mireabulletinRussian Technological JournalRussian Technological Journal2782-32102500-316XRTU MIREA10.32362/2500-316X-2019-7-1-48-56mireabulletin-140Research ArticleИНФОРМАЦИОННЫЕ СИСТЕМЫ. ИНФОРМАТИКА. ПРОБЛЕМЫ ИНФОРМАЦИОННОЙ БЕЗОПАСНОСТИINFORMATION SYSTEMS. COMPUTER SCIENCES. ISSUES OF INFORMATION SECURITYANTIVIRUS SOFTWARE AND INDUSTRIAL CYBER SECURITY SYSTEM CERTIFICATION IN RUSSIAANTIVIRUS SOFTWARE AND INDUSTRIAL CYBER SECURITY SYSTEM CERTIFICATION IN RUSSIANazarenkoM. A.NazarenkoM. A.Nazarenko@mirea.ruGorobetsA. I.GorobetsA. I.noemail@neicon.ruMiskovD. V.MiskovD. V.noemail@neicon.ruMuravyevV. V.MuravyevV. V.noemail@neicon.ruNovikovA. S.NovikovA. S.noemail@neicon.ruМИРЭА - Российский технологический университетРоссияMIREA - Russian Technological UniversityRussian Federation201928022019714856Copyright © Nazarenko M.A., Gorobets A.I., Miskov D.V., Muravyev V.V., Novikov A.S., 20192019Nazarenko M.A., Gorobets A.I., Miskov D.V., Muravyev V.V., Novikov A.S.Nazarenko M.A., Gorobets A.I., Miskov D.V., Muravyev V.V., Novikov A.S.Данная работа распространяется под лицензией Creative Commons Attribution 4.0.This work is licensed under a Creative Commons Attribution 4.0 License.https://www.rtj-mirea.ru/jour/article/view/140

Статья посвящена вопросам сертификации антивирусного программного обеспечения и систем промышленной кибербезопасности. Показано, что время сертификации в России промышленной системы кибербезопасности (кибербезопасности АСУ ТП) значительно больше (до трех раз), чем в США, Европейском Союзе и Германии. В статье проанализированы продукты этих отраслей по времени жизни и времени разработки. Время разработки и использования продуктов также больше. Каждая переменная представлена для новых продуктов и для новых версий существующих продуктов. В статье использованы статистические методы: Альфа Кронбаха, Т-статистика и сравнение медианных значений. Перечисленные методы нередко используются в статьях по управлению качеством. Однако самый важный результат состоит в том, что в России сертификация добавляет от 32.1 до 40% ко времени на разработку новой версии или нового продукта, соответственно, в то время как в других странах - около 17%. Сокращение сроков сертификации приведет к повышению эффективности разработки новых продуктов в области кибербезопасности, что позволит улучшить позиции российской продукции на международном рынке.

The article is dedicated to issues in certification of antivirus software and industrial cyber security systems. It was shown that certification time in Russia is much longer than in the USA, European Union and Germany. The life time and the development time of products of this field were analyzed in the article. Each variable was specified for new products and for new versions of existing products. Some statistical methods were used in the article: Cronbach’s alfa, t-statistics, and median value similarity that are typical for the articles in quality management. As a result, it was found that certification time in Russia for industrial cyber security systems is significantly longer than in other analyzed countries, up to three-fold. Product development and life time are also longer. However, the most important result is that certification in Russia adds from 32.1 to 40 percent of time to the development of a new version or a new product, correspondingly, whereas in other investigated countries these numbers are about 17 percent. Reduction of certification time will increase new product development efficiency in the field of cyber security, which will improve positions of Russian products at the international mark et.

