Search

Eye tracking technology is based on tracking the trajectory of human eye movement. As a rule, it is implemented in the form of an additional device attached under the monitor or in the form of glasses. On the basis of a mathematical model, the focus of a person's attention is calculated and, accordingly, the user's visual route is built. Eye tracking technology is used to solve various problems, e.g. for marketing research, assessing the quality of user interfaces, developing simulators for operators, etc. The article discusses the concept of using eye tracking technology to assess and ensure cyber security, functional safety and usability. The possibility of using eye tracking technology (ETT) to solve the problem of identifying a person's personality is considered separately. The solution is achieved by reproducing a certain trajectory by a person's vision. This technique can be used as a basic or additional technique for identifying a person's personality. It also analyzes the results of using eye tracking to study the interface of an automated information system for operator support based on algorithms for symptom-oriented emergency instructions (ASOEI), which is used at nuclear power plants (NPP).

Currently, the number of DDoS attacks on various institutions has increased, so research on this issue is necessary and relevant. One of the devices that is targeted first is the router. This paper is devoted to the study of the spread of DDoS attacks on the router's subsystems of the Smart Office system. This paper analyzes and solves the problem of optimizing the search for the minimum propagation path of an attack on router subsystems using a mathematical tool – graph theory. The goal of this paper is to determine the most vulnerable router's subsystems to the effects of DDoS attacks.

The article is devoted to profile-oriented approach to assessing the software requirements profile quality. The process of assessment is implemented in accordance with software requirements profile quality model for external quality of software requirements profile and internal quality of software requirements profile. For assessment of quality of each element of such model (characteristics and attributes of software requirements and their classification features; characteristics and attributes of software requirements profile and their classification features; structure of software requirements profile; semantics and syntax of software requirements) taxonomy of metrics and indicators are introduced, which is a part of software requirements profile quality assessment model. All metrics are divided into qualitative and quantitative groups. Additive convolution method is used to go from the multi-vector values of set of connected indicators or metrics to the single scalar value. Received values of metrics and indicators are visualized by radial-metrics diagrams. An example is discussed, which represents the assessment of external quality of software requirements profile for requirements profile from new standard “Requirements to computer security of NPP Instrumentation and Control Systems (NPP I&C)” developed by Ukrainian state regulatory body.

This paper presents a survey of Assurance Case implementation for applications which are not directly related to the usual for Assurance Case regulatory regime. The UK is the country which first developed the theory of Assurance Case as a response to big catastrophes, and most applies Assurance Case regime for many industrial domains. USA, Australia and EU countries apply Assurance Case approach for safety and security regulation and licensing. For the last two decades Assurance Case has been used mostly for confirmation analysis of critical systems with established set of regulatory requirements. There are proven standards of use, notations and tools to support Assurance Case methodology. However, many researchers have tried to find approach to expand Assurance Case application to communicating domains. We group the following directions of Assurance Case applications as the following ones: Assurance Case for attributes assessment such as quality, dependability and, first of all, safety and security, Assurance Case based certification, improvement of argumentation, assurance based development, and Assurance Case for knowledge management. The main challenges and solutions of development and application of Assurance Case methodology, techniques and tools have been analyzed.

Computer control systems (CCS) are an important for operation and maintenance of safety- critical infrastructures. A challenge in such systems implementation is certification and licensing against national and international regulatory requirements. Environmental tests are applied to check that equipment of the CCS can withstand the rigors of harsh environments, for example high and low temperature and humidity, water drops and dust, seismic vibration and acceleration, electromagnetic interference, radiation, etc. It can happen that environmental tests emphasis is methods, level and types of environmental impacts, but there is a question about functions which shall perform a system under test before, during and after test impact application. Equipment Qualification Testing Framework is proposed. The requirements to system operation under test is described in view of a model. Model Driven Development methodology is applied for design and Model-based Testing methodology is applied for verification

