Multiple of solutions for the choosing measures task to cybersecurity of critical infrastructure

DOI: 10.21293/1818-0442-2023-26-1-82-90

Download article in PDF format

JATS xml

Abstract: Cybersecurity of critical information infrastructure is achieved by developing an information security system. It includes organizational and technical measures. The complexity in its development is not only the choice of information security measures (it depends on many criteria), but also the compilation of a set of all options suitable for solving this problem, especially if the object of critical information infrastructure is a state (municipal) information system or a personal data information system. In this paper, a comparative analysis of all possible protection measures is carried out to obtain a consolidated set of options.

Keywords: decision support, critical infrastructure, information security measures, personal data information systems, government information systems

For citation:
Milko D. S., Daneev A. V. Multiple of solutions for the choosing measures task to cybersecurity of critical infrastructure. Doklady Tomskogo gosudarstvennogo universiteta sistem upravleniya i radioelektroniki, 2023, vol. 26, no. 1, pp. 82–90. DOI: 10.21293/1818-0442-2023-26-1-82-90

Authors and copyright holders:

  • Milko D. S. , Irkutsk State Transport University (Irkutsk, Russia)
  • Daneev A. V. , Irkutsk State Transport University (Irkutsk, Russia)

  • 1. Gaskova D.A., Massel A.G. [The technology of cyber threat analysis and risk assessment of cybersecurity violation of critical infrastructure] Cybersecurity Issues, 2019, no. 2(30), pp. 42–48 (in Russ.).
  • 2. Goldobina A.S., Isaeva Yu.A., Selifanov V.V., Klimova A.M., Zenkin P.S. [Building an adaptive three-tier model of management processes for the information security system of critical information infrastructure objects] Proceedings of TUSUR University, 2018. Vol. 21, no. 4, pp. 51–58 (in Russ.).
  • 3. [Regulatory documents in the field of public procurement and critical infrastructure security] (In Russ.). Available at: https://www.ptsecurity.com/ru-ru/research/knowledgebase/terminology-gossopka-kii-full-version/, free (Accessed: December 4, 2022).
  • 4. [Protection of critical information infrastructure (lecture summary)]. Available at: https://www.securityvision.ru/blog/zashchita-kriticheskoy-informatsionnoy-infrastruktury-konspekt-lektsii/, free (Accessed: December 4, 2022) (in Russ.).
  • 5. Katzan H. Contemporary issues in cybersecurity. Journal of Cybersecurity Research (JCR), 2016. Vol. 1, no. 1, pp. 1–6. DOI: 10.19030/jcr.v1i1.9745.
  • 6. Dadashzadeh M. Choosing IT platforms in the Age of Stuxnet. Journal of Cybersecurity Research (JCR), 2017, vol. 2, no. 1, pp. 17–26. DOI 10.19030/jcr.v2i1.10076.
  • 7. Ani U.D., Daniel N., Oladipo F., Adewumi S.E. Securing industrial control system environments: The missing piece. Journal of Cyber Security Technology, 2018. vol. 2, no. 3–4, pp. 131–163. DOI: 10.1080/23742917.2018.1554985.
  • 8. Ani U.P.D., He H., Tiwari A. Review of cybersecurity issues in industrial critical infrastructure: Manufacturing in perspective. Journal of Cyber Security Technology, 2017, vol. 1, no. 1, pp. 32–74. DOI: 10.1080/23742917.2016.1252211.
  • 9. Order of the FSTEC of Russia dated December 25, 2017, no. 239. Available at: https://fstec.ru/normotvorcheskaya/akty/53-prikazy/1592-prikaz-fstek-rossii-ot-25-dekabrya-2017-g-n-239, free (Accessed: December 4, 2022).
  • 10. Information Security Doctrine of the Russian Federation Available at: http://publication.pravo.gov.ru/Document/View/0001201612060002, free (Accessed: December 4, 2022).
  • 11. Tsaregorodcev A.V., Tsatskina E.P. [The impact of the information society on the training of information security students]. Bulletin of the Moscow State Linguistic University. Education and Pedagogical Sciences, 2019, no. 4 (833), pp. 191–199 (in Russ.).
  • 12. Azarov A.N., Gudkov Yu.I. [Some problems of engineering training in the field of information technology and ways to solve them]. Bulletin of ISTU (Irkutsk), 2015, no. 3 (98), pp. 233–237 (in Russ.).
  • 13. Malyuk A.A. [Information security staffing]. Public Service (Moscow), 2011, no. 5, pp. 75–79 (in Russ.).
  • 14. Podinovsky V.V. [Ideas and methods of the theory of the importance of criteria in multi-criteria decision-making tasks]. Moscow, Science, 2019. 103 p. (in Russ.).
  • 15. Methodical document Information security measures in State information systems Approved by the FSTEC of Russia on February 11, 2014. Available at: https://fstec.ru/tekhnicheskaya-zashchita-informatsii/dokumenty/114-spetsialnye-normativnye-dokumenty/805-metodicheskij-dokument, free (Accessed: December 4, 2022). (in Russ.).
  • 16. [GOST R 51275-206. Information security. The object of informatization. Factors affecting information. General terms]. Available at: https://www.altell.ru/legislation/standards/51275-2006.pdf, free (Accessed: December 4, 2022) (in Russ.).
  • 17. Order of the FSTEC of Russia dated April 29, 2021 No. 77. Available at: https://fstec.ru/normotvorcheskaya/akty/53-prikazy/2270-prikaz-fstek-rossii-ot-29-aprelya-2021-g-n-77, free (Accessed: December 4, 2022).
  • 18. Federal Law of 26.07.2017 No. 187. Available at: http://publication.pravo.gov.ru/Document/View/0001201707260023, free (Accessed: December 4, 2022) (in Russ.).
  • 19. Order of the FSTEC of Russia dated March 14, 2014 No. 31. Available at: https://fstec.ru/normotvorcheskaya/akty/53-prikazy/868-prikaz-fstek-rossii-ot-14-marta-2014-g-n-31, free (Accessed: December 4, 2022).
  • 20. Order of the FSTEC of Russia dated February 11, 2013 No. 17. Available at: https://fstec.ru/normotvorcheskaya/akty/53-prikazy/702-prikaz-fstek-rossii-ot-11-fevralya-2013-g-n-17, free (Accessed: December 4, 2022).
  • 21. Order of the FSTEC of Russia dated February 18, 2013 No. 21. Available at: https://fstec.ru/normotvorcheskaya/akty/53-prikazy/691-prikaz-fstek-rossii-ot-18-fevralya-2013-g-n-21, free (Accessed: December 4, 2022).
Editorial office address

Executive Secretary of the Editor’s Office

 Editor’s Office: 40 Lenina Prospect, Tomsk, 634050, Russia

  Phone / Fax: + 7 (3822) 701-582

  journal@tusur.ru

 

Executive Secretary of the Editor’s Office

 Editor’s Office: 40 Lenina Prospect, Tomsk, 634050, Russia

  Phone / Fax: + 7 (3822) 51-21-21 / 51-43-02

Subscription for updates