<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta>
      <journal-title-group>
        <journal-title>Journal of
Universal Computer Science</journal-title>
      </journal-title-group>
    </journal-meta>
    <article-meta>
      <article-id pub-id-type="doi">10.1007/978-3</article-id>
      <title-group>
        <article-title>Optimization of the Structure of an Information Security Textbook using Genetic Algorithm</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Valerii Lakhno</string-name>
          <xref ref-type="aff" rid="aff2">2</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Yurij Tikhonov</string-name>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Nazym Sabitova</string-name>
          <email>sab_nazym@mail.ru</email>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Lidiya Taimuratova</string-name>
          <email>taimuratova@mail.ru</email>
          <xref ref-type="aff" rid="aff3">3</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Mereke Zhumadulova</string-name>
          <email>mereke.zhumadilova@yu.edu.kz</email>
          <xref ref-type="aff" rid="aff3">3</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>L. N. Gumilyov Eurasian National University</institution>
          ,
          <addr-line>2 Satpayev str., Astana, 010000</addr-line>
          ,
          <country>Republic of Kazakhstan</country>
        </aff>
        <aff id="aff1">
          <label>1</label>
          <institution>Luhansk Taras Shevchenko National University</institution>
          ,
          <addr-line>3 Koval str., Poltava, 36003</addr-line>
          ,
          <country country="UA">Ukraine</country>
        </aff>
        <aff id="aff2">
          <label>2</label>
          <institution>National University of Life and Environmental Sciences of Ukraine</institution>
          ,
          <addr-line>6a Heroyiv Oborony str., Kyiv, 03041</addr-line>
          ,
          <country country="UA">Ukraine</country>
        </aff>
        <aff id="aff3">
          <label>3</label>
          <institution>sh. Yesenov Caspian University of technology and engineering</institution>
          ,
          <addr-line>32 Microdistrict, Aktau, 130000</addr-line>
          ,
          <country>Republic of Kazakhstan</country>
        </aff>
      </contrib-group>
      <pub-date>
        <year>2015</year>
      </pub-date>
      <volume>17</volume>
      <fpage>989</fpage>
      <lpage>996</lpage>
      <abstract>
        <p>The work shows that using a Genetic Algorithm (GA), it is possible to solve the following problems: eliminating parallel edges, cycles, loops, duplicating vertices with similar parameters, and other features of the structure of a Computer Ontology (CO) graph. Such CO optimization with the help of GA, for example, of the Information Security (IS) Subject Area (SBA), helps to eliminate logical contradictions that violate the integrity of CO and reduce the efficiency of the functioning and application of the Electronic Textbook (ET). It is also shown that the optimization of the IS SBA CO content is carried out to increase its information richness and ensure adaptation to the information needs of users through a periodic reduction in the volume of the SBA CO to specified limits. The solution was achieved by extracting IS CO elements whose semantic meaning is less than the required one. It has been established that the optimization problem for CO can be reduced to a discrete optimization problem, the algorithms for effective solutions of which using GA are known.</p>
      </abstract>
      <kwd-group>
        <kwd>1 Information security</kwd>
        <kwd>electronic textbook</kwd>
        <kwd>computer ontologies</kwd>
        <kwd>optimization</kwd>
        <kwd>genetic algorithm</kwd>
      </kwd-group>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>1. Introduction</title>
      <p>In today’s digital world, data plays a key role.
Companies, governments, and even ordinary
people store and transmit large amounts of
information. Therefore, developing IS
competencies will allow users to protect their
data from leaks, hacker attacks, and other
threats [1, 2].</p>
      <p>Acquiring competencies in the field of
information security has several key reasons
and important aspects, among which are: the
ability to recognize the signs of possible
attacks and apply appropriate information
security measures; compliance with
regulations and laws, which will allow
companies and organizations, while complying
with information security rules, to avoid fines
and negative consequences for their business
processes; career development, since
specialists with competencies in the field of
information security can count on career
growth [3, 4].</p>
      <p>Note that the ontological approach in
teaching information security can be very
useful, starting from primary school age, since
CO is a structured description of concepts,
terms, and their relationships in a certain field
of knowledge [5, 6]. The use of CO when
forming the structure of, for example, an ET on
information security issues can simplify the
understanding of complex concepts related to
information security and information security.</p>
      <p>The use of CO when teaching the basics of
information security allows to: structure the
knowledge of students so that it is easier for
them to navigate a large amount of information
and understand the relationships between
various concepts of information security;
visualize the hierarchy of concepts and
connections between them in the field of
information security, which makes educational
material more accessible and understandable,
especially for schoolchildren; build various
training cases and scenarios to better
understand the relationships between
vulnerabilities, threats and information
security measures, etc.</p>
      <p>All of the above served as the motivation for
the study aimed at optimizing the structure of
the ET for the IS course, designed for
schoolchildren.
