This work proposes a platform for the safe intellectualization of society's infrastructure “objects-technologies-security” in the functional space “selection-information exchange-processing-management” by profiles-confidentiality, integrity, accessibility for “smart ecological monitoring”, “smart education”, “smart grid”, “smart transportation system” and other subject areas. The platform of safe intellectualization of objects is revealed by the concept of a multilevel security system of cyber-physical systems, which is the basis for building a paradigm of security of physical space, communication environment, and cyberspace. A system model of security of the three-layer architecture of the Internet of Things based on the concept of “object-threat-protection” was built. An adaptive model of security of wireless communication environment of cyber-physical systems for segments of society's infrastructure was analyzed. The presented common methodology of security of intellectualization processes allows to implementation of complex security systems of technologies for the safe functioning of objects of the infrastructure of society.
Formulation of the problem. The world is
unfolding processes of intellectualization in the
space of Industry 4.0, which include: the
introduction of intelligent technologies in
various segments of the infrastructure of society,
as a tool for the functioning of intellectual
objects; and the development of security
methodologies [
Analysis of the latest research. The literature
[
Development of approaches to the security of intellectualization technologies based on the structure “objects—CPSs—threats—protection” which will ensure the safe functioning of objects in the space “information selection—exchange— processing—management.”
The purpose of the work is to create a single platform for the safe intellectualization of society’s infrastructure based on the concept of a Complex Security System (CSS) of cyber-physical systems and system security of the Internet of Things.
Intellectualization of Society’s
The global challenges of the “Horizon Europe” program and the main directions of Ukraine’s development in the space of the National Industry Strategy 4.0 allow for identification segments of implementation of intelligent technologies—ecological monitoring of environmental components, education, energy systems, transportation systems that interact and systematically form “smart infrastructure” of the country with such characteristics as interoperability, virtualization, decentralization, real-time, service orientation, modularity. In the context of “smart ecology,” an important aspect is the system of local and global dynamic ecological monitoring of environmental parameters, in particular research ecological monitoring “program—IT—a methodology for assessing water quality”, which is introduced in the case of accidental pollution when control and operational monitoring do not meet the needs of ecological objectives aimed at normalizing the state of environmental components.
To monitor the quality of environmental
components, such as water objects, intelligent
systems for measuring their parameters have
been implemented, including intelligent
geographic information systems and remote
sensing of the Earth using the Landsat-8 satellite
to obtain multispectral images of the surface
water layer in the thermal infrared channel, and,
on this basis, determining its temperature as one
of the main indicators of quality [
The concept of digital transformation of education and science in Ukraine provides for the consideration of foreign experience and implementation through the following areas: (1) effective use of digital technologies in the educational process; optimization of management, regulation, and monitoring processes, which involve the creation of a digital educational environment equipped with computers, multimedia hardware, modern communication technologies; (2) professional development of research and teaching staff of educational institutions in the context of digital competencies; development of a system of standards in the field of digital technologies and standards of higher education, which are harmonized with international ISO standards. Smart grid and “smart transportation systems” are very relevant segments of the country’s industrial infrastructure today, which include the implementation of secure intelligent cyberphysical systems and the use of cryptographic means to securely exchange information in wireless communication technologies, including efficient encryption algorithms to ensure the security of information resources of users.
Consider a platform for the safe intellectualization of society’s infrastructure, which is based on the CPS and the concept of “object—threat—protection”, and is multilevel (Fig. 1). The first level is functional, which ensures the operability of the system “components of the infrastructure—operating technologies/“smart objects” (O1-N(R,S,T))—CyberPhysical Systems (CPS1-N(R,S,T))” according to the segments: N—“Smart Ecology” (SEc), R—“Smart Education” (SEd), S—“Smart Energy” (SEn), T— “Smart Transportation System” (STS). The second level is the integration of the CPS levels “Internet of Things (IoT1-N(R,S,T))—Wireless Technologies (WT1-N(R,S,T))—Information Systems (IS1-N(R,S,T))” and integration of one-tier components. The third level—processes of “Information Selection (S1-N(R,S,T))/control—Transmission/Reception (T1-N(R,S,T)/R1-N(R,S,T))—Processing Information (P1N(R,S,T))/Management (M1-N(R,S,T))”. The fourth level—threats to information security at the structural and functional level of the CPS (a1-N–b1N –c1-N (SEc); d1-R–e1-R–f1-R (SEd); g1-S–h1-S –i1-S (SEn); k1-T–l1-T–m1-T (STS)). Fifth level— hardware and software security technologies in the profiles “confidentiality—integrity— accessibility” (A1-N–B1-N –C1-N (SEc); D1-R–E1-R–F1-R (SEd); G1-S–H1-S–I1-S (SEn); K1-T–L1-T–M1-T (STS)). In Fig. 1, the structure of the safe intellectualization platform is shown only for the “smart ecology” segment.
