For authors
Search
Search Results
##search.searchResults.foundPlural##
-
ALGORITHM OF PROTECTING CONFIDENTIAL DATA IN THE CLOUD MEDICAL INFORMATION SYSTEM
L.K. Babenko, A.S. Shumilin, D.M. Alekseev2021-12-24Abstract ▼The aim of the work is the development and implementation of the architecture of a cloud
storage system, systematization and processing of survey results (for example, EEG) and an algorithm
for ensuring the protection of confidential data based on a completely homomorphic cryptosystem.
The object of the research is the technologies of storage, transmission, processing and
protection of confidential information in distributed medical information systems. The architecture
of a cloud platform for distributed storage, processing, systematization and protection of confidential
data (results of medical examinations) has been developed, which makes it possible to interact
with various medical information systems and diagnostic hardware in order to generate big data.
An algorithm has been developed to ensure the safety of medical data stored in a cloud platform in electronic form, recorded during patient examinations in order to calculate the average value for
each of the brain activity rhythms (based on the results of a series of examinations over a long
period of time) using a fully homomorphic encryption algorithm. Based on the test results (analysis
of the execution time of such operations as: encryption, decryption, addition, multiplication,
signal-to-noise ratio of ciphertext to plaintext), the optimal algorithm. According to the results of
the work, it is shown that the fully homomorphic encryption scheme CKKS is the most effective,
especially in the context of the criticality of the requirements for a high level of security of confidential
data, which determines the choice of this scheme for the implementation of the algorithm
proposed in this work. -
ESTIMATION OF SECURITY OF THE PREMISES FROM LEAKAGE OF SPEECH INFORMATION IN CONDITIONS OF EXPOSURE TO NOISE
P.A. Chub , D.N. Tsvetkova , N.V. Boldyrikhin , D. A. Korochentsev2020-10-11Abstract ▼The article discusses the features of the application of certification methods for protected
premises. Such techniques are developed and regulated by the Federal Service for Technical and
Export Control. The need for certification is associated with the presence of technical channels for
information leakage, through which an attacker can obtain information constituting a commercial,
state or other secret. The presence of technical channels for information leakage is due to physical
processes associated with the propagation of acoustic, electromagnetic, and optical waves.
Through such channels, leakage of acoustic, specific information, information processed by technical
means and systems is possible. In the framework of this work, the features of certification of
protected premises against leakage of acoustic information are considered. Certification includes
instrumental measurements that allow you to detect an informative signal in communication lines,
on the air, in heating, water supply, ventilation, etc. In addition to measurements, certification
involves calculations based on which a conclusion is made about the conformity or noncompliance
of the level of protection. The calculation part is rather cumbersome and complex,
therefore the purpose of the work is to develop an algorithm that allows you to determine the degree
of security of the selected premises from the leakage of speech information. The objectives of
the work are: the development of auxiliary algorithms for calculating the security parameters of
the room for each type of voice information leakage channel; implementation of software that
allows you to determine the degree of security of the room; conducting a study of the dependence
of room security on the noise level using the developed software. As the results of the work, the
synthesized algorithm and the developed software tool should be noted, which can significantly
reduce the time for the procedure for assessing the security of the room and avoid errors.
The result of the work is the study of the dependence of verbal intelligibility of speech on the noise
level in various octaves. Studies have shown that verbal intelligibility, which determines the security
of a room by acoustic parameters, decreases non-linearly with an increase in the noise level at
a fixed signal level. -
A MODEL OF A SUBSYSTEM FOR GENERATING CRYPTOGRAPHIC KEYS OF THE CYBERPHYSICAL SYSTEM INFORMATION PROTECTION SYSTEM
V. А. Golovskoy, А. V. Vinokurov2025-04-27Abstract ▼The study is devoted to improving the subsystem of information protection in the radio channels of a
cyberphysical system using the example of a robotic complex (RTC). Modern and promising critical conditions
for the use of RTCs are considered, which determine the sets of requirements for the characteristics
of both RTCs and their subsystems, such as the radio data transmission system (RS) and the information
security subsystem. One of the approaches to meeting the requirements is the unification of theseRTC subsystems, which can be divided conditionally into two scientific and technical tasks: unification of
radio protocols and unification of information security tools in RS radio channels. The paper presents the
practical problems obtained as a result of the analysis, which lie at the intersection of two areas of research
– RS and information security subsystems. A hypothesis has been formed about the potential for
effective resolution of one of these practical problems – providing an information protection system with
cryptographic keys - by including a cryptographic key generation subsystem (CKGS) from biometric data
used as the initial key information in the RTC information protection system. The proposed improvement
has several aspects – regulatory, economic, and technical. The paper examines only the scientific and
technical side of the issue, as a result of which a functional model of the CKGS is proposed, which provides
a study of the possibilities of the modeled subsystem for the implementation of the formulated principles
of functioning. The purpose of the work is to develop a model of the CKGS functioning for the cryptographic
information protection system in the RS RTC radio channels and the formation of its algorithmic
content. The object of research is a system of cryptographic information protection in RS radio channels.
