<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>Dynamic Models of Multi-Profile Resource Provision of Information System Protection and Survivability⋆</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Yevhen Derevianko</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Stanislav Denysyuk</string-name>
          <email>sstdenysyuk@gmail.com</email>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Viktor Shevchenko</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>Institute of Software Systems of the National Academy of Sciences of Ukraine</institution>
          ,
          <addr-line>40/5 Academician Glushkova ave., 03187 Kyiv</addr-line>
          ,
          <country country="UA">Ukraine</country>
        </aff>
      </contrib-group>
      <fpage>437</fpage>
      <lpage>448</lpage>
      <abstract>
        <p>The paper is devoted to the topical issue of the development of methods for creating dynamic models of multi-profile resource support for information protection and survivability of information systems. Analysis of existing research on the topic of the paper revealed a contradiction between the need for practice in methods of dynamic modeling of multi-profile resource support for information protection, survivability of information systems, and the imperfection of existing theoretical and applied approaches to this issue. The purpose of the study is to increase the effectiveness of dynamic models of multi-profile resource support for information protection and survivability of information systems. A feature of the formulation of the research task is the consideration of technologies for ensuring information protection and survivability of information systems as a set of technologies that work together for a common beneficial effect. At the same time, each component technology has its separate resource, which it converts into a useful effect. The most adequate dependence for the basic models was recognized as a logistic model. The results of the research of V. Shevchenko and Y. Syvytsky were taken as basic technology models. The following classification of logistic development dependencies was used: EGEL/BiS, EL/BiS, EL/BLO, EL/BiF. Models of the interaction of component technologies were built based on additive and multiplicative convolutions. The simulation results showed that the results of both types of convolutions are very similar to logistic dependencies of EGEL or EL type. It was found that the more the symmetry points of individual logistic dependencies differ, the more the effects of steps are manifested in the results of additive convolution. The primary qualitative nature of the dependencies is most preserved in the results of additive convolution of EL-type technologies. The result of multiplicative convolution is EGEL-type dependencies regardless of the primary type of dependency. In this case, there is a clear loss of the central symmetry of the dependencies.</p>
      </abstract>
      <kwd-group>
        <kwd>eol&gt;computer simulation model</kwd>
        <kwd>information system</kwd>
        <kwd>information protection</kwd>
        <kwd>survivability</kwd>
        <kwd>logistic dependence</kwd>
        <kwd>useful effect</kwd>
        <kwd>resource</kwd>
        <kwd>management decision support</kwd>
        <kwd>automation</kwd>
        <kwd>optimization</kwd>
      </kwd-group>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>1. Introduction</title>
    </sec>
    <sec id="sec-2">
      <title>2. Analysis of existing studies</title>
      <p>The works of many authors are devoted to ensuring the information protection and survivability of
information systems.</p>
      <p>
        In [
        <xref ref-type="bibr" rid="ref1">1</xref>
        ], the issues of survivability of information systems are thoroughly considered, but
insufficient attention is paid to the creation of dynamic models of the corresponding processes. In
addition, organizational issues of information protection management are not considered. A
detailed analysis of organizational issues at the project management level is considered in [
        <xref ref-type="bibr" rid="ref2 ref3">2, 3</xref>
        ],
but they do not contain methods for assessing the level of information danger. The issues of
assessing the level of information security are considered in [
        <xref ref-type="bibr" rid="ref4">4, 5</xref>
        ], and organizational issues of
information security management are considered in [6–8]. Unfortunately, these works do not
disclose the issues of creating relevant models. Methodological approaches to creating dynamic
models are considered in [9], but the issues of ensuring the survivability of information systems are
not considered. Modeling threats of epidemiological type computer attacks are considered in [10],
but the issues of the beneficial effect of the joint use of different technologies are not considered.
Cyber protection models and dynamic cybersecurity models are considered in [11, 12], but they do
not contain an assessment of the results of technology sharing. Modeling the results of technology
sharing is considered in [13], but only the issues of transforming the structure of projects or
technologies are considered. That is, the sequential use of technologies is considered. The beneficial
effect of the simultaneous use of resources or technologies is considered in [9], but the specifics of
information protection technologies and ensuring the survivability of information systems are not
taken into account.
