Search

The development of information technologies, which has led to an increase in the amount of multimedia content in World traffic, makes the role of the steganographic component in modern information protection systems significant. At the same time, to ensure steganographic protection of information in real-time when operating with digital video, the steganographic method is expected to meet the main effectivity criteria, as well as provide a low level of computational complexity, which is possible when performing steganographic transformation in the spatial domain of the container. One such modern method is the steganographic method with code control of additional information embedding. The problem of increasing the robustness of the specified steganographic method in the conditions of compression attacks by compression algorithms of digital video, primarily, the widespread MPEG-4 algorithm, is of particular interest. The purpose of this paper is to increase the robustness against attacks by compression of the steganographic method with code control of additional information embedding when operating with digital video. In this paper, experimental research on the robustness of the steganographic method with code control of additional information embedding in the conditions of a co mpression attack against the emb edded message by digital video compression algorithm MPEG-4 when embedding information using different colour models is performed. It is shown that embedding additional information in the Y-component of the YCbCr colour model allows reducing the number of errors when extracting additional information by 17%. It is also proposed to embed additional information using the steganographic method with code control only in dynamic blocks, which made it possible to reduce the number of errors when extracting additional information by 8%. The obtained results can be applied in practical steganographic applications to increase the robustness of the applied steganographic component of information protection systems. [ABSTRACT FROM AUTHOR]

The problem of solving the task of discrete optimization is not completely solved. Lack of publications, scientific developments, algorithms and software products do not give the ability to transfer the mathematical apparatus of solving discrete optimization problems to the class P of computational complexity. All analytical and combinatorial algorithms for solving problems of linear and non-linear optimization are NP completeness. There are developments to improve the efficiency of robotic algorithms, they are filled with requests and actual ones. In this paper, it is proposed to use deterministic and probabilistic methods for forming a priority queue of decision vector components in order to assign positive values to them. After the formation of the variant of the solution, it is possible to vectorize as if the approached solution is taken away from the record value of the goal function, which in exact algorithms is like a solution, which results in a polyp. In this paper has a method for forming a priority line for concretizing the components of the solution vector. The basis of deterministic methods is the idea of a greedy algorithm. The location in the queue is determined by the value of the corresponding component of the cost vector. The appearance of the value of non-visibility in the system of restrictions increases the priority of the component. Behind such a way, another method of determination is modified. Probability assessment probability of priorities is based on the ideas of algorithms in an ant colony and simulated annealing. The scope of probability indicates the significance of the component - a contender for a positive value. A numerical example of a small variability of the task about a knapsack has been introduced, which demonstrates the imitation of a nearby solution. [ABSTRACT FROM AUTHOR]

The increase in the amount of multimedia content generated, stored and transmitted by modern information systems leads to an increase in the role of the steganographic component in information protection systems. At the same time, significant requirements are put to the applied steganographic methods regarding their effectiveness, which include sufficient bandwidth, ensuring the reliability of perception, and resistance to attacks against the embedded message. The performance of the steganographic methods is of great importance, especially if it is intended to be used in real-time on a resource-constrained platforms. One of the modern steganographic methods, which is characterized by providing the main effectiveness indicators with a small computational complexity due to the execution of steganographic transformation in the space domain of the container, is a steganographic method with code control of additional information embedding. However, despite the rather high indicators of resistance to noise attacks, which can occur in many practical applications, the issue of increasing the resistance of steganographic transformation to these types of attacks remains relevant. The purpose of the paper is to increase the resistance to noise attacks of the steganographic method with code control of additional information embedding. The paper researches attacks against an embedded message with two types of noise: additive white Gaussian noise and "Salt and Pepper" noise. In the paper, experimental research on the effects of the structure of the codeword used on the robustness of the steganographic method with code control against a noise attack by additive white Gaussian noise was performed, which made it possible to develop practical recommendations regarding the parameters of the steganographic method with code control under the conditions of this type of attack. The application of the BAN method (broadband signal, attenuator, narrowband signal) is proposed to increase the resistance of the steganographic method with code control against the "Salt and Pepper" noise attack, which allowed to reduce the number of errors when extracting additional information in conditions of this noise by 48%. The results obtained in this paper can be useful for the application of the steganographic method with code control in practice in the conditions of transmission of a steganographic message over channels characterized by the presence of noise attacks against the embedded message. [ABSTRACT FROM AUTHOR]

