COALITION-BASED APPROACH TO CYBERSECURITY MANAGEMENT OF INFORMATION SYSTEMS EMPLOYING CLOUD TECHNOLOGIES

Abstract

Ensuring cybersecurity in the context of cloud technologies requires effective cooperation between organizations that jointly operate information systems within a shared infrastructure. This is especially relevant for structures with hierarchical management systems and departmental information protection requirements. In such settings, a coalition-based approach to cybersecurity management plays a key role by aligning the actions of various participants to achieve a common goal—protecting information assets in cloud environments. Research shows that coordinated efforts enhance the effectiveness of protection, reduce data leakage risks, and contribute to system dependability. This approach is particularly critical for networks of situational centers operating in the national security domain. This study explores the use of the Role-Based Access Control (RBAC) model, the method of one-time logins, and proposes an organizational and technical model for access management in coalition-based cybersecurity systems built on cloud technologies. This work applies methods of systems analysis, architectural modeling of information systems, formalization of access roles based on the RBAC (Role-Based Access Control) reference model, and coalition management methods for coordinating cybersecurity policies across organizations. Additionally, an authentication approach using one-time login credentials is implemented to enhance access control security in cloud environments. The study addresses the challenges of building a secure information and communication system based on cloud technologies utilizing data center services. A specific feature of such systems is the involvement of multiple organizations with individual information protection regulations, necessitating a coalition-based approach to cybersecurity management. Based on a detailed analysis, the essence of this approach is defined as the coordinated interaction of stakeholders aimed at enhancing data protection effectiveness and service quality. The paper proposes a model for organizational and technical assurance of dependability and cybersecurity, an ontological access management model based on the RBAC methodology, and a method of using one-time login credentials for authentication. The proposed solutions aim to strengthen the cyber resilience of systems utilizing cloud services. Further research will focus on software implementation of the suggested approaches. This study presents a model for organizational and technical assurance of dependability and cybersecurity based on a coalition-based protection strategy; an ontological model for securing business processes according to the RBAC methodology; and a method for applying one-time login credentials in access control systems. These models and methods are aimed at enhancing the security level of information and communication systems that utilize cloud services. Future research will concentrate on the software modeling aspects of the proposed solutions.