Romanets I. Intelligent computer system for detecting malicious IP-telephony messages in a corporate network

Українська версія

Thesis for the degree of Candidate of Sciences (CSc)

State registration number

0425U000239

Thesis Registration Form

0425U000239.pdf

Applicant for

Ihor Y. Romanets

Specialization

05.13.05 - Комп'ютерні системи та компоненти

Date of defense

28-08-2025

Specialized Academic Board

Д 58.082.02

Western Ukrainian National University

Essay

Thesis for a Ph.D. degree by specialty 05.13.05 – Computer Systems and Components – West Ukrainian National University, Ternopil, 2025. The dissertation is devoted to the pressing scientific and technical challenge of enhancing the security level of corporate networks by developing and researching an intellectualized computer system designed to detect malicious messages in IP telephony. The work analyzes modern threats and vulnerabilities in IP telephony systems within corporate environments, such as spam over internet telephony (SPIT), call payment fraud, and denial-of-service (DoS) attacks. The insufficient effectiveness of existing protection methods and tools against new and adaptive attacks has been identified, necessitating the application of intelligent approaches. An architecture for an intellectualized computer system is proposed, utilizing machine learning methods to analyze traffic (e.g., SIP messages) and metadata of media streams (RTP/RTCP) in VoIP. Models and algorithms have been developed to extract informative features of malicious messages, classify traffic, and detect anomalies in real time. Special attention is given to the system's ability to self-learn and adapt to new, previously unknown types of threats. The effectiveness of various machine learning algorithms for solving the tasks of classification and anomaly detection in VoIP has been investigated. Experimental testing of the developed system on real and simulated datasets confirmed its ability to detect malicious messages with high accuracy and a low false-positive rate. The scientific novelty of the work lies in the development of a comprehensive approach to detecting malicious messages in VoIP based on intelligent analysis of multi-dimensional data, considering the specifics of corporate networks, as well as in the improvement of adaptive threat detection methods using ontological approaches and fuzzy logic. The practical significance of the obtained results is reflected in the developed software prototype of the system, recommendations for its implementation, and configuration in corporate networks to enhance IP-telephony security, prevent financial losses, and protect confidential information. Keywords: IP-telephony, VoIP, malicious messages, vishing, corporate network, intellectualized system, machine learning, anomaly detection, cybersecurity, information protection.

Thesis supervisor

Anatoliy O. Sachenko

Official opponents

Yuriy P. Klyots
Vladimir N. Opanasenko

Research papers

A. Melnyk, R. Shevchuk, I. Romanets, I. Yakymenko, S. Voznyak, and V. Luchyk, "A Method of Detecting Anomalies in IP Phone Traffic based on Ontology of Voip Messages," 2024 14th International Conference on Advanced Computer Information Technologies (ACIT), Ceske Budejovice, Czech Republic, 2024, pp. 485-489, DOI: 10.1109/ACIT62333.2024.10712505

Balyk, A., Karpinski, M., Naglik, A., Shangytbayeva, G., & Romanets, I. (2017). Using Graphic Network Simulator 3 For DDoS Attacks Simulation. International Journal of Computing, 16(4), 219-225 DOI: 10.47839/ijc.16.4.910

Todd J.B. Blayone, Olena Mykhailenko, Svetlana Usca, Ihor Romanets, Exploring technology attitudes and personal–cultural orientations as student readiness factors for digitalised work. Higher Education, Skills and Work-based Learning 17 June 2021; 11 (3): 649–671. DOI:10.1108/HESWBL-03-2020-0041

Романець І. Захист від термінації трафіку в ІР-мережі на основі нечіткої логіки: Науковий журнал “Вимірювальна та обчислювальна техніка в технологічних процесах”(1), Хмельницький національний університет, Хмельницький, 2024 с. 186-193, DOI: 10.31891/2219-9365-2024-77-23

І. Романець, «Онтологічний підхід в системі забезпечення безпеки використання IP-телефонії», Опт-ел. інф-енерг. техн., вип. 47, вип. 1, с. 240–252, Чер. 2024. DOI: 10.31649/1681-7893-2024-47-1-240-252