Steganography methods are considered to be one of the most common technologies for the protection of any digital data when transmitted over open communication channels at a given time. The solution of the problem of digital data protection using steganography methods is used not only by government services, but also by terrorist organizations. Therefore, the need for research, development and continuous improvement of steganoanalytical methods is becoming extremely important. The steganoanalytical algorithm based on the study of the singular decomposition of digital image matrix blocks is proposed in the paper. The main purpose of this paper is to increase the efficiency of digital image steganoanalysis, in the absence of a container, by developing a new steganoanalytical algorithm based on the study of the singular decomposition of digital image matrix blocks. As a result of a detailed study of the steganography algorithm using the singular decomposition of digital image matrix blocks, the statistical characteristics of the singular values of image matrix blocks are established. Based on the defined characteristics, the paper presents the main steps of the stegananoanalytical algorithm. As a criterion for assessing the effectiveness of the developed steganoanalytical algorithm, the probability of detecting additional information was used. Errors of the first and second type are considered. To compare the results of the developed steganoanalytical algorithm with existing algorithms in open access, the following applications are selected: XSteg; StegSpy. The software product "StegoAnalysis" has been implemented for the automated solution of the stegananalytical problem for digital image. [ABSTRACT FROM AUTHOR]

It is said that the best password manager is our brain. This statement makes sense, but sometimes our brain does not cope, we have to use external resources. The number of passwords per user is growing every year: new social networks, new bank accounts, new registrations in various services, accounts on various services (television, music, Internet service providers, etc.). According to the rules of information security, using the same password for different client services is not rational, because if attackers can, for example, choose a password for your email, they will try to apply it to your other applications such as Internet banking and more. Modern man understands that each service needs its own unique password. The password must be strong, contain a certain number of characters, where among the numbers and letters the reliability of the password is increased by special characters and case changes. It's hard to remember. But remembering one password is beyond the power of most of us. Choosing a convenient and reliable password manager is not an easy task. You really have to trust the service. In the end, it is he who will store your confidential information. In this paper, two dozen password managers were tested and eleven were selected, which are the best in terms of functionality, security and convenience. However, each of the well-known managers does not take into account the individual characteristics of users and needs additions according to their needs. Therefore, the creation of software for storing passwords in encrypted form is relevant. Encrypted passwords can be accessed through the one password you need to remember. Such relationship software was created in this paper, taking into account the needs of corporate and private use. [ABSTRACT FROM AUTHOR]

The development of information technologies, including artificial intelligence, is leading to their widespread use in many areas of our lives. With the rapid development of artificial intelligence, the number of cases of its application to generate digital images, audio, video, etc. is growing. Counterfeiting digital audio files is dangerous from the point of view of being used by criminals to exert information and psychological influence and manipulate society and individuals. There are modern methods for detecting audio fakes made by artificial intelligence. They are highly accurate, but not without drawbacks. The main drawback is the complex architecture and high resource intensity. The aim of this paper is to develop a neural network that would allow detecting audio fakes with satisfactory accuracy and whose training would not require significant computing resources. A method was chosen for modification, namely, the method of detecting audio fakes using a convolutional neural network. The method for detecting audio fakes was modified by building a model with a new architecture with fewer layers, which significantly reduced the time and computational resources required compared to analogues. The experimental results obtained using the modified method show satisfactory efficiency and accuracy of the system. Errors of the first kind amounted to 24%, errors of the second kind - 9%. The developed modification is implemented in a software application with a convenient and simple interface. [ABSTRACT FROM AUTHOR]

The task of path finding by an agent is one of the basic tasks and is of great practical importance. As a rule, this is an optimization task that is solved in the space of the state graph in order to minimize the length of the path. Such a task becomes more difficult and becomes even more popular if it is solved on the basis of one graph space by several agents. In this case, another practically important optimization parameter appears, which is expressed by the number of conflicts between agents. Such an abstract formulation of the task has numerous variants of formalization and a large number of approaches to its solution. In this paper, the main element of the approach is the application of the classic Dijkstra algorithm, which is executed sequentially by each agent. When finding the shortest route, each agent modifies the graph space in such a way as to reduce the probability of conflicts with subsequent agents. This approach is original and a number of computational experiments were performed to verify it using software developed for this purpose. The experiments that were conducted demonstrate the adequate behavior of the main algorithm. The work analyzes the limitations inherent in the proposed approach within the framework of the abstract formulation of the task. The directions of further development of the basic approach have been determined. [ABSTRACT FROM AUTHOR]

