HARDWARE CLOUD OF FIREWALLS AS A COMPONENT OF INFORMATION-MEASUREMENT CYBERSECURITY SYSTEMS

Authors

  • S.V. Koryakin Institute of Machine Science, Automation and Geomechanics of the National Academy of Sciences of the Kyrgyz Republic

Keywords:

hardware cloud, information protection systems, network firewall (FW), firewall, functional expansion, information security, security architecture, modularity, fault tolerance, secure real-time automated information systems (AISRV ZI), hardware cloud systems (AOS)

Abstract

Modern automated information systems are characterized by increasing computational loads and the growing complexity of cyber threats, which requires the development of hardware and software information security tools. Hardware-oriented approaches and cloud architectures are of particular interest for improving the performance, scalability, and resilience of information security tools. Purpose: to develop principles for organizing a hardware cloud in information security systems and to create an architecture for a cloud system of firewalls that provides adaptive protection of automated information systems against cyber threats. Results: methods of hardware and software support for information security in automated information systems and principles for organizing a hardware cloud based on functional elements of microelectronic systems are considered. A prototype cloud system of firewalls operating within a hardware-oriented network is presented. An approach is proposed for configuring the functionality of firewalls united by a hardware cloud under neural-network control. The architecture and operating algorithm of a hardware firewall implementing the principles of hardware-oriented networks are developed. Definitions of a hardware cloud network and a hardware cloud are introduced. Practical significance: the results can be used in designing and upgrading hardware-software information protection systems, including corporate and critical automated systems. The proposed architectural solutions improve the scalability, adaptability, and effectiveness of firewalls under dynamically changing cyber threats.

References

1. Buczak, A. L., & Guven, E. (2016). A survey of data mining and machine learning methods for cyber security intrusion detection. IEEE Communications Surveys & Tutorials, 18(2), 1153–1176.

2. Kohonen, T. (2001). Self-organizing maps (3rd ed.). Springer.

3. Советов, Б. Я. Моделирование систем [Текст] / Б. Я. Советов. – М.: Высш. шк., 2001. – 343 с.

4. Болодурина, И. П. Исследование моделей нейронной сети для обеспечения безопасности и качества обслуживания мультиоблачной платформы [Текст] / И. П. Болодурина, Д. И. Парфенов // Информационные и математические технологии в науке и управлении. – Оренбург, 2018. – С. 18–26.

5. Bishop, C. M. (2006). Pattern recognition and machine learning. Springer.

6. Курзыкина, А. В. Проблемы внедрения автоматизированной информационной системы [Текст] / А. В. Курзыкина // Молодой ученый. – 2017. – № 4. – С. 124–167. – Режим доступа: URL https://moluch.ru/archive/138/38806/. – Загл. с экрана. – Дата обращения: 16.09.2025.

7. Корякин, С. В. Разработка программно-аппаратного ядра универсальной среды проектирования автоматизированных систем защищенного исполнения [Текст] / С. В. Корякин // Проблемы автоматики и упр. – Бишкек, 2020. – № 1 (38). – С. 60–69.

8. Hennessy, J. L., & Patterson, D. A. (2019). Computer architecture: A quantitative approach (6th ed.). Morgan Kaufmann.

9. Stallings, W. (2017). Network security essentials (6th ed.). Pearson.

10. Sommer, R., & Paxson, V. (2010). Outside the closed world: On using machine learning for network intrusion detection. In Proceedings of the IEEE Symposium on Security and Privacy (pp. 305–316). IEEE.

11. Tehranipoor, M., & Wang, C. (2012). Introduction to hardware security and trust. Springer.

12. Sivarama, P. Dandamudi. Guide to RISC Processors [Text]: For Programmers and Engineers / P. Sivarama. – USA: Springer Science+Business Media, Inc., 2005. – 387 p.

13. Vesanto, J., & Alhoniemi, E. (2000). Clustering of the self-organizing map. IEEE Transactions on Neural Networks, 11(3), 586–600.

14. Шматок, А. Аппаратные ускорители на базе ПЛИС [Текст] / А. Шматок // Современная электроника. – 2007. – № 6. – С. 60–63.

15. Zhang, Q., Chen, M., & Li, Y. (2018). FPGA-based acceleration for machine learning applications. IEEE Transactions on Circuits and Systems, 65(3), 1–12.

16. Корякин, С. В. Облачная система межсетевых экранов / С. В. Корякин, Ю. С. Корякина // Вестник Кыргызско-Российского Славянского университета. – 2023. – Т. 23, № 4. – С. 67-78. – DOI 10.36979/1694-500X-2023-23-4-67-78. – EDN ZWRQES.

17. Cheswick, W. R., Bellovin, S. M., & Rubin, A. D. (2003). Firewalls and Internet security. Addison-Wesley.

18. Vinayakumar, R., et al. (2019). Deep learning approach for intelligent intrusion detection system. IEEE Access, 7, 41525–41550.

19. Buczak, A. L., & Guven, E. (2016). Machine learning for cybersecurity. Pattern Recognition Letters, 101, 3–10.

20. Information Technologies and Automation 2021. (2021). Procedia Computer Science, 190, 1–8.

21. Students’ motivation and engagement during distance learning. (2021). Procedia Computer Science, 192, 247–256.

22. Methods and algorithms of multidimensional data analysis. (2014). In Neuro-fuzzy methods in intelligent systems (pp. 9–72).

23. Gruzdeva, L. M. (2015). Models for improving corporate telecommunication networks under information security threats (Doctoral dissertation).

Downloads

Published

2026-09-07

Issue

Section

TECHNICAL EQUIPMENT FOR CONTROL, DIAGNOSTIC AND CONTROL SYSTEMS

Categories