The subject of the research is an algorithm for generating cryptographic keys for a cryptographic information
protection system in RS RTC radio channels. To achieve this goal, a class of abstractions involved
and a methodological apparatus are substantiated that uses the provisions of the theory of algorithms to
prove the existence of an algorithm that solves a formulated mass problem and has specified non-trivial
semantic properties. Research methods – analysis, analogy, synthesis, decomposition, abstraction. The
main mass problem and the hypothesis of its solvability are formulated. In order to test the hypothesis, the
corresponding theorem is formulated and proved. The proposed model makes it possible to prove the joint
effective feasibility of various information processing algorithms -
INFORMATION SECURITY MANAGEMENT IN THE DIGITAL TRANSFORMATION PROCESS: MODELING BASED ON HETEROGENEOUS GRAPHS AND RISK METRICS
К.V. Yakimenko , V.V. Zolotarev246-2562025-07-24Abstract ▼This study is devoted to the critical problem of ensuring information security of organizations in the context of active digital transformation, which inevitably entails an increase in attack surfaces, the emergence of new vulnerabilities and risks of destabilization of security systems. The authors propose a process-oriented approach based on modeling business processes (BP) and the IT landscape using heterogeneous graphs. This model represents three key types of entities: operations, information systems (IS), and data as objects of protection, as well as attributed edges reflecting transmission channels and their security characteristics. This approach ensures the complete identification of CII objects in accordance with the requirements of the FSTEC and allows the analysis of complex relationships in the transitional states of CT. The study developed a set of key quantitative metrics for information security risk management:
1. Number of Critical Paths (CCPs): Reflects the change in the attack surface when adding/removing ICS and data routes. 2. Node Centrality Level (UCU): Defines the most critical for connectivity and vulnerable IP (risk concentration points). 3. Data Distribution Index (DDI): Characterizes the ratio of cloud and local data storage/processing nodes and the associated control and security risks. 4. Recovery Time (BB): Evaluates the stability of the PS to failures and attacks. 5. The level of Automation of Protection (UAZ): Shows the proportion of automated information security tasks for rapid response. Based on the model and metrics, a dynamic algorithm for managing the information security of the CT process is proposed. The algorithm provides: 1. Construction of graph models of BP "as it is" and "as it should be". 2. Continuous dynamic updating of the current state model during the CT. 3. Regular calculation of metrics for risk assessment in transition states. 4. Updating the list of risks and protective measures based on the analysis of metrics. The results include practical recommendations on: reducing the attack surface; prioritizing node protection with a high level of criticality; optimizing data distribution taking into account security and fault tolerance requirements. The proposed approach ensures transparency and manageability of information security at all stages of the IT process, increases the resilience of the IT landscape to threats and compliance with regulatory requirements. -
AN ONTOLOGICAL APPROACH TO THE CREATION OF ROBOTIC COMPLEXES WITH AN INCREASED DEGREE OF AUTONOMY
S. М. Sokolov42-592022-04-20Abstract ▼The aspects necessary for the implementation of robotic complexes with an increased degree of
autonomy (RC with IDA) in practical work are considered. The distinctive features of such complexes,
the needs of the corresponding intelligent information control systems (IIСS) are indicated. The requirement
of situational awareness is highlighted and, as a consequence, the need for a diverse system
of knowledge representation, means of perception of the external environment and comparison of operational
information with models and a priori information about this environment. In addition, it is pointed
out the need to automate the processes of creating RC with IDA, accessibility, and simplification of their
use. In order to answer these questions, the paper proposes to use the concept and mechanisms of ontologies
in relation to autonomous robotics. Examples of existing solutions in this area are given. In robotics,
ontologies are used to define and conceptualize knowledge accepted by the community, using a
formal description that is machine-readable, shared, and contains the flexibility to justify this knowledge
in order to derive additional information. Ontologies are of considerable interest for multi-agent systems
for organizing interaction between agents and with other systems in heterogeneous environments,
the possibility of reuse and support for the development of new RCs. The author describes the construction
of an ontology proposed by the author in such an applied field as information support for targeted
movements of autonomous ground vehicles based on technical vision systems. All consideration is conducted
in the configuration space of the information and control systems of the RC with IDA. This space
allows you to aggregate a large number of different technologies used in the construction of RC. The
embodiment of a particular system in this space corresponds to the "assembly point". The coordination
of the forms of knowledge representation in the IICS is ensured by the consistent consideration of planes
in this space. As a connecting link – a means for automated translation of descriptions of descriptive
ontologies into descriptions of functional, machine-readable ontologies, the use of the language of information-
motor actions and interpretive navigation commands is proposed. In conclusion, the shortterm
prospects for the development of the described approach are considered, and wishes are expressed
to the domestic community of roboticists. -
DESTRUCTURIZATION OF CRITICAL INFORMATION INFRASTRUCTURE FOR ASSESSING THE INFRASTRUCTURAL STABILITY OF THE SUBJECT OF CRITICAL INFORMATION INFRASTRUCTURE UNDER DESTRUCTIVE INFLUENCES
Е. А. Maksimova, N. P. Sadovnikova2021-11-14Abstract ▼With the adoption of Federal Law No. 187 "On the Security of Critical Information Infrastructure",
the implementation of which in practice is not possible without a comprehensive assessment
of information security (IS) of subjects of critical information infrastructure (SСII).However, the currently existing regulatory documents of regulators do not consider SСII from the
point of view of a systematic approach, the infrastructural component of SСII is not taken into
account when building an information protection system. At the same time, the assessment of IS
SСII without taking into account the effect on the state and behavior of the system of inter-object
and intersubject connections arising in the system leads to an error in the assessment, since the
system itself, under certain conditions, can generate infrastructural destructivism. Thus, the error
in assessing the ISSII arises due to the failure to take into account the indicator of the SСII's inability
to implement its functionality in full under the influence of infrastructure risks, i.e. infrastructural
destructivism. From the point of view of the theory of sustainability, this indicator can
be correlated with the category of “infrastructure sustainability of SСII”. The proposed by the
authors of the study, the model for assessing the infrastructure sustainability (IS) of SСII is presented
1) using the apparatus of cognitive modeling, 2) using the apparatus of the theory of reliability
of technical systems. Within the framework of cognitive modeling, the power of concepts is
set by experts. In the presented study, for this assessment, it is proposed to use the apparatus of
logical-probabilistic modeling, through a clear structuring of the system - SСII. Thus, the assessment
of the infrastructure stability of the SCII is characterized by the possibility of assessing the
probability of no-failure operation of the facilities of the CII and preventing failures in the functioning
of the CII spheres, which guarantees stability and the required level of information security.