Despite the fact that the effectiveness of experiment planning methods, especially when solving applied problems, has been proven more than once, the ideas of a multifactorial experiment are very slowly being introduced into science and engineering practice. The reasons for this are: the complexity of organizing the experiment; the parameters of the systems under study are of a complex dynamic nature and are subject to significant influences of changes in environmental conditions; the apparent complexity of the planning and calculation matrix discourages researchers with insufficient mathematical background; many manuals on the application of a multifactorial experiment are written at a level inaccessible to engineers, given the training in the disciplines of mathematical and computer cycles in technical universities. The experiment occupies the main place among the methods of obtaining information about the internal relationships of phenomena in nature and technology. As the processes and phenomena under study become more complex, the costs of the equipment and the experiment increase. During the tests, a large amount of experimental data is collected that requires processing and analysis. At the same time, the duration of the analysis, comprehension of the test results and their accounting for adjusting the characteristics of new products is very significant. The systems approach involves considering all elements of an active experiment as a single system. From these positions, it is necessary to present the general properties of the experiment as an object of study and give recommendations on the choice of mathematical techniques and methods that the experimenter can use when choosing decisions during the preparation of the experiment, its conduct and processing of the results. It is very important to choose methods and tools for processing experimental data. Despite the fact that, since 2002, many works have been proving the effectiveness of using the Excel analysis package for processing experimental data, the scientific and educational literature still uses coding of variables, randomization of experiments, and the choice of critical values of the criteria for assessing the quality of mathematical models from tables. In addition, optimization methods are not used in the works for forecasting. In this paper, in order to accelerate the process of introducing effective computer processing methods into science and engineering practice, the implementation of the methodology for processing active experiment data using Excel is presented. [ABSTRACT FROM AUTHOR]

Video analysis is a very important tool in video surveillance systems with one or more cameras. Among the most promising features are tracking the movement of objects - tracking. The current state of development in the field of tracking is considered in the work. There are several types of trekking. Pixel Tracking is the tracking of the movement of a specific point (pixel) or group of points on the original video sequence. The result of this process is the trajectory of the pixel, corresponding to the movement of an object in the frame. Matchmoving is a complex process that allows you to create a three-dimensional scene with a digital camera based on the available video sequence, which exactly repeats the movement of a real camera. Motion Capture is a technology designed to determine the position and orientation of a real object in a virtual environment, determining the position and orientation of a real object in space is carried out using special sensors and markers. Each of these types of tracking can be used on its own or as part of more complex processes. The paper develops a modification of the camera motion detection algorithm, which works in the field of Pixel Tracking. The description of the main approaches to motion estimation is given, namely recursive raster algorithms, frequency domain algorithms, optical flow algorithms and block matching methods. The urgency of the work, its purpose and objectives are given. The paper describes a method of arranging blocks in a video sequence frame, which are used to calculate the movement of the camera. Similarity metrics are used to estimate the similarity of the blocks, namely the correlation coefficient. The paper describes the steps of the developed modification of the camera motion detection algorithm. The results of the modification of the camera motion detection algorithm are presented. The result of this work is an indicator of the visual quality of tracking in the form of a 2D image of the camera motion vector. [ABSTRACT FROM AUTHOR]

The paper considers the current state of developments in the field of security assessment. The problem of information technology security is becoming increasingly important in the implementation of computer systems as their role in the informatization of society. Ensuring the security of information technology is a complex problem that is solved in the areas of improving the legal regulation of information technology, improving methods and means of their development, development of certification systems, ensuring appropriate organizational and technical conditions of operation. The paper considers systemic problems of information systems security, lists the threats that can cause one or more harmful effects on systems. The paper provides a list of standards and regulations that can be used to assess the quality of the information system or individual indicators. The urgency of the work, its purpose and objectives are given. A key aspect of solving the problem of information technology security is to develop a system of requirements, criteria and indicators of the level of information technology security. The paper describes in detail the structure of the ISO 15408 standard, which was chosen as the basis of the developed methodology. The ISO 15408 standard consists of three parts. The paper uses the second part of the standard, which contains a universal systematized catalog of functional safety requirements and provides for the possibility of detailing and expanding them according to certain rules. The developed method of assessing the security of information systems is given. The paper describes the main indicators used to assess the security of information systems in the developed methodology. A software product has been developed that implements the described technique and the program interface is presented in the form of the main program windows. [ABSTRACT FROM AUTHOR]

