Information technologies and threats in cyberphysical systems for displaying information in underground metal structures with defects

Abstract

Software implementation of a system for data searching and acquisition received from measurement of underground metal structures with defects, is described. This system collects the data using sensors and sends them to the web service for further loading into the database. Information encryption algorithms for such a system are presented. The web service is suggested to use HTTPS, data transfer protocol with OAuth secret keys. The NoSQL Elasticsearch database can be encrypted and used as additional protection for the used data store. It should be noted that the search and selection of useful information concerns the electric currents and voltages obtained by measuring the sensors during non-destructive testing. The properties of cyber security and the requirements for information security are analyzed for the cyber-physical system. The types of attacks and threats in cyber-physical systems are described. The main elements of Security Metrics as a science for modeling system security are considered. The various important criteria of metals for defective underground metal structures are given. Defining the security version of a cyber-physical system helps to find changes from previous versions of the software and thus point to potential cyber security vulnerabilities. The importance of the corrosion detection stage for underground metal structures is noted. The next step is to verify the cyber-physical system for security problems using automated tools according to the criteria. The functional diagram for a secure connection in the specified system is given. Security checks of the cyber-physical system can be performed with unauthorized access to systems with error messages, codes, etc. It was pointed out that the use of cryptographic techniques is advisable to preserve the confidentiality and integrity of the cyber-physical system