In this case, the problem of assessing IS in this case acquires a key character in the comprehensive
assessment of IS SСII. -
TRANSFORMATION AND ANALYSIS OF INFORMATION WHEN CREATING A DATABASE OF PARTICIPANTS OF THE GREAT PATRIOTIC WAR 1941-1945 IN THE MEMORIAL COMPLEX «ROAD OF MEMORY» IN THE MAIN RUSSIAN ARMED FORCES CATHEDRAL ON THE BASIS OF COMPUTER METHODS OF INFORMATION PR
S. A. Botsvin , V.A. Khvatkov2021-11-14Abstract ▼Preserving the historical memory of the participants of the Great Patriotic War
1941–1945 is a world-class task that should preserve the truth about the most terrible war and the
feat of our people. In modern conditions, attracting interest in history, traditions and finally
recognition of one's duty to the past generations requires modern methods. One of these methods
is the transformation of information, which allows you to present this information in such a way
that it can be used most effectively. At the same time, the main goal in the transformation of historical
data is to optimize their representations and formats and not change the information content.
The presented algorithms of transformation and analysis of information when creating a database
of participants of the Great Patriotic War were aimed at maximizing the preservation of historical
value and reliability of information. To achieve this goal, computer methods of information processing
for normalization and consolidation of personal data obtained from various sources are
considered. The analysis of the content of information in archival documents with the presentation
of statistical data on the number of documents (records) from various sources (archives, databases,
information resources, etc.) is carried out and the procedure for translating information
from archival documents into electronic form, which has been applied in practice, is described.
Based on the analysis of the information, diagrams of the content of personal information in archival
sources are constructed, the stages of systematization and bringing the generalized information
array records to a single format are presented, as well as the procedure for combining and
deleting duplicate records. For the possibility of using in other projects, an algorithm for consolidating
data obtained from various sources is described in detail, and its block diagram is constructed.
In addition, the applied fuzzy search algorithms are described, which made it possible to
minimize errors in records, as well as image comparison algorithms for searching for duplicates
from photographs. All of these algorithms have made it possible to bring together information
contained on various media, having different structures and geographical location. The created
information resource allows you to enormously reduce the resources needed to find the necessary
information, including access to which was limited or not at all. Further improvement of algorithms
for normalization and consolidation of information can serve as a basis for data migration
from outdated to promising systems, as well as for the formation of information resources from
existing heterogeneous archival funds. -
CONSTRUCTION CONCEPT AND ARCHITECTURE CRITICAL INFORMATION SEGMENTS OF THE REGIONAL INFOCOMMUNICATION NETWORK
I.V. Rodygina, I. I. Buzenkov, Y.V. Kakhanets2021-11-14Abstract ▼Today, in absolute terms, not a single branch of the state can do without modern high-tech
communications that connect computing systems and remote databases. The use of new information
and communication technologies as a means of resolving contradictions, as well as a
means of implicit influence, is becoming a growing threat to the security of the community on the
world stage. The presented work examines not only the stages of development, but also the main
trends, approaches to the construction of digital information systems, as well as the characteristic
threats to information security for them. The article also shows the actual place of critical information
segments in the general context of the communication system of the Russian Federation.
The first part of the work reveals the concept of a three-component construction of regional critical
information segments. The main part focuses on the difference in technologies used to build
critical information segments. The main part of the article is aimed at identifying the vulnerabilities
of complex information structures and systems that use the architecture of multiservice communication
systems. The analysis carried out by the authors allows us to classify the main threats
to information security both for communication systems built according to classical circuit switching
schemes, and for communication systems based on new technological principles, basically -
packet switching. In general, the authors tell us that the idea of a standard and clearly defined
traffic structure and user interaction procedures, regardless of their type, geographic distance or
area of its application, together with digital transmission and switching methods, has a revolutionary
role in the development of communication systems. Special attention should be paid to the
classification of protocols presented by the authors, which allows to identify the weakest points in
modern information systems, which should be paid attention to first of all: protocols that ensure
the functioning of wireless networks, mail protocols, file exchange protocols, and others -
DIGITAL PLATFORM FOR THE CREATION OF DISTRIBUTED CONTROL AND NAVIGATION SYSTEMS FOR UNDERWATER VEHICLES
V.F. Filaretov, D.A. Yukhimets, A.V. Zuev, A.S. Gubankov, D.D. Minaev2021-04-04Abstract ▼The paper proposes the architecture of a digital platform for the implementation of distributed
control and navigation systems of underwater vehicles (UV), that perform technological operations
in an uncertain environment. The proposed digital platform is designed to automate the
following activities: monitoring the state of underwater infrastructure objects (communication
lines, pipelines, mining equipment, etc.), cartographic and geodesic works, determining the parameters
and boundaries of physical fields, zones of distribution of chemical compounds (pollution
zones) and bioresources, protection of underwater and surface infrastructure objects (underwater
mariculture farms, borders of water reserves, etc.), tracking moving objects, searching for objects
of a given type (biological, man-made, etc.), performing underwater technological operations
(welding, cutting, cleaning, etc.). For this platform, a command system has been developed that
provides flexible assignment of various types and purposes of UV missions. There are five types of
digital platform messages: mission order management commands, mission load management
commands, information messages, mission and group control commands. The concept of building
distributed control systems of the UV is proposed, which ensures the compatibility of existing onboard
UV systems with the proposed solution based on the combined hydroacoustic systems of
global hydroacoustic navigation developed in PAO "Dalpribor" (Vladivostok). These control systems
consist of two main parts. The first part is the initial on-board information and control system
