This paper considers the evolutionary path of developing physical ways of information leakage and methods of their minimization or possible elimination in the premises allocated for negotiations. The work aims to development of an expert system that interacts with the knowledge base, focused on modeling threats and means of protecting meeting rooms based on user-specified data and parameters. The features of the application, the principles of operation and the architecture of expert systems, a knowledge base developed for the intellectualization of the developed expert system are considered. The result of the work done is an expert system that implements the ability to simulate threats and protect premises from information leaks. The developed expert system can have practical application in organizations, the importance of information secrecy for which is one of the main tasks.
In the realities of the modern world, information and its possession play a key role both in the ability to be competitive and in the process of economic development in general.
Information can be a product, service, raw material, and its correct application leads to various kinds
of material benefits for its owner. As a result, each owner of information strives to protect it from
dissemination and intruders. Often, such attackers are individuals or organizations interested in the
possibility of unauthorized gaining access to confidential information and intending or attempting to
organize such access [
Also, do not forget that some companies work with confidential information, including personal
data, the protection of which required by law [
The topic of protecting premises and meeting rooms in particular is relevant, and in this area,
developments are underway that will help to move from manual calculation of indicators to an
automated process [
Physical paths of information leakage according to state standard specification GOST R 50922-96, information security threat is a set of conditions and factors that create a threat of information security breach. All technical channels of information leakage can be divided into 4 groups are shown in the Table 1. ● financial damage associated with the costs of restoring the company's information system, as well as due to downtime caused by changes in the information security system; ● material and moral damage caused to information owners, whose information was stolen and, as a result, damage to business reputation and business relationships was caused.
The most difficult and common are semi-structured or unstructured tasks associated with
decisionmaking, control and management tasks. Expert systems are aimed at solving such problems [
Expert system - a computer system capable of partially replacing a specialist-expert in resolving a problem situation.
The use of expert systems can help achieve a number of positive aspects: ● exclude possible subjectivity; ● the ability to simplify the process by dividing the problem to be solved into smaller subtasks; ● there is no need to involve expensive experts and specialists; ● development of ES allows to accumulate human knowledge and experience; ● there is no need to study a large number of materials in order to make a decision or check the correctness of the decision of the involved expert; ● the ability to minimize contacts with strangers, keep confidential data that is undesirable for publicity; ● the solution can be obtained in a human-readable form.
Also, the ES has mandatory components that form it: ● user interface; ● ES user - it can be both an end user who wants to get a solution, and an expert who introduces new knowledge into the database, as well as a knowledge engineer who debugs the work of the expert system; ● knowledge base editor - implements the ability to edit, delete, change and add data; ● expert - a specialist in the required field, able to find reasonable, correct and effective solutions to the task; ● knowledge engineer - a person who has knowledge and skills in the field of computer science, artificial intelligence and the construction of expert systems, who can systematize, properly present knowledge and help the programmer in writing a software product; ● memory; ● inference mechanism - an inferred solution obtained during the operation of the expert system; ● system of explanations - a system of justifications, based on which this or that decision was made.
The basis of ES is the so-called knowledge base in a specific subject area. The data is constantly entered and accumulated in the process of building and operating an expert system.
In the modern world, market relations are moving away from industrial ones, and are increasingly
becoming informational. Thus, information plays a key role in the development and functioning of
market participants [
The reality is that a manager cannot always fully assess the existing threats of information leakage,
of which there are many [
For example, consider a typical office is also used as a meeting room.
Sometimes, the leader does not even realize that his office is essentially a sieve from which valuable information flows without any special obstacles.
Physical methods of protection against information leaks are understood as a complex of technical, organizational and organizational-technical measures aimed at weakening or excluding the uncontrolled exit of classified information outside the control zone.
The following restrictions are imposed on protection methods: ● for protection, only funds certified and approved for circulation in the Russian Federation can be used; ● methods and means untested, prohibited or related to the spyware category are unacceptable; ● protection against leaks must be based on legal methods of dealing with them; ● for the successful functioning of the protective complex of measures, it is also necessary that it constitutes a single system.
The complexes of protective measures are divided according to the principle of grouping of leakage channels - methods of protection of visual, acoustic and vibration, electromagnetic and materialmaterial channels of information leakage.
