Source: http://jisp.ru/en/volume/prakticheskie-aspekty-kriptografii/
Timestamp: 2019-04-22 14:10:40+00:00

Document:
Belim S. V., Bogachenko N. F.
The influence of the relationships between rights on a discretionary access control was researched in this article. We considered two types of dependencies between access rights. We expanded the concept of access matrix for account of the associations between access rights.
Discretionary access control, access rights, access matrix, association rules.
AES-like ciphers: are special substitutions better then random ones?
In [eprint.iacr.org/2012/663] differential and linear attacks on AES based on virtual isomorphisms (VI) was proposed. It was shown tat AES seems to be weak against those attacks because its S-box is weak in the sense of virtual isomorphisms. This result can be generalized on large class of AES-like ciphers, where diffusion map acts as a block matrix, and block size equals to the size of S-box. Strength of AES-like cipher is defined by virtual isomorphism but not by the properties of the S-box. So we can assume that special S-boxes are not better then random ones. The correctness of the assumption is checked by experiment.
AES, S-box, virtual isomorphisms, cryptanalysis.
Proposed the way of computer systems users authentication, resistant to spying attack, which based on graphical password and gesture (move), selected by user, just as a chess move. Received an estimate for password protection system resistance against resistance to different types of attack. The received results of microergonometrics research of this password protection system.
Authentication, password, graphical password, not-spotted password.
Bryn M. Ya., Khomonenko A. D., Bubnov V. P., Nikitchin A. A., Sergeev S. A., Novikov P. A., Titov A. I.
The paper describes the software system designed to monitor deformations especially dangerous objects, the appointment of the individual components and the basic characteristics of the complex. Arguments on the justification options for protecting data from unauthorized access and malicious age given.
Geodetic monitoring of dangerous objects, software system, data protection, web-interface.
Karetnikov V. V., Sikarev I. A., Kuznetcov I. G., Volkov R. V.
This article discusses the constructive proposals that improve the level of information security of automated river trawling complexes.
Automated trawling complex, inland waterways of the Russian Federation, protection of navigational information, coding, electronic digital signature.
Nyrkov A. P., Sokolov S. S., Mustakaeva E. A., Malcev V. A.
In article the general is considered conceptual approach to providing a mode of information security of assets as parts creation process multiservice network on transport branch which is a basis for formation of information and communication space transport branch.
Information security of a multiservice network, technical means of information security, questions of information security.
Zegzhda P. D., Kort S. S., Chernenko V. G.
The article discusses approaches to programs security analysis in mobile applications stores. Made an overview of applications security analysis in stores iOS App Store, Google Play Store, Windows Phone Store.
Mobile application, vulnerabilities, virus, static and dynamic security analysis.
Burov A. A., Golchevskiy Yu. V.
The problem of providing confidentiality and availability of communication channels in geographically distributed organizations is investigated. A model of an organization's network and possible threats for confidentiality and availability of information flows are defined. Weaknesses are identified, safely uninterrupted connection of branch offices and remote users to the network using VPN technologies is provided. The dynamic routing setup by OSPF protocol is observed.
Confidentiality, availability, redundancy, communication channels, OSPF configuration.
Kotenko I. V., Doynikova E. V.
The paper suggests a technique for calculation of security metrics on the base of attack graphs and service dependencies. The technique embraces several assessment aspects (analysis of attacks and countermeasures, accounting for known and “zero-day” vulnerabilities, computation of cost and performance metrics) and levels of a computer system representation (topological, attack graph, attacker, events and sys-tem), as well as allows customization of metrics calculation algorithms according to the operation mode of Security Information and Events Management (SIEM) systems.
Cyber security, security metrics, risk assessment, attack graphs, service dependencies.
Molyakov A. S., Zaborovskiy V. S., Lukashin A. A.
Multigraph data model for developing IT-secure cloud computing platform and protecting against new covert threats is the most important scientific problem. Author describes operations model for making efficient identification of undeclared exploits and detection of covert threats in the cloud platform.