of the UV, which ensures its movement to a given point in space at a given speed, receiving
data from on-board sensors, as well as controlling the operation of on-board equipment. The second
part – the high level control system, provides the possibility of interaction of the control system
through an acoustic communication channel with the global hydro-acoustic navigation system
and the operator's automated workplace. Simulation of the data transfer in CoppeliaSim between
the operator and the UV within the proposed digital platform have shown that reliable mission
loading and receiving information about the state of the UV is provided at different speeds and
under different operating conditions of the acoustic communication channel. -
ALGORITHM OF ENSURING THE SECURITY OF CONFIDENTIAL DATA OF THE MEDICAL INFORMATION SYSTEM FOR STORAGE AND PROCESSING OF EXAMINATION RESULTS
L.K. Babenko, A.S. Shumilin, D.M. Alekseev2021-01-19Abstract ▼The objectives of the study are to develop and assess the effectiveness of the structure of a
cloud platform for storing, processing and organizing medical data, determining a method of protection,
in particular, ensuring confidentiality when transferring and storing examination results.
To achieve this goal, the tasks of analyzing existing models of information processes and structures
in the subject area are being solved, the features of the means for accumulating and processing medical data stored in electronic information systems for patient registration, the architecture
of a cloud platform for distributed data storage and an algorithm for ensuring the safety of
medical data stored in the cloud are being developed. the platform in electronic form in the form
of initial physiological signals (EEG, ECG, EMG, EOG, etc.) recorded during patient examinations;
an integrated cloud platform for distributed storage, analysis and systematization of medical
data and a security system using the developed protection method are being created; the effectiveness
of the proposed algorithm for protecting confidential medical information is analyzed in the
context of integration into the developed cloud platform. The proposed method for protecting a
medical information system involves the use of an original DICOM file and subsequently a converted
PNG image, which is subjected to a pixel encryption algorithm. An algorithm based on
chaos theory is used to encrypt the image. The capabilities of chaos systems can significantly increase
productivity. Hierarchical division of data streams into levels and standardization of data
transfer protocols, as well as their storage formats, allow to form a universal, flexible and reliable
medical information system. The proposed architecture has the ability to integrate into existing
medical systems. In the course of the work, it was found that the considered protection method is
an effective way to ensure the confidentiality of medical system data. -
EXPERIENCE IN USING TRAINING SYSTEMS WITH VIRTUAL REALITY ELEMENTS FOR TRAINING SPECIALISTS OF MISSILE FORCES AND ARTILLERY USING ROBOTIC SYSTEMS FOR MILITARY PURPOSES
A.I. Nagovicin, S.N. Pesterev, B.B. Molotkova, I.V. Aksenov2020-07-10Abstract ▼The paper presents the tasks to be solved by promising RTC VN in the interests of Rvi. The conclusion is formulated that the problem of training and improving the quality of knowledge of Rvi specialists using military robotic systems remains one of the urgent problems of higher mili-tary professional education and acquires new aspects of consideration. It is shown that one of the effective ways to solve the problem of training and improving the quality of knowledge of Rvi spe-cialists is to develop and implement computer-based training systems with elements of virtual real-ity and 3D visualization of the studied samples of equipment and weapons in the educational pro-cess. The main features of the computer information and reference system "compendium of the Rvi" developed at the Mikhailovsky military artillery Academy and used in the educational process are briefly described. Preliminary results of the conducted pedagogical experiment with the use of the "Rvi compendium" are presented, and the main factors that increase the effectiveness of the educational process are Noted. Based on the results of the pedagogical experiment made a rea-sonable inference that the use of KISS "compendium Rvia" allows to increase learning efficiency, to reduce terms of development of technology that is more efficient use of training time and as a result reduce the cost of training and the number of vehicles.
-
CONSTRUCTING A MATHEMATICAL MODEL OF A VIRUS-PROTECTED INFORMATION SYSTEM BASED ON SIR-MODEL
Е. V. Karachanskaya , О.V. Rybkina145-1572025-12-30Abstract ▼This article presents an analysis of deterministic models of computer virus epidemic propagation (SIR models) and their classification. The main areas of research into these models are highlighted. An analysis of existing stochastic models based on the SIR model and their diversity are presented. A method for constructing a stochastic SIR model based on the classical SIR model, represented by a system of Ito stochastic differential equations with a Wiener process, is proposed. The possibility of constructing a stochastic and deterministic model of an information system protected against computer virus infection with probability 1 is demonstrated: a stochastic model, in which infection by viruses occurs continuously, and a deterministic model, in which the virus is present in the information system. A mathematical stochastic model of an information system protected from computer virus outbreaks is constructed as a system of stochastic differential equations whose first integrals are invariants preserved with probability 1. A certain functional relationship between model variables, maintaining a constant value, is considered as the system's security indicator. Introducing a compensator (program control with probability 1 (PCP1)) into the model allows the specified security indicator, described by the model variables, to be maintained with probability 1. Introducing a compensator (program control with probability 1 (PCP1)) into the model allows the specified security indicator, described by the model variables, to be maintained with probability 1. Similarly, based on the proposed algorithm, a deterministic model of an information system protected from computer virus infection is constructed. A control similar to programmed control with probability 1 (PCP1) is introduced into the constructed model, which allows the invariants to be maintained. A distinctive feature of the proposed models is that they preserve invariants associated with the properties that ensure the security of the information system. The behavior of the constructed models is studied using numerical simulation in the MathCad environment. Based on the research results, conclusions were drawn on the possibility of using the proposed method in constructing stochastic models based on other models of epidemic spread, as well as for models of protecting an information system from the spread of a computer virus epidemic.
