DESIGN OF KNOWLEDGE BASE FOR CYBER SECURITY SYSTEMS ON THE BASIS OF SUBJECT IDENTIFICATION METHOD
DOI:
https://doi.org/10.28925/2663-4023.2020.8.135148Keywords:
informational security; expert system; knowledge base; syllogism; predicate logic; method of meaningful identification of objectsAbstract
The article presents the results of research performed in the process of designing an expert system (ES) designed to assess the threats to information security (IS) of critical information facilities (CIF). The approach to designing of expert system on the basis of syllogisms and logic of predicates, and also a method of meaningful identification of objects of knowledge base (KB) is offered. The essence of the method is that each object of the database of the projected EU, is matched by a tuple of keywords (ToK), the significance of which is determined by experts. Thus, each database object is placed in accordance with the element of the finite fuzzy topological space of the database objects. Meaningful identification takes place on the distance between the objects of the database. The approach proposed in the work, in comparison with the decisions of other authors, has a number of advantages. Namely, it allows: to model different variants of cyber threat scenarios for CIF and their consequences; determine the contribution of each of the factors or components of the architecture of the IS CIF to the overall picture of the probability of a cyber threat to the CIF; model the interaction of all IS factors and, if necessary, visualize this interaction; calculate and further rank the values of cyber threat probabilities for CIF for specific threat scenarios; automate the processes of threat modeling through the use of developed software and significantly reduce the time for audit of threats. It is shown that the use of the method of meaningful identification allows to increase the adequacy of the models of the selected subject area, as well as to prevent erroneous introduction of the same judgments of experts and goals in the EU database, in particular by combining hierarchies of goals formed by different expert groups. It is shown that the method can also be used to find the goals of the hierarchy, the exact wording of which, according to keywords, is unknown.
Downloads
References
Davies, J., Milward, D., Wang, C. W., & Welch, J. (2015). Formal model-driven engineering of critical information systems. Science of Computer Programming, 103, 88-113. DOI: https://doi.org/10.1016/j.scico.2014.11.004
Trauth, E. (2017). A research agenda for social inclusion in information systems. ACM SIGMIS Database: the Database for Advances in Information Systems, 48(2), 9-20. DOI: https://doi.org/10.1145/3084179.3084182
Shahbazian, E., & Rogova, G. (2016, November). Critical Aviation Information Systems Cybersecurity. In Meeting Security Challenges Through Data Analytics and Decision Support (Vol. 47, p. 308). IOS Press.
Paradice, D., Freeman, D., Hao, J., Lee, J., & Hall, D. (2018). A Review of Ethical Issue Considerations in the Information Systems Research Literature. Foundations and Trends® in Information Systems, 2(2), 117-236. DOI: http://dx.doi.org/10.1561/2900000012
Akhmetov, B., Lakhno, V., Malyukov, V., Sarsimbayeva, S., Zhumadilova, M., Kartbayev, T. (2019). Decision support system about investments in smart сity in conditions of incomplete information, International Journal of Civil Engineering and Technology, 10 (2), pp. 661-670.
Akhmetov, B., Lakhno, V., Akhmetov, B., Alimseitova, Z. (2019). Development of sectoral intellectualized expert systems and decision making support systems in cybersecurity, Advances in Intelligent Systems and Computing, 860, pp. 162-171. DOI: https://doi.org/10.1007/978-3-030-00184-1_15
Lakhno, V., Zaitsev, S., Tkach, Y., Petrenko, T. (2019). Adaptive expert systems development for cyber attacks recognition in information educational systems on the basis of signs’ clustering, Advances in Intelligent Systems and Computing, 754, pp. 673-682. DOI: https://doi.org/10.1007/978-3-319-91008-6_66
Li, K., Wen, H., Li, H., Zhu, H., & Sun, L. (2018, October). Security OSIF: Toward Automatic Discovery and Analysis of Event Based Cyber Threat Intelligence. In 2018 IEEE SmartWorld, Ubiquitous Intelligence & Computing, Advanced & Trusted Computing, Scalable Computing & Communications, Cloud & Big Data Computing, Internet of People and Smart City Innovation (SmartWorld/SCALCOM/UIC/ATC/CBDCom/IOP/SCI) (pp. 741-747). IEEE. DOI: https://doi.org/10.1109/SmartWorld.2018.00142
Moulin, M., Eyisi, E., Shila, D. M., & Zhang, Q. (2018, October). Automatic Construction of Attack Graphs in Cyber Physical Systems Using Temporal Logic. In MILCOM 2018-2018 IEEE Military Communications Conference (MILCOM) (pp. 933-938). IEEE. DOI: https://doi.org/10.1109/MILCOM.2018.8599799
Kashyap, A. K., & Wetherilt, A. (2019, May). Some principles for regulating cyber risk. In AEA Papers and Proceedings (Vol. 109, pp. 482-87). DOI: https://doi.org/10.1257/pandp.20191058
Mishina, Y., Takaragi, K., & Umezawa, K. (2018, October). A Method of Threat Analysis for Cyber-Physical System using Vulnerability Databases. In 2018 IEEE International Symposium on Technologies for Homeland Security (HST) (pp. 1-7). IEEE. DOI: https://doi.org/10.1109/THS.2018.8574154
Chang, Chin-Liang. "Fuzzy topological spaces." Journal of mathematical Analysis and Applications 24.1 (1968): 182-190.