The paper is aimed at analyzing of the classical McEliece and Niederreiter cryptosystems as well as theQuasi-Cyclic MDPC McEliece cipher in a context of the post-quantum network security. Theoretical foundations ofthe aforesaid cryptographic schemes are considered. The characteristics of the given cryptosystems and otherasymmetric encryption schemes are analyzed. The cipher metrics, which are considered in the paper, includecryptographic strength, performance, public key size and length of ciphertext. The binary Goppa codes are describedin the context of their role for the cryptanalytic resistance of the classic McEliece and Niederreiter schemes. Thecrucial advantages and drawbacks of the aforementioned cryptosystems are analyzed. The prospects for applicationof these ciphers to the network security protocols are outlined. The investigations, which are aimed at finding waysto reduce the public key sizes and improve the energy efficiency of the given ciphers, are briefly described. A neweducational module “Introduction to Post-Quantum Cryptography” is presented

The article presents the architecture of multi-level information-analytical system (IAS) based on the neural modules network (NMN). This network consists of neural modules which are placed at the three levels (local, region and nation geographically distributed medical centers). Procedures of learning and collectiverelearning of neural modules consider region particularities and are based on analysis, generalization and exchange of experience related to diagnosis of diseases. These procedures provide modification and filtering parameters used as input for the further learning of local and regional neural modules.A few fault-tolerant structures of NMN-based IAS are researched taking into account different options of server and communication redundancy. Reliability block diagrams for redundant IAS structures are developed and formulas for calculation of probability of upstate are analyzed.

Operating reliability assessment of instrumentation and control systems (I&Cs) is always one of the most important activities, especially for critical domains such as nuclear power plants (NPPs). It is an important source of I&C reliability information preferable to lab testing data because it provides information on I&C reliability under real use conditions. That is the reason that now it is a common practice for companies to have an established process of collecting operating reliability data on a large variety of used components on regular basis, maintaining a database with failure information, total operation time, typical failure modes, etc. The intensive use of complicated components like field-programmable gate arrays (FPGAs) in I&C which appear in upgrades and newly-built nuclear power plants makes the task to develop and validate advanced operating reliability assessment methods that consider specific technology features very topical. Increased integration densities make the reliability of integrated circuits the most crucial point in modern NPP I&Cs. Moreover, FPGAs differ in some significant ways from other integrated circuits: they are shipped as blanks and are very dependent on the design configured into them. Furthermore, FPGA design could be changed during planned NPP outage for different reasons. Considering all possible failure modes of FPGA-based NPP instrumentation and control systems at the design stage is a quite challenging task. Therefore, operating reliability assessment is one of the most preferable ways to perform a comprehensive analysis of FPGA-based NPP I&Cs. Based on information in the literature and own experience, operational vs analytical reliability could be pretty far apart. For that reason, analytical reliability assessment using reliability block diagrams (RBD), failure modes, effects and diagnostics analysis (FMEDA), fault tree analysis (FTA), fault insertion testing (FIT), and other techniques and their combinations are important to meet requirements for such systems. The paper summarizes our experience in operating and analytical reliability assessment of FPGA based NPP I&Cs.

The use of wireless sensor networks (WSN) in industry and for forest fire detection has recently become increasingly popular. Assessment of the availability of such networks is an important task, since they perform essential functions in critical situations. Sensor networks can be used to prevent and detect forest fires, and they must meet high availability requirements. Various options for organizing the WSN system are considered - with and without recovery. For such systems, the paper evaluates the probability of no-failure operation, as well as the readiness function, taking into account the network coverage ratio. In the paper the Markov WSN model for evaluating its availability function is developed taking into account the network coverage area. The obtained graphical dependencies allow us to evaluate how a change in the failure rate of sensors or system equipment affects the availability function value. The goal of this paper is to obtain metrics to assess the availability of system for monitoring forest by WSN and the availability function of a network using the Markov models. A special metric, so-called coverage availability factor is suggested in this paper taking into account different combinations of sensor failures which influence on completeness of monitoring forest fires.