-
FEATURES OF THE AGENT-MODULAR APPROACH APPLICATION IN THE DESIGN AND IMPLEMENTATION OF INFORMATION-COMPUTATIONAL SYSTEMS
А.F. Zaytsev179-1892025-12-30Abstract ▼Information-computational systems play a key role in processing and analyzing large amounts of data, ensuring the efficient functioning of production, provision, as well as receipt of various digital goods and services. In the conditions of intellectualization and increasing diversity of functional requirements imposed on information systems, there is a need to develop new approaches for their construction and implementation. The paper considers the main features of the proposed agent-modular approach, which involves the construction of flexible and scalable information-computational systems capable of functioning in a distributed environment. The agent-modular approach is a methodological approach to the organization of information-computational systems based on the integration of system analysis methods, as well as agent and modular principle's of building various systems. The aim of the paper is to investigate theoretical and practical aspects of the application of the proposed agent-modular approach in building an information system, to analyze its advantages over other common approaches (object, component, service), and to present examples of its successful use. To achieve the set goal, it is necessary to solve the following tasks: – to research the theoretical foundations and identify the specific features of practical application of the proposed agent-modular approach; – to analyze the differences and describe the advantages of the proposed approach in its comparison with other approaches; – to present an example of building an information-computational system using the proposed approach. The following general scientific methods were used in the research process: decomposition, analysis, synthesis, comparison, description, formalization, structurization, modeling, design, as well as the basic principles of system, modular and agent-based approaches. Computers, and computing software tools were used as research materials. As a result of the study, the main theoretical and practical aspects of the proposed approach were considered. The agent-modular approach can be used to build various information systems at the stages related to their modeling and design. The proposed approach allows describing the structure, functioning, and interaction of various components of information-computational systems.
-
DESIGN OF THE CONDITION DATABASE FOR ONLINE AND OFFLINE DATA PROCESSING IN EXPERIMENTAL SETUPS OF THE NICA COMPLEX
K.V. Gertsenberger, A.I. Chebotov, I.N. Alexandrov, I.A. Filozova, E.I. Alexandrov2021-02-25Abstract ▼Storing, processing and analyzing of experimental and simulated data are an integral part of
all modern high-energy physics experiments. These tasks are of particular importance in the experiments
of the NICA project at the Joint Institute for Nuclear Research (JINR) due to the high interaction
rate and particle multiplicity of ion collision events, therefore the task of automating the considered processes for the NICA complex has particular relevance. To solve the task, modern physics
experiments use various information systems, which control experiment data flows and simultaneously
service a large number of requests from various systems and collaboration members. The article
describes the design of a new information system based on the Condition Database as well as related
information services to automate storing and processing of data and information on the experiments.
The Condition Database is aimed at storing, searching and using various parameters and operation
modes of experiment systems. The system being implemented on the PostgreSQL DBMS will provide
the information for event data processing and physics analysis and organize a transparent, unified
access and data management throughout the life cycle of the scientific research. The article shows
the scheme and purposes of the Condition Database and its attributes, key aspects of the design are
highlighted. A place of the Condition Database in data processing flow is illustrated. The integration
of the information system with experiment software systems is also presented. The development of the
Condition Database interfaces has been started to use the stored information in event simulation, raw
data processing, reconstruction and physics analysis tasks. -
TRANSFORMING THE DECISION-MAKING EXPERIENCE
S. L. Belyakov, M. L. Belyakova, S.A. Zubkov, N.A. Golova, K.S. Yavorchuk2021-01-19Abstract ▼The problem of transferring the experience of decision-making in situational analysis using
geoinformation systems is considered. The need for intellectual support from the geoinformation
system is due to the fact that spatial objects and connections of the real world are extremely dynamic.
Under these conditions, it is not possible to apply analytical models of processes and phenomena
due to the incompleteness and inconsistency of the information describing them. Statistical
models depend on a large number of factors, which vary as the geographical location of the
situation changes. An alternative is to use the experience of experts who are able to make effective
decisions in local spatial situations. The lack of control over the reuse of experience is a problem.
