This study solves the task to redistribute the load on a geographically distributed foggy environment in order to achieve a load balance of virtual clusters. The necessity and possibility of developing a universal and at the same time scientifically based approach to load balancing has been determined. Object of study: the process of redistribution of load in a foggy environment between virtual, geographically distributed clusters. A load balancing method makes it possible to reduce delays and decrease the time for completing tasks on foggy nodes, which brings task processing closer to real time. To solve the task, a mathematical model of the functioning of a separate cluster in a foggy environment has been built. As a result of modeling, the problem of finding the optimal distribution of tasks across the nodes of the virtual cluster was obtained. The limitations of the problem take into account the characteristics of the physical nodes of support for the virtual cluster. The process of distributing the additional load was also simulated through the graph representation of tasks entering virtual clusters. The task to devise a method for load transfer between virtual clusters within a foggy environment is solved using the proposed iterative algorithm for finding a suitable cluster and placing the load. The simulation results showed that the balance of the foggy environment when using the proposed method increases significantly provided the network load is small. The scope of application of the results includes geographically distributed foggy systems, in particular the foggy layer of the industrial Internet of Things. A necessary practical condition for using the proposed results is the non-exceeding the specified limit of the total load on the foggy medium, usually 70 %

This paper reports an analysis of the software (SW) safety testing techniques, as well as the models and methods for identifying vulnerabilities. An issue has been revealed related to the reasoned selection of modeling approaches at different stages of the software safety testing process and the identification of its vulnerabilities, which reduces the accuracy of the modeling results obtained. Two steps in the process of identifying software vulnerabilities have been identified. A mathematical model has been built for the process of preparing security testing, which differs from the known ones by a theoretically sound choice of the moment-generating functions when describing transitions from state to state. In addition, the mathematical model takes into consideration the capabilities and risks of the source code verification phase for cryptographic and other ways to protect data. These features generally improve the accuracy of modeling results and reduce input uncertainty in the second phase of software safety testing. An advanced security compliance algorithm has been developed, with a distinctive feature of the selection of laws and distribution parameters that describe individual state-to-state transitions for individual branches of Graphical Evaluation and Review Technique networks (GERT-networks). A GERT-network has been developed to prepare for security testing. A GERT-network for the process of checking the source code for cryptographic and other data protection methods has been developed. A graphic-analytical GERT model for the first phase of software safety testing has been developed. The expressions reported in this paper could be used to devise preliminary recommendations and possible ways to improve the effectiveness of software safety testing algorithms

This paper has determined the relevance of the issue related to improving the accuracy of the results of mathematical modeling of the software security testing process. The fuzzy GERT-modeling methods have been analyzed. The necessity and possibility of improving the accuracy of the results of mathematical formalization of the process of studying software vulnerabilities under the conditions of fuzziness of input and intermediate data have been determined. To this end, based on the mathematical apparatus of fuzzy network modeling, a fuzzy GERT model has been built for investigating software vulnerabilities. A distinctive feature of this model is to take into consideration the probabilistic characteristics of transitions from state to state along with time characteristics. As part of the simulation, the following stages of the study were performed. To schematically describe the procedures for studying software vulnerabilities, a structural model of this process has been constructed. A "reference GERT model" has been developed for investigating software vulnerabilities. The process was described in the form of a standard GERT network. The algorithm of equivalent transformations of the GERT network has been improved, which differs from known ones by considering the capabilities of the extended range of typical structures of parallel branches between neighboring nodes. Analytical expressions are presented to calculate the average time spent in the branches and the probability of successful completion of studies in each node. The calculation of these probabilistic-temporal characteristics has been carried out in accordance with data on the simplified equivalent fuzzy GERT network for the process of investigating software vulnerabilities. Comparative studies were conducted to confirm the accuracy and reliability of the results obtained. The results of the experiment showed that in comparison with the reference model, the fuzziness of the input characteristic of the time of conducting studies of software vulnerabilities was reduced, which made it possible to improve the accuracy of the simulation results.

Introduction to automatic safety on-board UAV system. Reviewed methods which helps objectively evaluate the stability level of the software and hardware complex of the control and positioning onboard system. Proposed use of GERT networks for comparative analysis and research of individual stages mission tasks.

Nowadays, number of cyber-attacks aimed at software increases. Thus, improving the quality of software security services becomes acute. Confidentiality is one of the basic security services. It is provided, including through the use of obfuscation mechanism. Code quality measurement Methods has been investigated. Particular attention is paid to methods aimed at decompiled code, where standard metrics do not take in account. The method of decompiled code static analysis has been improved. This method takes into account the features of the compile procedure for languages with intermediate code.

У статті представлені результати аналізу основних методів виявлення вразливостей програмного забезпечення. Представлені результати досліджень ряду авторів, синтезуючих та регламентуючих знань про системи виявлення вразливостей програмного забезпечення. Розглянуті методи аналізу програмного забезпечення, що використовуються при проведенні сертифікаційних випробувань. Показано, що використання існуючих методів та методик аналізу безпеки програмного забезпечення не забезпечує точність результатів на умовах нечисельних вхідних даних. Цей недолік ускладнює жорсткі вимоги до оперативності реалізації тестових сценаріїв. Отже, необхідне розроблення системи виявлення вразливих користувачів, основною задачею якої буде мінімізація кількості протирічної інформації, що використовується експертом при прийнятті рішень. Найкраще перспективне створення підвищення ефективності існуючих систем виявлення вразливостей полягає у зменшенні навантажень експертів за рахунок випробувань методів виявлення вразливостей, що впроваджені до систем підтримки прийняття рішень. Це дозволить істотно знизити затримки часу при прийнятті рішень щодо безпеки програмного забезпечення, а також, як наслідок, зробить процедуру тестування безпеки програмного забезпечення більш доступною широкому колу розробників. Підвищення доступності процедур тестування безпеки програмного забезпечення повинно підвищувати інтерес як розробників, так і користувачів інформаційних систем до проблем безпеки, що, в свою чергу, дасть новий імпульс розвитку методів та систем виявлення вразливостей і перевірки відповідності програмним вимогам безпеки.