Models, Methods and Information Technologies of Protection of Corporate Systems of Transport Based on Intellectual Identification of Threats
DOI:
https://doi.org/10.7494/dmms.2015.9.2.117Keywords:
systems of transportation and communication, information security, cyber security, threat detection, mathematical models, fuzzy logicAbstract
In the article, results of the research on the development of methods and models of intellectual recognition of threats to information systems of transport. The article contains results of the research that allows us to raise the level of protection of the automated and intellectual information systems of the transportation enterprises (AISTE) in the conditions of the intensification of transportation. The article contains mathematical models and results of estimation information systems having Internet connection through various communication channels. The article also considers the issues of research and protection of the AISTE under the condition of several conflict-data-request threads.
References
Ahmad D.M., Dubrawsky I., Flynn H. et al. (2005). Zashchita ot khakerov korporativnykh setey [Hack Proofing Your Network]. 2nd Edition. Moscow: Kompaniya IT; DMK Press. ISBN 5-98453-015-5.
Avižienis A., Laprie J.-C., Randell B. & Landwehr C. (2004). Basic concepts and taxonomy of dependable and secure computing. IEEE Transactions on Dependable and Secure Computing, 1(1), pp. 11–33. DOI: http://doi.org/10.1109/TDSC.2004.2.
Trivedi K.S., Kim D.S., Roy A. & Medhi D. (2009). Dependability and security models. In: Proceedings of the 2009 7th International Workshop on Design of Reliable Communication Networks (DRCN 2009), pp. 11–20. DOI: http://doi.org/10.1109/DRCN.2009.5340029.
PricewaterhouseCoopers (PwC). (2011). Transportation & Logistics 2030. Volume 4: Securing the Supply Chain. PwC. URL: https://www.pwc.com/gr/en/publications/assets/transportation-logistics-2030-vol4.pdf.
Lakhno V.A. & Petrov A.S. (2010). Obespechenie zashchishchennosti avtomatizirovannykh informatsionnykh sistem transportnykh predpriyatiy pri intensifikatsii perevozok [Ensuring the Security of Automated Information Systems of Transport Enterprises under Intensified Transportation]. Luhansk: Volodymyr Dahl East Ukrainian National University.
Kolodgy C.J. (2011). Worldwide Security and Vulnerability Management 2010–2014 Forecast and 2009 Vendor Shares. IDC Market Analysis, Document No. 225988. Framingham, MA: IDC. URL: https://cdn2.qualys.com/docs/mktg/idc_vendor_shares_2009.pdf.
Harel D. (1987). Statecharts: A visual formalism for complex systems. Science of Computer Programming, 8(3), pp. 231–274. DOI: http://doi.org/10.1016/0167-6423(87)90035-9.
Lau F., Rubin S.H., Smith M.H. & Trajkovic L. (2000). Distributed denial of service attacks. In: Proceedings of the 2000 IEEE International Conference on Systems, Man, and Cybernetics, vol. 3, pp. 2275–2280. DOI: http://doi.org/10.1109/ICSMC.2000.886455.
Lakhno V. & Petrov A. (2011). Modelling of discrete recognition and information vulnerability search procedures. Teka Commission of Motorization and Power Industry in Agriculture, 11A, pp. 129–136.
Lakhno V. & Petrov A. (2011). Experimental studies of productivity change in corporate information systems for companies in terms of computer attacks. Visnyk Skhidnoukrayinskoho natsionalnoho universytetu imeni Volodymyra Dalya, 5, pp. 181–189.
Lakhno V. & Petrov A. (2011). Task the research of the conflict request threads in the data protection systems. In: Howaniec H. & Waszkielewicz W. (Eds.), Marketing and Logistics Problems in the Management of Organization, pp. 230–251. Bielsko-Biała: Wydawnictwo Akademii Techniczno-Humanistycznej.
Lakhno V. & Petrov A. (2012). Modeling information security system of transport enterprises. In: Dudek M., Howaniec H. & Waszkielewicz W. (Eds.), Management and Production Engineering, pp. 221–248. Bielsko-Biała: Wydawnictwo Naukowe Akademii Techniczno-Humanistycznej.
Xiang Y., Zhou W. & Chowdhury M. (2004). A Survey of Active and Passive Defense Mechanisms against DDoS Attacks. Technical Report TR C04/02. School of Information Technology, Deakin University, Australia.
Mirkovic J., Dietrich S., Dittrich D. & Reiher P. (2004). Internet Denial of Service: Attack and Defense Mechanisms. Upper Saddle River, NJ: Prentice Hall PTR. ISBN 978-0-13-147573-1.
Chapman C. & Ward S. (2003). Project Risk Management: Processes, Techniques and Insights. 2nd Edition. Chichester: John Wiley & Sons. DOI: http://doi.org/10.1002/9780470775489.
Atighetchi M., Pal P., Webber F., Schantz R., Jones C. & Loyall J. (2004). Adaptive cyberdefense for survival and intrusion tolerance. IEEE Internet Computing, 8(6), pp. 25–33. DOI: http://doi.org/10.1109/MIC.2004.54.
Chi S.-D., Park J.S., Jung K.-C. & Lee J.-S. (2001). Network security modeling and cyber attack simulation methodology. In: Varadharajan V. & Mu Y. (Eds.), Information Security and Privacy. ACISP 2001. Lecture Notes in Computer Science, vol. 2119, pp. 320–333. Berlin–Heidelberg: Springer. DOI: http://doi.org/10.1007/3-540-47719-5_26.
Chirillo J. (2003). Hack Attacks Testing: How to Conduct Your Own Security Audit. New York: John Wiley & Sons. ISBN 978-0-471-22946-9.
Mehta V., Bartzis C., Zhu H., Clarke E.M. & Wing J.M. (2006). Ranking attack graphs. In: Zamboni D. & Kruegel C. (Eds.), Recent Advances in Intrusion Detection. RAID 2006. Lecture Notes in Computer Science, vol. 4219, pp. 127–144. Berlin–Heidelberg: Springer. DOI: http://doi.org/10.1007/11856214_7.
Smirniy M., Lakhno V. & Petrov A. (2009). The research of the conflict request threads in the data protection systems. Visnyk Skhidnoukrayinskoho natsionalnoho universytetu imeni Volodymyra Dalya, 2(20), pp. 23–30.
Lin S.-C. & Tseng S.-S. (2004). Constructing detection knowledge for DDoS intrusion tolerance. Expert Systems with Applications, 27(3), pp. 379–390. DOI: http://doi.org/10.1016/j.eswa.2004.05.016.
Templeton S.J. & Levitt K. (2000). A requires/provides model for computer attacks. In: Proceedings of the 2000 New Security Paradigms Workshop (NSPW ’00), pp. 31–38. New York: ACM. DOI: http://doi.org/10.1145/366173.366187.