Safety and reliability assessment of instrumentation and control (I&C) systems used in different safety-critical industries is a responsible and challenging task. Different assessment models recommended by international and national regulatory documents and used by experts worldwide still have disadvantages and limitations. Therefore, studies of assessment model improvements and refinements are essential. This paper proposes that the assessment models be improved by taking into account different architectures of communications both between different systems and within one particular system. In most models, communication lines are considered absolutely reliable, but the analysis performed shows that the communications should be necessarily addressed. Several analytical models are described to assess the reliability of safety-critical systems for nuclear power plants with different communication options.

The paper overviews the requirements of international standards on application of diversity in safety-critical NPP instrumentation and control (I&C) systems. The NUREG7007 classification of version redundancy and the method for diversity assessment are described. The paper presents results from the analysis of instruments and design tools for FPGA-based embedded digital devices from leading manufacturers of programmable logics using the Xilinx and Altera (Intel) chips, which are used in NPP I&C systems, as an example. The most effective integrated development environments are analyzed and the results of comparing the functions and capabilities of using the Xilinx and Altera (Intel) tools are described. The analysis of single failures and fault tolerance using diversity in chip designs based on the SRAM technology is presented. The results from assessment of diversity metrics for RadICS platform-based multi-version I&C systems are discussed.

Time-series data analysis and forecasting have become increasingly important due to its massive application and production. Working with time series, preparing and manipulating data, predicting future values, and forecasting results analysis are becoming more natural tasks in people’s everyday lives. Modelling of an architectural design for convenient and user-friendly applications that provide a range of functionality for collection, management, processing, analysis, and forecasting time-series data establishes this article’s goal. The system’s technical requirements are maintainability and the ability to expand it with new data manipulation methods and predictive models in the future (scalability). As a result of this paper an architectural model was built, field-testing and profiling of which determined that applications developed on its basis allow users to get the desired results faster than using alternative solutions. The reduction of required level of user technical skills was achieved by the presence of the front-end component. Possibility of precise time-series predictions provision regardless of the data domain was accomplished by creation of dynamically extendable predictive model management service and tools. Improvement of system maintenance and extension time-costs was the result of microservices architecture pattern usage. As a result, this work demonstrates an informational system for end-to-end workflow on time-series forecasting. Application implementation prototype (proof of concept) that was built on the basis of the described architectural model demonstrated the advantages of this design over existing analogues. During testing, scalability improvements and overall efficiency increase in terms of time and resource costs were recorded.

Route-based reliability models of the unmanned aerial vehicle (UAV) fleet carrying out monitoring of critical infrastructure facilities and comprising main and redundant UAVs are developed. A nuclear power plant (NPP) and monitoring stations (MSs) are considered as a critical infrastructure and critical infrastructure facilities, respectively. These models are used when multi-UAV routing for NPP monitoring and allow calculating the probability of the successful fulfilment of the plan (SFP) for the UAV fleet to cover the whole target MSs of the NPP. The dependencies showing the relationship of the probability of the SFP to both the UAV reliability function and used route-based reliability models are obtained and explored. An example of the proposed models application for routing main and redundant UAVs of the fleet to cover the whole target MSs of the Zaporizhzhia NPP is given.

Розглядається технологія розпаралелювання процесу факторизації великих чисел, заснована на зміні відстані між співмножники на числової осі. Представлений і проаналізовано алгоритм факторизації, який аналізує не співмножники, а складові, що дозволяє швидко вирішувати завдання факторизації як при близьких співмножником, так і при значно відрізняються один від одного. Алгоритм факторизації, заснований на рішенні нерівності, дозволяє відсікати велику кількість варіантів співмножників, які не є рішенням поставленої задачі. Проведені експериментальні дослідження показали хороші результати вирішення завдання факторизації з використанням можливого розпаралелювання цього процесу.