      </p>
      <p>Thus, during the analysis of existing research, a contradiction was identified between the need
for practice in methods of dynamic modeling of multidisciplinary resource support for information
protection, survivability of information systems, and the imperfection of existing theoretical and
applied approaches to this issue.</p>
      <p>The purpose of the paper: is to increase the effectiveness of dynamic models of multidisciplinary
resource support for information protection and survivability of information systems.</p>
    </sec>
    <sec id="sec-3">
      <title>3. Classification of logistic models of effectiveness of projects ensuring the survivability of information systems</title>
      <p>In the works of Y. Syvytsky and V. Shevchenko, the use of an atomic development model is
proposed, which in itself implements the simplest patterns of development, but at the same time
can be part of very complex hierarchical structures (Fig. 1). In each node of such a model, an
exponential or linear dependence of the growth of the useful effect on the input resource can be
implemented. At the output of the model (upper node) as a useful effect, we can receive the level of
cybernetic or information security, the quality of performing individual tasks regarding the
security of the information system, and the profit of the organization, as the difference between
economic profit and losses from cybernetic or information security incidents. Any resource or
combination of resources can be supplied to the input of the system (inputs of lower-level nodes):
finances, material resources, human resources, technologies, licenses, property rights, level of
reputation, time, etc. In this study, the time of technology implementation or the time of project
implementation to ensure information protection and the survivability of the information system is
considered as an input resource. If instead of a useful effect, negative results are obtained at the
output, then we will still call them a useful effect. Only this useful effect will have a negative sign.
This approach allows us to develop a single technology for predicting the dynamics of the
development of complex technologies that contain many different component technologies.
It is well known that atomic models, which make up more complex models of large technologies,
implement exponential and linear development dependencies. However, the processes always
begin with exponential growth, in which resource consumption does not lead to a noticeable
increase in the useful effect (latent period of technology implementation). Then begins a stage of
sharp growth (first exponential, then linear), which corresponds to the full development of
technology, in which the useful effect at the output of the system is proportional to the resources
entering the system. Unfortunately, the capabilities of any technology are not unlimited. Therefore,
there comes a time when the technology approaches the limit of its maximum development and
any additional resources do not lead to its further growth. This stage corresponds to the model of
exponential growth in the zone of approximation to the upper asymptote (saturation zone). To
combine all the stages that we have considered, we use a common model based on logistic
dependence.</p>
      <p>The logistic dependence can be written as an ordinary differential equation
where E is the useful effect at the output of the system (atomic model), t is the time, d is the
lower asymptote of development, a is the upper asymptote of development, m—coefficient that
determines the growth rate of the logistic dependence, the multiplier ( E−d ) provides slow growth
along the lower asymptote, and the multiplier ( a− E ) provides a slowing down of growth when
approaching the upper asymptote. The differential form of the logistic dependence clearly shows
that the fastest growth occurs at the maximum distance of the process from both asymptotes. The
symmetry of the multipliers on the right-hand side of the differential equation determines the
central symmetry of the logistic dependence. The result of solving the differential equation with
constant coefficients is the integral form of the logistic dependence
dE</p>
      <p>=m ( E−d )( a− E ) .</p>
      <p>dt
E=SL (t )=d +</p>
      <p>a−d
1+ e−T2 (t−s)
.</p>
      <p>The following variables were added to this equation: T is the constant of the logistic
dependence, s is the abscissa of the point of central symmetry of the logistic dependence. The
abscissa of the point of central symmetry depends on the initial conditions for integrating the
differential equation of the logistic dependence.</p>
      <p>In real tasks of ensuring information protection and survivability of information systems,
resources are multi-profile. That is, just as in (Fig. 1), several different resources that interact with
each other enter the system input. The main types of interaction are additive and multiplicative
convolutions. To study the features of such types of internal interaction of multi-profile resources,
we will define a standard set of logistic dependencies that describe the effectiveness of such
resources.
Let us clarify the understanding of the concept of efficiency within the framework of this study.
