350 rub
Journal Highly available systems №1 for 2025 г.
Article in number:
On forecasting the risks of information system integrity violations in the absence of complete data on subsystems reservation multiplicity
Type of article: scientific article
DOI: https://doi.org/10.18127/j20729472-202501-04
UDC: 681.3.06 (075.32)
Authors:

A.I. Kostogryzov1

1 FRC «Computer Science and Control» RAS (Moscow, Russia)
1 akostogr@gmail.com

Abstract:

Purpose: The risks of violating the integrity of an information system depend on the conditions of uncertainty and the threats associated with these conditions for each of the subsystems. From the point of view of mathematical modeling, the decomposition of the system into functional subsystems (elements) does not cause difficulties. The problem is to forecast risks when in reality there is a lack of complete data on subsystems reservation multiplicity for information processing, storage and recovery. The lack of complete data does not allow quantifying risks with a sufficient degree of adequacy. However, if there is a certain certainty that there is some kind of double, triple or more reservation multiplicity, the proposed approach makes it possible in principle to make an estimation of certain risks.

Objective: to present a probabilistic approach to assessing the lower and upper quantitative limits of the forecasted risks of system integrity violations in the absence of complete data on the redundancy of subsystems.

Results. The proposed approach to risk forecasting makes it possible to conduct scientific and practical research at the level of analyzing the time distribution function between critical disturbances in each subsystem (element) and the system as a whole in cases where there is only some data, guesses and/or some assurances that in specific subsystems there are two, three or more times redundancy takes place (or possible options are being considered at the early stages of conception and design). The appendix provides a risk forecasting method for a typical technology for countering various threats using periodic diagnostics of system integrity.

Practical value. Based on the results of risk forecasting, it is possible to identify "bottlenecks" in the system and rational ways to reduce risks. The practical value of the proposed approach is illustrated by an example.

Pages: 39-51
For citation

Kostogryzov A.I. On forecasting the risks of information system integrity violations in the absence of complete data on subsystems reservation multiplicity. Highly Available Systems. 2025. V. 21. № 1. P. 39−51. DOI: https://doi.org/ 10.18127/j20729472-202501-04 (in Russian)

