Сluster approach of building networks as a way of ensuring the appropriate level of cyber security of the information and telecommunication system

Abstract

Interaction between the subjects of modern society is inextricably linked to the reliable functioning of computer information systems and networks. Security and quality of service (Quality of service, QoS) are two key network services to ensure communication security (according to the Ukrainian national standard DSTU ISO/IEC 27000:2017). Quality is a key requirement, and with the further development of computerized information systems and networks, additional security requirements are rapidly increasing. Security features, service levels, and management requirements for all network services must be defined and included in any network service agreement. The intensive development of computer information systems and networks has increased the vulnerability of the system and multiplied the possibility of cyber-attacks. Therefore, network security management is a key element in the functioning of computer systems and networks. Security vulnerabilities in routers, balancers and firewall operating systems, denial-of-access and denial-of-service attacks on key network nodes and servers, changing parameters and hacking routers, etc., affect resource availability and quality of service. Issues such as ensuring key QoS parameters, protecting data packets, preventing intrusion attacks and denial-of-service attacks are just some of the issues that need to be addressed to ensure secure resource allocation, access and secure transmission paths, content protection, and end-to-end - completion of QoS provisioning. Security mechanisms and QoS are not independent. The choice of security mechanism will affect QoS performance and vice versa. Meeting quality of service requirements requires the use of security mechanisms to ensure appropriate levels of service and billing. The wrong choice of security mechanisms will reduce the performance of a carefully constructed network, or information and telecommunications system (hereinafter ITS), and the wrong choice of service levels will lead to information leakage. That is, the optimal balance of QoS parameters helps to reduce information leakage. Thus, this article proposes a cluster approach to building a network for timely detection and response to cyber threats, as well as unauthorized access to critical network components, which in turn is a necessary component to ensure a high level of cyber security of the entire ITS.