Protection of classified information, especially state secrets, is an important task in the field of national and information security of the state. To minimize possible damage to the national security of Ukraine from violations in the field of state secret protection and to reduce the negative international rating and other serious consequences at the state level, the task of creating specialized databases, developing and improving existing methods and models that implement relevant assessments is urgent. That is why the theoreticalmultiple presentation of the parameters of the “Report on the State of Protection of State Secrets” in tuple models allows solving the actual scientific and practical task of formalizing the process of assessing the negative consequences of leaking a state secret, its disclosure or loss of Material Carriers of Secret Information (MCSI), violation of the secrecy regime and state of ensuring the protection of country's secrets in general. Previously, a tuple model of primary and internal parameters was developed, and now, as its completion, a model of secondary parameters and its hierarchical structure has already been proposed, due to the integrated theoretic-multiple representation of sets characterizing information: the implementation or ordering (scientific and/or scientific and technical support) of secret research, development, design and other scientific works, manufacture of secret products, regime premises, objects of information activity, international cooperation, etc., allows to determine sets of input and output parameters for the formation of special databases and formalization of the process of damage assessment caused to national security by violations of state secret protection mechanisms. In the future, to implement the above-mentioned process, it is necessary to develop a method of assessing the state of protection of the country's secrets both separately for the subject of regime-secret activity (reporting entity) and for the organization (institution) to which the reporting entities are directly subordinated.
From 2014 to the present, the number of security breaches
as a result of treason and/or sabotage, in terms of loss,
disclosure, or transfer of information including information
with limited access, especially State Secrets (SS), is increased
significantly both in the world [1, 2], as well as in Ukraine
[
The report was supplemented with dynamically
changing sets of identifying and evaluation parameters for
determining the state of the provision of SSP, presented in
separate sections of this report. The specified update makes
certain corrections and additions to the already developed
model for assessing the consequences of the leaks of state
secrets from cyber attacks on the critical information
infrastructure of the country [
Therefore, the generalization and presentation of these parameters by a tuple model is an urgent scientific goal, which allows solving the scientific and practical tasks of forming a database of parameters of the state of SSP provision for creating a method of processing input data (identification, static and other sets) and formalizing the process of assessing the state of SSP at CIS from the negative consequences of a SS leak or caused by the loss of MCSI or its disclosure.
In this regard, the purpose of this work is to develop a model for the formation of a database of secondary parameters, which, due to the theoretical multiple representations of parameters as identification, static, and other sets of input data, allows to assess the state of provision of SSP for SRSA at OCI in the event of negative consequences (damages) caused by the leak of SS, its disclosure or loss of the MCCI, breach of the secrecy regime, etc. 3. Completion of model
development
We will use the set of all possible identifiers of IS
(Information about the Subject) tuples, which can be used to
display information about SRSA and use it in the process of
detecting and assessing the consequences in case of loss of
SS [
For example, at = 4 (1) will have the form [
І , where = , = , = , = І is respectively, the identifiers of the tuples of the SRSAs National Aviation University (NAU), Zhytomyr Military Institute named after S. P. Koroliov (ZMI), National Academy of the Security Service of Ukraine (SSU), Sumsk Investigator’s Isolator (SIІ).
For the φth SRSA, the tuple of parameters that characterizes it has the following form: , , … , , … , 〉, (2) where ⊆ ( = 1, ) is the component of the tuple, which is a sub-tuple, maps the ith identifier to the φth SRSA parameter, and k is the maximum number of such parameters. Significantly, all members are characterized by order property.
For example, according to the Generalized Report and
the Report [
Let’s divide the components of Table 1 by types of
parameters primary, internal, and secondary. The first
group of (primary) and the second group of (internal)
parameters are discussed in detail in scientific papers
[
Information about the reporting entity, its subordination, and departmental
affiliation
Information about RSO, financing of activities for SSP
Information on whether employees of the reporting entity have permission
and access to state secrets
Information on the number of material carriers of classified information (MCCI)
Information on the implementation (scientific and/or scientific and technical
support) of secret research, development, design, and other scientific works,
the manufacture of secret products
Information regarding the orders (scientific and/or scientific and technical
support) of secret research, development, design, and other scientific works,
the manufacture of secret products
Information about regime premises, objects of information activity
Information about the facts of losses of the MCCI or the disclosure of
information constituting a state secret, as well as information with limited
access to foreign states or international organizations
Information about international cooperation
Information about the reporting entity, its subordination, and departmental
affiliation
Information about RSO, financing of activities for SSP
The fifth component of the sub-tuple
is Section 5
(“Information on the implementation (scientific and/or
scientific and technical support) of secret research,
development, design, and other scientific works, the
manufacture of secret products”) is filled in by the SRSA
(institutions) that are contractors of works and products as
of the end of the reporting period by filling in the
appropriate columns (parameters):
[
( = 1, ) is ith identifier of the number of secrecy classifications, and is their quantity.