The knowledge gained in developing solutions in one locality can lead to inadequate solutions in
another locality. The experience of solving a problem in the same area loses its significance over
time. In this paper, we propose a representation of knowledge in the form of an image consisting
of a center and acceptable transformations of the center. Image transformation functions that
perform knowledge transfer are introduced. The properties of transformation functions that carry
procedural knowledge about the images of situations are analyzed. The use of the identified properties
for the formation of a test plan for software transformation procedures is considered. Thecriteria for successful transformation are studied. The optimization problem of finding the best
transformation function in the GIS knowledge base is formulated. A generalized method of transforming
experience is proposed. An example of the synthesis of transformation methods for selecting
an operational call center is given. The image of the situation of making a decision about
choosing a land plot for a service center is transformed into the specified area on the GIS map. -
VERIFICATION OF DYNAMIC BIOMETRIC PARAMETERS OF A PERSONALITY BASED ON A PROBABLE NEURAL NETWORK
Y.A. Bryuhomitsky2021-01-19Abstract ▼Biometric identity verification is used primarily for access to computer and mobile systems, as
well as for remote (voice) verification. In fact, the most widespread systems are biometric verification
systems based on a fixed passphrase, which are quite simple to implement, but very vulnerable to
attacks of reproduction of a compromised short text. To eliminate this drawback, it is proposed to
carry out identity verification using a text that is arbitrary in terms of volume, content and language
(text-independent biometric verification). This paper proposes a generalized approach to solve the
problem of identity verification by dynamic biometric parameters of different modality (keyboard
writing, handwriting, voice). The presentation of dynamic biometrics signals is carried out by converting
them into a sequences of information units, each of which contains the same number of counts
of biometric signal of corresponding modality. The solution to this problem is carried out by monitoring
the degree of concentration of closely located information units (clusters) at certain points of the
multidimensional feature space. Such control is implemented on a probabilistic neural network thatstatistically evaluates the probability density of the distribution of information units in the corresponding
clusters with the subsequent determination of the total probability density for the entire
class of objects. The advantages of the proposed approach are: generalization of substantially different
methods of text-independent identity verification by dynamic biometric parameters of different
modality; the ability to make a verification decision for a fixed time of receipt of biometric data, determined
by the size of the model used; the ability to set the verification accuracy by changing the
dimension of the layer of probabilistic network samples. The disadvantage of the proposed approach
is the need for software implementation of a large-scale neural network. However, this drawback is
quickly leveled with an increase in the productivity of computer technology. -
ESTIMATION OF THE SEARCH TIME FOR KEY COMPONENTS IN A KNOWN PLAINTEXT ATTACK ON THE DOMINGO-FERRER CRYPTOSYSTEM
L. К. Babenko , V. S. Starodubcev , N.B. Yelchaninova110-1182025-07-24Abstract ▼This paper provides a brief description of the fully homomorphic Domingo-Ferrer cryptographic system and describes the stages of an attack with a known plaintext on this cryptosystem. The stage of searching for the key components of the attack in question is analyzed, for which existing implementation methods are described, among which the method with minimal computational complexity is determined. The rationale for the computational complexity and time costs of the considered method for implementing the key component search stage is based on theoretical calculations, as well as experimental studies.
The aim of the study is to evaluate the complexity of implementing the stage of searching for key components in an attack with a known plaintext on a fully homomorphic Domingo-Ferrer cryptographic system using the Gauss method, developed for solving systems of linear algebraic equations modulo a prime number. The main result of this work is an assessment of the computational complexity of the key component search stage in a known plaintext attack on the Domingo-Ferrer cryptographic system, implemented using the Gauss method. The complexity estimate is expressed in the number of basic mathematical operations and is confirmed by a number of experimental studies, which allows us to draw reasonable conclusions about the computational complexity of the method under consideration. The conducted research represents a significant contribution to the development of a fully homomorphic Domingo-Ferrer cryptosystem based on the integer factorization problem. It has practical significance, as it allows us to assess the criticality of an attack with a known plaintext on a given cryptosystem. The results obtained can serve as a basis for researchers and cryptographers to develop recommendations for choosing the parameters of the Domingo-Ferrer cryptosystem to ensure the necessary level of security in various applications. -
ALGORITHM FOR AUTOMATIC SELECTION OF INFORMATION PROTECTION MEASURES DEPENDING ON THE RESULTS OF THE VULNERABILITY SCANNER REPORT
A.V. Anzina, A.D. Medvedeva, E.A. Emelyanov2021-02-13Abstract ▼Effective protection of information in an information system implies regular diagnostics and
monitoring of the network, computers, and applications to detect possible problems in the security
system. There are vulnerability scanners certified by the Federal Service for Technical and Export
Control for security scanning. As a result of scanning, vulnerabilities of the information system
can be identified, the elimination of which requires an immediate response, since attackers can
take advantage of the vulnerability of the information system and carry out an attack. However,
the selection of protection measures is a laborious process and requires a large amount of time,
then the problem of automating the selection of information protection measures arises. The development
of an algorithm for the automatic selection of information security measures is the main
goal in automating the work process of an information security specialist. The main tasks in the
development of the algorithm: selection of the fundamental characteristics of the vulnerability,
generation of a list of protection measures taking into account the security class of the information
system, comparison of protection measures with the selected characteristic. After analyzing the
information about vulnerabilities, the main indicator is chosen the vulnerability vector, which
includes the main metrics, the assessment of which allows the choice of protection measures. A set
of information protection measures was compared to each metric by means of expert assessment.
During the operation of the algorithm, the employee sets the vulnerability vector and the security
class of the information system as input parameters and as a result receives a list of necessary
protection measures. Thus, the automatic selection algorithm assumes a comparison of vulnerability
metrics with information protection measures, which will allow an employee to quickly select
measures based on the identified vulnerabilities. -
MODIFIED DISTRIBUTED DATA PROCESSING ARCHITECTURE FOR GEOINFORMATION SYSTEMS
M.Y. Polenov, D.A. Ivanov2021-02-13Abstract ▼The paper proposes a modified distributed data processing architecture based on the clientserver
model, as one of the options for implementing a software application of a geographic information
system. The review of existing geographic information systems and their classification
from the point of view of architecture demonstrated the prospect of using a distributed architecture.