2. Procedures for Optimizing
Computer Technologies of
Electronic Textbooks on
Information Security
The complex structure of relationships
between the concepts reflected in the ontology
of information security management systems,
as well as its dynamic content during
operation, requires the use of certain
optimization procedures. These procedures
are implemented to minimize response times
to requests; meet the requirements, but not
exceeding the space allocated for placing the
ontology in computer memory; resolve
conflicts between data entered from different
sources, as well as meet other requirements
and criteria that are to be determined during
the development of specific information
security controls.</p>
      <p>We should not forget about the specific
requirements dictated by the characteristics
of, for example, a specific category of students.
CO optimization is also carried out to adapt its
content to the information needs of users,
excluding elements that are rarely used or not
used at all. For example, for schoolchildren,
several concepts do not have to be taught as
part of the information security program. For
example, such complex categories as network
protocols are not immediately perceived by
older categories of students.</p>
      <p>In terms of graph theory, CO structural
optimization (elimination of conflicts,
preservation of integrity, compliance with
restrictions on the maximum volume) consists
of alternating procedures for adding and
reducing the ontology graph. This optimization
affects parameters within a given range of
values of the number of vertices in the case of
maximizing the sum of the importance
coefficients of its vertices and CO edges.</p>
      <p>Checking the connectivity of a graph can be
done using the consequences of the theorem
on estimating the number of edges through the
number of vertices and the number of
connected components [7].</p>
      <p>If we denote by p and q —the number of
vertices and edges of the graph, respectively,
the following two conditions must be met [7, 8]:
1. if q  ( p − 1)( p − 2) / 2 then the
graph is connected.
2. for the connected graph it is true
− 1  q  p( p − 1) / 2.</p>
      <p>When making changes—adding new
elements to the CO, CO modifying, or removing
CO elements—the system must check the CO
integrity. That is, the CO is checking for the
absence of duplicate and/or mutually negative
statements. This procedure can be
implemented through a mechanism for
detecting test reviews that are opposite in
content by comparing them (contrasting them)
in the case of sequential logical inversion of
one of the review statements using the
resolution method. If direct and inverted
statements coincide, the system will receive a
signal that integrity has been violated [5, 6].</p>
      <p>Let’s consider an example of one of the
topics in the discipline “Information Security,”
and more specifically consider the topic—
“Database Protection (DBP).” The example is
taken as closely related to related topics of ET
in information security, as well as to the
disciplines: basics of programming, basics of
algorithmization, etc.</p>
      <p>Let’s consider, for example, a CO fragment
of the topic—DBP, see Fig. 1.
In Fig. 1, the root concept of the ontograph is
divided into levels of depth of knowledge about
the SBA (horizontal orange lines). Moreover:
the depth, heights of the concept (tier), and
width of the graph are quite large. This is not a
tree, so it is impossible to talk about the
balance of the tree. Note that the presence of
cycles also interferes with the perception of the
ontograph. There is branching of the graph and
edge density, which characterizes the
proximity of the graph to a fully connected
graph. Note that the variety in the number of
connections in Fig. 1 is irregular. There is
graph entanglement, which includes analysis
of the ratio of the number of vertices with
multiple inheritance to the number of all
vertices in the graph and analysis of the
average number of parent vertices for a vertex.</p>
      <p>In general, if you include all the concepts of
the fragment and their connections in the ET
IS, then the ET will be relevant to modern
knowledge about SBA, but difficult to perceive
and weakly cognitive.</p>
      <p>To improve perception, the expert (in this
case, a teacher of the IS discipline preparing
the corresponding ET) outlines, based on the
syllabus and his experience, the level of depth
of studying SBA, indicating on the ontograph
the concepts up to which the student should
study SBA—IS.</p>
      <p>All higher-level concepts from those
indicated up to the root are automatically
included in the ET based on the CO description.
To improve perception and for ET correct
operation, the ontograph is divided into
branches. Each branch leads from the root
concept to the final concept specified by the
expert. Graph processing methods are used.</p>
      <p>The procedure for selecting the final
concepts of a branch is poorly formalized. For
example, it would be possible to set the depth
of the SBA study (and the final concepts of the
branches) according to the levels of the
ontograph.</p>
      <p>
        The educational SBA CO for the topic
“Database Protection” includes about 200
concepts. It is irrational to work with a matrix
of dimension 200, much less carry out manual
procedures using an optimization algorithm.
Therefore, for illustration, let’s take a small
fragment of the ontograph. Let us select from
the fragment (see Fig. 1) the vertices selected
by the expert (see Fig. 2), and illustrate with
them the matrix description and then the steps
of the GA.
