Assessment of Cyber Risks of a Critical Information Infrastructure Facility Based on the Topology of Its External Connections-Reference-Cited by-同舟云学术

Assessment of Cyber Risks of a Critical Information Infrastructure Facility Based on the Topology of Its External Connections

Published:2024-08-10 Issue:4 Volume:46 Page:50-59
ISSN:0204-3572
Container-title:Èlektronnoe modelirovanie
language:
Short-container-title:Èlektron. model.

Author:

,Zubok V.,Dubynskyi G.,

Abstract

The concept of cyberspace as a critical information infrastructure object using mathematical topology is described. A method for categorizing the risk of an external connection based on the impact on the integrity, confidentiality, and availability of information exchanged over this connection is proposed. The method considers communication as an element of the cyberspace topology of a critical information infrastructure object, a "supply chain" from the cyber securi-ty risk management perspective. That makes it possible to fill the corresponding gap in the na-tional regulatory documents on categorizing critical infrastructure objects and their cyber pro-tection.

Publisher

National Academy of Sciences of Ukraine (Co. LTD Ukrinformnauka) (Publications)

Reference15 articles.

1. Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS2 Directive). O.J. L 333, 27.12.2022, p. 80-

2. Some issues regarding critical infrastructure objects: Resolution of the Cabinet of Ministers of Ukraine dated October 9, 2020, No. 1109: as of May 11, 2023. URL: https://zakon.rada.gov.ua/laws/show/1109-2020-п#Text (access date: July 12, 2023).

3. On approval of the Procedure for maintaining the Register of critical infrastructure objects, including such objects in the Register, access and provision of information from it: Resolution of the Cabinet of Ministers of Ukraine dated April 28, 2023, No. 415. URL: https://zakon.rada.gov.ua/laws/show/415-2023-п#Text (access date: July 12, 2023).

4. Some issues regarding critical information infrastructure objects: Resolution of the Cabinet of Ministers of Ukraine dated October 9, 2020, No. 943: as of September 7, 2022. URL: https://zakon.rada.gov.ua/laws/show/943-2020-п#Text (access date: July 12, 2023).

5. On approval of the Criteria for determining enterprises, institutions, and organizations that are of critical importance for the national economy in the fields of special communication organization, information protection, cybersecurity, critical infrastructure protection, electronic communications, and radio frequency spectrum in a special period: Order of the Administration of the State Service of Special Communications and Information Protection of Ukraine dated May 31, 2023, No. 465. URL: https://zakon.rada.gov.ua/laws/show/z1057-23#Text (access date: July 12, 2023).