In Tomsk University of Control Systems and Radioelectronics (TUSUR) one of the main areas of research is information security. The work is carried out by a scientific group under the guidance of Professor Shelupanov. One of the directions is the development of a comprehensive approach to assessing the security of the information systems. This direction includes the construction of an information security threats model and a protection system model, which allow to compile a complete list of threats and methods of protection against them. The main directions of information security tools development are dynamic methods of biometrics, methods for generating prime numbers for data encryption, steganography, methods and means of data protection in Internet of Things (IoT) systems. The article presents the main results of research in the listed areas of information security. The resultant properties in symmetric cryptography are based on the properties of the power of the generating functions. The authors have obtained symmetric principles for the development of primality testing algorithms, as discussed in the Appendix.

IoT (Internet of Things) systems are becoming popular and are widely used in various spheres of life today. However, sometimes the security of such systems leaves much to be desired. This article proposes an approach to the construction of IoT systems protection subsystem with an example of application of the proposed approach to the automated system of commercial energy accounting. A special feature of the approach is the method of choosing the means of protection based on the threat model for the system.