: Mykhailo SAVONIK
rights: Copyright (c) 2025 Information systems and technologies security https://creativecommons.org/licenses/by/4.0
date: 2025-08-29
publication date: 2025-08-29
starting page: 26
ending page: 31
doi: 10.17721/ISTS.2025.9.26-31

Quantitative risk assessment using the fuzzy sets method
type: item
description: Background. This paper presents a quantitative risk assessment method based on the analysis and evaluation of risks in information systems. The proposed approach enables the use of a wide range of parameters, providing the creation of flexible assessment tools. This method allows calculating risks based on both statistical data and expert evaluations conducted under conditions of uncertainty and poorly formalized environments. Additionally, the developed methods provide the representation of results in both numerical and verbal forms. For example, linguistic variables, which are often used to describe complex systems characterized by both quantitative and qualitative parameters, can be utilized. The risks of information systems can be described through a conceptual fuzzy set model that accounts for uncertainty, imprecision, and subjectivity in their evaluation. Methods. The fuzzy sets method was applied to study the risks of information systems. This method facilitates the prediction of potential economic losses. The proposed approach allows the integration of various risk factors into a unified model, considering both quantitative and qualitative aspects of their assessment. Result. During the study, a quantitative approach to assessing the risks of enterprise information systems was developed, enabling a comprehensive analysis and evaluation of the impact of various risk factors. The main results of the work include: The model accounts for uncertainty, imprecision, and subjectivity of data, which is especially important in unstable environments. This ensures high adaptability of the method to different areas of enterprise activity. The proposed methodology enables the quantitative assessment of potential losses associated with risks in information systems based on statistical and expert data. Based on the risk assessment results, recommendations can be developed to improve measures for protecting the enterprise's information assets. This includes the creation of a…
subject: Cybersecurity and information protection
  topic: section
subject: risks
  topic: keywords
subject: forecasting
  topic: keywords
subject: losses
  topic: keywords
subject: protection system
  topic: keywords
subject: cybersecurity
  topic: keywords
subject: information protection
  topic: keywords
creator: Volodymyr AKHRAMOVYCH
creator: Vadym AKHRAMOVYCH
creator: Mykola BRAILOVSKYI
creator: Yuriy PEPA
creator: Тетяна ЛАПТЄВА
rights: Copyright (c) 2025 Information systems and technologies security https://creativecommons.org/licenses/by/4.0
date: 2025-08-29
publication date: 2025-08-29
starting page: 18
ending page: 25
doi: 10.17721/ISTS.2025.9.18-25

Social media automated account (bot) detection system architecture
type: item
description: Background. Social networks are one of the main sources of information. However, as trust in them grows, so does the use of automated accounts to spread disinformation and influence public opinion, which is an effective method of manipulation. Automated account detection systems are used to detect such accounts. The purpose of the article is to analyze the architecture of automated account (bot) detection systems in social networks and to identify the main directions for improving such architecture, taking into account the identified shortcomings. Methods. Methods of analysis, systematization, and generalization were used to identify shortcomings and areas for system improvement, and a modeling method was used to develop generalized and improved system architecture. Results. An improved architecture of a system for detecting automated accounts (bots) in the social network x.com is proposed, which uses a mixed model of data analysis using artificial intelligence and combines web scraping and API queries for data collection. Conclusions. The general architecture of automated account (bot) detection systems in social networks was analyzed and the main shortcomings and areas for improvement were identified, among which the following can be distinguished: restrictions on API requests from social network owners, unstructured and free style of posts in social networks, and constant changes in post generation algorithms by automated accounts. An improved architecture of the automated account (bot) detection system was proposed, which combines web scraping and API requests for data collection and allows parallel execution of social network data analysis. Keywords: сomputer system, data collection, data analysis, machine learning.
subject: Cybersecurity and information protection
  topic: section
subject: сomputer system
  topic: keywords
subject: data collection
  topic: keywords
subject: data analysis
  topic: keywords
subject: machine learning
  topic: keywords
creator: Serhii Buchyk
creator: Vitalii PIATYHOR
rights: Copyright (c) 2025 Information systems and technologies security https://creativecommons.org/licenses/by/4.0
date: 2025-08-29
publication date: 2025-08-29
starting page: 11
ending page: 17
doi: 10.17721/ISTS.2025.9.11-17

CLUSTRER STATE COORDINATION REDUCERS BASED ON RSDP
type: item
description: Background. Contemporary distributed systems tend to leverage complex network topologies and intercommunication technologies for performing complex computational tasks. It is quite common for such systems to rely on centralized coordination where one or a group of designated servers serve as a management plane for the entire network. While this approach may simplify the consensus process, it introduces additional requirements for infrastructure engineering and maintenance. Nodes serving as a control plane require additional hardware resources as well as human effort and competence to manage external services capable of providing basic coordination primitives. Most cases requiring consensus could be reduced to simplistic procedures like gathering knowledge about network participants and dividing deterministically state slices between them. Therefore, implementing a complex coordination solution that requires an additional maintenance method could be inefficient. The Replica State Discovery Protocol stands as a lightweight coordination solution presenting a simple interface for achieving consensus between nodes within a cluster. Methods. Within the ambit of this research, a set of cluster state reducers is described, providing basic coordination capabilities, including the formation of a network participants list and task division between them. Using mathematical modeling, we describe the procedures necessary for performing the said coordination tasks. Implementation and testing of reducers is done with the Node.js platform capable of running JavaScript code on the server side. A theoretical analysis and description of the proposed methods for distributed coordination are provided within this work to facilitate their integration into modern systems. Results. As a result of this research, we propose three new cluster state reducers serving as methods of basic coordination capabilities as an exemplary application of RSDP. The first reducer is responsible for gathering t…
subject: Cybersecurity and information protection
  topic: section
subject: distributed computing
  topic: keywords
subject: device coordination
  topic: keywords
subject: state synchronization
  topic: keywords
subject: cluster management
  topic: keywords
subject: service availability
  topic: keywords
subject: security incidents
  topic: keywords
subject: Replica State Discovery Protocol (RSDP)
  topic: keywords
subject: RSDP cluster state reducers
  topic: keywords
creator: Maksym Kotov
rights: Copyright (c) 2025 Information systems and technologies security https://creativecommons.org/licenses/by/4.0
date: 2025-08-29
publication date: 2025-08-29
starting page: 5
ending page: 10
doi: 10.17721/ISTS.2025.9.5-10

