Making and implementing decisions in complex hierarchical systems, as a procedural part of management activity, has an applied nature, which is manifested in the performance of actions to respond to and influence threat factors on object, within the boundaries of relationship between management subject and object. In this context, the control system is provided by auxiliary computerized human-machine decision support systems (subsystems) that help intelligent agents perform decision-making actions and react to results of decision implementation. For effective adaptation and development of these systems, it is necessary to have a complete decision-making and implementation system. In the latter, there will be applied informational and algorithmic support for decision-making procedures implementation based on decision-making and implementation mechanism, taking into account management system integration, as a prerequisite for effective management of hierarchical systems. Such a complex need determines the necessity to develop the conceptual structure of the mechanism in connection with the decision-making and implementation system on the integration basis of building a management system.
mechanism will involve combination of components on the structural-base model of integrated control system design.
Management solution for managing a hierarchical system is an intelligent product created and used by the management system. Intellectual activity of this kind involves information operation about object characteristics with use by management subject of information-knowledge about the rules of operation, which explain how to influence or refuse to influence the object. That is, management is carried out through the information presentation of both the object and the subject's actions, taking into account the structure of a complex system with a hierarchical organization and various causes of emergency situations. Such situations can arise in the event of external threats and attacks on the object, and also in the preparation of project documentation, mistakes may be made during their development. Accordingly, active attacks, failures, malfunctions (reduction in system reliability and resources) can lead to a failure of the object's functioning. Also, one of the main reasons that can lead to a disaster and emergency situations in the facility's operation system is the intellectual and cognitive errors of the operational staff, which leads to its informational and target disorientation.
In accordance with goals that functioning system sets for itself, it is necessary to form requirements for its reliability and functionality of ACS (Automated Control System) units, management structure. Cybersecurity of a hierarchical structure is an urgent problem today, which includes information and intellectual support in the formation of adoption and implementation of purpose-oriented decisions in the conditions of threats, resource and structural and other types of attacks on infrastructure.
2.1.
Works [
2.2.
On the basis of system analysis and their information and logic-cognitive technologies, determine and justify indicators for identifying the causes of crisis and emergency situations in complex man-made integrated systems with hierarchical infrastructure when threats and attacks affect process and management goals, which is necessary to ensure effective methods of countermeasures and high cyber security level.
2.3.
Hierarchical system, goals and dynamics of complex man-made systems in a complex of spatially distributed integrated production facilities.
3.1.
between infrastructure hierarchy levels as a method for
Analysis of complex ACS-TP systems developed during the (3-4) development stage of information and management technologies, which were used in complex production energyactive complexes with a continuous process, showed that at the current stage they do not meet the requirements for ensuring resistance to attacks of the system approach at their design.
Number of tasks that were solved in the management process was large, but the inconsistency of methods of solving technical, functional, algorithmic and organizational tasks and the procedures for their solution complicated the process of goal-oriented management due to the complexity of harmonizing technological requirements, management methods, data processing tools and decision-making strategies in the conditions of threats and information attacks.
Main reason for the low level of management efficiency in the event of resource and information threats at different levels of the hierarchy was that the behavior of operative personnel at different management levels was not coordinated with the production infrastructure possibilities and resources provision.
3.2.
strategic-level infrastructure for effective countermeasures
At the fourth stage of the development of energy-active objects complex management systems in production management continuous process, to the fullest extent arose the need to combine individual automated systems and subsystems of the infrastructure into a complex goal-oriented system based on information and intellectual technologies.
A complex integrated infrastructure with a management system, which is oriented towards strategic goals, includes and will combine into a single the next goals: {MOі / і=1
n } {ІІАSCR } • • •
- management objects of passive and active type; {(ACS - ТP)і=1,n - automatic facility management systems;
} {ACYIn } - automated systems with a hierarchical management structure; • - information intelligent management strategies; management systems with coordinating {DSSR } • - decision support systems with coordination and expert technologies to counter attacks and active threats; {ОСІCУ } - operational systems of intellectual, cognitive and creative management; {RSU pi - technological flows resource management systems;
} {SEZ } - environmental protection systems.