The article considers the option of improving the automatic control systems for natural gas combustion as a fuel for boilers. The aim of the improvement is to optimize the gas-air ratio to maintain the set temperature in the heated rooms, depending on the ambient temperature. In most of the currently used hot water boilers, the gas / air ratio is maintained in accordance with the regime maps without taking into account the economic and environmental combustion of gas, without automatically taking into account the ambient temperature. The desire to reduce excess fuel consumption necessitates the creation of automatic control systems that would maintain the required temperature of the coolant at the boiler outlet at different ambient temperatures. The main principle of increasing efficiency is the maximum possible use of available (lower) heat of combustion QnP. The main components of losses of warmth at the same time are losses with q2 flue gases and losses from so incomplete combustion of q3 fuel. The amount of harmful emissions into the atmosphere depends of both of these indicators that are closely related to the coefficient of excess air α in the burning fuel flare. The paper analyzes several types of fuel-air ratio control systems, notes their advantages and disadvantages. It is con-cluded that the greatest positive effect can be achieved only with the use of systems of continuous automatic control and regulation of the fuel-air ratio. The article proposes the structure of the control system that moni-tors the ambient temperature and changes the temperature at the boiler outlet accordingly. At the same time, in order to be able to operate the system in a significant range of ambient temperatures and maintain economical fuel combustion, the use of adaptive PID controllers is proposed on the basis of tabular changes in their set-tings. To ensure environmentally friendly fuel combustion, a "rebound" mode is used. The simulation of tem-perature change in the control system showed the possibility of its practical for house heating systems with low-power boilers. [ABSTRACT FROM AUTHOR]

At a time when the use of digital content in all spheres of life is constantly growing, the ability to verify the authenticity of digital files, in particular digital images, is extremely important in protecting information from integrity violations. In the information war, photo fakes are always used to achieve certain, often criminal, goals. Both society as a whole and individuals must take care of information security and protect their information space from unverified information. Modern methods of detecting violations of the integrity of graphic information to some extent address some issues of information security, however, they are not universal and often require development, improvement, additional research and so on. Thus, existing methods for detecting such a common method of image falsification as scaling are effective only in cases where the falsified part is enlarged, however, when reducing part of the image, they are not effective. Moreover, in open printing the problem of detecting reduced scalable parts of the image is not covered. Therefore, the aim of this work is to increase the efficiency of scaling detection as digital image falsification by developing an algorithm for detecting scaling with a negative coefficient. In this paper, the method of error level analysis is adapted to detect reduced parts of the digital image. The efficiency of the adapted method in terms of errors of the 1st and 2nd kind was: errors of the 1st kind - 2%, 2nd kind - 7%. In addition, it has been found that this method is also effective in detecting simultaneously scalable (reduced) and moved parts of a digital image. This method detects artifacts (errors) in the digital image, which occur when reducing its part - the falsified area has a higher high-frequency component than the rest of the image, which is amplified under the influence of compression after saving the falsification in a lossy format. [ABSTRACT FROM AUTHOR]

Today, one of the most powerful trends in innovative change in the modern world is the Internet of Things IoT. And although this trend is essentially only at an early stage, it already plays a significant role in the modern world, in modern civilization. It is safe to predict that further expansion of its scope. However, the emergence of this phenomenon is also accompanied by the emergence of related problems. This is especially true of cyber threats, which can cause significant harm to both the Internet of Things itself and the people who use those networks. Accordingly, there is a need for means to combat these threats. This is a rather complex problem, which primarily requires the development of methods and technologies for detecting such threats. At the same time, there are no clear concepts of relevant solutions for cyber security of various IoT applications, especially where financial resources are limited. Therefore, research is currently relevant to find solutions that may be acceptable for relatively low-budget facilities. The aim of the work is to obtain a method for detecting intrusions into the IoT network by detecting anomalies in the network traffic flow of AAA protocols. This problem is complicated by the fact that the solution found must comply with basic security policies. The study conducted in this paper showed that such a solution is possible in principle by using the capabilities of the AAA RADIUS protocol and the use of machine learning. Machine learning methods were tested on the UNSW_NB15 dataset. For machine learning, pre-processing was performed to normalize and standardize the data. Computer experiments have tested the suitability of detecting a set of cyberattacks for different models of machine learning. It was shown that the formulated approach has the potential to be used in practical developments to detect intrusions in the IoT network. [ABSTRACT FROM AUTHOR]

The fundamental concept of information security is security policy. The importance of this concept is difficult to overestimate - there are situations where a well-formulated policy is almost the only mechanism to protect against unauthorized access. The concept of information security policy means an organized set of documented management decisions aimed at protecting information and associated system resources. The security policy sets out a system of views, basic principles, practical recommendations and requirements that underlie the set of information protection measures implemented in the system. Security policy-making is a very complex analytical process that is difficult to formalize. The paper presents organizational measures to create a security policy of the enterprise. Business process notations are used to describe these activities. Business process modeling is the process of reflecting a subjective vision of the workflow in the form of a formal model consisting of interrelated operations. Currently, the greatest development and application in the description of business processes are graphical approaches and methods. The most widely used business process description methodology is the IDEF0 standard.IDEF0 notation is intended for a high-level description of the business process in functional terms. Decomposition of diagrams A-0 and A0 was developed. IDEF0 is not used to build lower-level processes that detail the detailed work performed by staff. To increase the understanding of the functioning of the developed process, it was decided to show the interaction between the mechanisms used in the IDEF0 notation. To describe the interaction between the mechanisms, the BPMN notation was chosen, which focuses on a detailed description of workflows and is best suited for modeling lower-level processes. [ABSTRACT FROM AUTHOR]