A method for modeling hybrid influence on government services using an agent-Based Approach
type: item
description: Background. In the context of hybrid warfare, the role of information influence on critical infrastructure is growing. Fake news can trigger waves of user behavioral activity that mimic DDoS attacks, overloading government digital services even without direct technical interference. This creates the need to model such scenarios considering both technical and socio-behavioral factors. Methods. An agent-based model of hybrid influence is proposed, including users, bots, fake news sources, and protective mechanisms. The model is implemented using mathematical expressions and scenario simulation, including a baseline scenario, delayed response scenario, technical intervention scenario, and official rebuttal scenario. The analysis considers system load parameters, behavioral activation probability, and the system's response. Results. It was found that user behavior alone can generate critical system load equivalent to a DDoS attack. The most effective scenario combined technical blocking and information rebuttal, reducing load to a stable level. Classic cybersecurity models often fail to account for delayed reactions or wave-like behavioral patterns, limiting their effectiveness in hybrid environments. Conclusions. The proposed model enables not only simulation of hybrid influence but also evaluation of response tactics. It can be applied in CERT platforms, Red Team / Blue Team exercises, and early-warning systems. Further research may focus on adapting the model to real-world environments and developing automated response mechanisms to information threats.
subject: Cybersecurity and information protection
  topic: section
subject: Hybrid warfare
  topic: keywords
subject: agent-based modeling
  topic: keywords
subject: fake news
  topic: keywords
subject: digital security
  topic: keywords
subject: behavioral load
  topic: keywords
creator: Dmytro DZHENDZHERO
rights: Copyright (c) 2025 Information systems and technologies security https://creativecommons.org/licenses/by/4.0
date: 2025-08-29
publication date: 2025-08-29
starting page: 47
ending page: 53
doi: 10.17721/ISTS.2025.9.47-53

MATHEMATICAL MODEL OF THE SIGNAL EMISSION DYNAMICS IN SEISMIC-ACOUSTIC MONITORING SYSTEMS OF BUILDING STRUCTURES
type: item
description: B a c k g r o u n d . The paper presents a mathematical model of automated systems of seismoacoustic monitoring of building structures to assess the dynamics of crack formation in building structures to prevent the destruction of the objects under investigation. The seismoacoustic field generated by the research objects is reflected in the matrix of informative parameters, the dynamics of which characterize the dynamics of the object's state. To assess the dynamics of high-frequency signals generated by cracks that occur during the operation of the structure, it is advisable to use the dynamics of emissions that generate these signals. For this, from the point of view of physical practicality, it makes sense to choose a model that characterizes the dynamics of the high-frequency range of the spectrum. Namely, the work presents an algorithm based on a theorem for stationary processes in a broad sense. M e t h o d s . The aging process can be reflected in the feature space, which can be reduced to parameters characterizing the elastic properties of the materials that form the objects under study. Since the propagation velocities and the shape of longitudinal and transverse waves in the material depend on the elastic parameters of these materials (Poisson's ratio and Young's modulus), the change in these parameters leads to changes in the spectral characteristics of the emission signals that occur in the aging material. Any redistribution of energy in the material is accompanied by the appearance of signals that generate emission. The dynamics of the parameters of the emission signal reflect the change in the elastic properties of the object under study. Possible reasons for changes in the internal structure are the appearance and growth of cracks, phase transitions in monolithic materials, and loosening of components. This means that changes in the dynamic parameters of emission signals are related to the dynamic characteristics of this object. R e s u l t s . A mathe…
subject: Computer science
  topic: section
subject: seismoacoustic monitoring
  topic: keywords
subject: seismoacoustic emission
  topic: keywords
subject: mathematical model
  topic: keywords
subject: seismoacoustic signal
  topic: keywords
subject: matrix of informative parameters of the model
  topic: keywords
subject: aging of structures
  topic: keywords
creator: Vasyl Mostovyy
rights: Copyright (c) 2025
date: 2025-03-21
publication date: 2025-03-21
starting page: 74
ending page: 84
doi: 10.17721/ISTS.2024.8.74-84

EXISTING SECURITY PROTOCOLS IN CFS
type: item
description: B a c k g r o u n d . Cyber-Physical Systems (CPS) play an important role in today's technology, as they combine physical objects and cryptographic security mechanisms to ensure the secure operation of networked devices, particularly in the financial industry, the Internet of Things (IoT), and the Industrial Internet of Things (IIoT). The main problem of such systems is to ensure reliable and effective data protection with limited resources of computing power and energy consumption. Cryptographic protocols used in cyber-physical systems must be highly efficient, because both the security and the overall performance of the systems depend on their operation. This article is aimed at researching ways to improve the efficiency of cryptographic protocols in KFS. R e s u l t s . During the research, it was established that: the use of MTLS protocols increases the level of data protection, but at the same time requires a much larger amount of CFS resources compared to TLS and SSL. At the same time, TLS still uses more capacity of cyber-physical systems than SSL, which increases the cost of CFS devices. Optimizing encryption and decryption algorithms in the TLS protocol can help reduce device costs and increase data transfer speeds. C o n c l u s i o n s The obtained results show that increasing the efficiency of cryptographic protocols in cyber-physical systems is possible by using more effective encryption algorithms. Optimizing security protocols can significantly improve the data transfer rate and performance of cyber-physical systems, especially in resource-constrained environments. It is worth paying attention to the concept of using existing security protocols that combine the use of symmetric and asymmetric encryption algorithms. In the future, it is the speed of encryption and decryption that will play a significant role in increasing efficiency. Since it is this factor that will reduce the use of resources in the CFS and will also gain an advantage in time, due to…
subject: Cybersecurity and information protection
  topic: section
subject: cyberphysical system
  topic: keywords
subject: asymmetric algorithm
  topic: keywords
subject: symmetric algorithm
  topic: keywords
subject: security protocol
  topic: keywords
creator: Larisa Myrutenko
creator: Oleksii Shaina
creator: Dmytro Palko
rights: Copyright (c) 2025
date: 2025-03-21
publication date: 2025-03-21
starting page: 66
ending page: 73
doi: 10.17721/ISTS.2024.8.66-73

