Skip to content
DSML.KZ
Publications

Article · International Journal of Electronics and Telecommunications · September 1, 2023

Development of an Information Security System Based on Modeling Distributed Computer Network Vulnerability Indicators of an Informatization Object

Valeriy Lakhno, Жулдыз Алимсеитова, Yerbolat Kalaman, Olena Kryvoruchko, Alona Desiatko, Serhii Kaminskyi

Valerii Lakhno
Open via DOIPDF

Abstract

A methodology for development for distributed computer network (DCN) information security system (IS) for an informatization object (OBI) was proposed. It was proposed to use mathematical modeling at the first stage of the methodology. In particular, a mathematical model was presented based on the use of the apparatus of probability theory to calculate the vulnerability coefficient. This coefficient allows one to assess the level of information security of the OBI network. Criteria for assessing the acceptable and critical level of risks for information security were proposed as well. At the second stage of the methodology development of the IS DCN system, methods of simulation and virtualization of the components of the IS DCN were used. In the course of experimental studies, a model of a protected DCN has been built. In the experimental model, network devices and DCN IS components were emulated on virtual machines (VMs). The DCN resources were reproduced using the Proxmox VE virtualization system. IPS Suricata was deployed on RCS hosts running PVE. Splunk was used as SIEM. It has been shown that the proposed methodology for the formation of the IS system for DCN and the model of the vulnerability coefficient makes it possible to obtain a quantitative assessment of the levels of vulnerability of DCN OBI.

Cybersecurity and Information SystemsNetwork Security and Intrusion DetectionInformation and Cyber Securityinformation security systemsdistributed computer networksnetwork vulnerability assessment

More by Valerii Lakhno