Open AccessINFORMATION FLOWS FORMALIZATION FOR BSD FAMILY OPERATING SYSTEMS SECURITY AGAINST UNAUTHORIZED INVESTIGATION
Author(s) -
Sergiy Gnatyuk,
Oleksii Verkhovets,
Андрій Володимирович Толбатов,
Yevheniia Krasovska
Publication year - 2021
Publication title -
kìberbezpeka. osvìta, nauka, tehnìka
Language(s) - English
Resource type - Journals
ISSN - 2663-4023
DOI - 10.28925/2663-4023.2021.13.145157
Subject(s) - computer science , computer security , vulnerability (computing) , security testing , information security , malware , information system , software , computer security model , asset (computer security) , software security assurance , security information and event management , security service , cloud computing security , operating system , engineering , cloud computing , electrical engineering
Today there is an increase in the number and complexity of cyberattacks on critical infrastructure. This has led to the actualization of the security systems that are critical to national security. Software, including operating systems, is considered a resource of critical information infrastructure of the state, which is usually built on secure operating systems (UNIX, BSD family, Linux). But any operating systems and user software have flaws and security issues at different levels. It is important to model information flows in the operating systems, which will more effectively identify threats to information security, implement preventive and countermeasures. From these positions, the analysis of modern research in the direction of operating systems security and user software was carried out, which allowed to identify several basic areas, including the study of the impact of malware on operating systems and user software; vulnerability analysis; threat and risk research. The analysis showed that the issues related to the peculiarities of construction and information processes of a particular operating systems, as well as the lack of adequate mathematical models that can be applied to different security systems to obtain quantitative characteristics to compare the parameters of security systems. Also, structural and analytical models of information flows of the BSD family of operating systems were developed, which makes it possible to formalize the information processes of the studied operating system and develop effective preventive and countermeasures. In addition, the mathematical model of quantitative evaluation of software systems for information security operating in user mode has been improved. This model will be useful both for comparison of existing software information security systems, and for the analysis of changes in security algorithms of software information security systems