RISK ANALYSIS AND MITIGATION STRATEGIES FOR NATIONAL CRITICAL INFORMATION INFRASTRUCTURE AMIDST GROWING SECURITY THREATS
https://doi.org/10.26583/vestnik.2025.1.7
EDN: UPLTPD
Abstract
The rapid increase in cyberattacks targeting critical components of Russia’s information infrastructure — from banking systems and energy complexes to telecommunications networks — underscores the need for comprehensive and adaptive cybersecurity measures. This study aims to develop approaches that enable not only the efficient allocation of cybersecurity resources but also the prioritization of threats based on their criticality, which is especially important for protecting the system’s most vulnerable links. A detailed analysis of infrastructure vulnerabilities has been conducted, identifying key risk areas that require prioritized protection. Particular attention is given to the necessity of coordination between public and private sectors, as well as the integration of artificial intelligence technologies. Such technologies enhance both the accuracy of cyberattack forecasting and the efficiency of response actions. The study's findings emphasize the importance of implementing adaptive standards and multi-level collaboration for the effective protection of critical assets. This flexible, coordinated approach to cybersecurity strengthens the resilience of national infrastructure in the face of escalating cyber threats. Additionally, the integration of comprehensive technologies alongside standardized methods creates the potential for a flexible defense system capable of swiftly adapting to emerging threats and enabling continuous monitoring of critical assets.
References
1. Maglaras L., Janicke H., Ferrag M.A. Cybersecurity of Critical Infrastructures: Challenges and Solutions. Sensors, vol. 22, no. 5105, 2022. https://doi.org/10.3390/s22145105
2. Tsantikidou K., Sklavos N. Threats, Attacks, and Cryptography Frameworks of Cybersecurity in Critical Infrastructures. Cryptography, vol. 8, no. 7, 2024. https://doi.org/10.3390/cryptography8010007
3. Korniyenko A.A. Sistema trebovaniy k obespecheniyu bezopasnosti avtomatizirovannykh sistem i znachimykh obʺektov kriticheskoy informatsionnoy infrastruktury: elektronnoe uchebnoe posobie [System of requirements for ensuring the security of automated systems and critical information infrastructure objects: electronic textbook]. St. Petersburg: St. Petersburg State University of Railway Transport of Emperor Alexander I, 2022, 63 p. ISBN 978-5-7641-1837-6. EDN GESBXD. (in Russian).
4. Govea J., Gaibor-Naranjo W., Villegas-Ch W. Transforming Cybersecurity into Critical Energy Infrastructure: A Study on the Effectiveness of Artificial Intelligence. Systems, vol. 12, no. 165, 2024. https://doi.org/10.3390/systems12050165
5. Aktayeva A., Makatov Y., Tulegenovna A.K., Dautov A., Niyazova R., Zhamankarin M., Khan S. Cybersecurity Risk Assessments within Critical Infrastructure Social Networks. Data, vol. 8, no. 156, 2023. https://doi.org/10.3390/data8100156
6. Alqudhaibi A., Albarrak M., Aloseel A., Jagtap S., Salonitis K. Predicting Cybersecurity Threats in Critical Infrastructure for Industry 4.0: A Proactive Approach Based on Attacker Motivations. Sensors, vol. 23, no. 4539, 2023. https://doi.org/10.3390/s23094539
7. Shmunko M.S., Chuykova V.V. Obespechenie zashchity informatsii na ob'ektakh kriticheskoy informatsionnoy infrastruktury (KII) [Ensuring Information Security at Critical Information Infrastructure (CII) Facilities]. Sovremennye informatsionnye tekhnologii i informatsionnaya bezopasnost' [Modern Information Technologies and Information Security], Proceedings of the 3rd All-Russian Scientific and Technical Conference, Kursk, February 2, 2024. Kursk: ZAO "Universitetskaya kniga", 2024, pp. 156–159. (in Russian)
8. Maglaras L., Kantzavelou I., Ferrag M.A. Digital Transformation and Cybersecurity of Critical Infrastructures. Applied Sciences, vol. 11, no. 8357, 2021. https://doi.org/10.3390/app11188357
9. De Felice F., Baffo I., Petrillo A. Critical Infrastructures Overview: Past, Present and Future. Sustainability, vol. 14, no. 4, p. 2233. https://doi.org/10.3390/su14042233.
10. Akwetey H.M., Danquah P., Koi-Akrofi G.Y., Asampana I. Critical Infrastructure Cybersecurity Challenges: IoT In Perspective. International Journal of Network Security & Its Applications (IJNSA), vol. 13, no. 4, July 2021. https://doi.org/10.48550/arXiv.2202.12970
11. Izonin I., Hovorushchenko T., Shandilya S.K. Quality and Security of Critical Infrastructure Systems. Big Data and Cognitive Computing, vol. 8, no. 10, 2024. https://doi.org/10.3390/bdcc8010010
12. Naugolnova I.A. Menedzhment 4.0: evolyutsiya i innovatsii v upravlenii organizatsiey v tsifrovuyu epokhu [Management 4.0: evolution and innovations in organizational management in the digital era]. Teoriya i praktika obshchestvennogo razvitiya [Theory and Practice of Social Development], 2023, no. 6(182), pp. 220–226. DOI 10.24158/tipor.2023.6.28. EDN KESNPN. (in Russian).
13. Kostina D.O., Vladimirov D.T., Konovalov V.V. O vozmozhnosti primeneniya kompleksnogo II v kiberbezopasnosti [On the possibility of applying integrated AI in cybersecurity]. Trudy II Vserossiyskoy nauchnoy konferentsii «Iskusstvennyy intellekt v avtomatizirovannykh sistemakh upravleniya i obrabotki dannykh» (27–28 aprelya 2023 g., g. Moskva) [Proc. II All-Russian Scientific Conference "Artificial Intelligence in Automated Management Systems and Data Processing" (April 27–28, 2023, Moscow)]. Moscow: Izdatelʹskiy dom KDU, Dobrosvet, 2023, pp. 400–404. EDN QMRRDW. (in Russian).
Review
For citations:
Vasilenko I.A. RISK ANALYSIS AND MITIGATION STRATEGIES FOR NATIONAL CRITICAL INFORMATION INFRASTRUCTURE AMIDST GROWING SECURITY THREATS. Vestnik natsional'nogo issledovatel'skogo yadernogo universiteta "MIFI". 2025;14(1):79-84. (In Russ.) https://doi.org/10.26583/vestnik.2025.1.7. EDN: UPLTPD
Views:
90
Email this article 