SECURITY OF REST API: THREATS AND PROTECTION METHODS
type: item
description: B a c k g r o u n d . The increase in malicious activity in the information space creates additional challenges for organizations that use REST APIs to transfer data and facilitate interactions with clients and partners. According to statistics, over 80% of modern web traffic goes through web APIs, making them an attractive target for cybercriminals. Vulnerabilities in REST API authentication and authorization mechanisms can lead to data breaches, financial losses, and reputational risks. Therefore, ensuring REST API security is a critical task for modern companies, especially those operating in high-risk industries. M e t h o d s . Threat analysis and risk assessment methods were used to evaluate the security challenges associated with REST APIs. R e s u l t s . Organizations are investing significant resources in the development of REST API security technologies, implementing tokens for access control, encrypting data transmission via TLS/SSL, and integrating modern security measures into their applications. However, research shows that major security threats remain relevant due to insufficient input validation processes, weak passwords, and the lack of multi- factor authentication. It was also found that a significant number of APIs lack rate limiting, making them vulnerable to resource exhaustion attacks (DoS/DDoS attacks). С o n c l u s i o n s . One of the key approaches to addressing REST API security issues is the implementation of an API security management system that uses a multi-layered approach to protection. This includes access control, token-based authorization, regular system vulnerability checks, and rate limiting to reduce the risk of denial-of-service attacks. In addition, implementing modern security practices, such as multi-factor authentication, will help minimize the risk of unauthorized access. The research findings can be used to improve existing REST API security policies and optimize threat management approaches in companies of various si…
subject: Cybersecurity and information protection
  topic: section
subject: REST API
  topic: keywords
subject: information security
  topic: keywords
subject: authentication
  topic: keywords
subject: authorization
  topic: keywords
subject: threats
  topic: keywords
creator: Yurii Shcheblanin
creator: Bohdan Sydorenko
creator: Inna Mykhalchuk
rights: Copyright (c) 2025
date: 2025-03-21
publication date: 2025-03-21
starting page: 60
ending page: 65
doi: 10.17721/ISTS.2024.8.60-65

AUTHORIZATION MODELS FOR TRUSTLESS NODE INTERACTION IN PUBLIC DECENTRALIZED NETWORKS
type: item
description: B a c k g r o u n d . Decentralized networks, such as blockchain and peer-to-peer systems, have become the foundation for new technologies that ensure the security and transparency of operations without the need for centralized control authorities. These networks enable interaction between nodes without prior trust. However, ensuring reliable and efficient authorization in such networks presents a challenge due to the absence of a single authorization center. This creates the need to develop new models that allow secure access management based on the interaction between nodes. One of the main issues is that each node can potentially be malicious, and traditional authorization models used in centralized systems cannot provide the necessary level of security. The purpose of this study is to explore new approaches to authorizati on in public decentralized networks that do not require trust between participants. M e t h o d s . The research investigates reputation-based authorization models and Proof of Useful Work (PoUW) models, which show promise for decentralized systems. The reputation model grants access rights based on the node's previous activity in the network, where each node accumulates reputation points for completing specific tasks. The second model, PoUW, allows nodes to gain authorization based on the number of useful computations performed. This approach not only enhances network security but also incentivizes nodes to carry out computational tasks that have practical value for the community. R e s u l t s . Modeling has shown that both models effectively ensure the security and reliability of interaction between nodes. Nodes with a high reputation level or those that have completed a significant volume of useful computations gain access to critical network resources. The implementation of such approaches reduces the risk of malicious activity, as nodes that do not perform useful actions are restricted in their access rights. C o n c l u s i o n s . The p…
subject: Cybersecurity and information protection
  topic: section
subject: authorization
  topic: keywords
subject: decentralized networks
  topic: keywords
subject: reputation
  topic: keywords
subject: Proof of Useful Work
  topic: keywords
subject: security
  topic: keywords
subject: trustless interaction
  topic: keywords
creator: Ivan Parkhomenko
creator: Roman Ohiievych
rights: Copyright (c) 2025
date: 2025-03-21
publication date: 2025-03-21
starting page: 56
ending page: 59
doi: 10.17721/ISTS.2024.8.56-59

