CONCEPTUAL FOUNDATIONS FOR BUILDING A SYSTEM OF ELECTRONIC TECHNICAL PASSPORTS OF INFORMATION SYSTEMS BASED ON BLOCKCHAIN TECHNOLOGY IN ORDER TO IMPROVE THE EFFICIENCY OF INFORMATION PROTECTION MEASURES AND ENSURE THE MANAGEMENT OF THE DEVELOPMENT OF COMPLEX SYSTEMS
Abstract and keywords
Abstract:
The article considers the possibility of using blockchain technology for automated maintenance of technical data sheets of information systems. An analysis of traditional documentation management methods has been carried out, and their disadvantages have been identified, including high time costs, audit complexity, and the risk of unauthorized data modification. The concept of an electronic technical passport system based on a decentralized registry and the use of smart contracts for automatic control of configuration changes and software updates is proposed. The simulation results showed that the introduction of blockchain technology reduces the processing time of changes from 4-6 hours with the traditional approach to 3-5 minutes, which is equivalent to speeding up the process by 50-100 times. The immutability of records, transparency of operations and automatic verification of data for compliance with security requirements are ensured. The developed system increases the efficiency of information security management, reduces the influence of the human factor and simplifies the audit process. The proposed solution is promising for implementation in mission-critical automated systems where strict control over the state and security of information resources is required. Further research may be aimed at integrating with threat monitoring systems and developing adaptive data access control mechanisms in the blockchain registry

Keywords:
blockchain technology, technical data sheets, information systems, decentralized registry, smart contracts, change management, software configuration, data security, information security, process automation, immutability of records, audit control, threat monitoring, access control, management efficiency, automated systems, critical systems
References

1. Federal'naya sluzhba po tekhnicheskomu i eksportnomu kontrolyu. Prikaz ot 29 aprelya 2021 g. № 77 ob utverzhdenii poryadka organizatsii i provedeniya rabot po attestatsii ob"ektov informatizatsii na sootvetstvie trebovaniyam o zashchite informatsii ogranichennogo dostupa, ne sostavlyayushchey gosudarstvennuyu taynu. URL: https://fstec.ru/dokumenty/vse-dokumenty/prikazy/prikaz-fstek-rossii-ot-29-aprelya-2021-g-n-77 (data obrashcheniya: 19.03.2025).

2. Losev V. S., Makarov A. E. Innovatsionnoe znachenie primeneniya tekhnologii blokcheyn v sisteme upravleniya // Vestnik Tikhookeanskogo gosudarstvennogo universiteta. – 2024. – № 1 (72). – S. 117–128.

3. Kiu M. S. et al. Blockchain integration into electronic document management (EDM) system in construction common data environment // Smart and Sustainable Built Environment. – 2024. – Vol. 13. – No. 1. – P. 117–132.

4. Shi L. et al. A cross-chain mechanism for agricultural engineering document management blockchain in the context of big data // Big Data Research. – 2024. – Vol. 36. – P. 100459.

5. Kontseptual'nye osnovy otsenki urovnya zashchishchennosti avtomatizirovannykh sistem na osnove ikh uyazvimosti / A. O. Efimov, I. I. Livshits, T. V. Meshcheryakova, E. A. Rogozin // Bezopasnost' informatsionnykh tekhnologiy. – 2023. – T. 30, № 2. – S. 63–79. – DOIhttps://doi.org/10.26583/bit.2023.2.04. – EDN LGPQZP.

6. Komanov P. A., Revazov Kh. Yu., Tavasiev D. A. Issledovanie bezopasnosti smart-kontraktov Ethereum // Mezhdunarodnyy nauchno-issledovatel'skiy zhurnal. – 2021. – № 1-1 (103). – S. 80–83.

7. Yumasheva E. V., Yumashev D. V., Timonov D. A. Informatsionnaya bezopasnost' v sistemakh elektronnogo dokumentooborota s primeneniem tekhnologii blokcheyn // Sovremennye naukoemkie tekhnologii. – 2021. – № 1. – S. 63–68.

8. Klishin D. V., Chechulin A. A. Analiz standartov obespecheniya informatsionnoy bezopasnosti // Sistemy analiza i obrabotki dannykh. – 2023. – № 1 (89). – S. 37–54.

9. Livshits I. I., Baksheev A. S. Issledovanie metodik kontrolya urovnya zashchishchennosti informatsii na ob"ektakh kriticheskoy informatsionnoy infrastruktury // Voprosy kiberbezopasnosti. – 2022. – № 6. – S. 52.

10. Sirotskiy A. A. Formalizovannaya model' audita informatsionnoy bezopasnosti organizatsii na predmet sootvetstviya trebovaniyam standartov // Bezopasnost' informatsionnykh tekhnologiy. – 2021. – T. 28. – № 3. – S. 103–117.

11. Antunes M. et al. Information security and cybersecurity management: A case study with SMEs in Portugal // Journal of Cybersecurity and Privacy. – 2021. – Vol. 1. – No. 2. – P. 219–238.

12. Slapničar S. et al. Effectiveness of cybersecurity audit // International Journal of Accounting Information Systems. – 2022. – Vol. 44. – P. 100548.

13. Shaikh F. A., Siponen M. Information security risk assessments following cybersecurity breaches: The mediating role of top management attention to cybersecurity // Computers & Security. – 2023. – Vol. 124. – P. 102974.

14. Kumar A. et al. IoT device security audit tools: a comprehensive analysis and a layered architecture approach for addressing expanded security requirements // International Journal of Information Security. – 2025. – Vol. 24. – No. 1. – P. 1–22.

15. Osnovnye etapy proektirovaniya avtomatizirovannoy sistemy intellektual'nogo poiska mest narkoticheskih zakladok po otkrytym istochnikam / G. I. Zverev, S. A. Mishin, M. V. Butova, Yu. V. Biktimirova // Vestnik Voronezhskogo instituta MVD Rossii. – 2024. – № 4. – S. 70-78.

16. Zverev G. I. Osnovnye etapy razrabotki prototipa intellektual'noy sistemy detektirovaniya i klassifikacii ognestrel'nogo oruzhiya na fotoizobrazheniyah / G. I. Zverev, S. A. Mishin, T. Yu. Tuzhikova // Vestnik Voronezhskogo instituta MVD Rossii. – 2025. – № 1. – S. 97-108.

Login or Create
* Forgot password?