Stationary systems of cyberattacks detection and prevention for cyberprotection and cybercounterintelli-gence (by example USA)
DOI:
https://doi.org/10.18372/2225-5036.25.13664Keywords:
cybersecurity, cyberprotection, cybercounterintelligence, cyberattack, critical information infrastructure, cybercoun-terintelligence, Іntrusіon Detectіon System, Іntrusіon Preventіon System, Іntrusіon Detectіon and Preventіon System, Deep Packet ІnspectAbstract
Several state institutions deal with the providing of national cybersecurity. Each of them solvs its own number of tasks on critical information infrastructure protection from cyberattacks and cyberincidents. For example, the State Service of Special Communication and Information Protection, units of technical protection are responsible for cyberprotection of information resources and data processing infrastructure from cyberattacks of any origin. The Security Service of Ukraine defends national critical information infrastructure from cyberattacks of foreign intelligence services and cyberterrorists, and the National Police protects legal rights and interests of cityzens and society from cybercrimes. For solving their tasks, all of them use cyberattacks detection and prevention instruments. But these specific tasks, solved by both institutions, have to be affected on functional possibilities and characteristics of these means. Taking this into account, the article contains results of studying the foreign experience of creation the cyberattacks detection and prevention systems for cyberprotection and cybercounterintelligence, is determined key characteristics of the mentioned systems of different functions, which we need to conside in practical activity of building national cybersecurity system.References
Закон України "Про основні засади за-безпечення кібербезпеки" № 2163-VIII від 05 жовтня 2017 р.
Natіonal Іnfrastructure Protectіon Plan – NІPP. [Електронний ресурс]. Режим доступу: https:// www.dhs.gov/national-infrastructure-protection-plan.
ICS-CERT. Industrial Control Systems Cyber Emergency Response Team. [Електронний ре-сурс]. Режим доступу: https://ics-cert.us-cert.gov.
Cybersecurity and Infrasructure Security Agency. [Електронний ресурс]. Режим доступу: https://www.dhs.gov/cybersecurity-and-infrasructure-security-agency.html.
Что такое SOC? [Електронний ресурс]. Режим доступу: https://rvision.pro/2-1-chto-takoe-soc-perevod-gajda-mitre/.
A. Tatsuhiko, Y. Yukiko, T. Yutaka, "Securi-ty Operations Center (SOC) and Security Monitoring Services to Fight Complexity and Spread of Cyber Threats" // NEC Technical Journal. Special Issue on Cyber-security, Vol. 12, No. 2, pp. 34-37, 2018.
K. Scarfone, P. Mell, "Guide to Intrusion De-tection and Prevention Systems (IDPS)", Recommenda-tions of the National Institute of Standards and Technology, Special Publication 800-94. Computer Security Division Information Technology Laboratory National Institute of Standards and Technology Gaithersburg, MD 20899-8930, February 2007.
M. Mueller, A. Kuehn, "Einstein on the Breach: Surveillance Technology", Cybersecurity and Organizational Change. [Електронний ресурс]. Режим доступу: https://www.econinfosec.org/archive/weis2013/ papers/MuellerKuehnWEIS2013.pdf
Comprehensive National Cybersecurity Ini-tiative. [Електронний ресурс]. Режим доступу: https://nsarchive2.gwu.edu/NSAEBB/NSAEBB424/docs/Cyber-034.pdf.
Privacy Impact Assessment for EINSTEIN 3 - Accelerated (E3A) April 19, 2013 DHS/PIA/NPPD-027. [Електронний ресурс]. Режим доступу: https://www. dhs.gov/sites/default/files/publications/privacy/PIAs/PIA%20NPPD%20E3A%2020130419%20FINAL%20signed.pdf.
National Counterintelligence Strategy of the United States of America 2016 [Електронний ресурс]. Режим доступу: https:// www. dni. gov/ files/ NCSC/ documents/ Regula-tions/National_CI_Strategy_2016.pdf.
М. Дундуков, "Разведка как вид государ-ственной деятельности в США", Национальная без-опасность, № 4 (27), 2013.
В. Пилипчук, М. Будаков, В. Гірич, Си-стема організації управління і правового забезпечення діяльності спецслужб (досвід країн Європейського Союзу та Північної Америки): аналіт. доп. К.: НІСД, 2012, 56 с.
R. Harfst, T. Stokowski, "Intelligence and Security Command Mission Command", Military Intelli-gence Professional Bulletin, July-September 2018.
J. Appelbaum, A. Gibson, The Digital Arms Race. NSA Preps America for Future Battle. [Електронний ресурс]. Режим доступу: http://www.spiegel.de/ international/world/new-snowden-docs-indicate-scope-of-nsa-preparations-for-cyber-battle-a-1013409.html
D. Goldman, Department S31177. Posturing for Digital Warfare [Електронний ресурс]. Режим дос-тупу: https:// intelligencebriefs.com/ tag/ department-s31177/
Transgression overview for Pod58. [Елект-ронний ресурс]. Режим доступу: https://edward-snowden.com/ru/2015/01/18/transgression-overview-for-pod58/.
NSA’s organizational designations. [Елект-ронний ресурс]. Веб-сайт “Electrospaces.net”. Режим доступу: https://electrospaces.blogspot.com/2014/01/ nsas-organizational-designations.html.
Tutelage. [Електронний ресурс]. Веб-сайт “Snowden Archive”. Режим доступу: https://snowden archive.cjfe.org/greenstone/collect/snowden1/index/assoc/HASH013b/995d9773.dir/doc.pdf.
В. Бабенко, "Основні групи кіберзброї та особливості її застосування", Актуальні задачі та до-сягнення у галузі кібербезпеки. Матеріали Всеукраїнської науково-практичної конференції 23-25 листопада 2016 року, м. Кропивницький, С. 23-24.
О. Запорожець, "Кібервійна: концепту-альний вимір", Actual problems of international relations. Release 121 (part I), pp. 80-84, 2014.
В. Каберник, "Проблемы классификации кибероружия", Вестник МГИМО-Университета, № 2(9), С. 72-78, 2013.
NSA Nicknames and Codewords. [Електрон-ний ресурс]. Режим доступу: https://electrospaces. blogspot.com/p/nicknames-and-codewords.html.
How to read the NSA Documents. [Елект-ронний ресурс]. Режим доступу: http://www.spiegel.de/ international/world/glossary-of-nsa-abbreviations-a-975930.html.
І. Логінов, Ю. Аліфіров, Системи та засо-би основних видів технічних розвідок іноземних держав : навч. посіб, Київ: Нац. акад. СБУ, 2016, 344 с.
Downloads
Published
How to Cite
Issue
Section
License
The scientific journal "Ukrainian Scientific Journal of Information Security" adheres to the principles of open science and provides free, free and permanent access to all published materials. The goal of the policy is to increase the visibility, citation and impact of the results of scientific research in the field of information security. The journal works according to the principles of Open Access and does not charge a fee for access to published articles.
All articles are published in Open Access under the Creative Commons Attribution 4.0 International (CC BY 4.0) license.
Copyright
Authors who publish their works in the journal “Ukrainian Scientific Journal of Information Security”:
-
retain the copyright to their publications;
-
grant the journal the right of first publication of the article;
-
agree to the distribution of their materials under the CC BY 4.0 license;
-
have the right to reuse, archive, and distribute their works (including in institutional and subject repositories), provided that proper reference is made to the original publication in the journal.