According to the Law of Ukraine “On State Secrets” [
= 〈 . = of the number of total works (the sum of graphs 6–13), and is their number according to , that is, according to a form: therefore, works in total at the NAU by secrecy classification: “secret”—30, “top secret”—15: where . ⊆ specific secrecy classification (for example, at = 1 for = 1 ( = 1), then (6) will acquire the . = = = . , … , … , … , . , … , … , … ,
, and is their quantity for , that is, according to the actual classification of secrecy (for example, at = 1 for = = 1 ( = 1), then (7) will acquire the form: i.e. the NAU performs the works, including the state defense order, with the secrecy classification “secret”—30, “top secret”—15). , . = = = . , … , … , … , . , … , … , … ,
, =
, =
, .
,
2) “top secret”: completed in the reporting period—5;
classification:
terminated in the reporting period—2; which were not
1) “secret”: completed in the reporting period—10;
performed in the reporting period—2; the implementation of
terminated in the reporting period—2; which were not
which at the end of the reporting period continues—1).
=
=
.
.
. =
=
. =
=
,
where
according to the specific ith secrecy classification (for example,
taking into account [
,
=
1) “secret”: completed in the reporting period—5;
terminated in the reporting period—2; which was not
which continues as of the end of the reporting period—1.
performed in the reporting period—2; the execution of
which continues as of the end of the reporting period—1;
( = 1, , = 1, ) is jth identifier
secrecy classification (for example, considering [
= . , … , … , … , . , … , … , … ,
, of the number of components of secret SRW, RDW, design, and other scientific works with the secrecy classification, аnd is their number for each , that is, according to the specific ith for , .
= {“10”}, {“5”} . the total number of products (the sum of graphs 16–21), and y7 is their number (for example, taking into account the
Therefore, at the NAU products in total with the secrecy classification “secret”—10, “top secret”—5.
= .
= , = .
= . , … , … , … , . , … , … , … ,
, (10) (11) of the number of products, including the state defense order, is their number for , that is, according to the form:
Therefore, at the NAU the number of products, including products by state defense ordering with secrecy classification: “secret”—10, “top secret”—5).
where
of the number of secret products, аnd is their number for
each , that is, according to the specific ith secrecy
classification (for example considering [
, .
, , , . , . ,
= {“4”, “1”, “1”}, {“1”, “1”, “1”} , = 1) “secret”: manufactured in the reporting period—4; secrecy classification: which were not produced in the reporting period—1; the . . production of which continues as of the end of the reporting production of which continues as of the end of the reporting period—1;
2) “top secret”: produced in the reporting period—1; . specific ith secrecy classification (for example, considering .
= i.e. at the NAU the number of components of secret of works and products as of the end of the reporting period = 〈 . , (institution) is the customer and not the contractor of works
Then filling in the parameters of the subtuple identical to the parameters of the subtuple as = ∉
and there is only the presence of according to formula (3), that is, SRSA (institution) is the contractor, not the customer of works and
The Seventh Component of the Subtitle Section VI (“Information about Premises, Objects of Information
Activity”) is completed by the SRSA (institution) as of the end of the reporting period by filling in the corresponding columns (parameters): is is (14) =
1) “secret”: manufactured in the reporting period—2; which were not manufactured in the reporting period—1; the manufacture of which as of the end of the reporting period continues—1;
2) “top secret”: manufactured in the reporting period— 1; which were not manufactured in the reporting period—0; the manufacture of which continued at the end of the reporting period—1.
The sixth component of the subtuple is Section V (a) (“Information about ordering (scientific and/or scientific and technical support) of secret scientific research, research and development, design and other scientific works, production of secret products”) is completed by the SRSA (institutions) that are the customers use SRSA
=
For example, to assign specific values to the following five parameters of the seventh component ⊆
let us
[
= . , . = = = . , … , … , … , . , … , … , … ,
, i.e. at the NAU, the number of regime premises with the secrecy classification:
1) “secret”: intended for the storage of MCCI during non-working hours—1; other regime premises—2; 2) “top secret”: designated for storage of MCCI during non-working hours—1; other regime premises—1.
where . = ( = 1, , = 1, ) is іth identifier of the number of certified objects of information activity, suitable for the circulation of linguistic secret information, and is their number for , that is, according to a specific ith secrecy classification (for example, taking into account at = 1 for = 2 ( = 1,2), = 1 ( = 1) then (16) will acquire the form: .