USAGE OF OPEN-SOURCE INTELLIGENCE FOR SECURITY OF CRITICAL INFRASTRUCTURE
type: item
description: B a c k g r o u n d . In the metter of critical infrastructure, it refers to the systems and assets that are essential for the functioning of modern society and the economy. These sectors include energy, transportation, elecommunications, healthcare, and water supply, all of which are crucial for national security and public well-being. Disruptions in these infrastructures can lead to decent amount of social and economic vital consequences. With the technologies happening to become more advanced, critical infrastructure security systems have become more complex and affiliated. Alterations in example being smart grids, automated transportation systems, and sophisticated communication networks have enhanced efficiency but also increased vulnerabilities. The convergence of digital and physical systems makes these sectors more exposed to risks like cyberattacks, natural disasters, terrorism, and other threats. This growing complexity emphasizes the need for governments and organizations to prioritize the protection of these vital infrastructures. M e t h o d s . In this research, we developed a mathematically rigorous approach to OSINT in the protection of critical infrastructure, improving on existing methods by providing a structured model for threat detection, vulnerability assessment, and risk calculation. The proposed method employs mathematical representations and probability functions, ensuring a more accurate analysis of threat information and vulnerability scoring. This advancement enables more precise mitigation strategies and better response coordination. While existing OSINT methods rely heavily on unstructured data collection and analysis, our approach introduces a mathematical foundation for data gathering and threat evaluation, providing several key improvements, such as Mathematical Representation of Data; Probabilistic Threat Detection and Vulnerability and Risk Assessment with Weighted Metrics. R e s u l t s . The study's findings underscore the value …
subject: Cybersecurity and information protection
  topic: section
subject: OSINT
  topic: keywords
subject: critical infrastructure security
  topic: keywords
subject: cyber threats
  topic: keywords
subject: vulnerability assessment
  topic: keywords
subject: infrastructure resilience
  topic: keywords
subject: public sources
  topic: keywords
subject: data analysis
  topic: keywords
subject: cybersecurity
  topic: keywords
subject: information security
  topic: keywords
creator: Laryisa Dakova
creator: Maryana Levytaska
creator: Katerina Havenko
rights: Copyright (c) 2025
date: 2025-03-21
publication date: 2025-03-21
starting page: 49
ending page: 55
doi: 10.17721/ISTS.2024.8.49-55

ARTIFICIAL INTELLIGENCE SYSTEMS IN CYBER SECURITY AND THEIR CAPABILITIESFRONT MODERN CYBER THREATS
type: item
description: B a c k g r o u n d . In recent years, the level of cybercrime has grown rapidly. The complexity and diversity of these threats has forced organizations to prioritize advanced cybersecurity solutions, including the use of artificial intelligence technologies that can quickly analyze data to identify potential threats and anomalies. By 2027, the AI-based cybersecurity market is expected to exceed $46 billion. However, as AI strengthens and refines defenses, cybercriminals are adapting by exploiting vulnerabilities and even using AI to enhance attacks. This dual use of AI underscores the need for balanced and intelligent strategies that combine the predictable capabilities of AI with human knowledge and talent. M e t h o d s . My Research highlights effective risk prevention strategies, including promoting a security-aware culture, implementing strong passwords and two-factor authentication, regularly assessing and updating systems, enhancing firewalls, and adhering to cybersecurity regulations. AI proves valuable in threat detection and response, giving companies a competitive edge, though it raises concerns about reducing human roles in security tasks. R e s u l t s . The research indicates that AI positively impacts cybersecurity by enabling faster detection and response to threats, allowing organizations to proactively identify and address vulnerabilities. Companies that integrate AI into their cybersecurity strategies gain an advantage in managing complex cyber threats. However, concerns persist about AI's dual-use nature, as it could also be leveraged by cybercriminals for advanced attacks. This potential for AI to operate independently raises questions about the diminishing role of human oversight. Ultimately, the findings stress the need for a balanced approach: while AI is essential for modern cybersecurity, human involvement remains crucial. Continuous adaptation and a blend of technological and human expertise are necessary to protect critical infrastructur…
subject: Cybersecurity and information protection
  topic: section
subject: artificial intelligence
  topic: keywords
subject: measures
  topic: keywords
subject: strategy
  topic: keywords
subject: cybersecurity
  topic: keywords
subject: threats
  topic: keywords
subject: analysis
  topic: keywords
creator: Serhii Dakov
creator: Dmytro Mankovskyi
creator: Ivan Bilokon
rights: Copyright (c) 2025
date: 2025-03-21
publication date: 2025-03-21
starting page: 42
ending page: 48
doi: 10.17721/ISTS.2024.8.42-48

METHODS OF EXTRACTING CYBERSECURITY OBJECTS FROM ELECTRONIC SOURCES USING ARTIFICIAL INTELLIGENCE
type: item
description: B a c k g r o u n d . The rapid development of information technology (IT) has led to new threats and challenges in the field of cybersecurity. Cyber warfare has become a reality and a real problem for states, organizations and individual users of cyberspace. Ukraine is taking a number of measures to develop a system of cyber actions in cyberspace, which include a set of interconnected subsystems of cyber intelligence, cyber defense, cyber influence and cyber counterintelligence. One of the forms of cyber intelligence is open-source computer intelligence (OSINT), which is used to search for and obtain intelligence information, including the identification and analysis of cybersecurity objects to predict possible manifestations of cyber threats and their consequences. This requires the development of effective methods for detecting and analyzing cybersecurity objects by extracting factual data on cybersecurity objects from large amounts of unstructured textual information. M e t h o d s . The paper investigates artificial intelligence technologies, in particular, large language models (LLM) and generative artificial intelligence (GenAI) in the context of their application to solve the problems of computer intelligence of cybersecurity objects from open electronic sources and social networks. R e s u l t s . As a result of the study, in order to carry out an effective analysis of the results of information extraction, a methodology for extracting named entities - the names of hacker groups and their contextual connections from the texts of messages of electronic network sources related to the subject area of cybersecurity, as well as the formation of networks of their interconnections and a substantive analysis of these networks is proposed. To identify the actors involved in cyber warfare, the author proposes a methodology for analyzing selected documents available in electronic sources on the Internet and social networks. Both methods are based on the use of artific…
subject: Cybersecurity and information protection
  topic: section
subject: cyber warfare
  topic: keywords
subject: cybersecurity
  topic: keywords
subject: generative artificial intelligence
  topic: keywords
subject: large language models
  topic: keywords
subject: Internet
  topic: keywords
subject: open electronic sources
  topic: keywords
subject: social networks
  topic: keywords
subject: text analysis
  topic: keywords
subject: objects of cyber warfare
  topic: keywords
creator: Olexandr Puchkov
creator: Dmytro Lande
creator: Ihor Subach
rights: Copyright (c) 2025
date: 2025-03-21
publication date: 2025-03-21
starting page: 34
ending page: 41
doi: 10.17721/ISTS.2024.8.34-41

