MODELS AND TECHNOLOGIES OF INTELLIGENT PROTECTION OF INFORMATION SYSTEMS OF CRITICAL INFRASTRUCTURE FOR ENHANCING RESILIENCE

Abstract

The article substantiates the feasibility of using modern information technologies to ensure the sustainable functioning of critical infrastructure (CI) facilities, with a focus on protecting their information systems, which are a key factor in national security and the resilience of the state against hybrid threats. It is demonstrated that enhancing the protection and recoverability of CI systems is possible through the establishment of an extensive network of crisis centers integrated with platforms for monitoring, detection, and real-time response to cyber incidents. Particular attention is paid to scenario modeling, which enables forecasting possible developments of cyberattacks, designing security management models, and supporting the decision-making process. This approach makes it possible to identify likely channels of impact on systems in advance, assess the consequences of their disruption, and generate optimal strategies for threat neutralization. An architecture of a multi-level system for managing the protection and recovery of CI information systems is proposed, taking into account both physical and cyber risks. It is based on the integration of intelligent technologies capable of providing adaptive responses to environmental changes and automated support for backup and recovery procedures. The feasibility of applying artificial intelligence in crisis centers is substantiated, particularly through agent-based systems that enhance the efficiency of analyzing large datasets, detecting anomalies in traffic, assessing risks, and generating managerial recommendations. The use of intelligent agents ensures speed and accuracy in the localization of cyber threats, significantly increasing the resilience of critical infrastructure information systems and forming the foundation for proactive cybersecurity mechanisms.