A structure for organizing information flows (IF) in distance learning systems (DLS) of universities is proposed, which is able to increase the efficiency of the complex interaction of both existing and new promising mechanisms for controlling and processing IF that circulate in DLS. The proposed additions imply the development of new or the use of ready-made models of protected information flows (IF) and DLS processes. And besides, the features of optimization measures related to the information security of the DLS are taken into account. The proposed model covers a set of conditions and tasks that are priority when searching for optimal information security measures for DLS.
In the context of the global digitalization of
society, distance education systems (DLS) are
becoming more and more widespread in the field
of education, due to their inherent qualitative
characteristics and features [
Many authors [
During the research, there was performed an
analysis based on the results of an audit of IS and
CS of international companies dealing with
relevant issues for state organizations, including
universities and other large educational
institutions (EI). First of all, they are EU, the
USA, and Canada [
Different according to the source data [
For several years, analysts in the field of IS and CS have fixed a trend indicating a steady increase of the number of cyber incidents and cyberattacks in DEEU.
This, in particular, can be explained by the
increase of the number of local networks of
universities and other EI that are connected to
public networks [
In publications devoted to the problem of
evaluating the security of DEEU [
Thus, within the framework of this subsection of the research, we will consider the task of creating a DLS structure that would take into account the degree of security of individual information flows within the DEEU, and would also potentially be able to provide control over the IF, as well as protect the DLS from arbitrary information attacks by computer intruders.
For DLS, as for most digital systems, there are
two types of key threats that, to one degree or
another, can affect the level of students'
preparation, as well as the performance of DLS as
a whole. Such groups of threats, without a more
detailed classification, to which a fairly large
number of studies by other authors are devoted
[
External threats, i.e. remote influence on the DLS of an attacker, for example, aimed at creating opportunities for illegal penetration into the DLS.
Internal threats, unlawful introduction by malefactors of foreign information flows into the DEEU, in particular, into information systems, using vulnerabilities and weaknesses in the DLS protection circuits.
We believe that in order to realize the main mission of the DLS, i.e. to give chances to all students, regardless of their location, economic social, and other conditions, to receive a quality education and at the same time remain costeffective and competitive, any DLS of a modern university should have the following properties: Qualitatively and promptly process information flows that circulate in the DLS, as well as in the DEEU as a whole. Contribute to a continuous and stable cycle of work of the DLS. Ensure the confidentiality of personal data of teachers and students who use DLS.
Purpose of the study is development of models of protected information flows (IF) and processes in DLS, which will allow taking into account the features of optimization measures related to IS of DLS.
Based on the above, it is possible to present the structure of the DLS and its main information flows, based not only on the functional requirements for the DLS, but also taking into account the need to solve the problem of ensuring information and cyber security of such systems. The block diagram is shown on Fig. 1. This approach allows, to the extent necessary, to take into account both the basic requirements for the DLS, and take into account the tasks of protecting information flows within the system.
In case of the emergence of external
information flows, indicated in diagram 1 as "1",
they must first be processed in the block
responsible for collecting and processing
information before getting into the DEEU and its
DLS component (on Fig. 1. designated as BCPI).
This block, in accordance with the
recommendations [
Analysis of incoming traffic and protection of DLS from external ones (cybersecurity block CSB);
IF analysis (information flow analysis block IFAB). This block is intended for: (a) IF monitoring - tracking IF circulating in the DLS, as well as their accounting and accumulation of statistics; (b) analysis of IF from the functional units of the university; (c) encoding-decoding IF, and the formation of specialized IF, which are intended exclusively for students; (d) IF routing; (e) protection against internal threats.
Planning (Planning Block, PLB). This block is designed to collect, store and backup information that circulates in the DLS).
Implementation (Implementation Block (IMB). This block is intended for the subsequent implementation of the plans and data developed in the IMB.
Each of the above functions can be implemented based on the work of their own algorithms to solve the tasks. The coordinated work of all blocks is able to filter out “potentially dangerous” or “malicious flows” (viruses, spam, etc.), which will prevent the implementation of many external and internal cyber threats for DLS.
Upon successful verification in the CSB, the IF-1 information flow is transmitted to the analysis unit, i.e. in AB. The block diagram of IFAB operation is shown on Fig. 2. As mentioned above, IFAB performs the work of evaluating and processing all information flows circulating in the DEEU and DLS, and most importantly, registers and analyzes the status of “encoded IF.” If the current IF, located in the IFAB, does not pass the check for this status, the encoding procedure is performed in relation to it. By encoding, we mean the implementation of the procedure, when, based on the sets of goals and semantic elements, a new IF will be formed with a formalized structure that corresponds to the expression:
M C INFL M ind , M sem , M con , (1) where MC INFL is structure of the encoded IF; Mind is a set of indices that determine the ownership of IF; Msem is set of semantic IF content; Mcon is a set of initial content corresponding to the IF.
Therefore, it is possible to implement protection against basic internal threats in the IF section "1-2". Of course, for this it is necessary, based on the architecture of a particular DLS, to select adequate means and methods of protection.
