SYNTHESIS OF THE DIGITAL TWIN OF THE LOGICAL-DYNAMIC INFORMATION AND EVENTS MANAGEMENT SYSTEM FOR THE SECURITY OF COMPUTER SYSTEMS OF THE MOBILE CELLULAR INFORMATION AND COMMUNICATION NETWORK

Abstract

The article focuses on the aspect of information security and notes that currently the modern mobile information and communication cellular network is one of the most vulnerable and at the same time important objects of the critical information infrastructure of the state. It serves a wide range of users who make decisions for the organization of public administration, and also provides digital communication to a number of other important systems from the population to departmental structures. That is why this network acts as a priority object in the context of organizing effective management of its information security events. To organize the reliable functioning of this important object, a new approach to the synthesis of a digital twin of the information and security event management system of computer systems of the cellular mobile information and communication network is proposed. The proposed synthesis is based on a logical-dynamic approach to modeling security events in modern computer systems, attack scenarios and mechanisms for responding to these information security incidents by forming appropriate effective control influences. The architecture of the digital twin, the algorithm for its synthesis are considered, and possible approaches for implementing the integration of this virtual object with such platforms as Wazuh, Streamlit, Neo4j, AWS IoT are proposed. Verification and testing are carried out using the example of a DDoS scenario, and the results of the synthesis algorithm implementation are presented. The effectiveness of the model in detecting threats and adapting to intensive changes in the security environment of the computer system of the mobile digital network is shown.