Рассматривается подход к метрическому оцениванию управления выполнением требований к программному обеспечению (ПО) информационно-управляющих систем (ИУС) атомных электростанций (АЭС) в соответствии с Vобразной моделью жизненного цикла разработки ПО. Предлагается ряд метрик оценивания выполнения требований, которые могут быть использованы для управления требованиями. Приведен расчет предлагаемых метрик для реальных примеров оценивания управления требованиями к функциональной безопасности. Предложенный поход позволяет описать наилучшие варианты распределения требований по этапам модели ЖЦ, определить точки возврата в жизненном цикле для каждого из требований, а также вариантов его невыполнения. Это, в свою очередь, позволяет управлять выполнением требований, в частности, определять различные сценарии возврата (влияющие на полноту проверок) и виды соответствующих корректирующих воздействий с целью снижения проектных затрат. Предложенный набор метрик является частью инструментария для проверки выполнения требований к функциональной безопасности и был использован при выполнении проекта лицензирования платформы RadICS на соответствие требованиям стандарта IEC61508/SIL3.

The paper presents an analysis of existing knowledge management models and justification for introducing an integrated model of knowledge management for both industry and academia. It is proposed to build such a model using well-known standards of IT security – common criteria and methodology for IT security evaluation. The model of knowledge management is elaborated by analyzing the content of the relevant elements of standards and establishing the knowledge content that determines the forms of relations between them. The authors propose the application of the architecture of four-factor models towards the formation of knowledge management models in the organization of the information security management system in accordance with the standards of the series ISO/ IEC 27000.

This paper evaluates the status quo of modern society and identifies the neglect of humanism as the root cause of many of today’s global challenges. Note that “smart cities” are not excluded from this indictment. The “Ptolemaic Universe” offers a means to restore our symbiosis with the environment. The ReSeT model is proposed as a tool to analyze the Ptolemaic Universe. Using ReSeT: Homo Sapiens becomes dependent on AI resulting in Homo Digitalis, with further evolution in concert with AI resulting in Homo Digitus. All of these stages are then analyzed in the context of global trusted dependability (GTD). The wellness domain, provides the design specification framework for Homo Digitus’ human-centered and resilient “smart city” ecosystem. This ultimately leads to a better world of increased wellness for Homo Hominus, with better smart cities emphasizing education and science, promoting wisdom and common sense, and rejecting violence. In summary, humanity has generated diverse social structures with erratic outcomes. On the other hand, technology provides a successful foundation for modern society especially in the Pandemic Era. However, technology’s contributions are generally not publicly acknowledged. The paper concludes with several initiatives designed to establish a trusted and resilient society.

The paper describes an approach to improve Assurance Case applicability through structured argumentation. We started from approach based on use of twice argumentation step including reasoning step and evidential step with structured text support. After that, we improve the existing method with the following issues: (1) a general algorithm for the development of the Assurance Case is proposed; (2) relations between the argumentation graph and templates of structured text are explicitly explained; (3) structured text is supplied with clear templates. We implement a case study applying the obtained method for arguing functional safety compliance. A general conclusion is this method makes Assurance Case methodology more practical and understandable.

The paper contains the results of the analysis of methodologies and standards obtaining the requirements to security management systems of enterprises including modern enterprises implementing Industry 4.0 principles. Key standards ISO/IEC 7498, 15408, 18045, 20000, 27000 have been analyzed to suggest an approach to the development of integrated security and safety management system structure considering threats of intrusion into physical, information and signal spaces. This system is part of the enterprise management system and based on cybernetic principle of control. These subsystems check and control according with individual and general objectives for physical, information and signal spaces and requirements-based models. The goal of the paper is to analyze the methodologies for developing an integrated security management system structure as a component of enterprise management systems in the context of Industry 4.0. The obtained results and recommendations for enhancing and implementation these systems are discussed.