= . . = . , . , . , i.e. at the NAU the number of certified objects of information activity suitable for the circulation of linguistic secret information by secrecy classification: “secret”—1, “top secret”—1.
,
where . = ( = 1, , = 1, ) is jth
identifier of the number of certified information and
telecommunication systems, suitable for circulation of
secret information, and is their number for each , that
is, by a specific ith secrecy classification (for example, taking
into account [
1) “secret”: local computing networks—1; PCs (including local computing networks)—2; other information, telecommunication, information-telecommunication systems—1; the number of subscriber installations of longdistance/city government communications—1;
2) “top secret”: local computing networks—0; PC (including local computing networks)—0; other information and = 〈 telecommunication systems—1; number of long-distance/local government communication subscriber installations—1.
The eighth component of the subtuple is Section VII (“Information on the facts of the losses of MCCI or the disclosure of state secrets, as well as information with restricted access of foreign states or international organizations”) is completed by the SRSA (institutions) as of the end of the reporting period by filling in the relevant graphs (parameters): where . ⊆ ( = 1, ) is the component of the subtuple that displays ith identifier of parameters of φth SRSA (institution), and w is their quantity.
For example, respectively [
access to foreign states or international organizations and Losses of its MCCI.
For example, to assign specific values to the next four parameters of the eighth component ⊆
= {“NAU”}. , , … ,
, = = ,
= {“0”}, = = {“1”}. , , … , , (19) (20) (21) (22) i.e. at the NAU the number of facts of disclosure of information constituting a state secret—0.
That is the number of losses of MCSI—1.
RDW, design, and other scientific works with the following secrecy classifications:
1) “secret”: completed in the reporting period—5; terminated in the reporting period—2; which was not performed in the reporting period—2; the execution of which continues as of the end of the reporting period—1.
2) “top secret”: completed in the reporting period—2; terminated in the reporting period—1; which were not performed in the reporting period—1; the implementation of which continues as of the end of the reporting period—1. “Information information about regime
premises, objects of activity” is completed by the
SRSA (institution) as of the end of the reporting period by filling in the corresponding columns (parameters): where ⊆
( = 1, ) is ith identifier of the number of facts of disclosure of information constituting a state secret, and is their quantity (for example, at = 1, = 1 ( == 1) then (19) will be as follows: where ⊆
( = 1, ) is ith identifier of the number of facts of losses of MCSI, = {“0”}, i.e., at the NAU, the number of facts of disclosure of information
with limited access to foreign states or international organizations and losses of its MNI—1.
The ninth component of subtuple is Section VІ, i.e. the NAU carried out work on components of secret SRW, = 〈 . = conditional (if available) name of the reporting entity”. delegations of foreign states and international organizations, as well as by foreigners and stateless persons. are at the SRSA. countries and international organizations received.
is the set Number of Delegations of foreign is the set Number of Foreign Advisers who
=
For example, to assign specific values to the next five parameters of the ninth component ⊆ . = . = . =
= =
= = where ⊆
( = 1, ) is ith identifier of the number of delegations of foreign states and international organizations received, and , … , where ⊆
( = 1, ) is ith identifier of the number of foreign trips, and = {“12”}, = {“NAU”}.
, … , , … , = = , … , , , , , i.e. the number of delegations of foreign states and international organizations received at the NAU is 8.
=
= {“8”}, = number of premises visited by delegations of foreign states and i.e. at the NAU, the number of premises visited by delegations international organizations, as well as by foreigners and of foreign states and international organizations, as well as by stateless persons, and is their quantity (for example, at = foreigners and stateless persons is 5. 1, = 1 ( = 1) then (23) will be as: = = = = , , (23) (24) (25) (26) that is at the NAU the number of foreign advisers which are on the SRSA is 0. i.e. at the NAU the number of foreign trips is 12.
The general hierarchical structure of the developed model (taking into account the above examples) is presented in Fig. 1.
A tuple model was developed, which, due to the theoreticalmultiple approach to the formation of sets of tuple models, provides an integrated representation of the secondary parameters of the state of provision of SSP in the SRSA, which characterizes the information on the implementation of ordering (scientific and/or scientific and technical support) of secret research, research and development, design and other scientific works, the manufacture of secret products, as well as on regime premises, objects of information activity, international cooperation, etc., allows determining a set of input and output parameters for the formation of special databases and the formalization of the process of assessing the negative consequences (damages) caused to the national security of Ukraine from violation of the secrecy regime and the state of provision of SSP.
In the future, to implement the above-mentioned
process, it is necessary to improve the existing methods [