Virtualization, hypervisor, covert threats, informational security.
Information security covert threats model of cloud computing platform is the most important scientific problem. Author describes operations model for making efficient detection and elimination of covert threats which are not be available for user by application programs and virtual machines operation systems in the cloud computing platform.
Petukhov A. A., Matyunin N. B.
In this paper, we consider the problem of crawling web applications with dynamic user interface. We propose a crawling strategy, which showed more effective compared to “common” strategies like depth-first crawling, width-first crawling, and random-crawling. Our strategy takes into account web page structure and mutual disposition of elements therein as well as the history of crawling. Our approach was evaluated on a complex real-world application. The results of evaluation show the applicability of our approach to real world scenarios.
Web applications, crawling, dynamic interfaces, black-box testing.
It’s well known that cryptographic algorithms’ implementations are vulnerable to side-channel attacks. One of the most efficient attacks is a fault-injection attack. A model of injected faults is called an algebraic manipulation. In this paper we present a code construction which is able to protect datapaths and data being processed against algebraic manipulations. The code construction reaches the maximum error detecting probability among known methods; also it is characterized by low-complexity encoding and decoding procedures.
Nonlinear codes, algebraic manipulations, side-channel attacks, scalar product.
In this paper are considered stegosystem for covering objects in the form of text documents which masks embedded information by the scanner noises, attack on detection of embedding presence on the basis of the concept of raster deepenings and reflections. Offered a modification of earlier known algorithm of embedding of information which can significantly increase the amount of allowable embedding at which stegosystem still remains undetectable.
Stegosystem, scanner noise, detection attack.
Quantum Shor's algorithm  breaks the security of public key cryptosystems. In  public key cryptosystem based on the complexity of computing the isogeny be-tween elliptic curves was proposed. Methods of significant increasing the speed of the cryptosystem are proposed.
Sikarev I. A., Shakhnov S. F., Kuznetcov I. G., Romanova V. I.
The article deals with the problem of the influence of ionospheric wave on fading of signal and interference of the controlling-corrective stations (CCS) of the river local differential subsystem (RLDSS) of GLONASS/GPS on the inland waterways (IWW) of Russia, taking into account a change in the characteristics of the ionosphere in the day and night time.
Ionospheric layers, electron density, refractive index, dielectric constant, refraction, reflection, natural frequency, dead zone, antifading antenna.
Krasnov S. A., Khomonenko A. D., Dashonok V. L.
Results of application of a method of the latent semantic analysis (LSA) for identification of the contradictions in the semantic close text information stored in databases are considered. Influence of a rank of a matrix in the LSA method on the accuracy of comparison of semantic close documents placed in electronic library elibrary.ru is investigated.
Latent and semantic analysis, databases, contradictions of data, indexing system, elibray.ru, semantic similar text information.
This paper proposes a method of identifying authorship of texts short messages users Internet portals, built on the basis of the naive Bayesian classifier. Approach allows us to classify and identify the textual information belonging to a particular user of an information resource. The presented method generates linguistic feature space user text on which a conclusion about the authorship.
Authorship identification, bayesian classifier, text information classification.
Considered structure of UAVs and described in details the communication subsystem. The analysis of existing attacks directed at capturing the control UAVs and according the analysis proposed methods to protect against such attacks.
UNMANNED AERIAL VEHICLE, GPS, SUBSTITUTION OF SIGNAL, INTERCEPTION CONTROL.
Devyanin P. N., Kuliamin V. V., Petrenko A. K., Khoroshilov A. V., Shchepetkov I. V.