І. Романець, “Архітектура інтелектуалізованої системи забезпечення безпеки використання ІР-телефонії в корпоративній мережі”, Вісник Хмельницького національного університету. Серія: Технічні науки, vol. 337, no. 3(2), pp. 425–436, May 2024, DOI: 10.31891/2307-5732-2024-337-3-65

Markowsky, G., Sachenko, A., Voznyak, S., Spilchuk, V., Romanyak, R., Turchenko, V. and Romanets, I. 2014. The Ternopil Educational Communication Center: A Nato Project To Integrate Regional Information Technology Resources. International Journal of Computing. 7, 1 (Aug. 2014), 185-190. DOI:10.47839/ijc.7.1.503

I. Romanets, A. Sachenko and L. Dubchak, "Method of Protection Against Traffic Termination in VoIP," 2018 10th International Conference on Electronics, Computers and Artificial Intelligence (ECAI), Iasi, Romania, 2018, pp. 1-5, DOI: 10.1109/ECAI.2018.8678992

Komar, M., Kochan, V., Dubchak, L., Sachenko, A., Golovko, V., Bezobrazov, S., Romanets, I. “High performance adaptive system for cyber attacks detection”, 2017 IEEE 9th International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications, IDAACS 2017, Bucharest, Romania, 2, art. no. 8095208, pp. 853-858. DOI: 10.1109/IDAACS.2017.8095208

M. Dyvak, A. Pukas, A. Melnyk, I. Voytyuk, S. Valchyshyn, and I. Romanets, "Software Architecture for Modeling the Interval Static and Dynamic Objects," 2021 11th International Conference on Advanced Computer Information Technologies (ACIT), Deggendorf, Germany, 2021, pp. 572-575, DOI: 10.1109/ ACIT52158.2021.9548577

M. Dyvak, A. Melnyk, L. Dostalek, V. Ostroverkhov, L. Honchar, and I. Romanets, "Repository of Interval Models of Dynamics of Concentrations of Harmful Emissions of Motor Transport," 2022 12th International Conference on Advanced Computer Information Technologies (ACIT), Ruzomberok, Slovakia, 2022, pp. 89-94, DOI: 10.1109/ACIT54803.2022.9913123

O. Kochan, O. Osolinskyi, A. Sachenko, V. Kochan, and I. Romanets, "Simulator of Microcontroller's Power Consumption," 2023 IEEE 12th International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications (IDAACS), Dortmund, Germany, 2023, pp. 787-792, DOI: 10.1109/IDAACS58523.2023.10348884

V. Tymchyshyn, B. Tymchyshyn, A. Melnyk, V. Manzhula, V. Faifura, and I. Romanets, "The System Architecture of the Software for Modeling Harmful Emissions in Soil," 2023 13th International Conference on Advanced Computer Information Technologies (ACIT), Wrocław, Poland, 2023, pp. 58-62, DOI: 10.1109/ACIT58437.2023.10275416

A. Sartiukova, O. Markiv, V. Vysotska, I. Shakleina, N. Sokulska, and I. Romanets, "Remote Voice Control of Computer Based on Convolutional Neural Network," 2023 IEEE 12th International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications (IDAACS), Dortmund, Germany, 2023, pp. 1058–1064, DOI: 10.1109/IDAACS58523. 2023.10348808

Files

Romanets_dysertaciia.pdf

autoreferat-Romanets_avtoref.pdf

Similar theses

0525U000413

Kashtalian S. Antonina

Elements of the theory and practice of creating multicomputer systems of combined anti-virus baits and traps in corporate networks

0525U000092

Yaroslav O. Osadchuk

Self-oscillating transducers of physical quantities and devices based on them for general and special purpose computer systems and networks

0425U000034

Ivan M. Zholubak

The methods and tools for creating reconfigurable units for cryptographic data protection in cyber-physical systems

0424U000140

Bogdan Dolintse

Methods and ways to improve the accuracy of information processing in the onboard subsystems of UAV.

0524U000165

Vadym V. Shkarupylo

Methods and means for safety-critical systems’ software and algorithmic constituent design process artifacts control