Multicriteria optimisation of information protection system configuration based on the NSGA-II algorithm

Artykuł porusza problem wielokryterialnej optymalizacji parametrów konfiguracyjnych systemu ochrony informacji (IPS) w przedsiębiorstwie lub firmie. Problem polega na trudnościach związanych z alokacją ograniczonych zasobów firmy pomiędzy różne elementy systemu bezpieczeństwa informacji (ISS) w sytuacji, gdy występują sprzeczne wymagania dotyczące bezpieczeństwa i wydajności. Aby sprostać temu wyzwaniu, proponuje się połączenie analitycznego modelu oceny ryzyka z algorytmem ewolucyjnym NSGA-II. Efektem tego jest utworzenie trójwymiarowej powierzchni Pareto, która umożliwi decydentowi wybór konfiguracji zabezpieczeń w oparciu o wizualną analizę pięciu wymiarów: niezawodności, wydajności, skalowalności, kosztu i zgodności z przepisami. Pozwoli to wyeliminować subiektywność charakterystyczną dla metod opartych na a priori ustalonych współczynnikach ważenia. W trakcie eksperymentów obliczeniowych zbadano wpływ parametrów algorytmu na tworzenie się zbioru rozwiązań, a fronty Pareto zwizualizowano przy użyciu biblioteki Plotly. Przeanalizowano kompromisy między rozpatrywanymi kryteriami. Uzyskane wyniki potwierdziły skuteczność proponowanego podejścia w wyborze optymalnej konfiguracji systemu zabezpieczeń.

Słowa kluczowe:

NSGA-II, optymalność Pareto, algorytmy ewolucyjne, cyberbezpieczeństwo

Bibliografia

[1] Abraham, S., & Nair, S. (2018). Comparative analysis and patch optimization using the cyber security analytics framework. The Journal of Defense Modeling and Simulation: Applications, Methodology, Technology, 15(2), 161–180. https://doi.org/10.1177/1548512917705743

[2] Al-Jarrah, O., & Arafat, A. (2014). Network Intrusion Detection System using attack behavior classification. 2014 5th International Conference on Information and Communication Systems (ICICS), 1–6. https://doi.org/10.1109/IACS.2014.6841978

[3] Al-Kasasbeh, B. (2022). Model of the information security protection subsystem operation and method of optimization of its composition. Egyptian Informatics Journal, 23(3), 511–516. https://doi.org/10.1016/j.eij.2022.05.003

[4] Boranbayev, A., Boranbayev, S., Nurusheva, A., & Yersakhanov, K. (2018). The Modern State and the Further Development Prospects of Information Security in the Republic of Kazakhstan. In S. Latifi (Ed.), Information Technology – New Generations (Vol. 738, pp. 33–38). Springer International Publishing. https://doi.org/10.1007/978-3-319-77028-4_6

[5] Carcary, M., Doherty, E., & Conway, G. (2019). A framework for managing cybersecurity effectiveness in the digital context. In T. Cruz, & P. Simoes (Eds.), Proceedings of the 18th European Conference on Cyber Warfare and Security, ECCWS 2019 (Vol. 2019, pp. 78-86). (European Conference on Information Warfare and Security, Vol. 2019-July). Curran Associates Inc.

[6] Dreis, Y., Korchenko, O., Brzhevska, Z., Kriuchkova, L., & Nesterova, O. (2024). Model to formation data base of internal parameters for assessing the status of the state secret protection. 3654, 277–289. https://ceur-ws.org/Vol-3654/paper23.pdf

[7] Dreis, Y., Korchenko, O., Sokolov, V., & Skladannyi, P. (2024). Model to formation data base of secondary parameters for assessing status of the state secret protection. 3800, 1–11. https://ceur-ws.org/Vol-3800/paper1.pdf

[8] Ehis, A. T. (2023). Optimization of Security Information and Event Management (SIEM) Infrastructures, and Events Correlation/Regression Analysis for Optimal Cyber Security Posture. Archives of Advanced Engineering Science, 1–10. https://doi.org/10.47852/bonviewAAES32021068

[9] Ekelhart, A., Kiesling, E., Grill, B., Strauss, C., & Stummer, C. (2015). Integrating attacker behavior in IT security analysis: A discrete-event simulation approach. Information Technology and Management, 16(3), 221–233. https://doi.org/10.1007/s10799-015-0232-6

[10] Enayaty-Ahangar, F., Albert, L. A., & DuBois, E. (2021). A survey of optimization models and methods for cyberinfrastructure security. IISE Transactions, 53(2), 182–198. https://doi.org/10.1080/24725854.2020.1781306

[11] Hardy, S., Crete-Nishihata, M., Kleemola, K., Senft, A., Sonne, B., Wiseman, G., Gill, P., & Deibert, R. J. (2014). Targeted Threat Index: Characterizing and quantifying politically-motivated targeted malware (K. Fu, Ed.). USENIX Association.

