Features of Building a Cyberdefense System for a Campus Network of a Research Institution

Abstract

The paper examines the features of building a cyber-security system for a campus network of a research institution. The specifics of the functioning of the information and communication infrastructure of research institutions in comparison with corporate networks of commercial enterprises are analyzed. The main differences in architecture, user models, the nature of information flows and the profile of cyberthreats for research institutions are identified. A system of principles for building a cyber-security system for a campus network of a research institution is proposed, which includes adaptive network segmentation, a multi-level trust model, the principle of controlled openness, the principle of continuity of scientific services and distributed administration with centralized audit. The need to integrate organizational, technical and procedural mechanisms for cyber-security within a single system for ensuring information security of a research institution is substantiated. A structural model of a cyber-security system for a campus network of a research institution is proposed, focused on ensuring the stability of the functioning of the information infrastructure in the conditions of modern cyberthreats.