INFORMATION AND ANALYTICAL FORECASTING SYSTEMS INFORMATION SECURITY VULNERABILITIES AND THREATS
DOI:
https://doi.org/10.17721/2519-481X/2023/79-11Keywords:
information security, thematic Internet resources, social networks, sources of messages, vulnerabilities, attacks, information systemAbstract
The paper proposes a block diagram of an information-analytical system for predicting vulnerabilities and threats to information security. The analysis of the conducted research allows us to conclude that in order to solve the problem of research and development of an information-analytical fuzzy system for a logical fuzzy conclusion about the emergence of vulnerabilities and threats to information security, automating the analysis of the message flow of thematic Internet resources, it is advisable to use expert forecasting systems. To solve the problems of predicting vulnerabilities and threats to information security of confidential data based on the flow of thematic messages of Internet resources using the proposed algorithms and method, hybrid-type expert forecasting systems designed for use on general-purpose information and computer technology can be used.
The algorithm for predicting vulnerabilities and threats to information security implemented in the information and analytical system based on the analysis of the data flow of thematic Internet resources allows automating the information process of detecting new vulnerabilities and threats, provides information security specialists with the opportunity to assess the degree of security of resources in a timely manner and, if necessary, take appropriate measures for neutralization possible threats and vulnerabilities, thereby increasing the information security of computing computer systems against the implementation of new network computer attacks. An analysis of fuzzy logical inference systems, modern tools for processing large volumes of data, tools for morphological text analysis, and ontology editors was conducted. UML diagrams of activities, sequences of actions, and classes were built to carry out logical modeling of the information system for forecasting vulnerabilities and threats to information security. For the physical modeling of the system, UML-diagrams of deployment and components have been developed. The possibility of implementing an information-analytical system for predicting vulnerabilities and threats to information security based on the analysis of text messages of thematic Internet resources using the following software products is substantiated: DBMS MySQL, ontology editor - Protégé, fuzzy logic inference system - Fuzzy Logic Designer, morphological data analysis tools - Mystem. To evaluate the obtained results, the indicators MAPE, MAE, RMSE for the values of forecasting the occurrence of vulnerabilities and information security threats, as well as smoothed time series calculated on their basis with a period of three and five.
References
1. Lenkov, S.V.(2023), Metod prohnozuvannia vrazlyvostei informatsiinoi bezpeky na osnovi analizu danykh tematychnykh internet-resursiv / S.V. Lienkov, V.M. Dzhulii, A.M. Bernaz, I.V. Muliar, I.V. Pampukha // Zbirnyk naukovykh prats Viiskovoho instytutu Kyivskoho natsionalnoho universytetu imeni Tarasa Shevchenka. – K.: VIKNU -. №78. – pp. 123-134.
2. Lenkov, S.V.(2022) Metod protydii poshyrenniu ta vyiavlennia shkidlyvoi informatsii v sotsialnykh merezhakh/ S.V. Lenkov, V.M. Dzhulii, L.V. Solodieieva // Zbirnyk naukovykh prats Viiskovoho instytutu Kyivskoho natsionalnoho universytetu imeni Tarasa Shevchenka. – K.: VIKNU. – Vyp. №77. – pp. 103-117.
3. Lenkov, S.V. (2020), Model bezpeky poshyrennia zaboronenoi informatsii v informatsiino-telekomunikatsiinykh merezhakh / S.V. Lenkov, V.M. Dzhulii, V.S. ORLENKO, O.V. Sieliukov, A.V. Atamaniuk // Zbirnyk naukovykh prats Viiskovoho instytutu Kyivskoho natsionalnoho universytetu imeni Tarasa Shevchenka. – K.: VIKNU. – №68. – pp. 53-64.
4. Dzhulii, V.M. (2022.), Model potoku tekstovykh povidomlen tematychnykh internet-resursiv systemy prohnozuvannia informatsiinoi bezpeky / V. Dzhulii, N. Petliak, Yu. Khmelnytskyi, O. Pakhar // Visnyk Khmelnytskoho natsionalnoho universytetu. Tekhnichni nauky. – 2022. – № 5. – pp. 294-300.
