MUHIM INFRATUZILMA OBYEKTLARINI KIBERHUJUMLARDAN HIMOYALASH: TAHDIDLAR, O‘ZARO BOG‘LIQLIK VA RISKLARNI BOSHQARISH YONDASHUVLARI
Kalit so‘zlar:
muhim infratuzilma, kiberhujum, APT, SCADA, Stuxnet, o‘zaro bog‘liqlik, kaskadli ta’sir, NIST freymvorki, risklarni boshqarish.Annotatsiya
Maqolada energetika, transport, telekommunikatsiya, moliya kabi muhim infratuzilma obyektlariga qaratilgan zamonaviy kiberhujumlar, infratuzilmalar o‘rtasidagi o‘zaro bog‘liqlik tufayli yuzaga keladigan kaskadli ta’sirlar hamda ularni himoyalashning risklarga asoslangan yondashuvlari tahlil qilingan. T.A. Johnson tahriri ostida nashr etilgan “Cybersecurity: Protecting Critical Infrastructures from Cyber Attack and Cyber Warfare” kitobi materiallari asosida maqsadli fishing, ilg‘or doimiy tahdidlar (APT), nol kun zaifliklari va rootkitlar tavsiflangan, Stuxnet hodisasi misolida sanoat boshqaruv tizimlariga qaratilgan hujumlar ko‘rib chiqilgan. NIST kiberxavfsizlik freymvorkining tuzilmasi tahlil qilinib, uni O‘zbekistonda muhim axborot infratuzilmasi obyektlarini himoyalashda qo‘llash bo‘yicha takliflar berilgan.
Foydalaniladigan adabiyotlar
Johnson T.A. (ed.). Cybersecurity: Protecting Critical Infrastructures from Cyber Attack and Cyber Warfare. – Boca Raton: CRC Press, Taylor & Francis Group, 2015. – ISBN 978-1-4822-3923-2.
National Institute of Standards and Technology. Framework for Improving Critical Infrastructure Cybersecurity. Version 1.0. – Gaithersburg: NIST, 2014.
National Institute of Standards and Technology. The NIST Cybersecurity Framework (CSF) 2.0. NIST CSWP 29. – Gaithersburg: NIST, 2024.
The White House. Presidential Policy Directive 21 (PPD-21): Critical Infrastructure Security and Resilience. – Washington, 2013.
O‘zbekiston Respublikasining “Kiberxavfsizlik to‘g‘risida”gi Qonuni. 15.04.2022-yil, O‘RQ-764-son.
O‘zbekiston Respublikasi Prezidentining “«Raqamli O‘zbekiston – 2030» strategiyasini tasdiqlash va uni samarali amalga oshirish chora-tadbirlari to‘g‘risida”gi Farmoni. 05.10.2020-yil, PF-6079-son.
Falliere N., O Murchu L., Chien E. W32.Stuxnet Dossier. Version 1.4. – Symantec Security Response, 2011.
Pederson P., Dudenhoeffer D., Hartley S., Permann M. Critical Infrastructure Interdependency Modeling: A Survey of U.S. and International Research. – Idaho Falls: Idaho National Laboratory, 2006.
