kaz44Вестник Университета Шакарима. Серия технические наукиBulletin of Shakarim University. Technical Sciences2788-79953006-0524«Шәкәрім университеті» КеАҚkaz44-106Research ArticleТЕХНИЧЕСКИЕ НАУКИМОДЕЛЬ АДАПТИВНОГО УПРАВЛЕНИЯ ПРАВАМИ ДОСТУПА В СЕТИADAPTIVE NETWORK ACCESS MANAGEMENT MODELАхметовБ. Т.AkhmetovB.

магистрант

КурушбаеваД. Т.KurushbaevaD.

ст. преподаватель

кафедра автоматики и информационных технологий

Семей

Алматинский университет энергетики и связи имени Г. ДаукееваКазахстанУниверситет имени Шакарима города СемейКазахстан20202512202004(92)4852Copyright © Ахметов Б.Т., Курушбаева Д.Т., 20202020Ахметов Б.Т., Курушбаева Д.Т.Akhmetov B., Kurushbaeva D.Данная работа распространяется под лицензией Creative Commons Attribution 4.0.This work is licensed under a Creative Commons Attribution 4.0 License.https://tech.vestnik.shakarim.kz/jour/article/view/106

   Описана концептуальная модель адаптивного управления киберзащитой информационно-вычислительной сети (ИВС). Рассмотрен пример решения задачи адаптивного управления правами доступа пользователей с использованием аппарата сетей Петри. Реализована соответствующая модель и выполнено имитационное моделирование в пакетах PIPE v4.3.0 и Petri.Net Simulator. 2.017. Как и любой объект информатизации ИВС требует решения задач по защите информации и кибербезопасности (КрБ). Общей первоначальной задачей при построении эффективных систем защиты и КрБ ИВС ОБИ, остается задача обследования конкретного  объекта  защиты, формирование  моделей потенциального нарушителя (компьютерного злоумышленника - КЗЛ) и киберугроз. По мнению большого числа специалистов, достаточно перспективным представляется возможность описания функциональных моделей различных систем защиты ИВС в терминах теории сети Петри. Реализация вышеуказанных шагов позволит в конечном итоге получить адекватные требования к системам защиты информации (СЗИ) ИВС ОБИ.

The conceptual model of adaptive control of a cyber-protected information-computer network (IVS) is described. An example of solving the problem of adaptive management of user access rights using the apparatus of Petri nets is considered. The corresponding model was implemented and simulation was performed in the PIPE v4.3.0 and Petri.Net Simulator packages. 2.017. Like any object of informatization, an ITT requires solving problems of protecting information and cybersecurity (CRL). The general initial task in constructing effective security systems and CIRTs of the OBI IVS remains the task of examining a specific object of protection, forming models of a potential intruder (computer attacker - KZL) and cyber threats. In the opinion of a large number of specialists, the possibility of describing functional models of various security systems of temporary detention facilities in terms of Petri net theory seems quite promising. The implementation of the above steps will ultimately provide adequate requirements for information security systems (SZI) IVS OBI.

