Vladimir Shelepov, GKS: I for total integration of security systems
Questions of TAdviser on complex and information security were answered by Vladimir Shelepov, the vice president of GKS for strategic development of the direction of complex security.
Conceptual problem of ensuring any security – its natural conflict with openness of society. Do you agree with this thesis?
Vladimir Shelepov: The conflict, really, is available. On the one hand, involvement of society in process of security requires the maximum openness. Society understood both threats, and the existing sales terms of these threats, and showed intolerance to these facts. On the other hand, the more we open information on threats, in particular - about methods of counteraction for them, the more we give tools to potential malefactors who can use this information in the purposes.
It is impossible achieve ideal balance between openness and closeness, it is a utopia. Therefore separate documents, state programs will be inevitably coded, and it is correct. It is necessary to consider and the psychological moment – even just publicly speaking about the new threats of terrorist character implemented abroad we actually prompt to hotheads as these threats to perform.
I observing moderate publicity. For example, when case concerns the most serious threats, such as terrorist attack, informing the population on existence of threat reduces risk of commission of terrorist attack, at least because the vigilance of citizens while work on suppression of such threat requires silence increases. And if it is about protection of the territory using video surveillance – this information it is possible and it is necessary to publish that people understood that their illegal actions can be written and classified with acceptance of adequate measures in relation to the violator. In general, physical protection of objects and territories, despite development of technologies, still remains one of key requirements, in particular for crucial infrastructure facilities of the Russian Federation.
What changes happened for the last few years in the field of threats? What threats are most relevant today?
Vladimir Shelepov: In recent years we do not observe wide circulation of new types of threats. Specific weight of earlier known threats and a form of their manifestation changes. For example, a number of threats can be performed using the UAV.
In the modern world if to consider threats in terms of the largest probability and weight of effects, three main groups – threats of terrorist attack, cyberthreat and threat of the fires prevail. Threats of terrorist attack and the fires are rather well studied, and the measures directed to counteraction to the specified threats are regulated by the legislation. The cyberthreats generating the risks connected with a compromise, violation or the termination of functioning of information systems and effects of it – the most fast-growing group.
Acceptance in 2017 of Law 187-FZ – the proof of importance of work in the direction of counteraction to cyberthreats. It is, including, about protection in terms of cybersecurity of objects of critical information infrastructure, dangerous industrial productions where violation in work of information systems can lead to emissions in the atmosphere, death of people. I will emphasize that management of work on risk minimization of any of these threats is a pro-active task, but not reactive.
What new technological solutions are used by the modern systems of complex information security taking into account the appearing implementers of these or those threats?
Vladimir Shelepov: If to speak about specific technological solutions, then these are, for example, detection systems and suppression of UAVs. In our country serious work in this direction was conducted before the World Cup, and now this work is continued. The main thing that it would be desirable to tell on a situation in general, – I for total integration of security systems with each other because their separation – one of the main problems of security in a pro-active mode.
Separation within the enterprise?
Vladimir Shelepov: Separation at all levels – the enterprises, the cities, the states. Separately are considered physical and information security though elements of one system are security systems. And here system integrators can just act as those Competence Centers which can provide balance of various aspects of security through participation in work of specialists of different profiles. Including, the highly skilled experts studying special security systems – explosives technicians, criminalists, as well as other specialists: architects, experts in holding mass actions, etc. And such specialists are in staff of GKS.
The recent tragedy in Kerch, frequent messages about similar events from the USA. How modern technologies can help with security on this direction?
Vladimir Shelepov: On the example of events in Kerch we were again convinced of essential shortcomings of the passive security systems based on simple access control, video surveillance and so on. The passive systems do not give the chance to timely reveal potential danger and to identify it. The Kerch terrorist was not noticed in commission of any illegal acts earlier and was not brought to trial. At the same time, something pushed it to come to school for the purpose of commission of murders, and then to commit suicide. And the security system of educational institution was not ready to it.
How to cut the people who are on the verge of mental disorders, to prevent the possible crimes and offenses connected with it? And here it is possible to note development of systems of control of an emotional status of the person which belongs to special security systems. In the world they are applied still not really widely as these systems are rather expensive, but examples of use are – in particular, in Israel, on transport. Use of such solutions requires integration of information systems of different departments – the Ministry of Internal Affairs, the Ministry of Health and others, regular exchange of data, the operational analysis of large volume of data.
Security system and Internet of Things – what common ground on this field?
