ARCHITECTURE OF DISTRIBUTED AND MULTILEVEL SYSTEM FOR DETECTION MALICIOUS SOFTWARE IN LOCAL COMPUTER NETWORKS
Journal Title: Вчені записки Таврійського національного університету імені В. І. Вернадського. Серія: Технічні науки - Year 2018, Vol 29, Issue 2
Abstract
The paper proposes the architecture of a distributed multilevel system for detecting malware in local computer networks, the feature of which is the synthesis of distribution, decentralization, multilevel, and self-organization requirements in it, which, unlike the known systems, allows it to be used autonomously for the implementation of its functions detection of malware. In addition, the program modules of the system are represented on the basis of the structure of the Kripke, the feature of which is the same organization, which allows the exchange of knowledge in the middle of the system, which, unlike the known systems, allows you to use the knowledge obtained by separate parts of the system in other parts. The architecture of a distributed multilevel system is based on the principles of decentralization and self-organization and allows it to be filled with various functions of detection of malicious software in local computer networks. The distributed multi-level system relates to responsive systems, which will continuously monitor the running processes and executable programs in computer systems of the network. Objects for research from a distributed multilevel system are the testing of existing software and running processes in computer systems of the local network to the ability to refer to malicious software. It allows you to increase the number of levels of the system without changing its architecture. The basis of the architecture of the system are program modules with the same architecture, but each of them can independently take decisions based on various data collected from different computer systems of the network. The distributed multilevel system at the level of its structural parts of the software modules will carry out self-monitoring, which will be manifested in the periodic verification of the completeness of the system, the analysis of the availability of software modules, which for a long time are in the same state and require the automatic removal of current tasks for execution and transfer to another state , processing of software modules for optimization and distribution of software modules into several groups according to the analysis of their states over a long period of time. An important element of self-organization of the system is the development of mechanisms in it for the formation of its own goals. For such purposes we shall include the following: dynamic formation of the system; distribution and correlation of all structural units by groups of load, processing of critical events in the system, collective execution of tasks solved by one software modules, processing and optimization of accumulated statistical data.
Authors and Affiliations
О. С. Савенко
THE FIRST INTEGRALS OF THE ITO EQUATIONS WITH RANDOM COEFFICIENTS AND OF THE EXTENDED SYSTEM OF ITO EQUATIONS
In this paper we consider the algorithm for constructing the class of Ito equations that adapted with the given first integral, but with coefficients that depending on uncontrolled perturbations. It is proved that the in...
PRINCIPLE OF FLOWS SERVICE IN THE HETEROGENEOUS TELECOMMUNICATION ENVIRONMENT
The article proposes the principle of flows service in a heterogeneous telecommunication environment that will provide the flexibility and scalability of the system for managing the process of servicing hybrid telecommun...
SOFTWARE SUPPORT SOLUTIONS OF THE WINDSCREEN OPERATOR IN THE CONDITIONS OF ACTION OF ACCIDENTAL DAMAGES
The structure structure and software of the automatic system of support of solutions of the glass furnace operator in the conditions of the action of random perturbations are developed. The expert database of rules of th...
IMPROVING THE PROPERTIES OF CONCRETE FOR 3D PRINTING
In work the analysis of used materials is carried out at 3D printing in construction. To increase productivity and ensure high quality 3D printing, it is necessary to use concrete with enhanced properties. It is proposed...
THEORETICAL AND EXPERIMENTAL INVESTIGATION OF THE TWO-SIDE SILIFFING PROCESS OF THE BURNS OF DIFFERENT DYNAMIC PARTS
A theoretical and experimental study of the process of bilateral sanding of the ends of parts with different diameters has been carried out. A three-dimensional modular model of instrumental surface and part surface has...