A CONCEPTUAL MODEL OF THE ARCHITECTURE OF MULTI-COMPUTER SYSTEMS WITH DECOYS AND TRAPS FOR DETECTING AND COUNTERING MALWARE AND COMPUTER ATTACKS

Abstract

The work analyzes such a class of systems for detecting and countering malicious software and computer attacks as deception systems. In such systems, functional systems of baits and traps are laid. And such systems are used in addition and compatible with the rest of the systems of the other direction to detect and counter malicious software and computer attacks. When operating corporate networks, various systems for detecting and countering malicious software and computer attacks are used. The main task for administrators of corporate networks is to ensure that the tools they use and their features are not known to attackers. The paper proposes a conceptual model of the architecture of multicomputer systems with decoys and traps for detecting and countering malicious software and computer attacks. The peculiarity of the proposed model is that it synthesizes the characteristic properties of this class of systems and a special characteristic property. This characteristic property is the controller of the system according to the decisions made in it. This is necessary so that systems of this class are unknown to attackers. This will make it possible to provide effective countermeasures against attackers who attempt to penetrate corporate networks using various methods and means. The paper proposes a method for calculating the efficiency of multicomputer systems of this class. Also, an experiment was set up for the developed system according to the proposed conceptual model. The results of the conducted experiment confirm the perspective of research in the direction of using the controller in multicomputer systems of baits and traps for the detection and countermeasures of malware and computer attacks. The direction of further research will be detailing the proposed conceptual model of the architecture of multicomputer systems to the level of typical elements and components and, accordingly, supplementing it with a display of the connections between them.