Analysis of Information Security Events in an Electronic Digital Signature System Based on a Virtual Infrastructure

Abstract

This article analyzes information security events in a virtual infrastructure-based electronic digital signature system in accordance with the requirements of the regulations on the procedure for information exchange between elements of the national cybersecurity system. Key system modules are considered: the authentication module, the electronic digital signature generation module, and the verification module, including their submodules for data protection, signature generation, and verification. Examples of events for logging are provided, such as user authentication, electronic document generation, hash value transfer, and indicators of cyber incidents, including abnormal user actions. Information security events logged in virtual infrastructure-based electronic digital signature systems are presented. An assessment is made of the compliance of the logging results for these events with the requirements set out in Order No 130 of the Operational and Analytical Center under the President of the Republic of Belarus dated July 25, 2023.