The paper provides analysis of existing knowledge-management models. It justifies the need of integrated model of knowledge management for both industry and academia. It is proposed to build such a model using well-known standards of IT security—Common criteria and methodology for IT security evaluation. The formation of a model of knowledge management is carried out by analyzing the content of the relevant elements of standards and establishing the content of knowledge that determines the forms of relations between them. The architecture of four-factor models is proposed for application towards the formation of knowledge management models in the organization of the information security management system in accordance with the standards of the series ISO/IEC 27000.

Failure modes, effects and criticality analysis (FMECA) is a well-known risk assessment method used to diagnose potential failure modes of a product or system being designed. This method is much based on expert experience and aims to develop improvement strategies so as to reduce the risk of possible failures. Expert decisions and assumptions affect analysis results significantly, and when several experts are involved into analysis, obtaining final results becomes even more complicated and expert-dependent. XMECA is a generic extension of FMECA that can be applied to analysis not only failures, but other aspects related to safety and security analysis like intrusions (intrusion modes, effects and criticality analysis, IMECA) etc. This paper suggests a novel approach to support XMECA called assumption modes and effect analysis. This approach refers to a technique used to minimize risks involved in making assumptions done by expert during performance of XMECA. Possible assessment scenario are described, case study is provided.

The paper is devoted to research of reliability aspects of complex safety-critical systems (CSs). Nowadays such CSs are used in variety of applications, including safety systems for nuclear power plants (NPPs), power grids industrial systems and others. In the paper, models of reliability for CSs are developed and studied, taking into account intermodular and bridge communications. The following problems are resolved: a set of CSs is created based on majority voting according to the “2oo3” logic and redundancy according to the “1oo2” logic considering intermodular and bridge communications; 2) reliability block diagrams (RBDs), analytical models of CS reliability with (multi)cascade redundancy of “2oo3” and “1oo2” principles are developed (including RBDs of reactor trip systems considering communications); 3) the models are studied, the dependencies for failure-free operation probabilities of various CSs, failure rates of intermodular and bridge communications and voting elements are determined; 4) recommendations for the selection of CS types are stated.

The paper focuses on analysis of the project “ALIOT” Internet of Things for Human and Industry Application. It discusses the complex problem how to build a united system of educational processes management in IoT domain, taking into account the industrial requirements to modern specialists in IoT. The paper proposes the principles of developing support systems of processes for acquiring knowledge that ensure the integration of educational and production systems in the frame of ALIOT project. The ALIOT project results and related R&D issues are described. The ALIOT curriculum consists of fourteen courses for three level of education: master courses, doctoral courses and industrial trainings. The main results of the ALIOT project and their interrelation are described: specialties and courses, education and research laboratories, sectoral IoT cluster network, networks of labs and centers.

The rapidly developing ultra-wideband (UWB) radio technology is very promising for use in infocommunication systems and networks, in particular in wireless, personal (WPAN) and local (WLAN) IoT / IIoT (Internet of Things / Industrial Internet of Things) networks, including and in wearable networks (Wireless Body Area Network, WBAN) for IoMT (Internet of Medical Things). Ensuring high reliability, increasing noise immunity and the degree of information protection from interception in IIoT is due to the use of UWS technology based on ultrashort pulses with a duration of the order of units and fractions of a nanosecond, time pulse modulation and flickering polarization of the emitted signal. The use of UWS technology in a wireless IIoT network provides a number of advantages that cannot be achieved with existing methods. UWS technologies make it possible to provide high speed data transmission, low power consumption of communication facilities, solution of the problem of determining the location of objects with an accuracy of several centimeters, high penetrating power of the radio signal, an almost unlimited number of communication channels and low cost of communication facilities. The aim of the work is to ensure high reliability, noise immunity and the degree of information protection against interception in IIoT critical in speed, reliability and safety under the influence of natural and deliberate electromagnetic interference. The results obtained and the directions for further research are discussed in the conclusions.