Azad, K. K. "On fuzzy semicontinuity, fuzzy almost continuity and fuzzy weakly continuity." Journal of Mathematical Analysis and Applications 82.1 (1981): 14-32. DOI: https://doi.org/10.1016/0022-247X(81)90222-5
Lowen, R. "Fuzzy topological spaces and fuzzy compactness." Journal of Mathematical analysis and applications 56.3 (1976): 621-633. DOI: https://doi.org/10.1016/0022-247X(76)90029-9
Moldoveanu, Mihnea C., Joel AC Baum, and Tim J. Rowley. "Information regimes, information strategies and the evolution of interfirm network topologies." Multi-level issues in organizational behavior and strategy. Emerald Group Publishing Limited, 2003. 221-264. DOI: https://doi.org/10.1016/S1475-9144(03)02014-9
Wu, Ing-Long, and Han-Chang Lin. "A strategy-based process for implementing knowledge management: An integrative view and empirical study." Journal of the American Society for Information Science and Technology 60.4 (2009): 789-802. DOI: https://doi.org/10.1002/asi.20999
Pal, Ranjan, and Pan Hui. "Modeling internet security investments: Tackling topological information uncertainty." International Conference on Decision and Game Theory for Security. Springer, Berlin, Heidelberg, 2011. DOI: https://doi.org/10.1007/978-3-642-25280-8_18
Kasabov, Nikola K. Foundations of neural networks, fuzzy systems, and knowledge engineering. Marcel Alencar, 1996.
Raban, Y., & Hauptman, A. (2018). Foresight of cyber security threat drivers and affecting technologies. foresight, 20(4), 353-363. DOI: https://doi.org/10.1108/FS-02-2018-0020
Lakhno, V., Kasatkin, D., Kozlovskyi, V., Petrovska, S., Boiko, Y., Kravchuk, P., Lishchynovska, N. (2019). A model and algorithm for detecting spyware in medical information systems, International Journal of Mechanical Engineering and Technology, (1), pp. 287-295.
Mishina, Y., Takaragi, K., & Umezawa, K. (2018, October). A Method of Threat Analysis for Cyber-Physical System using Vulnerability Databases. In 2018 IEEE International Symposium on Technologies for Homeland Security (HST) (pp. 1-7). IEEE. DOI: https://doi.org/10.1109/THS.2018.8574154
Petrenko, S. (2018). Possible Scientific-Technical Solutions to the Problem of Giving Early Warning. In Big Data Technologies for Monitoring of Computer Security: A Case Study of the Russian Federation (pp. 175-218). Springer, Cham. DOI: https://doi.org/10.1007/978-3-319-79036-7_4
Evangelopoulou, M., & Johnson, C. W. (2015, June). Empirical framework for situation awareness measurement techniques in network defense. In 2015 International Conference on Cyber Situational Awareness, Data Analytics and Assessment (CyberSA) (pp. 1-4). IEEE.
Herley, C., & Van Oorschot, P. C. (2017, May). Sok: Science, security and the elusive goal of security as a scientific pursuit. In 2017 IEEE Symposium on Security and Privacy (SP) (pp. 99-120). IEEE. DOI: https://doi.org/10.1109/SP.2017.38
Akhmetov, B., Lakhno, V. (2018). System of decision support in weaklyformalized problems of transport cybersecurity ensuring, Journal of Theoretical and Applied Information Technology, 96 (8), pp. 2184-2196.
Akhmetov, B., Lakhno, V., Boiko, Y., Mishchenko, A. (2017). Designing a decision support system for the weakly formalized problems in the provision of cybersecurity, Eastern-European Journal of Enterprise Technologies, 1 (2-85), pp. 4-15.