PROTECTION MODEL AGAINST DISTRIBUTED GRADUAL DEGRADATION ATTACKS BASED ON STATISTICAL AND SEMANTIC APPROACHES
type: item
description: B a c k g r o u n d . Nowadays, every critical sector of social institutions conducts its operations on top of distributed processing systems. Contemporary digital infrastructure heavily relies on user-provided data in its operation. As a result, distributed attacks based on botnets are in a continuous state of arms race with the protection methods that filtrate malicious data influx. A common method to do so often relies on heuristics and human-oriented verifications. As the new advancements in the field of artificial intelligence emerge, such attacks adopt new oblique paths towards achieving their goals. The successful execution of the said plan could lead to a gradual resource depletion on the target system. The purpose of this research is to address such threats with a combination of statistical and semantic approaches. M e t h o d s . The following research conducts a theoretical analysis and systematization of the distributed gradual degradation attack in distributed systems and its implication in the context of the evolving technologies of artificial intelligence. Mathematical modeling is leveraged to define the proposed model's properties and execution process. The proposed model heavily relies on statistical methods for analyzing time series data and its deviations, as well as classification neural networks for semantic detection of suspicious behavior. R e s u l t s . As a result of the following research, a new model is developed that leverages statistical and semantical verification for anomaly detection. The continuous monitoring and detection process is optimized towards highly loaded systems with a constant flurry of data streams. C o n c l u s i o n s . Since the distributed attacks could be potentially equipped with intelligent means to bypass existing security measures, the development of a protection model against potential resource leaks is gaining relevance. The recent success in the development of artificial generative intelligence leads to rai…
subject: Cybersecurity and information protection
  topic: section
subject: distributed systems
  topic: keywords
subject: gradual degradation attacks
  topic: keywords
subject: resource exhaustion
  topic: keywords
subject: statistical analysis
  topic: keywords
subject: semantic approaches
  topic: keywords
subject: resilience
  topic: keywords
subject: LightGBM
  topic: keywords
subject: Distilbert
  topic: keywords
subject: EWMA
  topic: keywords
creator: Serhii Toliupa
creator: Maksym Kotov
rights: Copyright (c) 2025
date: 2025-03-21
publication date: 2025-03-21
starting page: 26
ending page: 33
doi: 10.17721/ISTS.2024.8.26-33

JAVASCRIPT-BASED WEB EXPLOIT ANALYSIS MODEL
type: item
description: B a c k g r o u n d . The task of ensuring the security of web applications and servers remains important and relevant in the face of the ever-increasing number of attacks in cyberspace. The use of various open-source content management systems (e.g. WordPress, Joomla, Open Journal Systems, Drupal), which are quite popular for creating websites due to their ease of installation and use, unfortunately, require constant updating not only to improve the content but also to ensure the security of the system. In this article, the authors focus on the WordPress system, although this approach can be used for other systems as well. The article emphasises the importance of early detection of vulnerabilities to prevent potential cyber threats and their negative consequences. The article proposes a model and a script designed to speed up the detection of vulnerabilities in WordPress applications. Automation of the scanning process with a custom script allows you to quickly detect vulnerabilities, ensuring prompt fixes and updates. This approach not only strengthens security, but also helps preserve the reputation of websites and brands, which is critical in today's digital environment. M e t h o d s . The methods of analysing JavaScript-based web exploits were used, taking into account the general principles of their analysis and taking into account the methodologies for analysing web applications for vulnerabilities. R e s u l t s . An improved model of analysing a web application on CMS Wordpress based on a script that provides automated scanning of a web application by running the following utilities is presented: NMAP, Dirb, Nikto, SQLMap, WPScan and PwnXSS. All the results are recorded in a separate file for further study of all the found security issues of the web application. C o n c l u s i o n s . The developed model and script should help developers and testers speed up the process of identifying vulnerabilities in Wordpress, as they can run one script and get a volu…
subject: Cybersecurity and information protection
  topic: section
subject: vulnerability
  topic: keywords
subject: website
  topic: keywords
subject: web application
  topic: keywords
subject: web exploitation
  topic: keywords
subject: web application analysis
  topic: keywords
subject: vulnerability scanning, SQL
  topic: keywords
subject: SQL
  topic: keywords
subject: XSS
  topic: keywords
subject: CSRF
  topic: keywords
creator: Serhii Buchyk
creator: Andrii Kuroiedov
rights: Copyright (c) 2025 Information systems and technologies security
date: 2025-04-14
publication date: 2025-04-14
starting page: 17
ending page: 25
doi: 10.17721/ISTS.2024.8.17-25