A promising direction for the development of industrial enterprises is the Industrial Internet of Things (IIoT) technologies introduction. The paper presents the features of such systems organization and assesses the reliability of the functioning of the wired IIoT system. investigation of an important reliability indicator of a reconstructed wired IIoT system was provided, the availability function (AC), were carried out, which showed that it is necessary to increase the reliability of the server and the system power cables. The paper also assesses the dependability of the IIoT wired system using the mathematical apparatus of Markov models in the event of cyberattacks on the IIoT subsystems. A research of this system’s AC showed, that cyberattacks decreases mostly the AC value of IIoT wired system.

The purpose of the article is to substantiate the method of integration of the environmental management system in the enterprise management system. In order to meet the requirements of ISO 7498-2-99, the structure of a multilevel integrated enterprise security management system has been developed. The system provides security management for physical, information, signaling and environmental spaces. An additional environmental management layer was introduced in comparison with the security management system proposed in [12]. The integration of environmental management meets the requirements of IEC 62264-1-2014. This allows us to form inter-layers connections and coordinate the operation of individual subsystems at the physical security, information (cyber) security, functional and ecological security layers. The implementation of this approach enhances enterprise security and environment security as a whole.

The materials of this research are devoted to implementation of the main aspects of the problem, in particular, the analysis of the perception by visitors group of abstract visual objects of modern art with elements of augmented reality. This aspect is associated with the need to take into account the perception of the artefact by a group of visitors with a view to its subsequent transformation in new paintings or understanding of visitors. The approach to assessing the perception of abstract paintings with elements of augmented reality is described. The application of a special clustering method within the framework of the approach is substantiated, which allows reducing the variety of estimates in the formation of the initial data for the verbal semantic differential method (MSD). Application of the approach will make it possible to implement the triad "MSD — technology of collective expert assessment — ontological engineering" will serve as a methodological basis for developing an IoT-system in the form of an intellectual agency, for automatically changing the digital visual object of modern art with augmented reality, in accordance with its reflection in the mass consciousness of the visitors.

The paper is devoted to routing an unmanned aerial vehicle (UAV) during the Zaporizhzhia nuclear power plant monitoring without returning to the depot due to the deployment of an automatic battery replacement aerial system in specified places. The monitoring includes the overflight of the 11 monitoring stations to collect radiation monitoring data from them in case of damage of wired networks between the monitoring stations and the crisis centre. The shortest possible UAV route that visits every monitoring station (route point) exactly once and returns to the UAV depot is found by solving the Travelling Salesman Problem. An algorithm for determining the places for deployment of the automatic battery replacement aerial system is presented. A flight schedule both for the UAV and the automatic battery replacement aerial system is developed. The DJI Mavic 2 Enterprise Dual quadcopter is considered as a UAV for monitoring missions. The SL-231 Scout helicopter capable to operate in an unmanned mode is considered as a platform for the automatic battery replacement system.

The article analyzes the process of functioning of physical security systems in the conditions of component failures, cyberattacks and software updates. A zonal model of physical security systems, which includes motion detection and access control subsystems, have been built. Updating the software functions of each zone, attacks on the physical component of the motion detection subsystem, and cyber attacks on the access control system have been investigated. To model software updates, a multi-fragment model, including 9 states of each fragment and program update states has been created. To study the behavior of the model while changing the input parameters, Matlab scripts have been developed. Simulation results allow to evaluate the availability function minimum value, availability function value in stationary mode, time interval for the transition of the availability function to the stationary mode.

Failure modes, effects and criticality analysis (FMECA) is a well-known risk assessment method used to diagnose potential failure modes of a product or system being designed. This method is much based on expert experience and aims to develop improvement strategies so as to reduce the risk of failures. XMECA is a generic extension of this approach that can be applied to analysis not only failures, but other aspects related to safety analysis like intrusions (IMECA) etc. Assumption modes and effect analysis refers to a suggested technique used to minimize risks involved in making assumptions done by expert during performance of XMECA. Possible assessment scenario are described.