Vladimir Shelepov: In Barcelona there passed the forum recently across the smart cities where the concepts "safe city" and "Internet of Things" were often discussed together, in total with "Big Data". All of us want that the environment for the citizen was comfortable and safe. And the main factor of security it becomes frequent reaction speed on the events which are taking place in the city.
"Event" approach is just characteristic of technologies of Internet of Things. The basic IoT-platform around which complete solutions are based should support monitoring of events, providing integration of systems. Collecting and the analysis of the arriving information from the separate systems and devices (video surveillance, sensors, sensors, etc.) allow to prevent potentially dangerous situations and to quickly reveal violations. It is important also that the IoT-platform provides the automated response to standard incidents and informing responsible personnel in critical situations. Such opportunities, for example, are implemented in the InOne IoT-platform of the HeadPoint company entering into GKS.
What it is possible to tell about normative security in Russia? As far as it is mature?
Vladimir Shelepov: The legislation in the field of security measures in Russia rather serious, there are corresponding state strategy. In particular, there is a worked legislation in respect of security of sporting mass events - for example, the Federal law "About Physical Culture and Sport in the Russian Federation", Rules of security when holding official sports competitions approved by the Order of the Government of the Russian Federation and also the Requirements to separate infrastructure facilities of venues of official sports competitions and hardware of stadiums approved by the order of the Ministry of Internal Affairs of the Russian Federation in which quantitative, and not just qualitative indexes of security systems of these or those objects depending on their category are set.
At the same time it is clear that such large actions as the Olympic Games in Sochi and the World Cup under which, including, separate federal laws were adopted acted as the driver of development of the legislation.
Exist in the legislation and separate defects – one of them we already discussed at the beginning of our conversation. A certain defect, in my opinion, is also in respect of security of cultural mass actions. At the federal level these questions are not regulated, and regional regulatory legal acts became outdated and do not correspond to modern realities in the field of security taking measures.
Why not to apply regulation of security of sporting events to cultural? They are often carried out on sporting venues …
Vladimir Shelepov: Obligations for providing security measures when holding mass actions are assigned to event managers. Therefore if legislatively specific list of these measures is not defined, then the organizer tries to minimize the costs for security.
What can you tell about the federal law "About Security of Critical Information Infrastructure of the Russian Federation" of 7/26/2017 N 187-FZ?
Vladimir Shelepov: Today opposition between the countries goes to a cyberspace, and openly speak about it on the international scene. Every day more and more news about inactivation of industrial facilities, violation of operability of medical institutions, failures of banking systems, etc. appear. The new law determined state policy by protection of similar objects and obliged owners to ensure their safety. As at us the main driver is the legislation and regulators, it is really important.
And if earlier in our country the main focus was directed towards data protection from confidentiality violations, then 187-FZ brings approach to security to the following step of development. Actually it is the declaration of importance of infrastructure, ensuring operability of the vital systems answering not only for the industry, economy and defense capability of the state, but also the social sphere.
Great advantage is also qualitatively new level of regulations. It is not formal set "should and it is obliged", and quite flexible requirements which allow to consider specifics of the industries and criticality of specific subjects to protection. At the same time responsibility for incidents comes because of insufficient protection of objects of KII, but not just for non-performance of paper measures.
The FIFA World Cup in Russia becomes an axiom of almost ideal holding a world-class mass action. In your opinion, what main technology results of the championship?
Vladimir Shelepov: In the technology relation the first innovation of the World Cup in Russia – the system of identification of the fan or FAN-ID which represents complete innovative solution - earlier in the World Cups such technology was not used. A system consisted of a core where identification and an inspection of a possibility of visit of matches of the World Cup in Russia by each fan, and specially created access control system with readers was carried out.
The decision on issue of the ID card of the fan (FAN-ID) by preparation and holding the FIFA World Cup in Russia was accepted on the basis of any studying of "black lists" – participation in crime, presence at the list of persons to whom visit of sporting events is forbidden. At the same time, if someone from fans committed offense in the championship, then earlier the received FAN-ID was blocked by it.
Besides, for implementation of bans of FIFA on a bringing of certain substances and objects transport and pedestrian check points were equipped with modern security protections: bottom control systems, scanners of the hidden cavities of the car, control systems of baggage of different people detectors. The applied technologies were rather conservative in the sense that the checked, reliable equipment from the proved suppliers was used. But integration of the above-stated systems and the equipment for the solution of assigned tasks on security of the audience with security systems of stadiums allows to tell that in general our World Cup became the safest sporting event in world history. It is possible to claim that in holding sporting events of such scale our country sets a technology trend to the whole world.