The paper presents an approach of transforming the mandatory entity-role access control and information flow model for Linux-based operating system (MROSL DP-model) from human-readable mathematical representation to machine-readable Event-B notation. The transformation allows to prove consistency of the model and its properties using tools support that ensures correctness of the proofs and lack of omissions possible in manual reasoning about complex mathematical objects. Moreover, the formal model enables further specification and verification of its implementation in Astra Linux Special Edition using deductive verification techniques.
Computer security, DP-model, operating system Astra Linux.
Desnitsky V. A., Kotenko I. V.
The paper proposes an approach to elicit security knowledge for subsequent use in automated design and verification tools for secure systems with embedded devices.
Embedded security, embedded device design and verification, security components, expert knowledge.
In this paper, a novel visualization interface is presented, that can detect its users cognitive overload and adapt the amount of information to be displayed and its visualization according to users current cognitive capabilities. Results provided by the conducted user study have demonstrated that such adaptation technique benefits visualization interface efficiency.
Adaptive visualization, cognitive load, interface efficiency, situation awareness interfaces.
Proskurin V. G., Smirnov A. U.
The analysis of X Window System GUI security is carried out. New approach to get X Window System more secure, based on desktop virtualization and mandatory control of integrity, is offered.
Computer security, operating system, graphic user interface, X Window system, Astra Linux.
A method for estimating the probability of security threats in the information and telecommunications system. Is a positive example of the application of the method described, for example, the Certificate authority "Kopleksnye Uslugi Bezopasnosti".
Threats to information security, vulnerability, source of threat, destructive action.
Fursova N. I., Dovgaluk P. M., Vasiliev I. A., Klimushenkova M. A., Makarov V. A.
Reverse debugging is the exploring of the past program states. Most common methods of reverse debugging are tracing and deterministic replay of software. This paper includes review of the reverse debugging methods for mobile applications. Current reverse debugging methods does not allow using the debugger which interacts with the target system. The paper contributes a method for debugging with deterministic replay of software that allows using such kind of debuggers.
Reverse debugging, mobile platform, virtual machine, emulator.
Chechulin A. A., Kotenko I. V.
The paper presents an approach which allows to use analytical attacks modeling in information security systems that operate in near real time mode.
Attack tree, security events, analytical modeling, real-time mode.
Alekseev E.K., Oshkin I.B., Popov V.O., Smyshlyaev S.V., Sonina L.A.
Issues with the usage of twisted Edwards curves with the Russian digital signature standard and the corresponding key agreement algorithm are considered, performance estimations are presented.
Elliptic curves, twisted Edwards curves, performance of cryptographic software.
Borodin M. A., Rybkin A. S.
We describe methods for high-speed software implementation of Kuznyechik, which is an LSX-type block cipher. Our implementation encrypts at 138 MB/s and decrypts at 120 MB/s on a single core of the Intel i7-2600 @ 3,4GHz processor.
Kuznyechik, iterative LSX-transformation, block cipher, high-speed implementation.
Korosteleva M. V., Gamayunov D. U.
With this paper we provide analysis and description of the basic feature of the mpOTR (Multy-Party Off-The-Record messaging) chat protocol. This protocol is designed for encrypted confidential group communications over internet with such features as PFS (Perfect Forward Secrecy), user and message group authentication, and deniability - a feature which allows to hide contents of communication from 3rd party. We give a detailed overview of preliminary version of the mpOTR protocol and analysis of security of its basic features: group authentication, shared secret generation, ephemeral keys exchange, and deniability by means of publishing ephemeral keys at the end of each communication session.
Communications security, cryptographic protocols, multy-user communications, deniability, perfect forward secrecy.
In this paper propose a variant of the public key cryptography algorithm based on the NP-hard problem - the solvability of a system of linear equations in non-negative integers. The basis of the work is knapsack cryptosystem Merkle-Hellman. In this paper solved the problem of no uniqueness solution and added the probabilistic encryption option.
Public key cryptography, NP-hard problems, probabilistic public-key encryption, knapsack cryptosystem.
The article considers the latest version of the hash algorithm family MCSSHA: MCSSHA-8. This algorithm based on the nonautonomous regular shift register over Z/256 using the feedback function, including a logarithmic substitution.
