The concept and methodological principles of building a distributed network of situational centers for situational management and decision-making in the security and defense sector of Ukraine are developed, taking into account the modern range of situational management technologies and decision support. The structure of technical regulations of special software is proposed, which is based on the requirements of modern international standards and takes into account the peculiarities of cybersecurity and functional security of the distributed network of situational centers in the security and defense sector of Ukraine.
A basic modeling complex (BMC) of the network of situational centers of state bodies of the security and defense sector of Ukraine has been created in the interests of protecting the critical infrastructure of the state. The created BMC can be a prototype for the development of situational centers of the state system of critical infrastructure protection and cybersecurity and can be used in performing mega-important task in the state – providing cyber protection of critical infrastructure, including national security and defense sector, law enforcement, etc., building of state and commercial response centers to cyber incidents.
The concept of providing information and analytical support to management decisions by the management of the security and defense sector of Ukraine in the field of defense resources management was created.
There were developed some principles of a comprehensive methodology for building a distributed network of situational centers of the security and defense sector of Ukraine based on special purpose systems, situational management technologies and decision support (especially during a particular period of time), using the following range of models: capacity-based planning with the use of system analysis and experience of world practice; a structured description of the system of processes for defense management and defense planning procedures based on capabilities in the Ministry of Defense of Ukraine; adaptation and application of algorithms for identification and correction of errors in dictionaries during meetings; cybersecurity models based on special purpose systems and the proposed structure of technical regulations of a special software, which is based on the requirements of modern international standards.
The problem of data exchange between heterogeneous information systems of different situational centers of the security and defense sector in the development of measures to prevent and eliminate emergencies was studied. There was offered an approach which uses the principle of creating an ontology of the subject area of data exchange using the previously developed glossary and creating on its basis services that will be presented in the catalog of services for exchange.
There were developed models and a structure of the information-analytical system for supporting managerial decision-making by the leadership of the Security and Defense Sector of Ukraine in the field of management of defense resources which are the basis for creating an automated system of management of defense resources and automating the management of defense resources by the executive authorities of the Security and Defense Sector of Ukraine.
The requirements for a unified system of collecting, processing, and storing information resources of the network of situation centers of state bodies of the Security and Defense Sector of Ukraine and its cyber protection system were developed as well.
Based on the multi-component architecture and agent platforms, methodical principles for the implementation of methods and technologies of situational management in special-purpose systems of the network of situational centers of state government bodies of Ukraine for the security and defense sector in a special period were developed.
Tasks, algorithms, and special software for subsystems of information exchange and document flow in the automated systems of the network of situational centers of the security and defense sector of Ukraine were created.
A project of operational-strategic requirements for a unified system of collecting, processing, and storing information resources of the network of situational centers of state bodies of the security and defense sector of Ukraine and its cyber protection system were developed.
Methods, models, and software tools for the operational management of emergency response were developed and improved. Mathematical, engineering and technical, and software requirements for creating a cybersecurity system within the network of situational centers, including the construction of a cyber incident response center, have been substantiated.
Based on the developed special software, a basic modeling complex (BMC) of automated systems for situational centers of state security and defense sector agencies was created, on the basis of which prototyping of information and special decision support software for state security and defense sector agencies was conducted. Solutions for troop management tasks under special period conditions were demonstrated based on the BMC.
The structure and operational technology of a modeling complex were substantiated to support the protection of the resilient functioning of critical infrastructure (CI), along with the requirements and technical solutions for the developed prototype of specialized software for the electronic communication network of the CI protection system in crisis (situational) centers of government authorities and key CI facilities, aimed at ensuring the protection of resilient CI functioning according to NATO member state standards during wartime and the post-war period.
An analytical review of the experience of protecting the resilient functioning of CI in developed countries and the use of situational management capabilities for its protection in Ukraine was conducted. Some approaches for creating a unified information environment within the network of situational centers for automated management of CI resilience protection, in accordance with NATO standards, were developed.
World experience in the field of cyber protection of complex critical infrastructure objects (CCIOs) was analyzed, and the concepts for establishing methodological foundations for the protection, assessment, and enhancement of the cybersecurity level of CCIOs were substantiated.
Adaptive models for the rational allocation of cryptographic resources were developed, taking into account the level of threats, the current system state, and risk analysis when detecting hidden threats. These models enhance the effectiveness of protection and security auditing of complex critical infrastructure facilities. A model for organizational and technical support of reliability and cybersecurity based on the RBAC methodology was proposed, improving system security levels in cloud-based environments.
Algorithms for the practical assessment of the capabilities of air defense (AD) and missile defense (MD) forces and assets regarding the protection of critical infrastructure facilities against aerial attacks were developed.
Based on the Unified Capability Catalogue of the Ministry of Defence of Ukraine (MoD) and the Armed Forces of Ukraine (AFU), as well as other defense components, the List of Typical AFU Tasks (at strategic, operational, and tactical levels), and the Catalogue of Typical Capability Carriers of the AFU, the following were formed: a list of capabilities required by AD and MD forces, a list of tasks to achieve these capabilities, the conditions for their execution, and the list of necessary (recommended) capability carriers.
The problem of agent pursuit/escape in a three-dimensional space was formulated. Methods for pursuit by pursuing agents of escaping agents in a three-dimensional space were developed. A method for approximating the trajectories of escaping agents into smoothed curves in a three-dimensional space was proposed. A research prototype of a two-agent system (pursuer-evader) was created, with synchronized visualization of the modeled pursuit/escape process on two planes (XOY and XOZ).