OPTIMIZATION OF BUFFER AND PRIORITIES FOR ENSURING SECURITY IN BLUETOOTH NETWORKS
type: item
description: B a c k g r o u n d . The optimization of buffer zone size for information protection plays a crucial role in ensuring the security of video streaming over Bluetooth wireless networks, particularly given the increased data transmission speeds and the use of adaptive modulation with a three-tier buffer. Recent studies show that proper management of buffer size can significantly enhance the quality of video data transmission and reduce security threats. An important aspect of ensuring security in video streaming systems over wireless networks like Bluetooth is the integration of cutting-edge information protection technologies. Modern trends in cybersecurity encompass key elements such as data encryption, access control, and multi-factor user authentication. These mechanisms not only protect data from unauthorized access but also ensure its integrity and confidentiality at every stage of processing and transmission. M e t h o d s . The study employed analytical methods including modeling and simulation, statistical and comparative analysis, experimental research, and risk assessment, enabling a comprehensive understanding of data transmission quality management in Bluetooth networks under cross traffic conditions. R e s u l t s . Properly configuring the buffer zone size can significantly enhance the efficiency and reliability of protecting critical data from unauthorized access and cyberattacks. Modern approaches to buffer size optimization utilize traffic analysis and modeling methods, as well as machine learning algorithms to predict traffic volumes and characteristics. For instance, clustering algorithms can be employed to identify traffic types and characteristics, allowing for more efficient resource allocation and buffer space management. To effectively optimize the buffer zone size, it is essential to consider system performance and information security standards, including ISO/IEC 27001 and ISO/IEC 27002. ISO/IEC 27001 outlines requirements for information se…
subject: Cybersecurity and information protection
  topic: section
subject: buffer optimization
  topic: keywords
subject: video streaming
  topic: keywords
subject: Bluetooth wireless networks
  topic: keywords
subject: adaptive management
  topic: keywords
subject: data transmission
  topic: keywords
subject: signal quality
  topic: keywords
subject: packet loss
  topic: keywords
subject: user priority management
  topic: keywords
subject: cross traffic
  topic: keywords
subject: information protection
  topic: keywords
creator: Yuliia Kostiuk
creator: Bohdan Bebeshko
creator: Pavlo Skladannyi
creator: Svitlana Rzaeva
creator: Karyna Khorolska
rights: Copyright (c) 2025
date: 2025-03-21
publication date: 2025-03-21
starting page: 5
ending page: 16
doi: 10.17721/ISTS.2024.8.5-16

IMPROVING THE METHOD OF DETECTING RADIO SIGNALS USING TOPOLOGICAL THREAT IDENTIFICATION
type: item
description: Background. Humanity has entered the era of information value. An era in which information becomes a more important resource than other resources. Therefore, access to information, especially to conference information, especially to information that contains the main competitive advantages, is the primary task of competitive intelligence. Obtaining such information is most often associated with breaking the law and using special technical means. Complex data breaches can now be resolved at a faster pace, but tech intelligence professionals can use new ways to penetrate your system to steal valuable information and cause irreparable damage. Methods. The work examines the methods of detecting dangerous radio signals, which can be signals from radio jamming devices. An improved method of detecting radio signals is proposed, the improvement is based on the use of topological identification of threats. The method is based on the fact that the object of information activity must be divided into fractals, that is, areas of self similarity. Areas of self-similarity are determined by the physical properties of radio signals. In addition to the fractal dimension, in order to significantly increase the probability of detecting dangerous radio signals, introduce the appropriate fractal measures as the identification of radio signals. Fractal measures additionally allow you to determine the zones in which dangerous radio signals are detected. By setting the appropriate reference values of the relevant parameters of radio signals, it is possible to determine the fractal dimensions through the Hurst index and, depending on the obtained dimension value, it is possible to identify dangerous radio signals, signals of radio interceptor devices or other information capture devices that are installed at the facility with conference information. The use of the proposed method allows to increase the efficiency of detection of signals of radio interceptor devices and, in case of detection …
subject: Information systems and technologies
  topic: section
subject: radio signal
  topic: keywords
subject: radio deposit device
  topic: keywords
subject: information flow
  topic: keywords
subject: fractal dimension
  topic: keywords
creator: Serhii Tolіupa
creator: Serhii Laptiev
rights: Copyright (c) 2024
date: 2024-07-01
publication date: 2024-07-01
starting page: 62
ending page: 68
doi: 10.17721/ISTS.2024.7.62-68

BENEFITS AND DANGERS OF USING CHATGPT
type: item
description: Background. This article presents ChatGPT - a new chatbot, one of the latest products in the field of artificial intelligence, created by OpenAI, which developed this technology together with Elon Musk. The article provides recommendations for connecting to a chatbot. The main advantages of artificial intelligence are defined, and examples of its application are given. Current educational processes should develop a cross-disciplinary and practice-oriented approach in the student. Results. It is shown that among the main advantages of ChatGPT is the ability to generate texts on a given topic, to answer almost all user questions, and to express oneself even in Ukrainian. Specific examples of chatbot questions related, in particular, to information protection, risk management, etc., are given. Demonstrated responses from his side. Focused on the dangers of using a new chatbot. It is shown that possible plagiarism, compatibility issues, malicious use, privacy issues, copyright infringement issues, and problems of using ChatGPT in the educational system occupy a special place among the identified dangers. It is emphasized that the education system is currently experiencing a significant crisis and that the process of obtaining knowledge is adequate to the challenges of today, it is necessary to radically revise the approach to what the current teacher and the educational process itself should be. It is noted that Ukraine needs a fundamental transformation of the very essence of the education system. Now the main task of the teacher is to give the student himself the opportunity to take the initiative in learning, to effectively use the information received, to combine it and to apply the received result in solving his task. A successful student must learn to solve complex tasks that are at the junction of various subjects and disciplines. Conclusions. So, ChatGPT is a powerful tool, but today it has some drawbacks that should be considered if you plan to use it.
subject: Computer science
  topic: section
subject: chatbot
  topic: keywords
subject: neural networks
  topic: keywords
subject: application
  topic: keywords
subject: encryption
  topic: keywords
subject: copyright
  topic: keywords
subject: privacy
  topic: keywords
subject: artificial intelligence
  topic: keywords
creator: Volodymyr Nakonechnyi
creator: Volodymyr Saiko
creator: Mykola Mordvyntsev
creator: Vladyslav Lutsenko
rights: Copyright (c) 2024
date: 2024-07-01
publication date: 2024-07-01
starting page: 52
ending page: 61
doi: 10.17721/ISTS.2024.7.52-61