However, systems developed on the basis of a traditional distributed architecture face problems
displaying processed 3-dimensional data in real time on computing devices with low performance.
In this regard, the purpose of this work is to develop and study a modified architecture of
geographic information systems, which allows to reduce the requirements for computing devices of
clients. The relevance of the research topic lies in the fact that currently there are devices that can
support only thin clients, which often have small functionality and are not able to solve heavy
computing tasks. The article discusses the features of the structural and software implementation
of a geographic information system based on the traditional architecture and the proposed modified
distributed architecture. The results of experiments carried out on two developed software
applications with different architectures are presented. The software implementation of the modified
architecture and the results of experiments have shown the feasibility of its application for
geographic information system systems on user computing devices with low performance.
The proposed architecture can be used in other distributed systems as well. Especially in those
where the task is to display three-dimensional information on thin clients. -
METHODOLOGY AND PRACTICE OF INCREASING THE AUTONOMY OF GROUND-BASED ROBOTIC COMPLEXES
S.М. Sokolov, A.A. Boguslavsky2025-04-27Abstract ▼Trends in the development of modern robotics and the needs of practice require an increase in the
degree of autonomy of robotic complexes. Increasing the degree of autonomy, in turn, requires an increase
in situational awareness and, as a result, an increase in the volume of data and the efficiency of
their processing in real time on on-board resources. At the same time, the requirement of economic feasibility
of the proposed solutions remains. Taking into account the fact that in domestic practice, in most
cases, remote-controlled robots are used, it becomes necessary to increase their autonomy using existing
technical solutions. This direction of development of robotic complexes is called the transition from remote
control to supervisory control. Along this path, an increasing number of information management
functions are transferred from the operator to the on-board information management system. Based on the
analysis of the world and our own experience in the development of robotic complexes, the author's methodology
for creating robots with an increased degree of autonomy, we have identified a key element in
ensuring the intellectual autonomy of mobile devices. A unified software and hardware module for information
support of mobile robots is proposed. The module is based on a vision system with an open software
and hardware architecture. This module allows increasing the degree of autonomy of ground-based
robotic complexes in terms of intellectual autonomy gradually, while remaining within the framework of
economic feasibility. The open software architecture of the module takes into account the de facto variety
of hardware solutions in existing remote-controlled mobile vehicles and allows for an increase in the degree
of autonomy - to switch from remote control mode to supervisory control step by step, according to
the tasks being solved and the available means. A technique for creating new or reengineering existing
RTK samples is proposed. The methodology includes an analysis of the overall layout of the RTK with an
emphasis on the software and algorithmic part of the on-board information and control system. This takes
into account the conditions for matching the requirements for the sensor and computing parts. The paper
considers examples of the application of this technique to the improvement of existing samples of groundbased
RTCs.. Practical tasks and examples of their solution using the proposed module are presented -
A METHOD FOR SOLVING GRAPH NP-COMPLETE TASKS ON RECONFIGURABLE COMPUTER SYSTEMS BASED ON THE ITERATION PARALLELIZING PRINCIPLE
A.V. Kasarkin2021-02-25Abstract ▼When we solve graph NP-complete tasks on multiprocessor systems, the growth of hardware
resource does not lead to the proportional increase of the system performance, and hence, the task
solution time is not always reasonable. The aim of our research, given in the paper, is minimization
of the solution time of the task of maximal clique enumeration on reconfigurable computer
systems (RCS). When we solve tasks on RCSs with the help of the method of parallelizing by layers,
the growth of performance also slows down in spite of better scalability in comparison with
multiprocessor implementations. In the paper, we suggest a method of parallel-pipeline application
development for reconfigurable computer systems. The method is based on parallelizing bylayers for graph NP-complete tasks. We show that the bit representation of sets, which is used for
the method of parallelizing by layers, is not efficient for the method of parallelizing by iterations.
The new method has another organization of calculations; it processes unordered sets, whose
elements are accessed not by addresses (as in arrays), but by values (names of vertices and names
of edges of the graph). We show that the new method, based on parallelizing by iterations, provides
ramping of the RCS real performance at much larger computational resource in comparison
with the method of parallelizing by layers. Its specific performance is lower, because computing
substructures are to process more intermediate data due to symbolic representation of sets. -
HIGH-LEVEL TOOLS FOR TRANSLATION OF C-APPLICATIONS INTO APPLICATIONS IN DATAFLOW LANGUAGE COLAMO
A.I. Dordopulo, A.A. Gulenok, A.V. Bovkun, I.I. Levin, V.A. Gudkov, S.A. Dudko2021-02-25Abstract ▼In the paper we review software tools for translation of sequential C-programs into scalable
parallel-pipeline programs written in the COLAMO language, used for programming of reconfigurable
computer systems. In contrast to existing tools of high-level synthesis, the translation result
is not an IP-core of a task fragment, but a complex task solution for multichip reconfigurable
computer systems with automatic synchronization of data and control signals. We analysed the
main translation steps of a sequential C-program such as transformation into an information
graph, analysis of data dependencies and selection of functional subgraphs, transformation into a
scalable resource-independent parallel-pipeline form, and scaling a COLAMO-program for a
specified multichip reconfigurable computer system. A program is scaled with the help of performance
reduction methods, applied to a completely parallel form of a task (an information graph),
adapted to the architecture of a reconfigurable computer system. We developed several rules,significantly reducing the number of transformation steps of task scaling, and providing a continuous flow of data processing in the functional subgraphs of the task. The developed software tools
for translation of C-programs into FPGA configuration files significantly decrease the synthesis
time of a task computing structure for multichip RCSs and the total task solution time. -
CLASSIFICATION FEATURES OF ENCRYPTED NETWORK TRAFFIC
N. V. Boldyrikhin , D. A. Korochentsev , F.A. Altunin2020-10-11Abstract ▼Currently, there is growing interest in the tasks of efficient packet network management:
quality of service, ensuring information security, optimization of the network hardware and software
resources. All these tasks rely heavily on the analysis and classification of network traffic.