Hash, nonautonomous regular shift register, logarithmic substitution.
Although differential cryptanalysis is a widespread approach to iterative block ciphers security analysis, it's basic notions are not properly formalized and relations between them are not systematized (especially related to truncated differentials). We review the main inconsistences and propose a formalization of these notions using special binary masks. Further we systematize the formalized notions and demonstrate that truncated differential characteristic is the most general notion while non-truncated characteristics, non-truncated differentials and truncated differentials are in fact truncated characteristics under certain conditions. We also formalize the procedure of truncated characteristics concatenation and demonstrate how to adapt a Markov cipher theory for the formalized notions.
Block cipher, differential cryptanalysis, truncated differential, differential, characteristic.
Gaivoronskaya S. A., Petrov I. S.
In this paper we consider the problem of shellcode detection for ARM-based devices. The main focus of the paper is the study of possibility to apply existing shellcode detection base that is able to detect shellcodes written for x86 platform to ARM. We consider significant differences between x86 and ARM that can potentially impact shellcode structures and shellcode typical features.
ARM, shellcode detection, code analysis.
Getman A. I., Padaryan V. A.
In this paper we discuss applying dynamic binary code analysis approach to data format recovery problem. We describe aspects that complicate the analysis such as data encryption and propose ways of mitigating them. We also enumerate the areas where recovered data formats can be used.
Analysis, binary traces, format recovery, protocol analysis.
Fedorchenko A. V., Chechulin A. A., Kotenko I. V.
In paper is presented an analysis the open vulnerabilities databases. Is presented a statistic and is revealed tendencies of vulnerabilities detection in hardware and software of the main developers.
Vulnerability databases, statistic, computer attacks, software and hardware.
The basic principle of this article is structured representation of computer technologies. Application of this principle shows that any independent part of information computing system could be represented as a set of connection hardware units and different computers with specialized roles in the system. The items of the set, in turn, are operated through an external control subsystem. It is shown that currently the main issue of information security is to reach the needed level of availability and invulnerability to computer attacks.
Information security, import substitution, certification, software validation, hardware validation, verification, non-declared capabilities.
Vasiliev Yu. S., Zegzhda D. P., Zegzhda P. D., Stepanova T. V.
It is proposed to build strategy for evolution of national ICT technological independence on the basis of the universal platform, consisting of a base part, tools for applied OS control, management and monitoring, universal stackable and portable computing engine, information flow management and access control tools and facilities for creating a trusted environment.
IT technological independence, import substitution, virtualization, hybrid OS, trusted hypervisor.
Biryukov D. N., Lomako A. G., Sabirov T. R.
The article gives an extended model of preventive behavior scenario development, the plot of which contains main principles of biosystems’ memory.
Anticipation, gyromat, memory, preventive behavior.
Epishkina A. V., Kogos K. G.
The purpose of the research was to examine current IP covert channels and their countermeasures. Direct and indirect covert channels resistant to various detection and elimination methods were analyzed. The conclusion of advanced directions of further research was drawn.
Covert channels, storage channels, timing channels, packet switching networks, capacity.
Zegzhda D. P., Kalinin M. O., Rezedinova E. U., Shenets N. N.
In this paper the state of the industry and the definition of broadband multimedia services are considered. Also, the existing solutions of information security for multi-services telecommunication systems are analyzed.
Broadband multimedia services, multi-services telecommunications systems, secure access.
Lavrova D. S., Pechenkin A. I.
In this paper, the confrontation between a security administrator and an intruder is presented as an information security conflict. Proposed an approach to formalization of this conflict on the basis of Lefebvre's algebra of conflicts. We have analyzed possible behaviour strategies of conflict participants and have identified the most effective ones in terms of protection. These strategies are proposed to be implemented by using deception systems.