STUDY OF THE THEORETICAL CORRESPONDENCE INDICES FOR THE UKRAINIAN ALPHABET WITH SPACES
type: item
description: Background. Theoretical compatibility indices play an important role in identifying the weaknesses of cryptographic systems and ensuring their stability. After analyzing the available sources of information, this indicator was not found for the Ukrainian alphabet with a space, which makes it impossible to find accurate results in calculations where this indicator is used. Methods. Theoretical correspondence indices have a wide range of applications, but they are most often used in Friedman's First Method when calculating the key size for the Vigener cipher, which is used in the study of the basic concepts of cryptographic systems. The general algorithm for finding indices of theoretical correspondence for the Ukrainian alphabet with a space based on the analysis of a large sample of texts is considered. Results. For calculations, 700 texts were analyzed, the size of which is 1500 elements. The texts were selected using an API from Wikipedia, a free and open multilingual online encyclopedia. The calculation took place for keys of size from 2 to 7. The index of theoretical correspondence was calculated in two stages. At the first stage, practical indices of correspondence were calculated for the whole range of texts, and then, using the standard deviation of the sample, the interval of the most repeated indicators was calculated. The program code for implementing the index calculation algorithm was presented in the form of project components responsible for various aspects of the process. As a result of the study, a variation of the values of the correspondence index was found depending on the size of the text, which emphasizes the need to consider the length of the text in the analysis and development of cryptographic systems, in particular, the selection of encryption keys. It was concluded that the size of the text can affect the results of the calculation of the compatibility indices, but it does not significantly affect the overall security and effectiveness of e…
subject: Computer science
  topic: section
subject: indices of theoretical correspondence
  topic: keywords
subject: index of coincidence
  topic: keywords
subject: First Friedman method
  topic: keywords
subject: Second Friedman method
  topic: keywords
subject: computational linguistics
  topic: keywords
creator: Larysa Myrutenko
creator: Yanina Shestak
creator: Anastasiia Loban
rights: Copyright (c) 2024
date: 2024-07-01
publication date: 2024-07-01
starting page: 45
ending page: 51
doi: 10.17721/ISTS.2024.7.45-51

MODEL OF IMPLEMENTATION OF MANAGEMENT OF ACCESS TO INFORMATION ASSETS IN THE CONCEPT OF ZERO TRUST
type: item
description: Background. Controlling access to information assets is one of the key functions of information security. This task in one form or another must be solved both as a whole at the level of the entire information technology (IT) infrastructure of a company or organization, and in each local information system. Methods. Methods on existing approaches, the article develops a model for providing access to information assets, which allows implementing access control processes in a distributed IT infrastructure. A special feature of the model is an algorithm for dynamically determining the necessary security policies, taking into account the access of users with different privileges. Results. The model takes into account remote access at several conventional "levels" – access of the organization's clients, organization employees, as well as partners and contractors. Since modern information infrastructures of organizations have become complex and distributed, the model assumes the presence of a significant number of access points, including automated workstations in the infrastructure, remote automated workstations, various user and mobile access devices, as well as specific devices, such as effective access control should ensure centralized access of all users to information assets. Conclusions. The model provides for the implementation of a single access point, built on the basis of access models from the zero trust concept, for users and for "robots" – technical accounts used for inter-system interaction. The results of the study will make it possible to develop an architecture for remote user access to distributed information assets and organize access control and management processes based on dynamic determination of the level of trust in access subjects, which generally increases the security of organizations.
subject: Cybersecurity and information protection
  topic: section
subject: zero Trust
  topic: keywords
subject: multifactor authentication
  topic: keywords
subject: single Sign-On
  topic: keywords
subject: security Policies
  topic: keywords
subject: fast IDentity Online
  topic: keywords
creator: Volodymyr Khoroshko
creator: Mykola Brailovsky
creator: Ivan Parkhomenko
creator: Taras Kyrychuk
rights: Copyright (c) 2024
date: 2024-07-01
publication date: 2024-07-01
starting page: 39
ending page: 44
doi: 10.17721/ISTS.2024.7.39-44

COMPARISON OF POST-QUANTUM STANDARDS IN TERMS OF IMPLEMENTATION IN CLASSICAL ELECTRONIC SIGNATURE ALGORITHMS
type: item
description: Background. The work examines the development and promotion of post-quantum standards, as well as the analysis and improvement of existing algorithms, on the basis of which the functioning of standards in the field of electronic digital signature can be based. One of the main reasons was also the migration of classical cryptography to post-quantum cryptography. The robot is aligning three popular post-quantum standards: CRYSTALS-Dilithium, Falcon and SPHINCS+. As a result of the investigation, the most optimal standards were selected before implementation of classical electronic signature schemes. The article is dedicated to the development and promotion of post-quantum standards in the field of electronic digital signature. It is also necessary to analyze and level up existing algorithms, on the basis of which the functioning of such standards can be based. The research is considered relevant due to the growing interest in quantum technologies and the need for secure electronic communications in the upcoming quantum world. Мethods. Мigrating classical cryptography to post-quantum cryptography. However, power is important, because the power of quantum computers can be affected by certain cryptographic algorithms. An analysis of the feasibility of transitioning to new standards and their existing security capabilities is also carried out. In addition, three popular post-quantum standards are being updated: CRYSTALS-Dilithium, Falcon and SPHINCS+. This allows us to determine the most optimal and reliable standard for implementation of classical electronic signature schemes. The authors of the work carry out the selection of the optimal standard, ensuring the safety and security of its authorities. Results. Сontains important results from the study of post-quantum standards for electronic digital signatures, which may be useful for developers of cryptographic software and information security engineers. The power supply to the influences and changes in the advanced pos…
subject: Cybersecurity and information protection
  topic: section
subject: electronic signature
  topic: keywords
subject: post-quantum cryptography
  topic: keywords
subject: cryptoflexibility
  topic: keywords
subject: post-quantum standards
  topic: keywords
creator: Andrii Fesenko
creator: Maria Myroshnichenko
rights: Copyright (c) 2024
date: 2024-07-01
publication date: 2024-07-01
starting page: 31
ending page: 38
doi: 10.17721/ISTS.2024.7.31-38