This traffic is heterogeneous, as a rule, has a pulsating nature, difficult to predict and described by
the mathematical apparatus of random processes. At different times, the conditions for passingpackets along the same path can vary significantly. At the same time, a significant number of applications
are appearing requiring latency and jitter. The administration task in this context is to
correctly configure the switching and routing nodes. Traffic classification allows you to identify
packages of various applications and services and ensure their prioritization during transmission
over the network. For example, video conferencing traffic needs to be transmitted first of all, since
it is very sensitive to delays and jitter, data traffic can be transmitted last. The classification of
traffic today is an urgent task both in terms of network administration and in terms of ensuring its
security. Due to the fact that a large number of applications now encrypt the transmitted information
and it is very difficult to view its contents, the traffic classification is of particular interest,
which allows indirect signs to determine anomalies in the network, signs of intrusion. In this paper,
we consider the features of solving the classification problem of encrypted traffic. The aim of
the work is to study the classification features of encrypted traffic using correlation analysis and
an algorithm based on the difference in integral areas. Research Objectives: – develop a traffic
classification algorithm based on correlation and known patterns; – develop an algorithm based
on the difference of the integral areas under the traffic intensity curves; – conduct a practical
study of the accuracy of solving the classification problem. The work considers the classification
of traffic into three groups: audio, video, data. As a result, a sufficient accuracy of the correlation
algorithm in determining audio and data traffic was revealed. To identify video traffic, it is better
to use an algorithm based on the difference of the integral areas under the intensity curves. -
AGGLOMERATIVE CLUSTERIZATION ALGORITHMS FOR THE PROBLEMS OF ANALYSIS OF LINGUISTIC EXPERT INFORMATION
F.S. Bulyga, V.M. Kureichik2022-01-31Abstract ▼This article discusses and presents the main problems and principles of the data clustering
process, in particular, the principles and tasks of clustering text arrays of linguistic expert information.
In the course of this work, the main difficulties arising in the design of such systems were
identified, for example: the need for preprocessing data, reducing the size of the initial sample,
etc. To effectively perform the presented tasks, the implemented solution must have an integrated
approach that takes into account the efficiency indicators of methods aimed at solving individual
subtasks, as well as the ability to provide high efficiency indicators for the implementation of each
stage of the clustering process. In the presented work, various groups of hierarchical clustering
algorithms are considered, in particular, a subgroup of agglomerative clustering algorithms was
considered in relation to the problems of clustering linguistic expert information. In the described
work, a formal statement of the text clustering problem is given, and the main group of implemented
solutions based on the principles of agglomerative clustering is determined: ROCK, CURE,
CHAMELEON. A detailed review of each of the presented algorithms is carried out, and the main
advantages and disadvantages of each of them are formulated. The advantage of this work can be
considered the totality of the presented data on the algorithms, as well as the results of a comparative analysis, which make it possible to further assess the feasibility and potential probability of
using these solutions from the presented group of agglomerative clustering algorithms. The novelty
of this work lies in the formation of an overview analysis of existing approaches in the field of
hierarchical clustering for solving the problems of cluster analysis of linguistic expert information,
as well as the formation of the results of the comparative analysis of the considered algorithms. -
DEVELOPMENT OF A METHOD FOR PERSONAL IDENTIFICATION BASED ON THE PATTERN OF PALM VEINS
V.А. Chastikova, S.А. Zherlitsyn2022-11-01Abstract ▼The article describes the work on the creation of a neural network method for identifying
a person based on the mechanism of scanning and analyzing the pattern of palm veins as a biometric
parameter. As part of the study, the prerequisites, goals and reasons for which the deve lopment
of a reliable biometric identification system is an important and relevant area of activity
are described. A number of problems are formulated that are inherent in existing methods for
solving the problem: the graph method and the method based on calculating the distance expressed
in various interval metrics. The description of the principles of their work is given.
The tasks solved by personal identification systems are formulated: comparison of the subject of
identification with its identifier, which uniquely identifies this subject in the information system.
A mechanism for reading a pattern of veins from the palm of the hand, developed for analyzing
an image obtained with a digital camera sensitive to infrared radiation, is described. When the
palm is in the frame, illuminated by the light of the near infrared range, the image obtained
from the camera becomes noticeable pattern of veins, vessels and capillaries that lie under the
skin. Depending on the organization, the identification system may, based on the provided identifier,
determine the appropriate access subject or verify that the same identifier belongs to the
intended subject. Three methods for further analysis of biometric data and personal identification
are given: approaches based on categorical classification and binary classification, as well
as a combined approach, in which identification is first used by the first method, and then, by
the second, but already for a known access identifier defined on the first stage. The resulting
architecture of the neural network for the categorical classification of the vein pattern is pr esented,
a method for calculating the number of model parameters depending on the number of
registered subjects is described. The main conclusions and experimental measurements of the
accuracy of the system when implementing various methods are presented, as well as diagrams of
changes in the accuracy of models during training. The main advantages and disadvantages of the
above methods are revealed.