Efficiency E ' is the ratio of the effect E (beneficial effect) to the resources R spent on its
achievement</p>
      <p>E ' = E . (3)</p>
      <p>R</p>
      <p>In our study, the time spent on developing individual components of technologies for ensuring
information protection and the survivability of information systems is considered as resources
E ' = E . (4)</p>
      <p>t</p>
      <p>Note that such dependencies for efficiency occur if the dependence of the effect on resources is
linear. In our case, the dependence of the effect on the input resource of time is nonlinear, namely,
logistic for all components of technologies and, accordingly, for all components of multi-profile
resource provision.</p>
      <p>Ei=SLi (ti) .
(5)</p>
      <p>The subscripts denote the different types of input resources and the corresponding technologies
for which they are intended.</p>
      <p>In further modeling, we will consider multi-profile resources and the corresponding logistic
dependencies of beneficial effects, which have five 5 components. We will use the classification of
patterns of project and technology development, which was proposed in the studies of V.
Shevchenko and Y. Syvytsky:




</p>
      <p>EGEL—Exponential Growth without limits and Exponential growth in the zone of
technology Limits (full logistic dependence).</p>
      <p>EL—Exponential growth in the zone of technology Limits (upper part of logistic
dependence).</p>
      <p>BiS—Bigger technologies are Slower.</p>
      <p>BLO—Bigger technologies have a larger upper Limit Only.</p>
      <p>BiF—Bigger technologies are Faster.</p>
      <p>The corresponding components of multi-profile resources are presented in (Figs. 2–7).</p>
      <p>T2
T1
T1
20</p>
      <p>T2</p>
      <sec id="sec-3-1">
        <title>EGEL: Big is Slow</title>
        <p>T5
T3
T4
T3
E5
E4
E3
E2
E1
80</p>
      </sec>
      <sec id="sec-3-2">
        <title>EGEL: Big is Slow</title>
        <p>T5
T4</p>
        <sec id="sec-3-2-1">
          <title>EL: Big have Bigger Lim Only</title>
          <p>T9
20
40
60
E5
E3
E2
E1
E9
E5
E3
E2
E1</p>
        </sec>
      </sec>
    </sec>
    <sec id="sec-4">
      <title>4. Results of additive convolution</title>
      <p>The most common variant of scalar convolution is additive convolution, which corresponds to a
situation in which complete interchangeability of input resources or technologies located at the
same level of hierarchy in the overall technology structure is possible
15
t10
c
e
f
f
E
,
E5</p>
      <p>EGEL: Big is Slow
E4
E3</p>
      <p>E5
E3
E2
E1
E4
E3</p>
      <p>EL: Big have Bigger Lim Only
The simulation results first present the graph of the smallest dependence without convolution, then
the result of convolution of the two smallest dependences of beneficial effects, and then three, four,
and five.
5. Results of multiplicative convolution
Multiplicative convolution is required in cases where the interchangeability of resources
(technologies) occurs but is not complete.</p>
      <p>5
EП =∏ SLi (ti) .</p>
      <p>i=1
The simulation results are presented in (Figs. 14–19).
(7)</p>
      <sec id="sec-4-1">
        <title>EGEL: Big is Slow</title>
        <p>E5
120
100
80
t
c
e
ffE60
,
E
40
20
0</p>
        <p>0
120
100</p>
        <p>80
t
c
e
ffE60
,
E
40
20
0
0
E4
E3</p>
        <p>EE12
80</p>
        <p>E5
E4
E3</p>
        <p>E12
20
EL: Big is Slow
0
100
200
400
500</p>
      </sec>
      <sec id="sec-4-2">
        <title>EL: Big is Faster (nonreal)</title>
        <p>E9
E5</p>
        <p>EE123
0
5
As in previous cases, the simulation results first present the graph of the smallest dependence
without convolution, then the result of the convolution of the two smallest dependences of
beneficial effects, and then three, four, and five.</p>
      </sec>
    </sec>
    <sec id="sec-5">
      <title>Conclusions</title>
      <p>The paper considers models of the useful effect of technologies consisting of separate component
technologies that consume multi-profile resources. The types of joint operation of individual
technologies on the overall useful effect are considered in the form of models of additive and
multiplicative convolutions. The modeling results showed that the results of convolution are very
similar to logistic dependencies of the EGEL or EL-type. The more the symmetry points of
individual logistic dependencies differ, the more the effects of steps are manifested in the results of
additive convolution. The primary qualitative nature of the dependencies is most preserved in the
results of additive convolution of EL-type technologies. The result of multiplicative convolution is
EGEL-type dependencies regardless of the primary type of dependency. In this case, there is a clear
loss of the central symmetry of the dependencies.</p>
      <p>Declaration on Generative AI
While preparing this work, the authors used the AI programs Grammarly Pro to correct text
grammar and Strike Plagiarism to search for possible plagiarism. After using this tool, the authors
reviewed and edited the content as needed and took full responsibility for the publication’s content.
