МЕТОД ЛОГІКО-ДИНАМІЧНОГО УПРАВЛІННЯ ФУНКЦІОНАЛЬНОЮ СТІЙКІСТЮ ЕЛЕКТРОННОЇ КОМУНІКАЦІЙНОЇ МЕРЕЖІ НА ОСНОВІ ЦИФРОВОГО ДВІЙНИКА

Abstract

Relevance. Ensuring the functional stability of modern electronic communication networks in the context of increasing intensity of cyber threats, structural dynamics and an increase in the number of information security incidents requires the development of new methods of adaptive management capable of promptly responding to changes in the security state of the network. Subject of research: the method of logical-dynamic control of the functional stability of an electronic communication network based on a digital twin. The purpose of the study: to increase the functional stability of the electronic communication network in the context of information security incidents and to ensure adaptive management of its security state. The objectives of the study: to formalize the space of possible states of the electronic communication network and information security events, to synthesize the method of logical-dynamic control based on the use of digital twin technologies, to determine the mechanisms of its integration with SIEM systems and to confirm the effectiveness of the method by experimental research. Research methods: logical-dynamic modeling, mathematical modeling, system analysis, digital binary modeling and experimental research. Research results. The article develops a mathematical model of management, an algorithm for adaptive response to information security incidents and a digital twin architecture, which provides forecasting of the development of events, assessment of possible scenarios and formation of control actions in real time. The method proposed in the article is based on the formalization of a set of network states, information security events, rules of transitions between states and the synthesis of control influences using a logicaldynamic model and a digital twin integrated into the circuit of information and security event management systems (SIEM). Conclusions. Experimental verification of the proposed method confirmed an increase in the efficiency of managing the functional stability of the electronic communication network by reducing the average time of incident detection, reducing the recovery time after them and increasing the efficiency of localization of destructive influences compared to traditional approaches. The practical significance of the work lies in the possibility of phased implementation of the proposed method in corporate and operator electronic communication networks without significant modification of the existing information security infrastructure.