The theoretical foundations of such systems construction are considered in fundamental
works [
On the basis of the conducted research, a structural-functional scheme of production structures coordination-integration game into infrastructure was developed based on agreement of global goal (Fig. 1.)
Markings on Fig. 1.: • • • • • • • • • • • • • • • {FRi, FRЕ , FRS } - factors influencing resource flows, energy, structures of the object. • Integration processes during the structural game take place at the levels of the system hierarchy (SR5, SR6, SR7), coordination of goals and strategies occurs at levels (SR3, SR4, SR5).
FRm - factors affecting the ecosystem - material; FRЕ - factors of energy impact on the environment; CFZ - strategy of environmental protection systems; GGi - global infrastructure goals; GCiU - management goals at the operational level; CUS - goal oriented management of production system; F ( АtakCi) -attacks factor on the entire system – operational level; I (Strat) - systems integration strategy at the upper level; Strat(SKCi) - management coordination strategy according to the goal; {ОУі} - management objects (active passive conversion, mixed type); {Di, Dn} - information and management – executive data flows; ОСІКn
GCiU CUS
Coordination Star (SKCi) FRn FRE
CEz Conflict
IIACSK АSC- IS АCS-ТP1
RSU1
RSUn OY1
Dn
Di
OYn
D1
D2 Resource complex The global game is formed by the participants of ((SR1, SR2, SR3) ⊗ SR4) levels on the basis of infrastructure of corporate management goals and strategies agreement, which with full risk probability may be formed.
3.3. Procedures for integrating systems into the infrastructure with goal-oriented management strategies In order to increase the stability of their infrastructure functioning, it is necessary to perform a constructive component analysis of technological aggregated system capabilities for production infrastructure in interaction with automated control system (human-machine interaction), taking into account intellectual capabilities of managers at all levels of hierarchy and serviceoperational maintenance. Assess possible risks of failure and shutdown of emergency situations under resource threats conditions and information attacks on goal-oriented management process (Fig. 2.).
Markings on Fig.2.: • • • • •
Target requirements: V1.1 - goals definition, V1.1a – goals coordination, V2.1 – internal and external factors affecting goals, V2.1a – structured goals, V1.2 – coordination of goals with management, V1.2a – functioning duplication; Functional requirements: V2.2 – functional structuration, V2.2a – management functions; Organizational management requirements: V1.3 – structure consistency, V 1.4 – actions coordination, V 1.5 – throughput, V 1.6 – system stability, V2.3 – elements organization, V2.4 – elements fixing, V2.5 – load distribution, V2.6 – control, V 1.7active actions; Cognitive requirements: V 1.8 – professional qualities, V2.7 – regulation, V2.8 – professional compliance, V1.9, V1.15 – consistency, V1.10 – sharing usage, V1.11 – information duplication, V1.13 – information compatibility, V1.14 – information aggregation, V2.9 – information provision, V2.10 - single database, V2.11 – information duplication, V2.13 – information transformation, V2.14 – accounting of method, – consistency, V1.16 – risk assessment, V1.17 – feasibility; Management integration: V2.15, V2.16 – indicators, V2.17 – methods, V1.18 – management process, V1.19 – process safety, V1.20 – conflicts occurrence, V2.18 – goals achievement, V2.19 – control means, V2.20 – information technology tools.
To increase robustness of information and management systems, networks and channels of transmission and dial exchange in the management process, under the conditions of information, psychological and cognitive attacks, it is necessary to analyze (both in existing and newly designed) all infrastructure components for stability. At the same time, it is necessary to take into account that components have, according to the type of systems and dynamics functions ∀x ∈ X ; ∃y ∈ Y ; X Aij →Y | C A ij i ik K i y i and displaying actions ij in the target area defined at strategic level.
Interaction between systems during the integration process can take place between energyactive, informational, resource and management infrastructure components.