The basis of the expert system is the so-called knowledge base in a specific subject area. Тhe data is
constantly entered and accumulated in the process of building and operating the expert system. The
organization of knowledge and its accumulation are important properties of any expert systems[
To solve the tasks assigned to the expert system, three databases needed to store information and
indicators, which will form the knowledge base [
The representation of knowledge in expert systems is a fundamental concept that is a decisive aspect in development. To represent knowledge, a production model and a formal-logical model of knowledge representation chosen.
The production refineries are based on the rule (products):
IF <condition> THEN <action>. This rule consists of two parts: conditions - antecedent and actions - consequent. In the form of a production model of knowledge representation, the knowledge necessary for the system to display security recommendations is presented.
Formally, the logical model of knowledge representation is similar to the production model. This is partially true, but they make a huge difference. The difference is that the production model of knowledge representation does not define any connections between the stored objects of the domain.
The initial data will be all the necessary information about the room that the user wants to allocate for the meeting room, check and secure. The user enters information about the floor, the material of the walls, about the rooms nearby, about the ceiling, decoration, about windows and doors, about the ventilation, about the presence of radiation elements. The user also edits the scheme of his meeting room in the program designer.
As a result, the user will receive a scheme with color identification of the threat, recommendations in text form on the necessary measures to improve security.
The subtasks for solving the general problem are as follows: ● Processing of input data; ● Determination of the level of security and highlighting the element, depending on the level of security; ● Offer security for low-security elements;
Justification of decisions bases on the knowledge and experience of experts. The more experts involved in the development of the knowledge base. The more unbiased decision can be issued by the ES.
It can be difficult for the user to collect data on the materials of the room, on the presence or absence of certain elements that affect the security. Therefore, ES can give some error.
The expert system for modeling threats and protecting premises from information leaks "Avarazh" consists of a main form for entering data and describing the room considered by the user; forms for editing the scheme of the room in question; forms for training the expert system, which is necessary for experts to interact with the system; reference books of objects and materials and information about the expert system itself.
The program menu contains reference books for some objects, allowing you to more accurately classify objects when entering data into the system. The "Training" menu item opens the form that experts use to train the "Avarazh" expert system. The menu item "About the program" contains the documentation on the basis of which the expert system works - Federal laws, GOSTs, SNiP and a set of rules. It also contains an area where the results of processing the entered data are displayed. This area consists of a visual sub-area, which shows a diagram with color identification of the security levels of the elements of the tested room, detected leakage channels and recommendations for improving the level of protection of the room. When you select the "Training" menu item, a window appears in front of the expert, containing facts and fields for filling in the coefficients.
To create a room scheme, you need to press the "Edit scheme" button of the main form, by clicking the user enters the scheme editing mode on the new form.
Using shape buttons, you can add elements to the room that affect the safety of the room as a whole. Symbols have been introduced for some elements that may be intuitively incomprehensible. All added items can be removed using the Clear All button. If the created scheme satisfies the user, then by clicking the "Add to main window" button the resulting scheme is added to the main form for further analysis. All elements of the room layout can be resized, moved, deleted or added again. Also, if one element is varied, a tooltip appears.
On average, an expert needs about 6 hours to conduct a special survey of a room to measure indicators when choosing 15 control points, and about 2 hours for calculations. Thanks to the use of the "Avaraj" expert system, within 30 minutes, you cannot only receive recommendations that are understandable to a nonprofessional, but also clearly see the hazard levels of the existing leakage channels.
In the course of the work, all the tasks were completed and the goal of the final qualification work was achieved - the development of an expert system interacting with the knowledge base, focused on modeling threats and means of protecting meeting rooms based on user-specified data and parameters.
The novelty of this work lies in the development of an expert system in the field of threat modeling and protection of meeting rooms, which not only generates recommendations for protection, but also analyzes the existing leakage channels and has a graphical identification of the security level of room objects and their ability to cause these leakage channels.
This expert system has directions for further development and improvement, but already at this stage, it has an extensive and sufficient toolkit to complete the task confirmed by its commissioning at UNIG LLC. 8. References