International Scientific Journals
of Scientific Technical Union of Mechanical Engineering "Industry 4.0"

This article proposes an approach to improving the use of IDS/IPS systems in computer networks of forces and means of state and local administration bodies in the event of incidents, disasters, accidents and catastrophes. To this end, good practices for selecting an appropriate type of IDPS to increase the level of cybersecurity in the organization are studied. It is proposed to use the “type” metric to develop a comparative analysis of the correspondence between the types of IDPS and their ability to protect against ransomware, using the classification of tactics and techniques in accordance with the MITRE ATT&CK framework.

Cyber education is one of the global challenges in recent years. Attacks are becoming increasingly sophisticated and ensuring a safe working environment is difficult. Hyper-realistic virtual environments, called cyber training grounds, help to raise the level of cybersecurity training. The report analyses applicable methods, software and implemented solutions, which are cyber training grounds. The purpose of the study is to outline the types of cyber training grounds and their characteristics, functionalities and requirements for training through a cyber training ground, according to EU regulations, with the aim of applying them as a solution for training cybersecurity specialists to ensure the functioning of the National Situation Center and Crisis Management Center.

As cyber threats continue to grow in scale and complexity, the demand for robust cybersecurity education has become increasingly urgent. This paper examines the application of cybersecurity awareness training and end-user behavioral protection simulation platforms within higher education settings. It analyses the challenges universities face in delivering both theoretical knowledge and hands-on experience in cybersecurity and highlights the pedagogical value of integrating simulation-based tools into undergraduate and postgraduate curricula. The study also underscores the importance of collaboration between academia, industry, and government to develop strategies for cultivating cyber competencies. By leveraging interactive platforms, institutions can better prepare students to recognize, respond to, and mitigate cyber risks in real-world environments.

The authors propose the development of a framework using simulation modelling technology. The aim is to simulate the behavior and the interaction and interoperability of the components of the modern communication infrastructure of the national security systems in various crises. The focus is on cyber security and cyber defence, from the point of view of risks and threats to the security of communication infrastructure such as disasters and other crisis situations.

The report analyzes the needs and requirements of the National Situation Center (NSC) and the Crisis Management Center (CMC) regarding aspects of cyber security and cyber defense. The need for the interaction of the national security systems in crisis management, in order to ensure the functionality of the NSC and the CMC, is substantiated. For this purpose, it is important to define the critical entities in the national security ecosystem and to analyze the interactions between them according to legal documents and agencies and organizational structures of the European Union and Bulgaria. This, in turn, is a prerequisite for achieving effective and timely exchange of information, which will properly support the decision-making process in crisis management. The different types of cyber threats that could affect the operation of national security systems when crises occur, such as disasters, accidents and other crises are taken into account.

Achieving information security in the organization is related to the implementation of certain standard security procedures. The set of methods and tools for information security and communication and information systems (CIS) are the tools for implementing these procedures. The subject of the research is the subsystem for limiting and regulating access to information and communication and information systems, which is necessary for the analysis and simulation modelling of the interaction of national security systems in crisis situations related to cybersecurity and cyber defence.