Development of a method for constructing linguistic standards for multi-criteria assessment of honeypot efficiency

Abstract

One of the pressing areas that is developing in the field of information security is associated with the use of Honeypots (virtual decoys, online traps), and the selection of criteria for determining the most effective Honeypots and their further classification is an urgent task. The main products that implement virtual decoy technologies are presented. They are often used to study the behavior, approaches and methods that an unauthorized party uses to gain unauthorized access to information system resources. Online hooks can simulate any resource, but more often they look like real production servers and workstations. A number of fairly effective developments are known that are used to solve the problems of detecting attacks on information system resources, which are based on the apparatus of fuzzy sets. They showed the effectiveness of the appropriate mathematical apparatus, the use of which, for example, to formalize the approach to the formation of a set of reference values that will improve the process of determining the most effective Honeypots. For this purpose, many characteristics have been formed (installation and configuration process, usage and support process, data collection, logging level, simulation level, interaction level) that determine the properties of online traps. These characteristics became the basis for developing a method for the formation of standards of linguistic variables for further selection of the most effective Honeypots. The method is based on the formation of a Honeypots set, subsets of characteristics and identifier values of linguistic estimates of the Honeypot characteristics, a base and derived frequency matrix, as well as on the construction of fuzzy terms and reference fuzzy numbers with their visualization. This will allow classifying and selecting the most effective virtual baits in the future.

Development of a method for checking vulnerabilities of a corporate network using Bernstein transformations

“…The article [8] justifies and proves that the scientific task of providing the necessary level of protection of computer systems and networks from potentially dangerous cyber attacks requires the development of a new and effective method for constructing their templates. It is shown that the methodology for constructing patterns of potentially dangerous cyberattacks is rather complicated.…”

“…From the Table 6 it is shown that the values of b k,11 (t n ), for k = 0 11 ... . Similarly, using (1) and the data in Table 5, let's obtain the initial analytical dependencies for the number of untested vulnerabilities q f = q f (t n ), ( 6) and the number of vulnerability testing cases that led to critical errors q c = q c (t n ), (7): 11 1 11t(1-t) 10 2 55t 2 (1-t) 9 3 165t 3 (1-t) 8 4 330t 4 (1-t) 7 5 462t 5 (1-t) 6 6 462t 6 (1-t) 5 7 330t 7 (1-t) 4 8 165t 8 (1-t) 3 9 55t 9 (1-t) 2 10 11t 10 (1-t)…”

Development of the sociocyberphysical systems` multi-contour security methodology

“…The use of various noise-resistant codes makes it possible to ensure the required characteristics of both standard channels of information and communication systems and networks, and smart technology channels (wireless channels), as well as the transmission of various contexts (files, video, sound, etc.) [34][35][36][37][38][39]. In addition, the research carried out [1][2][3][27][28][29][30][31][32][33][34][35][36][37][38][39] makes it possible to use various algebrogeometric codes, LDPC codes with defective codes, which makes it possible to build hybrid crypto-code constructions and provide the required efficiency and strength of confidential cryptography.…”

“…[34][35][36][37][38][39]. In addition, the research carried out [1][2][3][27][28][29][30][31][32][33][34][35][36][37][38][39] makes it possible to use various algebrogeometric codes, LDPC codes with defective codes, which makes it possible to build hybrid crypto-code constructions and provide the required efficiency and strength of confidential cryptography. The initial data for constructing such structures is the required parameters of durability and efficiency of transmitted information.…”