MODEL OF ADAPTIVE ACCESS RIGHTS MANAGEMENT USING PETRI NETS
DOI:
https://doi.org/10.28925/2663-4023.2022.15.135147Keywords:
university information and educational environment, cybersecurity, access rights management, security policy, mathematical model, Petri nets, rule adjustment.Abstract
The article describes the conceptual model of adaptive management of cybersecurity of the information and educational environment of a modern university (IOSU). Petri nets are used as a mathematical apparatus to solve the problem of adaptive management of access rights of IOS users. A simulation model is proposed and modeling in PIPE v4.3.0 package is performed. The possibility of automating the procedures of user profile adjustment to minimize or neutralize cyber threats in IOS is shown. The model of distribution of tasks of the user in computer networks of IOSU is offered. The model, in contrast to the existing ones, is based on the mathematical apparatus of Petri nets and contains variables that reduce the power of the state space. The method of access control (ICPD) has been supplemented. The additions addressed aspects of the verification of access rights, which are required by the tasks and requirements of the security policy, the degree of coherence of tasks and allowed access to the IOSU nodes. Adjusting security rules and metrics for new tasks or reallocating tasks is described in Petri net notation.
Downloads
References
Buinytska, O. P., Hrytseliak, B. I. (2013). Student v informatsiino-osvitnomu seredovyshchi suchasnoho universytetu. Informatsiini tekhnolohii i zasoby navchannia, 36(4), 66-83.
Vorozhbyt, A. V. (2018). Veb-oriientovane informatsiino-osvitnie seredovyshche zakladu osvity. Informatsiini tekhnolohii v osviti, (3), 20-29.
Kydyralina, L. M., Akhmetov, B. S., Lakhno, V. A. Modeliuvannia protsedury pryiniattia rishen shchodo finansuvannia zasobiv kiberbezpeky informatsiino-osvitnoho seredovyshcha universytetu. Zakhyst informatsii, 20(2), 120-127.
Liu, X., Zhang, J., Zhu, P. (2017). Modeling cyber-physical attacks based on probabilistic colored Petri nets and mixed-strategy game theory. International Journal of Critical Infrastructure Protection, (16), 13–25.
Suprunenko, O. O. (2010). Modyfikatsiia pidsystem zakhystu informatsii na osnovi merezh Petri. Visnyk Natsionalnoho tekhnichnoho universytetu «KhPI». Seriia: Novi rishennia u suchasnykh tekhnolohiiakh, (57), 173-177.
Akhmetov, B., Lakhno, V., Boiko, Y., Mishchenko, A. (2017). Designing a decision support system for the weakly formalized problems in the provision of cybersecurity. Eastern-European Journal of Eenterprise Technologies, 1(2), 4–15.
Dudykevych, V. B., Harasym, Yu. R., Nechypor, V. V. (2011). Metody modeliuvannia system zakhystu informatsii dlia korporatyvnykh merezh zviazku. Suchasnyi zakhyst informatsii, (4), 54-60.
Alheeti, K. M. A., Gruebler, A., McDonald-Maier, K. D., & Fernando, A. (2016, January). Prediction of DoS attacks in external communication for self-driving vehicles using a fuzzy petri net model. In Consumer Electronics (ICCE), 2016 IEEE International Conference on (pp. 502–503). IEEE.
de Carvalho, M. A., Bandiera-Paiva, P. (2017, October). Evaluating ISO 14441 privacy requirements on role based access control (RBAC) restrict mode via Colored Petri Nets (CPN) modeling. In Security Technology (ICCST), 2017 International Carnahan Conference on (pp. 1–8). IEEE.
Appel, M., Konigorski, U., Walther, M. (2018). A Graph Metric for Model Predictive Control of Petri Nets. IFAC-PapersOnLine, 51(2), 254–259.
Gao, Z., Zhao, C., Shang, C., Tan, C. (2017, October). The optimal control of mine drainage systems based on hybrid Petri nets. In Chinese Automation Congress (CAC), 2017 (pp. 78–83). IEEE.
Narayanan, M., Cherukuri, A. K. (2018). Verification of Cloud Based Information Integration Architecture using Colored Petri Nets. International Journal of Computer Network and Information Security, 10(2), 1.
Lakhno, V., Tkach, Y., Petrenko, T., Zaitsev, S., Bazylevych, V. (2016). Development of adaptive expert system of information security using a procedure of clustering the attributes of anomalies and cyber attacks. Eastern-European Journal of Enterprise Technologies, 6(9 (84)), 32–44. https://doi.org/10.15587/1729-4061.2016.85600.
Beketova, G., Akhmetov, B., Korchenko, A., Lakhno, V., Tereshuk, A. (2017). Cyber intelligence systems based on adaptive regression splines and logical procedures of attack recognition. Computer modelling and new technologies, 21(2), 7–16.
Lakhno, V., Petrov, A., & Petrov, A. (2017). Development of a Support System for Managing the Cyber Security of Information and Communication Environment of Transport. У Information Systems Architecture and Technology: Proceedings of 38th International Conference on Information Systems Architecture and Technology – ISAT 2017 (с. 113–127). Springer International Publishing. https://doi.org/10.1007/978-3-319-67229-8_11
