Management of information and security events of a mobile cellular network using a digital twin

Abstract

The article focuses on the consideration of currently existing approaches to effectively ensure the information security of modern and promising mobile means of digital communication. It is noted that the modern mobile information and communication cellular network is one of the most important and at the same time vulnerable objects of the critical information infrastructure of the state. This network serves a significant number of users, who, as a rule, make decisions for the organization of effective state management, and also provides digital communication to a number of other subscribers, from the general population to all departmental corporate structures. That is why this critical network acts as a priority object in the context of the organization of effective management of its information security events. To organize the reliable functioning of this important critical information object, a new approach to the synthesis of algorithmic support of the digital twin of the information and event management system of computer systems of the cellular mobile information and communication network has been proposed.The proposed synthesis is based on the logical and dynamic modeling of the currently existing wide range of security events in modern control systems of information and communication networks, attack scenarios and response mechanisms to these information security incidents due to the formation of appropriate effective control influences on the processes of compensation for their destructive consequences. The architecture of the digital twin, the algorithm for its synthesis are considered, as well as possible approaches for the implementation of the integration of this virtual object with such platforms as Wazuh, Streamlit, Neo4j, AWS IoT are proposed. Verification and testing are carried out on the example of a scenario of a typical DDoS attack, the results of the implementation of the algorithm for the synthesis of a digital twin are presented. The effectiveness of the model in adapting to intensive variations in the security environment of the computer system of the cellular mobile digital network is shown. It is noted that the proposed architecture of the digital twin due to the implementation of the appropriate algorithmic and software product will provide cyberization of information and communication network nodes, security events, computer system states in the implementation of security management and response scenarios to the vast majority of all possible information security incidents. It is concluded that the proposed synthesis algorithm allows sequentially implementing the key stages of building a digital twin for the virtual representation of a digital communication system, including the formalization of security events, the construction of logical transitions in computer systems and integration into real structures of the information and communication network.