Consider a multilevel cyber-physical system and the concept of multilevel information security. The multilevel hierarchical structure of CPS is presented in Fig. 2: Physical Space (PS)—the Internet of Things that interacts with physical objects/devices in which sensors are built; Communication Environment (CE)— wireless and wired communication technologies, cloud technologies; Cyberspace (CS)—information systems, information resources, information processes.
The multilevel structure of the CPS operates at the plane of two channels—measuring and control. A network of sensors based on MEMS technologies that combine microelectronic and micromechanical systems, as well as actuators in the process of monitoring infrastructure objects generate information (selection, measurement, registration) about the status of their parameters, which is transmitted wirelessly from the physical space of CPS for storage, processing, analysis and management. In cyberspace, based on the analysis of processed information, comparison with the normalized parameters of the object, and detection of deviations, the computer system decides to manage the state of the object through the communication environment and physical space of the CPS.
The concept of a complex security system of the CPS is based on the paradigm of “multilevel CPS—multilevel information security” and a system approach, which consists of applying the principles of hierarchy, structure, and integrity, which provide grounds for creating a CSS of cyber-physical systems in the segment of optimal combination of regulatory, organizational, informational, hardware and software at the stages of the safe life cycle of information.
The concept of a complex security system is determined by the structure: classification of threats—the formation of security criteria—the creation of a model of multilevel CSS of CPS—the choice of method for assessing the security of the cyber-physical system. The basis for building a multilevel CSS is universal platform “threats— profiles—tools”; information protection model in CPS “CPS level—STRIDE threat—security profile—security technology”; normative document ND TZI 3.7-001-99 “Methodical instructions on development of the technical task on the creation of the complex system of protection of the information in the automated system”, which regulates: requirements for the CSS in terms of protection against unauthorized access; requirements to the CSS in terms of protection against information leakage through technical channels.
The complex security system of the PS, connected to the Internet of Things, is based on the concept of “object—threat—protection” according to the segments: physical devices, in particular MEMS sensors (IEEE 2700-2014), and built-in actuators.
The complex security system of the CE is created based on the concept of “object— threat—protection” according to the segments: wireless communication technologies (ZigBee, Wi-Fi, Bluetooth, WiMAX, LTE, etc. (DSTU ISO/IEC 7498)); cloud technologies (DSTU ISO/IEC 17788:2017, NIST); wired communication technologies (networks based on coaxial (DSTU EN 50117) and fiber-optic cables (DSTU IEC 60794)).
The complex security system of the CS is formed based on the concept “object— threat—protection” by the segments— information resources: accidental, intentional threats—hardware and software protection; information systems: accidental, intentional threats—hardware and software multilevel protection; information processes: accidental, intentional threats—hardware, software protection (DSTU ISO/IEC 15408).
The IS management of a multilevel CPS is based on the methodology of applying methods, in particular, basic (ISO/IEC TR 13335-3:2007) and IS management models, including the “plan-perform—check—act” model (ISO/IEC 27001: 2010) to adjust the structure of the complex security system and ensure the effectiveness of information protection.
The concept of a complex security system of the CPS is universal in the space of functional tasks of safe intellectualization of infrastructure objects—monitoring, forecasting, diagnostics, interpretation, identification, etc.
One of the approaches to the safe functioning of the Internet of Things is to create a system model based on the concept of “object— threat—protection” and system principles— integrity, hierarchy, and structure.