The paper focuses on Digital Twin (DT) in Manufacturing using Artificial Intelligence (AI) and Industrial IoT. According to the concept, the manufacturing includes three main units: equipment, personnel and processes. All data from these units are inherited to manufacture model (DT) and decision support system with the use of AI. DT data technology allows finding the required knowledge that can be interpreted and used to support the process of decision-making in the management of the enterprise. AI applications open up a broad spectrum of opportunities in manufacturing to add value by optimizing processes and generating new business models. The Landscape was described by a formal model to assure the possibility to analyze the state and development of landscape in detail considering DT and other technologies. DT and IIoT implementation for the simulation of real enterprise manufacturing were considered.

the synthesis of the synchronous digital automaton with the logic of the pseudo LRU algorithm is carried out taking into the account events of hits or misses inside the associative cache memory. The synchronous digital automaton's model with the controlling logic for management substitution of data elements at the full reliability of the selected data's multitude is described. The minimizating for the switching functions that are simple completely defined and composite not completely defined are carried out. They are switched as: L = λ(B) by selecting multiple among reliable values and B+ = f(B, λ(B)) forming the values of bits for unit LRU considering the previous state. As a result the minimum discrete realization has been obtained by suggested hardware solutions substitution policy for the algorithm of pseudo LRU of internal associative cache memory.

Supervisory Control and Data Acquisition (SCADA) system is one the most significant cyber-oriented components of management circuit for any complex hierarchical infrastructure. The effectiveness and performance of the SCADA system depends on a number of relevant factors including a possibility to utilize additional cloud resources. Of particular note, the cloud services can apply in order to create concurrent redundant system for implementation of disaster recovery feature of SCADA information resources during different deliberate malicious impacts and intrusions. However, in spite of the fact that usage of the cloud services allow to enhance functionality of SCADA system, there are dependability and cybersecurity aspects for their joint utilization hat keep to remain a serious challenge for service personnel and users. In this paper, authors propose to employ analytical and stochastic modelling in order to get a numerical dependability assessment for SCADA system with realization of the cloud resourcing support considering influence of diverse negative factors. Furthermore, developers can utilize these modelling results in order to perform justification of overall functional requirements of the SCADA system.

In this paper we propose to apply structured argumentation for Assurance Case methodology to continue developing a concept of licensing for Nuclear Power Plants PostAccident Monitoring System (PAMS) based on Unmanned Aircraft Vehicles (UAVs). We obtained the structured argumentation method including the following: the new overall algorithm of the Assurance Case development; the new proposed structure of the Assurance Case graph, which is based on the typical structure of the arguments and is developed in connection with the structured text of the description of these arguments; the improved structured text templates for arguments description. The obtained method can be used as the basis of the appropriated argumentation framework supported with a set of formal operations performed with the Assurance Case graph and supported structural text. The obtained practical and theoretical results may be used for any kinds of safety and security critical systems and applications.

Currently, Cloud, IoT, Dew, Edge and touch networks of “things” are allocated as part of the program system. Data at the touch network level is associated with physical objects. At the Edge level, data is separated from objects to form a Digital Twin representation of their state, properties, and behavior with minimal latency. Copies of Digital Twin “things” are stored and used at different levels, but must reflect their current state. Interaction with “things” in IoT, data transport between sensor networks through their boundary nodes is considered. For Edge computing research it is proposed to create physical and virtual models of fragments of touch networks, their boundary nodes, processing of data and organization of access of devices as part of “things” to remote IoT resources. The paper shows how to build a virtual device model in a Proteus environment and assess adequacy versus a physical model. Implemented a piece of wired sensor network with TCP/IP protocol based on open platforms.

The main contribution of this study comprises a set of detailed contents for safety and security management. The following aspects of safety and security management requirements for NPP I&C systems are considered: relation between safety and security management, safety and security management plan, human resource management, configuration management, computer tools selection and evaluation, documentation management, planning of safety and security assessment.