Modern education is aimed at providing an opportunity to acquire quality knowledge and skills. Many studies in recent years demonstrate the significant contribution of information technology to improving the quality of acquired knowledge and skills in all areas of education. To assess the quality of the knowledge gained during the educational process, it is necessary to carry out control in various forms. Significant pedagogical research proves the effectiveness of test control to obtain an assessment of knowledge and skills. Information technology can help increase the independence of testing and assessment from the personality of the teacher, that is, increase objectivity through the use of an automated test form. In accordance with modern realities, the development, implementation and subsequent use of automated software for testing knowledge takes place on the Internet. In this regard, information security is a factor that must be identified as the most important. Therefore, the purpose of this work is to develop and implement an automated web-based knowledge testing system with an increased level of information security. One of the most popular open source web application security research projects, the Open Web Application Security Project, publishes the top ten most common threats annually. The paper presents the development of a software protection mechanism, the level of information security of which ensures the protection of information from the most critical risks established in accordance with the OWASP Top 10 2021. The developed software product can be recommended for use in higher and general educational institutions, to improve the quality of knowledge and objectivity through the use of a test form in an automated format with an increased level of information security. [ABSTRACT FROM AUTHOR]

Digital forensics is a field of knowledge that is currently actively developing. The challenges facing digital forensics often intersect with mathematical methods for finding traces of violations of the integrity of digital images. Photomontage, application of filters and other violations of the integrity of digital images are possible thanks to graphic editors with a large number of tools, in particular - filters for artificial sharpening. Graphic editors such as Gimp or Adobe Photohsop will allow users to perform various image manipulations and other digital media files, even without special training. Little attention has been paid in open printing to the problem of detecting violations of the integrity of digital images in the form of filter processing, in particular, sharpening filters. The aim of this work is to improve the detection efficiency of digital image processing by modifying the method of detecting sharpening. It has been observed that a large number of pixels with a value of 0 appear in the digital image matrices under the influence of the artificial sharpening filter. This effect is called the "black effect". The paper analyzes the parameters of the digital image and the black effect, which allowed to modify the method of detecting artificial sharpening of digital images. As a result of the work, the method of detecting artificial sharpening of digital images was modified. The original method was tested for digital images in a lossless format. The performed modification was checked both for the images saved after processing by the filter in a lossless format, and with losses. When testing the method, the number of errors of the first kind was 8%, the second kind - 10% for digital images saved after falsification with loss, and 4% and 7% respectively for digital images saved after falsification in lossless format. [ABSTRACT FROM AUTHOR]

According to a September 2021 report by Positive Technologies, 91% of the world's industrial companies have information systems vulnerable to cyberattacks. The industrial sector is the second most attacked sector in the U.S., and the leading one in developed countries. Ukraine ranks sixth and seventh in the top 20 for the largest industrial attacks. Many scientific publications are devoted to industrial cybersecurity in the world, but, unfortunately, in Ukraine this area of cybersecurity is poorly studied. To develop the topic of increasing the level of cybersecurity of industrial control systems, we focused on the problems of cybersecurity of the lower level of control - the operator control station of the technological plant. Previously, we investigated the problem of cybersecurity of the industrial computer network of the lower level Modbus RTU. Continuing the topic, in this paper we investigate the cybersecurity of important software - the OPC server. This study proposes to pay attention to a vulnerability that has not yet been investigated. This vulnerability is related to the fact that having an extensive network of workstations in the enterprise, an attacker can substitute OPC server on any workstation (usually the most important one in production) with his own OPC server and do it in such a way that on the one hand to bring the technological unit of the selected site to stop or crash, but on the other hand to prevent the operator of technological unit, watching the SCADA-system on the computer screen, from noticing anything. A special diagnostic system has been developed to detect a cyber attack. Appropriate software has been developed and, with its help, all solutions have been simulated in real time using components of real industrial software and Modbus network model. The developed solutions and software can be used in industry. [ABSTRACT FROM AUTHOR]