[5] A. Storchak, S. Salnyk, A method of assessing the level of security of the network part of a
special purpose communication system against cyber threats, Inf. Proces. Syst. 3(158) (2019)
98–109.
[6] V. Svanadze, Cybersecurity policy and strategy of management, Doctoral Thesis, Georgian</p>
      <p>Technical University, 2023.
[7] M. Antunes, et al., Information security and cybersecurity management: A case study with</p>
      <p>SMEs in Portugal, J. Cybersecur. Priv. 1 (2021) 219–238. doi:10.3390/jcp1020012
[8] E. Y. Handri, P. A. W. Putro, D. I. Sensuse, Evaluating the people, process, and technology
priorities for NIST cybersecurity framework implementation in e-government, in: 2023 IEEE
Int. Conf. on Cryptography, Informatics, and Cybersecurity (ICoCICs), 2023, 82–87.
doi:10.1109/icocics58778.2023.10277024
[9] V. Shevchenko, Optimization modeling in strategic planning, Military and Strategic Research</p>
      <p>Centre of National Defence University of Ukraine, 2011.
[10] V. L. Shevchenko, et al., Predictive modeling of computer virus epidemics, K.: UkrNC RIT,
2019.
[11] V. Grechaninov, et al., Formation of dependability and cyber protection model in information
systems of situational center, in: Workshop on Emerging Technology Trends on the Smart
Industry and the Internet of Things, vol. 3149, 2022, 107–117.
[12] H. Hulak, et al., Dynamic model of guarantee capacity and cyber security management in the
critical automated system, in: 2nd Int. Conf. on Conflict Management in Global Information
Networks, vol. 3530, 2023, 102–111.
[13] Y. Syvytsky, V. Shevchenko, Computer simulation model of the organization at the stage of
transformation for the purpose of adaptation to new projects, in: 14th International Scientific
and Practical Conference from Programming, UkrPROG’2024, 2024.</p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          [1]
          <string-name>
            <given-names>A. G.</given-names>
            <surname> Dodonov</surname>
          </string-name>
          ,
          <string-name>
            <surname>D.</surname>
          </string-name>
           V. 
          <article-title>Lande, Vitality of information systems</article-title>
          ,
          <source>Nauk. Dumka</source>
          ,
          <year>2011</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          <article-title>[2] A guide to the project management body of knowledge PMBOK, 6th ed</article-title>
          .,
          <source>Project Management Institute</source>
          , Inc.,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          <article-title>[3] A guide to the project management body of knowledge PMBOK, 7th ed</article-title>
          .,
          <source>Project Management Institute</source>
          , Inc.,
          <year>2021</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          [4]
          <string-name>
            <given-names>V.</given-names>
             
            <surname>Buriachok</surname>
          </string-name>
          ,
          <string-name>
            <given-names>V.</given-names>
             
            <surname>Sokolov</surname>
          </string-name>
          ,
          <string-name>
            <surname>P.</surname>
          </string-name>
           Skladannyi,
          <article-title>Security rating metrics for distributed wireless systems</article-title>
          ,
          <source>in: Workshop of the 8th International Conference on “Mathematics. Information Technologies. Education:” Modern Machine Learning Technologies and Data Science</source>
          , vol.
          <volume>2386</volume>
          ,
          <year>2019</year>
          ,
          <fpage>222</fpage>
          -
          <lpage>233</lpage>
          .
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>