The presented paper deals with exponentially growing technology – the Internet of Things (IoT) in the field of healthcare and medicine providing. The goal of the paper is to develop and research a discrete-continuous stochastic model (DCSM) of a functional behavior of a networked healthcare device (in the considered case – an insulin pump) in a form of a structural automaton model (SAM) using the Erlang phase method. It is spoken in the brief details about the healthcare IoT environment, networked insulin pump hazards and behavior with a description of the functional procedures, indicators and parameters of functionality and safety are given. Much attention is aimed at the development process of the DCSM using exponential and Erlang’s distribution laws, description of basic events and structure of a state vector, development of the SAMs. The procedures of validation of the developed models for the exponential and Erlang’s distribution laws are presented and include four research cases to check the relevance of the obtained results. The obtained results show the limit value of the task non-performing probability.

Two existing notations for the assurance case (claim, argument and evidence [CAE] and goal structuring notation [GSN]) are considered. Supporting software tools for development of the assurance case are considered. Some ways for improvement and modification are proposed for both assurance case notations (CAE and GSN). For CAE, the authors obtained annex with acceptance and coverage criteria as well as an algorithm of the assurance case update through life cycle stages. For GSN, they improve structured argumentation with support of structured text using. Recommendations for using the assurance case notations and tools for I&C systems are formulated.

The paper outlines the basic principles and assumptions used to assess the criticality of critical infrastructure object (CIO) and critical information infrastructure objects (CIIO). Methods for assigning critical information infrastructure objects to the criticality levels are described. The sequence of carrying out the criticality assessment of CIOs is provided. The recommendations concerning evolving regulation in the field of critical information infrastructure objects protection are given. According to the results of the research, several drafts of the Ukrainian state-level normative documents were developed such as “Classification of critical information infrastructure objects by severity (criticality)” and “Criteria and procedure for assigning critical information infrastructure objects to one of the significance (criticality)”. The implementation of the developed documents is an important step in the construction of the Ukrainian state system of protection of critical information infrastructure.

Relevance of the paper is confirmed by the need to protect the security systems themselves, not only from physical damage, but also from cyber attacks by intruders. The paper explores the Markov model of the two-zone cyber-physical security system. Evaluation of the functioning of the multi-zone system was carried out taking into account two degrees of degradation (operative condition - the failure state of all zones). The state space of the model (or one fragment) has a dimension of 9 states. In the proposed model, hardware failures caused by vandal attacks on objects of the first zone and software failures due to cyber attacks on the functions of the second zone are considered. The simulation results illustrate different transition intervals of availability indicators of various levels of degradation to a stationary state. For different degrees of degradation, the minimum value of the availability function, the time interval of the transition of the availability function to the stationary mode, and the value of the availability function in the stationary mode are determined. When eliminating software defects and vulnerabilities, the increase in the availability function is 0.23% for a zero level of system degradation.

This article presents a Digital Twin (DT) for the logistics system of a manufacturing enterprise using industrial IoT. DT data technology allows to find the required knowledge that can be interpreted and used to support the process of decision making in the management of the enterprise. The authors propose a classification of DTs for manufacturing and a systematic approach to DT application, as well as its use for simulation of real logistics systems.

The information and control systems of Nuclear Power Plant and other safety critical systems are considered as a set of three independent hardware channels including online testing system. Nuclear Power Plant information and control systems design on programmable platforms is rigidly tied to the V-model of the life cycle. Safety and availability during its life cycle are assessed using Markov and multi-fragmental models. The multi-fragmental model MICS32 contains an absorbing state in case of hidden faults and allows evaluating risks of “hidden” unavailability. The MICS42 model simulates the “migration” of states with undetected failures into states with detected faults. These models describe the functioning of the system and the complete elimination of software faults. Results of multi-fragmental modeling are compared to evaluate proof test period taking into account requirements for SIL3 level and limiting values of hidden fault probabilities. Multi-fragment models are included in the assessing method of implementation safety requirements of ICS on programmable platforms. The information technology of decision support in assessing and managing the implementation of the requirements for ICS safety is also considered.