In Fig. 2, the selected vertices are numbered.
Note that the selection of vertices was carried
out subjectively to demonstrate the general
concept of the possibilities of computer
optimization of an ontograph using GA [
        <xref ref-type="bibr" rid="ref6">9, 10</xref>
        ].
      </p>
      <p>Let’s simplify the graph by removing the
names of the vertices and leaving only their
numbering. As a result, we get the following
image, see Fig. 3.
1
4
5
6
3
Based on the adjacency matrix, we encode the
chromosome consisting of the vertices of the
original graph. Based on a GA implemented in
Python, see Fig. 4, a graph structure was
obtained with a procedure for dividing the
vertices of the graph of ET computer
ontologies according to the information
security course, see Fig. 5.
The proposed methodology for modifying CO
for ET using the example of one of the topics of
the IS SBA, by representing CO in the form of a
graph and using techniques for working with
the graph and finding optimal paths on the
graph, in particular, GA can be used to
automate the preparation of ETs in other areas.
However, at this stage, there are no
appropriate computer tools. In particular, to
transform the CO OWL description into a
computer description of the graph
corresponding to the CO ontograph. Such a
transformation manually is not possible due to
the large dimension of the problem.</p>
      <p>Therefore, for the full implementation of
this methodology, it is necessary to create a
tool that automates this procedure for ET
development. This is a prospect for further
research on this topic.</p>
    </sec>
    <sec id="sec-2">
      <title>3. Conclusion</title>
      <p>As a result of the study, the following results
were obtained:
• It is shown that with the help of a GA, it
is possible to solve the following
problems: eliminating parallel edges,
cycles, loops, duplication of vertices with
similar parameters, and other features of
the structure of a CO graph. Such CO
optimization with the help of GA, for
example, of the IS subject area SBA, helps
eliminate logical contradictions that
violate the CO integrity and reduce the
efficiency of the ET.
• It is shown that the optimization of the IS
SBA CO content is carried out to increase
its information richness and ensure
adaptation to the information needs of
the user through a periodic reduction in
the volume of the SBA CO to specified
limits. The solution is achieved by
extracting CO elements whose semantic
meaning is less than the required one.
• It has been established that the
optimization problem for CO can be
reduced to a discrete optimization
problem, the algorithms for effective
solutions of which using GA are known.</p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          <string-name>
            <given-names>H.</given-names>
            <surname>Hulak</surname>
          </string-name>
          , et al.,
          <article-title>Dynamic Model of Guarantee Capacity and Cyber Security Management in the Critical Automated System</article-title>
          ,
          <source>in: 2nd International Conference on Conflict Management in Global Information Networks</source>
          , vol.
          <volume>3530</volume>
          (
          <year>2023</year>
          )
          <fpage>102</fpage>
          -
          <lpage>111</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          <string-name>
            <given-names>V.</given-names>
            <surname>Grechaninov</surname>
          </string-name>
          , et al.,
          <source>Formation of Dependability and Cyber Protection Model in Information Systems of Situational Center, in: Workshop on Emerging Technology Trends on the Smart Industry and the Internet of Things</source>
          , vol.
          <volume>3149</volume>
          (
          <year>2022</year>
          )
          <fpage>107</fpage>
          -
          <lpage>117</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          <string-name>
            <given-names>P.</given-names>
            <surname>Anakhov</surname>
          </string-name>
          , et al.,
          <article-title>Increasing the Functional Network Stability in the Depression Zone of the Hydroelectric Power Station Reservoir</article-title>
          ,
          <source>in: Workshop on Emerging Technology Trends on the Smart Industry and the Internet of Things</source>
          , vol.
          <volume>3149</volume>
          (
          <year>2022</year>
          )
          <fpage>169</fpage>
          -
          <lpage>176</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          <string-name>
            <given-names>P.</given-names>
            <surname>Anakhov</surname>
          </string-name>
          , et al.,
          <article-title>Protecting Objects of Critical Information Infrastructure from Wartime Cyber Attacks by Decentralizing the Telecommunications Network</article-title>
          ,
          <source>in: Workshop on Cybersecurity Providing in Information and Telecommunication Systems</source>
          , vol.
          <volume>3550</volume>
          (
          <year>2023</year>
          )
          <fpage>240</fpage>
          -
          <lpage>245</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          <string-name>
            <given-names>M.</given-names>
            <surname>Uschold</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Gruninger</surname>
          </string-name>
          , Ontologies: Principles, Methods and Applications, Knowl.
          <source>Eng. Rev</source>
          .
          <volume>11</volume>
          (
          <issue>2</issue>
          ) (
          <year>1996</year>
          )
          <fpage>93</fpage>
          -
          <lpage>136</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          <source>doi: 10</source>
          .1017/S0269888900007797.
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>