кибербезопасностьзащита информациисеть Петрикиберугрозаcybersecurityinformation securityPetri netcyberthreatReferencesGupta, Brij, Dharma P. Agrawal, and Shingo Yamaguchi, eds. Handbook of research on modern cryptographic solutions for computer and cyber security. IGI Global, 2016.Gupta, Brij, Dharma P. Agrawal, and Shingo Yamaguchi, eds. Handbook of research on modern cryptographic solutions for computer and cyber security. IGI Global, 2016.Liu, X., Zhu, P., Zhang, Y., & Chen, K. (2015). A collaborative intrusion detection mechanism against false data injection attack in advanced metering infrastructure. IEEE Transactions on Smart Grid, 6 (5), pp. 2435-2443.Liu, X., Zhu, P., Zhang, Y., & Chen, K. (2015). A collaborative intrusion detection mechanism against false data injection attack in advanced metering infrastructure. IEEE Transactions on Smart Grid, 6 (5), pp. 2435-2443.Jasiul, B., Szpyrka, M., & Śliwa, J. (2014). Detection and modeling of cyber attacks with Petri nets. Entropy, 16 (12), pp. 6602-6623.Jasiul, B., Szpyrka, M., & Śliwa, J. (2014). Detection and modeling of cyber attacks with Petri nets. Entropy, 16 (12), pp. 6602-6623.Liu, X., Zhang, J., & Zhu, P. (2017). Modeling cyber-physical attacks based on probabilistic colored Petri nets and mixed-strategy game theory. International Journal of Critical Infrastructure Protection, 16, pp. 13-25.Liu, X., Zhang, J., & Zhu, P. (2017). Modeling cyber-physical attacks based on probabilistic colored Petri nets and mixed-strategy game theory. International Journal of Critical Infrastructure Protection, 16, pp. 13-25.Jasiul, B., Szpyrka, M., & Śliwa, J. (2015). Formal specification of malware models in the form of colored Petri nets. In Computer Science and its Applications (pp. 475-482). Springer, Berlin, Heidelberg.Jasiul, B., Szpyrka, M., & Śliwa, J. (2015). Formal specification of malware models in the form of colored Petri nets. In Computer Science and its Applications (pp. 475-482). Springer, Berlin, Heidelberg.Akhmetov, B., Lakhno, V., Boiko, Y., & Mishchenko, A. (2017). Designing a decision support system for the weakly formalized problems in the provision of cybersecurity. Eastern-European Journal of Eenterprise Technologies, (1 (2)), pp. 4-15.Akhmetov, B., Lakhno, V., Boiko, Y., & Mishchenko, A. (2017). Designing a decision support system for the weakly formalized problems in the provision of cybersecurity. Eastern-European Journal of Eenterprise Technologies, (1 (2)), pp. 4-15.Arendt, D. L., Burtner, R., Best, D. M., Bos, N. D., Gersh, J. R., Piatko, C. D., & Paul, C. L. (2015, October). Ocelot: user-centered design of a decision support visualization for network quarantine. In Visualization for Cyber Security (VizSec), 2015 IEEE Symposium on (pp. 1-8).Arendt, D. L., Burtner, R., Best, D. M., Bos, N. D., Gersh, J. R., Piatko, C. D., & Paul, C. L. (2015, October). Ocelot: user-centered design of a decision support visualization for network quarantine. In Visualization for Cyber Security (VizSec), 2015 IEEE Symposium on (pp. 1-8).Alheeti, K. M. A., Gruebler, A., McDonald-Maier, K. D., & Fernando, A. (2016, January). Prediction of DoS attacks in external communication for self-driving vehicles using a fuzzy petri net model. In Consumer Electronics (ICCE), 2016 IEEE International Conference on (pp. 502-503).Alheeti, K. M. A., Gruebler, A., McDonald-Maier, K. D., & Fernando, A. (2016, January). Prediction of DoS attacks in external communication for self-driving vehicles using a fuzzy petri net model. In Consumer Electronics (ICCE), 2016 IEEE International Conference on (pp. 502-503).de Carvalho, M. A., & Bandiera-Paiva, P. (2017, October). Evaluating ISO 14441 privacy requirements on role based access control (RBAC) restrict mode via Colored Petri Nets (CPN) modeling. In Security Technology (ICCST), 2017 International Carnahan Conference on (pp. 1-8).de Carvalho, M. A., & Bandiera-Paiva, P. (2017, October). Evaluating ISO 14441 privacy requirements on role based access control (RBAC) restrict mode via Colored Petri Nets (CPN) modeling. In Security Technology (ICCST), 2017 International Carnahan Conference on (pp. 1-8).Appel, M., Konigorski, U., & Walther, M. (2018). A Graph Metric for Model Predictive Control of Petri Nets. IFAC-PapersOnLine, 51 (2), pp. 254-259.Appel, M., Konigorski, U., & Walther, M. (2018). A Graph Metric for Model Predictive Control of Petri Nets. IFAC-PapersOnLine, 51 (2), pp. 254-259.Gao, Z., Zhao, C., Shang, C., & Tan, C. (2017, October). The optimal control of mine drainage systems based on hybrid Petri nets. In Chinese Automation Congress (CAC), 2017 (pp. 78-83).Gao, Z., Zhao, C., Shang, C., & Tan, C. (2017, October). The optimal control of mine drainage systems based on hybrid Petri nets. In Chinese Automation Congress (CAC), 2017 (pp. 78-83).

The authors declare that there are no conflicts of interest present.