[12] Jiang, Y., Jeusfeld, M. A., Ding, J., & Sandahl, E. (2023). Model-Based Cybersecurity Analysis: Extending Enterprise Modeling to Critical Infrastructure Cybersecurity. Business & Information Systems Engineering, 65(6), 643–676. https://doi.org/10.1007/s12599-023-00811-0

[13] Kiesling, E., Ekelhart, A., Grill, B., Strauss, C., & Stummer, C. (2016). Selecting security control portfolios: A multi-objective simulation-optimization approach. EURO Journal on Decision Processes, 4(1–2), 85–117. https://doi.org/10.1007/s40070-016-0055-7

[14] Ma, H., Zhang, Y., Sun, S., Liu, T., & Shan, Y. (2023). A comprehensive survey on NSGA-II for multi-objective optimization and applications. Artificial Intelligence Review, 56(12), 15217–15270. https://doi.org/10.1007/s10462-023-10526-z

[15] Muminov, K., & Rustamova, M. (2024). Solving modern cybersecurity issues, a practical and experimental approach. Engineering Problems and Innovations, 2(4), 18-26. https://doi.org/10.70037/epai.2.4.18-26

[16] Okimoto, T., Ikegai, N., Inoue, K., Okada, H., Ribeiro, T., & Maruyama, H. (2013). Cyber security problem based on Multi-Objective Distributed Constraint Optimization technique. 2013 43rd Annual IEEE/IFIP Conference on Dependable Systems and Networks Workshop (DSN-W), 1–7. https://doi.org/10.1109/DSNW.2013.6615540

[17] Palko, D., Babenko, T., Bigdan, A., Kiktev, N., Hutsol, T., Kuboń, M., Hnatiienko, H., Tabor, S., Gorbovy, O., & Borusiewicz, A. (2023). Cyber Security Risk Modeling in Distributed Information Systems. Applied Sciences, 13(4), 2393. https://doi.org/10.3390/app13042393

[18] Park, J. Y., & Huh, E. N. (2020). A Cost-Optimization Scheme Using Security Vulnerability Measurement for Efficient Security Enhancement. Journal of Information Processing Systems, 16(1), 61–82. https://doi.org/10.3745/JIPS.02.0128

[19] Serra, E., Jajodia, S., Pugliese, A., Rullo, A., & Subrahmanian, V. S. (2015). Pareto-Optimal Adversarial Defense of Enterprise Systems. ACM Transactions on Information and System Security, 17(3), 1–39. https://doi.org/10.1145/2699907

[20] Shelupanov, A., Evsyutin, O., Konev, A., Kostyuchenko, E., Kruchinin, D., & Nikiforov, D. (2019). Information Security Methods—Modern Research Directions. Symmetry, 11(2), 150. https://doi.org/10.3390/sym11020150

[21] Shukla, M., Sarmah, S. P., & Tiwari, M. K. (2023). A multi-objective framework for the identification and optimisation of factors affecting cybersecurity in the Industry 4.0 supply chain. International Journal of Production Research, 61(15), 5266–5281. https://doi.org/10.1080/00207543.2022.2100840

[22] Shulha, O., Yanenkova, I., Kuzub, M., Muda, I., & Nazarenko, V. (2022). Banking Information Resource Cybersecurity System Modeling. Journal of Open Innovation: Technology, Market, and Complexity, 8(2), 80. https://doi.org/10.3390/joitmc8020080

[23] Tagarev, N. (2019). A Critical Look at the Metrics for Measuring the Effectiveness of a Cybersecurity System. In Proceedings of International Conference on Application of Information and Communication Technology and Statistics in Economy and Education (ICAICTSEE) (pp. 183-191).

[24] Verma, S., Pant, M., & Snasel, V. (2021). A Comprehensive Review on NSGA-II for Multi-Objective Combinatorial Optimization Problems. IEEE Access, 9, 57757–57791. https://doi.org/10.1109/ACCESS.2021.3070634

[25] Wang, L., Jajodia, S., Singhal, A., Cheng, P., & Noel, S. (2014). k-Zero Day Safety: A Network Security Metric for Measuring the Risk of Unknown Vulnerabilities. IEEE Transactions on Dependable and Secure Computing, 11(1), 30–44. https://doi.org/10.1109/TDSC.2013.24

[26] Yan, D. (2020). A Systems Thinking for Cybersecurity Modeling (Version 1). arXiv. https://doi.org/10.48550/ARXIV.2001.05734

[27] Yin, L., Sun, Y., Wang, Z., Guo, Y., Li, F., & Fang, B. (2018). Security Measurement for Unknown Threats Based on Attack Preferences. Security and Communication Networks, 2018, 1–13. https://doi.org/10.1155/2018/7412627

Wielokryterialna optymalizacja konfiguracji systemu ochrony informacji w oparciu o algorytm NSGA-II. (2026). Informatyka, Automatyka, Pomiary w Gospodarce i Ochronie Środowiska, 16(2), 84-90. https://doi.org/10.35784/iapgos.8122

##plugins.themes.bootstrap3.article.sidebar##

Numer Tom 16 Nr 2 (2026)

Archiwum

##plugins.themes.bootstrap3.article.main##

Authors

Abstrakt

Słowa kluczowe:

Bibliografia

##plugins.themes.bootstrap3.article.details##

Licencja