5. Lienkov, S., Podlipaiev, V., Tolok, I., Lisitsky I., .Lytvynenko, N., Kuznichenko, S. (2021). The Information and Analytical Using of Non-Structured Information Resources CEUR Workshop Proceedingsthis link is disabled, 3126, pp. 81–87.
6. Cotsialni merezhi – realni zahrozy virtualnoho svitu. [Elektronnyi resurs]. – Rezhym dostupu : http://ogo.ua/ articles/view/011– 02–23/26490.htm
7. Lenkov, S.V. (2008), Metodyy sredstva zashchytы ynformatsyy. V 2-kh tomakh / S.V. Lenkov, D.A. Perehudov, V.A. Khoroshko –K: Aryi–464 p.
8. Ostapov, S. E. (2016) Tekhnolohii zakhystu informatsii: navchalnyi posibnyk / S.E. Ostapov, S.P. Yevseiev, O.H. Korol–Kharkiv : Vyd-vo KhNEU. – 476 p.
9. Lenkov, S.V. (2017), AnalIz Isnuyuchih metodiv ta algoritmiv viyavlennya atak v bezdrotovih merezhah peredachI danih / S.V. Lenkov, V.M. Dzhuliy, N.M. Bernaz, S.O. Bozhuk // Zbirnik naukovih prats Viyskovogo Institutu Kiyivskogo natsionalnogo universitetu imeni Tarasa Shevchenka. – K.: VIKNU. – Vip. No 56. – pp.124-132.
10. Dzhulii, V.M. (2022). Informatsiino-oznakova model shkidlyvoi informatsii v sotsialnykh merezhakh/ I.V. Muliar, V.M. Dzhulii, V. M. Pichura, O.O Zatsepina – Vymiriuvalna ta obchysliuvalna tekhnika v tekhnolohichnykh protsesakh - pp. 373–78.
11. Dzhulii V.M., Klots Yu.P., Muliar I.V., Zhylevych M.L., Dzhulii A.V. (2021), Kontrol dodatkiv internet-trafika kompiuternykh merezh metodamy mashynnoho navchannia. Visnyk Khmelnytskoho natsionalnoho universytetu. Tekhnichni nauky. – Khmelnytskyi. – No 5. – pp. 22–26.
12. Dzhulii, V.M. (2022), Metod klasyfikatsii dodatkiv trafika kompiuternykh merezh na osnovi mashynnoho navchannia v umovakh nevyznachenosti / V.M. Dzhulii, O.V. Miroshnichenko, L.V. Solodieieva // Zbirnyk naukovykh prats Viiskovoho instytutu Kyivskoho natsionalnoho universytetu imeni Tarasa Shevchenka. – K.: VIKNU. – Vyp. No 74. – pp. 73-82.
13. Lavrov, Ye. A. (2017.), Matematychni metody doslidzhennia operatsii : pidruchnyk / Ye. A. Lavrov, L. P. Perkhun, V. V. Shendryk – Sumy : Sumskyi derzhavnyi universytet, – 212 p.
14. Informatsiino-komunikatyvni tekhnolohii v humanitarnii sferi Zbroinykh Syl Ukrainy: dosvid, problemy, perspektyvy: Pidruchnyk. – Kyiv: NAOU, 2007.
15. Yemchuk L. Organizational Network Analysis as a Tool for Leadership Assessment in Software Development Team. Zhylinska O.; Chornyi A.; Dzhuliy V. – Institute of Electrical and Electronics Engineers (30 September 2020); INSPEC Accession Number: 20008165; DOI: 10.1109/ACIT49673.2020.
16. Syhnatura ataky. Wikipedia [Elektronnyi resurs] – Rezhym dostupu do resursu: https://uk.wikipedia.org/wiki/Syhnatura_ataky.
17. OPWNAI: Cybercriminals Starting to Use ChatGPT, January 6, 2023 [Elektronnyi resurs] – Rezhym dostupu do resursu: https://research.checkpoint.com/2023/opwnai-cybercriminals-starting-to-usechatgpt.