The structure of the system model (Fig. 3):
(1) at each layer of the architecture of the
Internet of Things there are types of threats,
which are also unfolded by their subcategories;
(2) according to the layers of perception,
network, application—the types of security
technologies are presented and also unfolded
by their subcategories. According to this
structure, we give examples for each layer of
the IoT: one threat and the variety of its
subcategories; one security technology,
deploying its functional implementation with a
variety of tools [
Perception layer. This layer is characterized by the highest number of threats to the main security profiles (DSTU ISO/IEC 15408), as it is exposed to a set of threats related to the functional security of devices and sensors that interact with physical objects. Main threat— attacks on nodes (sensors and other devices that interact with the physical environment). Subcategories—destruction of the node (dealing damage to the device until its complete failure to disrupt the system and interrupt the process of collecting information), capture (usually carried out to gain access to sensitive information that can be stored on the device, and to be able to replicate node), cloning (replacement of the original device with third-party, programmed by an attacker and intended for unauthorized access to the network and transmission of false data) and jamming of the node (generating interference to prevent the transmission of information from the node to the network). At this layer, the key method of information protection is to ensure the physical security of the nodes, which is achieved by placing devices within the controlled area.
Network layer. Threat—network eavesdropping (interception of communications between devices in the network). Subcategories—passive (without direct intervention and change of information), active (attack “man in the middle”, editing transmitted information), traffic analysis (listening to network communications without compromising data, to determine the location of nodes, routing structure). An important security technology is the use of Intrusion Detection Systems (IDS), which can be presented by Network (NIDS), Host (HIDS), and even Intrusion Prevention Systems (IPS).
Application layer. Threat—malware.
Subcategories—common on the Internet of
Things ransomware, spyware, trojans, and
worms. One of the methods of protection of this
layer is the organization of secure software
development, which is implemented by three
technologies: secure coding, static and dynamic
code analysis, and explicit error checking of all
internally developed software [
The criterion for selecting IS threats of the
three-layer architecture of the Internet of Things
presented in the system model is the degree of
violation of functional security of infrastructure
objects (systems), which makes it impossible to
ensure their warranty and causes the functioning
of systems in the space of their information and
technical conditions: partially operational device
(safe), inoperable (safe), inoperable (dangerous)
(SOU-N NSAU 0060:2010). The criterion for
choosing security technologies is the optimal
effectiveness of counteracting the number of
threats and their subcategories at each layer of
the IoT [
In the context of the development of IS
technologies wireless sensor networks are
relevant: (1) methods of modeling the
functioning of sensor networks, in particular,
the parameters of signals of information nodes
as components of networks in anti-attack
modes; (2) study of vulnerabilities of sensory
subnets of the architecture of the Internet of
Things under the influence of a set of attacks
[
In the platform of infrastructure intellectualization (Fig. 1) wireless communication technologies are one of the functional levels of CPS, which is designed to exchange information between physical space (Internet of Things) and cyberspace (information system) in the process of extracting information from physical objects and state management based on data processing, analysis and decision-making.
In the concept of a complex security system of multilevel CPS (Fig. 2), wireless communication technologies are a segment of a secure communication environment. To ensure the secure exchange of information in the multilevel CPS, the adaptive model of security of wireless communication technologies is relevant (Fig. 4), which is also related to the system model of IoT security at the network layer (Fig. 3).
The adaptive model is characterized by: 1) a single functional structure of information protection—external security, internal security, and information security policy; 2) a specialized structure of the CSS based on the concept “object—threat—protection”, due to a set of threats to the infrastructure of society: “smart environment”, “smart education”, “smart energy”, “smart transportation system”.
The external level of security of wireless technologies is provided by the system of protection of the perimeter of the object of intellectualization, which has the appropriate protection criteria and degree of complexity. The main perimeter security technologies aimed at counteracting the threat of unauthorized access to the resources of the object of intellectualization are video surveillance cameras, access control systems, electronic locks, and biometric recognition systems. The internal level of security of wireless technologies is determined by the categories of threats, classified according to various criteria, including threats by the nature of occurrence: objective (natural), and subjective (artificial); among the subjective threats are accidental and intentional. The main tasks of IS of intelligent technologies are connected with counteraction to intentional (targeted) threats.
A platform for the safe intellectualization of society’s infrastructure is proposed, which is the basis for creating a conceptual approach to the safe selection of information, secure data exchange; safe handling, and condition management. The concept of CSS of the cyberphysical system—a tool for the intellectualization of objects, which is the basis for building security models of technologies of physical space, communication environment, and cyberspace under the influence of threats to confidentiality, integrity, and accessibility was created. The Internet of Things and wireless technologies security was developed at the level of system and adaptive models by probable threats, which ensures secure information exchange in a multilevel cyberphysical system.