Deception system, intruder, model of security threats, defense mechanisms, Lefebvre''s algebra of conflicts.
Aleksandrov A. V., Metlinov A. D.
The article tells us about designing and implementing of the symmetric knapsack cryptosystem with density of packing that is greater than one. This feature gives us a chance to prevent L3-attack with polynomial speed characteristic from being success-fully executed. The L3-attack that was mentioned before was developed by Lagarias and Odlyzko and its main purpose is cracking knapsack cryptosystems that have super growing basis. The brief overview of conception that gives us an idea how to build knapsack cryptosystem and describe causes of vulnerabilities is given below. The scheme of encryption was proposed based on protocols that use shared memory. The idea of the scheme is to use decomposition of number in basis of Fibonacci and its generalization. Static characteristics of the symmetric knapsack cryptosystem were analyzed. The algorithms of encryption and decryption were designed as well as the idea of exchanging information between sender and receiver was developed. As the result, the symmetric knapsack cryptosystem was created for exchanging information in open network channels. The cryptosystem is resistant to L3-attack of Lagarias and Odlyzko and has shared memory.
Knapsack cryptosystem, shared memory, L3-attack, open communication channel, statistical properties.
Vigenere cipher key, cipher text, slogan.
Borisenko B. B., Kilyusheva E. D.
This paper presents a method for detecting a hypervisor embedded in the firmware that initializes the hardware platform. The method is based on the anomalies caused by accessing the virtual machine to configuration space of devices which are located on the PCI bus.
Hypervisor, hardware virtualization, virtual machine monitor, Intel VT-X, AMD-V.
Markelova A. V., Grushin V. P.
At the nearest time developers of Russian means of cryptographic protection of information will see the necessity of realizing new rules of the certification. These rules refer to the requirement of realizing a functionality complete mean. In this connection vendors of smart-cards and usb-tokens will meet new tasks. Let us try to explore and systematize those in this article. In our thinking we are based at our experience of developing of functionality complete mean of cryptographic protection of information «MS_KEY K». This solution is based on the operation system «Vigrid».
Smart-card, USB-token, means of cryptographic protection of information, functionality complete mean of cryptographic protection of information, certification, OS "Vigrid".
Algebraic and algebraic-geometric properties of finite Boolean rings are considered with application to computing the key of symmetric cipher. It is shown that transformation of basis of an ideal is equivalent to its multiplication by invertible matrix over the ring of Zhegalkin polynomials. Method of simplification of prime ideal basis based on multiplication of the basis by invertible matrix over polynomial ring is offered.
Cipher, boolean equations, Groebner bases, ideals, algebraic geometry, elimination of variables.
In this work the modular secret sharing schemes for some non-threshold access structures are considered. It’s shown that on the basis of compositions of ideal threshold modular schemes an ideal scheme for compartment access structures, as well as some of the more common structures, which were called composite, can be constructed.
Modular secret sharing, ideality, access structures.
The necessity of the construction sub-sector information law, the decisive issues in the field of legal protection of information and the first regulations to be developed and accepted. The author reveals the need to develop and adopt a policy document that defines the methodology and purpose of government regulation of information security in our country.
Information security, restricted access information, intellectual property crime in the information sphere.
Masyuk A. A., Saradgishvili S. E.
The article provides a definition of basic terms in the domain and the necessity to develop new methods of thematic categorization of text resources. Using content filtering system is considered as part of measures to ensure information security. The author considers the basic model, based on the method of calculating the relative importance of terms, and offers a modified version that takes into account the change is informativeness.
Content filtering, information security, keyword filtering, URL-filtering, controlled access, filtering policy, thematic categorization, relative importance, negative significance, informativeness of a term, negative informativeness.