References
  1. Gnedenko B.V., Danielyan E`.A., Dimitrov B.N., Klimov G.P., Matveev V.F. Prioritetny`e sistemy` obsluzhivaniya. M.: MGU. 1973. 448 s.
  2. Kleinrock L. Queueing systems. V. 2: Computer applications, John Wiley & Sons; New York. 1976.
  3. Matveev V.F., Ushakov V.G. Sistemy` massovogo obsluzhivaniya. M.: MGU. 1984.
  4. Bezopasnost` Rossii. Pravovy`e, social`no-e`konomicheskie i nauchno-texnicheskie aspekty`. T. 1–70. M.: MGOF «Znanie». 1998–2024.
  5. Kostogryzov A.I. Software Tools Complex for Evaluation of Information Systems Operation Quality (CEISOQ). Proceedings of the 34-th Annual Event of the Government Electronics and Information Association (GEIA), Engineering and Technical Management Symposium, USA, Dallas. 2000. 63–70.
  6. Kostogry`zov A.I., Lipaev V.V. Sertifikaciya funkcionirovaniya avtomatizirovanny`x informacionny`x sistem. – M.: Vooruzhenie. Politika. Konversiya., 1996.- 280 s.
  7. Enrico Zio. An Introduction to the Basics of Reliability and Risk Analysis. World Scientific, 2006.
  8. Kostogry`zov A.I., Stepanov P.V. Innovacionnoe upravlenie kachestvom i riskami v zhiznennom cikle sistem. M.: Vooruzhenie. Politika. Konversiya. 2008. 404s.
  9. Kolowrocki K. and Soszynska-Budny J. Reliability and Safety of Complex Technical Systems and Processes. Springer–Verlag London Li–mited, 2011.
  10. Kostogryzov A., Krylov V., Nistratov A., Nistratov G., Popov V., Stepanov P. Mathematical models and applicable technologies to forecast, analyze and optimize quality and risks for complex systems. Proceedings of ICTIS 2011. Wuhan, China. P. 845–854.
  11. Kostogryzov A., Nistratov G., Nistratov A. Some Applicable Methods to Analyze and Optimize System Processes in Quality Management. Total Quality Management and Six Sigma. IntechOpen. 2012. P. 127–196. http://dx.doi.org/10.5772/2559
  12. Kostogryzov A., Krylov V., Nistratov A., Nistratov G., Popov V. Knowledge mining based on applications of the methods and technologies of risks prediction. Proceedings of ICTIS 2013. Wuhan. China. P. 1214–1223.
  13. Kostogryzov A., Grigoriev L., Nistratov G., Nistratov A., Krylov V. Prediction and Optimization of System Quality and Risks on the Base of Modelling Processes. American Journal of Operations Research, Special Issue. 2013. V. 3. № 1A. P. 217–244.
  14. Kostogryzov A., Nistratov G., Nistratov A. The Innovative Probability Models and Software Technologies of Risks Prediction for Systems Operating in Various Fields. International Journal of Engineering and Innovative Technology (IJEIT). 2013. V. 3. Iss. 3. P. 146–155.
  15. Eid M., Rosato V. Critical Infrastructure Disruption Scenarios Analyses via Simulation. Managing the Complexity of Critical Infrastructures. A Modelling and Simulation Approach, SpringerOpen. 2016. P. 43–62.
  16. Artemyev V., Kostogryzov A., Rudenko Ju., Kurpatov O., Nistratov G., Nistratov A. Probabilistic methods of estimating the mean residual time before the next parameters abnormalities for monitored critical systems. Proceedings of the 2nd International Conference on System Reliability and Safety (ICSRS). Milan, Italy. 2017. P. 368–373.
  17. Kostogryzov A., Stepanov P., Nistratov A., Atakishchev O. About Probabilistic Risks Analysis During Longtime Grain Storage.  Proceedings of the 2nd Internationale Conference on the Social Science and Teaching Research (ACSS-SSTR). V. 18 of Advances in Social and Beha–vioral Science. Edited by Harry Zhang. Singapore Management and Sports Science Institute. PTE.Ltd. 2017. P. 3–8.
  18. Kostogryzov A., Atakishchev O., Stepanov P., Nistratov A., Nistratov G., Grigoriev L. Probabilistic modelling processes of mutual monitoring operators actions for transport systems. Proceedings of the 4th International Conference on Transportation Information and Safety (ICTIS). Canada, Banff. 2017. P. 865–871.
  19. Kostogryzov A., Grigoriev L., Golovin S., Nistratov A., Nistratov G., Klimov S. Probabilistic Modeling of Robotic and Automated Systems
    Operating in Cosmic Space. Proceedings of the International Conference on Communication, Network and Artificial Intelligence (CNAI). Beijing. China. DEStech Publications, Inc. 2018. P. 298–303.
  20. Artemyev A., Rudenko Ju., Nistratov G. Probabilistic methods and technologies of risks prediction and rationale of preventive measures by using «smart systems». Applications to coal branch for increasing Industrial safety of enterprises. In «Probabilistic modeling in system engineering». IntechOpen. 2018. P. 23–51. DOI: http://dx.doi.org/10.5772/intechopen.75109
  21. Kershenbaum V., Grigoriev L., Kanygin P., Nistratov A. Probabilistic modeling processes for oil and gas systems. In «Probabilistic modeling in system engineering». IntechOpen. 2018. P. 55–79. DOI: http://dx.doi.org/10.5772/intechopen.74963
  22. Kostogryzov A., Korolev V. Probabilistic Methods for Cognitive Solving of Some Problems in Artificial Intelligence Systems. In «Probability, combinatorics and control». IntechOpen. London. 2019. P. 1–32. Doi: http://dx.doi.org/10.5772/intechopen.89168
  23. Kostogryzov A. Mathematical models and methods of system engineering for preventive risks control in real time. Proceedings of the 6th International Conference Actual Problems of System and Software Engineering. Moscow, Russia. 12–14 November 2019. P. 1–9. DOI: 10.1109/APSSE47353.2019.00002
  24. Kostogryzov A. Risks Prediction for Artificial Intelligence Systems Using Monitoring Data. CEUR Workshop Proceedings. 2020. V. 2603. P. 29–33. http://ceur-ws.org/Vol-2603/
  25. Kostogryzov A., Nistratov A. Probabilistic methods of risk predictions and their pragmatic applications in life cycle of complex systems.
    In «Safety and Reliability of Systems and Processes». Gdynia Maritime University. 2020. P. 153–174.
  26. Kostogryzov A. Estimations of «Smart» Engineering Systems Operation by Probabilistic Measures of Correctness and Reliability. RTA&A. 2020. V. 15. № 3(58). P. 19–35. DOI: https://doi.org/10.24411/1932-2321-2020-13002
  27. Kostogry`zov A.I. Veroyatnostnoe modelirovanie sistemy` zashhity` duxovno-nravstvenny`x cennostej. Ch. 1. Obshhij podxod. Sistemy` vy`sokoj dostupnosti. 2024. T. 20. № 2. S. 40–55. DOI: https://doi.org/10.18127/j20729472-202402-03. Ch. 2. Primery` prognozirovaniya riskov. Sistemy` vy`sokoj dostupnosti. 2024. T. 20. № 3. S. 37–50. DOI: https://doi.org/10.18127/j20729472-202403-04
  28. Kostogryzov A., Makhutov N., Nistratov A., Reznikov G. Probabilistic predictive modeling for complex system risk assessments. In «Time Series Analysis – New Insights». IntechOpen. 2023. P. 73–105. DOI: 10.5772/intechopen.106869
  29. Kostogryzov A. Probabilistic predicting the risks of system integrity violation in the absence of complete data on subsystems reservation multiplicity. In 2024 International Scientific and Technical Conference Modern Computer Network Technologies (MoNeTeC). Moscow, Russian Federation. 2024. P. 1–6. doi: 10.1109/MoNeTec60984.2024.10768172
Date of receipt: 15.01.2025
Approved after review: 30.01.2025
Accepted for publication: 27.02.2025