кибербезопасностьпромышленная система кибербезопасностиантивирусное программное обеспечениесертификацияРоссияcyber securityindustrial cyber security systemantivirus softwarecertificationRussiaReferencesKabali H.K., Rigoyen M.M., Nunez-Davis R., Budacki J.G., Mohanty S.H., Leister K.P., Bonner R.L. Jr. Exposure and use of mobile media devices by young children // Pediatrics. 2015. V. 136. № 6. P. 1044-1050. doi: 10.1542/peds.2015-2151Kabali H.K., Rigoyen M.M., Nunez-Davis R., Budacki J.G., Mohanty S.H., Leister K.P., Bonner R.L. Jr. Exposure and use of mobile media devices by young children. Pediatrics. 2015; 136(6): 1044-1050. doi: 10.1542/peds.2015-2151.Schoitsch E., Schmittner C., Ma Z., Gruber Th. The need for safety and cyber-security co-engineering and standardization for highly automated automotive vehicles // In: Advanced Microsystems for Automotive Applications / Schulze T., Müller B., Meyer G. (eds). Springer, 2015. P. 251-261.Schoitsch E., Schmittner C., Ma Z., Gruber Th. The need for safety and cyber-security co-engineering and standardization for highly automated automotive vehicles. In: Advanced Microsystems for Automotive Applications. Schulze T., Müller B., Meyer G. (eds). Springer, 2015: 251-261.Ni J.Z., Melnyk S., Flynn B.B., Ritchie W. Why be first if it doesn’t pay? The case of early adopters of C-TPAT supply chain security certification // Int. J. Operat. & Product. Management. 2016. V. 36. №. 10. P. 1161-1181.Ni J.Z., Melnyk S., Flynn B.B., Ritchie W. Why be first if it doesn’t pay? The case of early adopters of C-TPAT supply chain security certification. Int. J. Operat. & Product. Management. 2016; 36(10): 1161-1181.Gcaza N., Von Solms R. A A strategy for a cybersecurity culture: A South African perspective // The Electronic Journal of Information Systems in Developing Countries. 2017. V. 80. №. 1. P. 1-17.Gcaza N., Von Solms R. A strategy for a cybersecurity culture: A South African perspective. The Electronic Journal of Information Systems in Developing Countries. 2017; 80(1): 1-17.Mourtzis D., Vlachou E. Cloud-based cyber-physical systems and quality of services // The TQM Journal. 2016. V. 28. № 5. P. 704-733.Mourtzis D., Vlachou E. Cloud-based cyber-physical systems and quality of services. The TQM Journal. 2016; 28(5): 704-733.Raisinghani M.S. Can total quality management exist in cyber security: Is it present? Are we safe? // In: Handbook of Research on Digital Crime, Cyberspace Security, and Information Assurance. IGI Global, 2015. P. 350-359.Raisinghani M.S. Can total quality management exist in cyber security: Is it present? Are we safe? In: Handbook of Research on Digital Crime, Cyberspace Security, and Information Assurance. IGI Global, 2015: 350-359.Cherdantseva Y., Burnap P., Blyth A., Eden P., Jones K., Soulsby H., Stoddart K. A review of cyber security risk assessment methods for SCADA systems // Computers & Security. 2016. V. 56. P. 1-27.Cherdantseva Y., Burnap P., Blyth A., Eden P., Jones K., Soulsby H., Stoddart K. A review of cyber security risk assessment methods for SCADA systems. Computers & Security. 2016; 56: 1-27.Kent A.D. Cyber security data sources for dynamic network research // In: Dynamic Networks and Cyber-Security. Publisher WSPC, 2016. P. 37-65.Kent A.D. Cyber security data sources for dynamic network research. In: Dynamic Networks and Cyber-Security. Publisher WSPC, 2016: 37-65.Ефремова М.А. Уголовно-правовое обеспечение кибербезопасности: некоторые проблемы и пути их решения // Право и кибербезопасность. 2014. № 2. С. 33-38.Efremova M.A. Criminal-legal ensuring of cyber security: Problems and ways of their solution. Pravo i kiberbesopasnost’ (Law and Cyber Security). 2014; 2: 33-38. (in Russ.)Зиборов О.В., Иванов М.А., Чекунов И.Г. Состояние кибербезопасности современного информационного общества // Вопросы кибербезопасности. 2017. № 52(20). С. 15-18.Ziborov O.V., Ivanov M.A., Chekunov I.G. The state of cyber security in modern information society. Voprosi kiberbesopasnosti (Questions of Cyber Security). 2017; 52(20): 15-18. (in Russ.)Карцхия А.А. Кибербезопасность и интеллектуальная собственность. Часть 1 / Вопросы кибербезопасности. 2014. № 1(2). С. 61-66.Kartskhiya A.A. Cyber security and intellectual property. Part 1. Voprosi kiberbesopasnosti (Questions of Cyber Security). 2014; 1(2): 61-66. (in Russ.)Knowles W., Hutchison D., Prince D., Diss J.P. A survey of cyber security management in industrial control systems // Int. J. Critical Infrastructure Protection. 2015. V. 9. P. 52-80.Knowles W., Hutchison D., Prince D., Diss J.P. A survey of cyber security management in industrial control systems. Int. J. Critical Infrastructure Protection. 2015; 9: 52-80.Gopalakrishnan S., Zhang H. The link between vendor certification and performance in IT outsourcing: A tale of two stories // Academy of Management Proceed. 2018. № 1. P. 129-167.Gopalakrishnan S., Zhang H. The link between vendor certification and performance in IT outsourcing: A tale of two stories. Academy of Management Proceed. 2018; 1: 129-167.Kantardjieva M. The relationship between total quality management (TQM) and strategic management // J. Economics, Business and Management. 2015. V. 3. № 5. P. 537-541.Kantardjieva M. The relationship between total quality management (TQM) and strategic management. J. Economics, Business and Management. 2015; 3(5): 537-541.Shin J. , Son H., Rahman K.U., Heo G. Development of a cyber security risk model using Bayesian networks // Reliability Engineering & System Safety. 2015. V. 134. P. 208-217.Shin J. , Son H., Rahman K.U., Heo G. Development of a cyber security risk model using Bayesian networks. Reliability Engineering & System Safety. 2015; 134: 208-217.

The authors declare that there are no conflicts of interest present.