International relations Information funds Others 14 Financial
divisions 4
Functional divisions Ki 1
CSB 11
PLB BCPI 2 3
DEEU Rectorate, deans
IFAB 10 12 IMB 7
13 5 6 Accounting 15
Accounting for staff and
students 9 8 DLS software
In order for a targeted or accidental malicious IF to be processed in the DLS, it must first be converted to the IF format accepted in the system. Otherwise, this thread will be ignored. At the same time, after encoding, the initial IF will lose its initial activity, and, therefore, will no longer pose a direct threat to the DLS.
If the IF meets all the requirements, primarily
in terms of IS and CS, then based on the set Mind,
this IF will be forwarded to its recipients, based
on the routing algorithm and tasks. These IFs on
Fig. 2 are designated by the positions 3–10. We
believe that the DLS works in conjunction with
the electronic document management system
(EDMS), which are now being widely introduced
into the digital environment of universities around
the world [
Set of semantic elements
Extraction of semantic elements from IF IF encoding
Set of DLS goals 10 10 2
Analysis of conformity encoded by IF Yes
Need in IF encoding?
No Withdrawal of IF from
DLS IF ownership analysis
Кi=3…10
To maintain the relevance of the information arrays (IA) contained in the DLS and their backup copies, the PLB is used. This contributes to solving the problem of restoring IA and monitoring their integrity in cases of accidental failure or targeted destructive impacts on the DLS by computer intruders.
In case where the analyzed IF contains requests for the provision of a certain course or other educational content, control actions (CA) should be automatically generated in the IFAB, which are then sent to the CA. The result of the implementation of the CA will be the formation of a virtual environment that contains elements that contribute to the implementation of the request.
Based on the scheme of information flows of DLS, taking into account the need to ensure their cybersecurity, a fundamentally new methodology for creating an IS support system for DEEU and DLS is proposed. The methodology contains the following steps: 1. Determination of the probability of the impact of IS and CS threats on the DEEU and/or DLS. 2. Determination of a generalized indicator of the level of IS and CS of the DEEU and/or DLS. are responsible for organizing distance education, primarily by updating a specific IF within the framework of only their own functional tasks. 3. Evaluating the effectiveness of investments in
IS and CS of the DEEU and/or DLS. 4. Creation of an integrated mechanisms for providing IS and CS to the DEEU and/or DLS.
The proposed structure for organizing information flows in the DLS of universities, in our opinion, is able to effectively implement the complex interaction of both existing and new promising mechanisms for controlling and processing IF that circulate in the DEEU and DLS.
Cyber attacks on DLS [
During the research, the method of managing the IS of DLS or DEEU was considered. The method is based on a set of optimization models, and the main steps of this method were: Measures to develop several alternative models of protected IF in the DLS circuits. Measures for the development or selection of an adequate optimization model of the LMS IS. Search for the extremum of the objective function in the analysis of alternative sets of DLS protection tools, etc.
In particular, as part of the development of a method for justifying measures to ensure the IS of the DLS by the criterion of an integral loss minimum, such a model was proposed to find the optimal values of the periods for reviewing measures aimed at ensuring the IS of the DLS of the university.
If it is necessary to justify the review period for measures related to the provision of IS of the DLS (and/or DEEU) is t0 , it is necessary to solve the following system of equations:
T IL0 t0 ,T min Lk tk , t dt,
kAL 0
Lk tk , t TCk tk , t RV t PTRk tk , t , where AL is area of permissible time periods for reviewing measures for the IS of the DLS;
Lk(Δtk,t) is the resulting losses at the k-th value of the review period associated with the IS of the DLS at a point in time t ;
TCk(Δtk,t) is total costs for IS of the DLS at the
k-th value of the period, for example, can be
determined depending on the strategy of investing
in IS systems chosen by the university
management. Such models are presented in detail
in [
RV(t) is the value of protected information resources presented in the DLS or DEEU;
K is the number of possible values for the review period for IS activities of the DLS and/or DEEU;
Pck(Δtk,t) is probability of authorized access to IR in DLS;
Pck tk , t Pg , PTRk tk , t Pper , k 1,2,3,...K. (2)
Pg is the value of the probability of authorized access to IR in the DLS allowed by information security metrics;
PTRk(Δtk,t) is the value of the probability of realization of the IF or processes; violation at the k-th value of the review period of the IS activities of the DLS at the time T;
Pper is admissible value for the probability of violation of IF or processes in the DLS.
In this case, you can get a solution that allows to achieve the minimum integral losses on the time interval is IL0 t0 ,T .
Taking into account the structural features of the protected information flows and processes in the DLS, the value of the protected information resources, the potential awareness of intruders, there is proposed a model that develops the Shewhart-Deming cyclic control model.
The following results were obtained in the research: A structure for organizing information flows (IF) in distance learning systems (DLS) of universities is proposed, which is able to increase the efficiency of the complex interaction of both existing and new promising mechanisms for controlling and processing IF that circulate in the DEEU and DLS. The proposed additions imply the development of new or the use of ready-made models of the protected IF and processes with DLS. And besides, the features of optimization measures related to the information security of the DLS are taken into account. The proposed model covers a set of conditions and tasks that are priorities in the search for optimal information security measures for DLS.