Decision-making levels: • ←Si OYi A → BM
V1 - (object - control) – (control i i ); • • • •
OY ←Ai ПR | ПR ⊂ D Re s V2 - (object - control) – (resource source i i ); V3 - (object - control)– (information system OYR K → ІВС ); V4 (information system) – (system (ACS-TP) management OY S → ІВС Di→ SUi R ); V5 - (ASC-TP) – (operational management system (KRIAi) with operational cognitive agents team). ОСІКn
GCiU CUS
Coordination Star (SKCi) АSC- IS АCS-ТP1
RSU1
RSUn OY1
Dn
Di
OYn
D1
D2 Resource complex The interaction and integration game concept of infrastructure, between production, information, management type subsystem is the basis for describing process of active countermeasures against threats.
If take into account that management structure includes an automatic system for implementation of object management process (ASU-TP-ASU) and a team of management operators (cognitive agents) so behavior of such a structure has a high risk of failure under threats influence.
Accordingly, let’s provide a list of active threat attacks on the man-made system, both internal and external (Table 1).
Attacks on complex destruction of man-made system. with situation in external and internal infrastructures, let’s form integration process (Fig. 3).
Markings on Fig. 3.: - active influence factors on information, knowledge, goal-oriented factors operational administrative management system Strategic goal-oriented management system with all levels of infrastructure hierarchy ∋ Koord (Strat (U | Ci )) : SStratCu − Leve ∪ IS coordination management. on the basis of goal-oriented Σαrisk
Wij Σ Wij Σαrisk
Agents behavioral space (КІА) Information / knowledge
Economic interests (Сі)
Integration process Establishing basic (planned, project) integration features in agents images based on awareness of
economic interests and setting goals Acquiring actual integration features (codimensional verification of basic ones and introduction of new ones) during convergence (integration) of agents images on the basis of situational iterations of convergence - convergence according to economic criteria of interests with the use of existing and supplemented (new)
knowledge. 2 Fixation of integration signs in agents images with reproduction ("acceptance", "implementation" - in business processes and states 1 3 Information / knowledge
Economic interests Agent behavior space (КІАj)
Fi(Ai) Fz(Ak) Fc(Am) conditions of strategic level cognitive intellectual agent’s teams Main strategic management goal is the development of sustainable self-renewing methods process of production based on strategies of overall orientation, integration, and coordination under the conditions of active overall oriented threats. 10 .
V11 ,V12 ) goals and strategies coordination
(V12 ,V22 ) structure goal orientation (V12a ,V22a ) management'
s goal orientation (V13 ,V23 ) management
tactics (V14 ,V24 ) management
tactics dynamics (V15 ,V25 ) resistance to attack factors (V16 ,V26 )
mode indicators analysis (V17 ,V27 ) integration project team µ n (CF ) µ n (Bd )
Pr ob
Pr ob
Pr ob (0.7 ÷ 0.9) (0.7 ÷ 0.9) αr1 (0.1 ÷ 0.9) αr2 (0.1 ÷ 0.9) αr3 (0.1 ÷ 0.4) 3.4.
To analyze risks in man-made systems and build schemes and methods for their minimization and management, it is necessary to apply the risk analysis methodology, which is based on four components: 1. Risk factors source, structure models. 2. Scenarios of active actions and effects of factors on system functioning process. 3. Analysis of action results of active factors on system.
4. Attacks generators and activators.
Risk source is related to consequences of active actions through the scenario - a chain of events related to risk implementation in system, under certain conditions, which leads to negative consequences and accidents.
Chains, paths are actually development scenarios of a dangerous situation from the point of view of different positions and describe what can happen to system under action of active factors generated by risk source.
According to target task of developing methods for solving infrastructure cyber security problems, it has been completed: • • • • •
Analysis of the literature sources on man-made infrastructure cyber security, issues resistance to attacks and recovery in threats conditions; Tasks that need to be solved to ensure counteraction of attack management system and threats to infrastructure and system, target management strategies are substantiated; Cognitive principles of information provision necessary for creation of active resistance strategies to attacks on management structure based on strategies of coordination and overall orientation are substantiated; Information provision data flow processing methods for determining indicators of signs by an expert system as of countering threats strategy basis is substantiated; Interaction process between operational and target, cognitive and automated decision-making levels of management hierarchy was analyzed; Solving above problems on system and information levels can help modernize the existing infrastructure and improve their design process to increase comprehensive cyber security level.