Brzhevska Z. Method for assessing the reliability of the information in terms of information confrontation

Українська версія

Thesis for the degree of Doctor of Philosophy (PhD)

State registration number

0821U100698

Applicant for

Specialization

  • 125 - Кібербезпека

22-04-2021

Specialized Academic Board

ДФ 26.861.008

State University of Telecommunications

Essay

One of the problems that hinder the implementation of effective systems of protection of information resources is the problem of creating a reliable classification of attacks and mechanisms of filtering information that passes from the source to the consumer. In view of this, improving the effectiveness of detecting attacks on information resources remains an urgent task. Therefore, information security experts do not stop trying to build different classification schemes, which to some extent contribute to the understanding of the processes leading to the penetration of systems, and help to develop protection measures and implement protection systems. During its promotion, information circulates in the information space and is influenced by various groups of influence that pursue their own interests. Thus, very often the end-user receives biased, biased information, the purpose of which is to exert a certain influence on his behavior. The situation is complicated by the limited data sources, their subjectivity, and bias, which are the essence of information conflict when the opposing parties try to put any intelligence pressure on the data sources and the whole process of its dissemination. To ensure the proper functioning, making adequate decisions, the task of the end-user is to obtain objective and timely information, for which the issues of assessing its reliability come to the fore. However, despite the significant number of publications on various aspects of assessing the reliability of the information, the problem of this assessment remains unresolved given the possible impact of information on resources and channels of information transmission. The main contradiction underlying scientific research is, on the one hand, that information that is extracted, transmitted, and stored cannot always be presented in the form of data or information on machine media in a standardized or formalized form, and therefore requires special approaches to its protection against distortion. On the other hand, the influence of information confrontation, which is also informational, also cannot be represented by the methods of formal theories and calculations, which makes it impossible to assess it when assessing the reliability of the information. Thus, the urgent scientific task of developing a methodology for assessing the reliability of the information in the context of information conflict to protect the information resources of the organization and ensure the information security of users is to be solved. The purpose of the thesis is to increase the reliability of information transmitted from the original source to the user in terms of information confrontation. The scientific novelty of the obtained provisions and results is: Improved mathematical model of information impact, which allows modeling the impact on the information in the process of its passage through various means of transmission and reproducing the processes of information confrontation in the passage of messages from the source to the end-user; For the first time, a model of the information reliability management process in the conditions of information confrontation is developed, which makes it possible to implement a multi-step verification of messages with a gradual increase in reliability, depending on the nature of the messages and the degree of influence on their content; Improved methodology for assessing the reliability of the information in the context of information confrontation, which allows determining the quantitative and qualitative indicators of the reliability of the information in the flow under the influence, which can be described as clear and indistinct changes; For the first time, a method of assessing the risks of breach of information is described, which allows determining the most appropriate measures to ensure the reliability of the information provided by such resources to end-users. The new scientific results obtained in the work, together, form the basis for the creation of a system of information protection at the enterprise or organization in the conditions of information conflict. The results of mathematical modeling and conducting a practical experiment to create a system for ensuring the reliability of information in a typical organization made it possible to assess the effectiveness of the implementation of scientific results to increase the reliability of resources by: increasing the adequacy of data models by 9‒11%; improving the quality of information exchange by 6‒8%; improving the quality of control procedures for information resources by 15-17%; staff training by 17-19%. The paper proposes recommendations for improving security policies for organizations of various forms of ownership, which operate in conditions of information confrontation by competitors and enemies.

Files

Similar theses