COMPARISON OF MATURITY MODELS OF INFORMATION SECURITY PROCESSES OF AN ORGANISATION (COMPANY)
type: item
description: Background. The increase in malicious activity in the information and cyberspace poses a challenge to the leaders of enterprises (organizations) and the leaders of companies with additional tasks and benefits to protect their assets. The loss of assets, for example, financial or technological, can make it impossible for the company to achieve its basic function - to generate profits. Methods. The work used the information security risk analysis method. Results. Сreation and promotion of current information security systems. Organizations spend significant financial resources on the development and operation of technology protection, create various structural subdivisions, such as the assessment and provision of a similar level and information security of the enterprise (company). At the same time, there is a real risk of the current situation if malicious and more current technologies are able to rig the system to protect the company and cause irrevocable costs, both financial and reputational. Сonclusions. One of the main directions of this problem is the creation of an information security management system (ISMS), which is a warehouse management system for an organization (company) and is assessed without bears the risks of creating, implementing, operating, operational monitoring, review, support and thorough information security organizations (enterprises). The ISMS includes the organizational structure of the organization (company), its policies, nutritional planning, monitoring of labor costs, promotion of daily practices, control and support of resource processes. As a best practice, to assess the level of information security of an organization, it is recommended to use a different approach that is based on the capabilities of process maturity models. The extracted results can be used to thoroughly and optimize the created information security system of the organization (company). There are currently a wide range of information security maturity assessment …
subject: Cybersecurity and information protection
  topic: section
subject: model
  topic: keywords
subject: maturity assessment
  topic: keywords
subject: threat
  topic: keywords
subject: information security
  topic: keywords
creator: Oleksandr Toroshanko
creator: Yurii Shcheblanin
creator: Oleh Kurchenko
rights: Copyright (c) 2024
date: 2024-07-01
publication date: 2024-07-01
starting page: 24
ending page: 30
doi: 10.17721/ISTS.2024.7.24-30

PECULIARITIES OF ENSURING THE SECURITY OF CRITICAL INFRASTRUCTURES
type: item
description: Background. The rapid development of information technologies over the past two decades has impacted the functioning of critical infrastructure facilities. These technologies have begun to be used not only for the exchange and processing of information, but also as a tool for reducing harm. The protection of sovereign interests in the political context is the primary basis for ensuring the national security of the country, which explains the need for the creation and constant development of strong cyber security. Critical infrastructure facilities are foldable, spaciously distributed, rich in component systems, the stability of the robot is critical for the functioning of the economy and the livelihood of the household. They have a rich structure, which includes: a range of technical components; social rheum; organizational level and level of state governance. Мethods. For monitoring information systems and methods for assessing the security of systems. Results. The investigation of critical infrastructures as socio-technical systems will require an assessment of the complex interactions between the technical, social and organizational levels of the system. Therefore, it is important to look at critical infrastructure as a whole. In this case, it is necessary to speak at a one-hour close examination of the technical, organizational and social factors that indicate the structure of the system and the dynamics of its development. Schobstecchita to the nonsense of such systems, it is not possible to pray beyond the traditions of the tradition to the zziki projected Riziki, to go to the new paradigmes, and the blessing of the nonsense of the critical sinfrastructure for the criterly wrecks to the designed areas. Due to the need to include the consideration of design basis accidents on critical infrastructure, the scope of surveillance may be expanded accordingly. Come to the point of ensuring the safety of those responsible not only for the creation of dry-barriers that…
subject: Cybersecurity and information protection
  topic: section
subject: cyber security
  topic: keywords
subject: critical infrastructure facilities
  topic: keywords
subject: information systems
  topic: keywords
subject: resilience
  topic: keywords
subject: cyber power
  topic: keywords
creator: Serhii Tolіupa
creator: Anatoliy Shevchenko
creator: Andriy Kulko
rights: Copyright (c) 2024
date: 2024-07-01
publication date: 2024-07-01
starting page: 11
ending page: 23
doi: 10.17721/ISTS.2024.7.11-23

IMPROVEMENT OF COMPUTER SYSTEM PROTECTION ASSESSMENT METHODS AGAINST HARMFUL SOFTWARE CODE
type: item
description: Background. The issue of ensuring information security (IS) of state information systems today is not only not losing relevance, but with the development of the concept of eGovernment in countries and an increase in the number of e-services, it is becoming increasingly important. Methods. The work used the method of analyzing the evaluation of the protection of the computer system against malicious software code, with the help of the method of optimization and evaluation of the protection of the computer system, the method of malicious software code was improved. Results. The work improving the method of assessing the information security of computer systems from malicious software includes a recommendatory aspect of building e-government. Conclusions. Cybersecurity threats, such as spam, phishing, spyware, and botnets, pose challenges for governments, especially for such young governments in any developing country. Malicious authors (hackers) create new combined threats to counter the security of the information system. New threats make it possible to bypass system firewalls, workstation configurations and various other intrusion detection systems. Many governments are working on cybersecurity legislation to help protect consumers and themselves. Some legislative efforts are focused on establishing government structures to provide support against systemic attacks. Some government legislation has been designed to prosecute criminals in order to deter criminal activity. The legislation has well developed a basis for the detection, analysis and internal prevention of malicious software. To effectively manage cybersecurity threats, governments must be involved from the beginning of the process to the end of the process. Businesses need to know where and to whom to report security risk information, and the government needs to support it. Improving the method of assessing the information security of computer systems from malicious software contains a recommendatory aspec…
subject: Cybersecurity and information protection
  topic: section
subject: identification
  topic: keywords
subject: information security
  topic: keywords
subject: eGovernment
  topic: keywords
subject: organization of information security
  topic: keywords
subject: firewalls
  topic: keywords
creator: Serhii Dakov
creator: Тetiana Lapteva
rights: Copyright (c) 2024
date: 2024-07-01
publication date: 2024-07-01
starting page: 5
ending page: 10
doi: 10.17721/ISTS.2024.7.5-10