Рассмотрены вопросы систематизации законодательства с целью создания правовыми методами более благоприятных условий для управления защитой информации автоматизированных систем, обеспечивающих судопроизводство. Предлагается структурно-функциональный подход структурно-функциональный подход к систематизации законодательства в судах общей юрисдикции и системе Судебного департамента при Верховном Суде Российской Федерации. Особое внимание уделяется применению единой структуры и функциональных блоков систематизации, а также созданию единой системы классификации категорий судебных дел в информационном и процессуальном законодательстве, обеспечивающем защиту информации судопроизводства. При написании статьи использовались справочные правовые системы «Консультант+ » и « Гарант».
(Russian) Система судов общей юрисдикции, систематизация законодательства, классификация категорий судебных дел, понятийное единство, правовое обеспечение гражданского судопроизводства, структурно-функциональный подход, блок систематизации законодательства.
Igumnov A. V., Saradgishvili S. E.
The question of assurance of fault-tolerance of multi-agent hardware-software systems for fulfillment of safety requirements is investigated. The methodology for operability function formation for redundant multi-agent systems that allow simultaneous utilization of equivalent actuators is developed. The methodology enables utilization of logical-and-probabilistic methods for reliability assessment.
Multiagent system, safety, fault-tolerance, operability function, logical-and-probabilistic methods.
Karetnikov V. V., Sikarev I. A., Yasnov A. P.
This article discusses the basic principles and options for building a monitoring system of floating navigational area on the example of inland waterways of Russia.
System of monitoring of floating navigating aids, automatic identification system (AIS), likelihood factors, influence of mutual hindrances, safety of navigation.
The article's task is to analyze risk management methods both presented in written sources such as technical literature, standards, recommendations and experienced on practice. The analysis' goal is to propose a classification, highlight strong and weak spots concerning practical appliance for information security (IS) purposes. The second goal is to propose ways of implementation for each group of methods to reach common objectives of IS. The area of IS tasks possible to be solved with appliance of a group of methods are also indicated.
Risk management, information security, IT project management, IT security budget planning.
Baranova E. K., Chernova M. V.
This papers provides insight into CRAMM, FRAP, RiskWatch, Microsoft Security Assessment Tool (MSAT), GRIF (ГРИФ), and CORAS tools used in cybersecurity risk assessment. Advisory for users is based on comparative critical analysis of these tools.
Information security, cybersecurity audit, cybersecurity risks, data protection, risk management.
The subject of this paper is a short description of the algorithm for determining authenticity and integrity of transmitted instruction words, description of a simulation model of process of formation, transmission and processing of instruction words, and the description of conversion functions and simulation results.
Instruction word, simulation model, MAC, confidence interval, mode, collision.
Samodurov V. A., Isaev E. A., Kornilov V. V.
The main threats to the reliability and information security data centers are designated and systematized. In first there are the technical threat of failure of the life support systems of various DC: server nodes, power system, air-conditioning, fire-fighting, provider's lines, cable systems, etc. In second there are external threats: in particular, the threat of DDoS-attacks (which now is one of the most critical threats). The ways to reduce and eliminate these threats are discussed. In particular, is discussed a variety of technical methods to improve the reliability and information security data centers, as well as legal (improving legislation).
Salnikov S. A., Tsybulskiy V. G., Khrykov S. V.
The article describes solutions of SWEMEL Group of Companies related to a secure software environment (including “Zircon 36” operating system and “Zircon 36T” terminal access software) developed for secure information systems based on a “thin client” technology under which user terminals are connected via network to a terminal server with a possibility of a multi-domain access.
Operating system, "Zircon 36K", "Zircon 36C", "Zircon 36T", terminal access software, thin client, terminal server, terminal station, certificate of FSTEC of Russia, certificate of FSB of Russia, protection mechanism, analysis of software source code.

References: V. 
 V. 
 V.

 V. 
 V. 
 V.

 V.

 V. 
 V. 
 V. 
 V. 
 V.

 V. 
 V.

 V. 
 V. 
 V.

 V. 
 V.

 V.

 V. 
 V. 
 V.

 V. 
 V. 
 V. 
 V.