Whether it is going to use FAN-ID for the Russian fans?
Vladimir Shelepov: There is the corresponding order of the President according to the results of carrying out joint a meeting of Council at the President for development of physical culture and sport and the Supervisory board of autonomous nonprofit organization "Organizing committee Russia-2018. In it it is told about expediency of application of FAN-ID at internal competitions. And on this subject there is a public discussion now. In public field representatives of associations of fans spoke, claiming that introduction of an identification card – the evil that it will lead to decrease in attendance of matches. Of course, for some fans who got used to create everything that will like at stadium of FAN-ID there is an evil. Actions of offenders will be recorded, unambiguously classified, violators will are identified and made responsible, including, they can have problems at future visits of matches. But for respectable citizens of FAN-ID is a good case. In my opinion, it is not necessary to be afraid of outflow of a part of fans – hooligans will leave, those who would like to come to soccer today will come, to new comfortable arenas, but so far is afraid of incidents.
And in the organizational relation what results of the championship?
Vladimir Shelepov: For a start I will tell – and it can seem surprising, but requirements to security of the World Cup in the organizational plan were even softer, than the regulations of our legislation applied to internal sporting events – for example, regarding the regulated time of pass of most of the audience for a match. The championship showed that in the presence of competently constructed security system, good work of organizers, use of modern technologies, the most large-scale event can be held safely. Especially it should be noted that within holding the Championship accurate interdepartmental interaction between Federal executive authorities Russian Federations, including security agencies, ANO Organizing Committee Rossiya-2018, the regional and city authorities and other interested organizations was fulfilled.
What main types of the projects implemented by GKS in the field of complex security?
Vladimir Shelepov: I will repeat that complex approach and integration of systems, including, on the basis of IoT-technologies is necessary for providing the due security level in today's conditions. GKS has widely diversified service portfolio. We actively develop own competences of such areas as end-to-end systems of security, information and physical security, development of the software products specialized for this sphere. In an asset of GKS there are serious projects on each of the mentioned directions.
Within the direction of complex security we provide a full stroke of the project: design, installation and construction works, a commissioning and delivery of systems in operation with further support of the implemented solutions. One of the most important stages of the project – consulting on which together with the customer there is a deep immersion and studying of features of an object and also search of optimal solutions for further design. As for information security, the Step Logic company entering into GKS develops more than 15 years the direction of information and network security. In a portfolio of the company – 350 certificates of the international non-profit organizations and the largest suppliers of cybersecurity, partnership with 80 leading foreign and Russian vendors. Own development of integrator in the field of cybersecurity – STEP SOC – includes access to functionality of SOC (Security Operation Center, the Center of operational monitoring of cybersecurity) for flexible service model and also the complete list of modern works to information security fields at the request of customers. For only one 2017 of Step Logic implemented 28 large complex projects in the field of cybersecurity.
In terms of integration of systems and use of IoT-technologies, it should be noted possibilities of the integration InOne platform which is already mentioned above developed by the HeadPoint company entering into GKS – the developer of digital solutions in the field of video monitoring and industrial Internet of Things.
Manufacturing enterprises on the basis of InOne can effectively solve problems of monitoring of security, control of technology processes, operation of the equipment and actions of personnel.
Within solving of tasks of the municipal government and creation of the smart and safe urban environment the digital InOne platform allows to solve problems of collecting and data processing in geographically distributed structures of different scale, to quickly reveal different violations and potentially dangerous situations, in the automated mode to react to standard incidents.
For example, under control of developed by software HeadPoint company there are more than 160 thousand video cameras and 67 thousand users only in the city of Moscow. Specialists of the company since 2011 are directly involved in creation and development of a system of city video surveillance of Moscow of GIS ETsHD.
Other large-scale project in which the HeadPoint company takes part since 2017 – creation of an integration framework of video surveillance systems in composition of complex security of life activity (SKOBZh) of Krasnodar Krai. The platform consolidates information of video surveillance systems in the situational center of the head of administration of edge and in the single interface provides access to this information to the staff of services on duty: CCCS of Emercom of Russia across Krasnodar Krai, Uniform service on duty and dispatching" the cities of Krasnodar and Sochi, General Directorate of Ministry of Internal Affairs of Russia in Krasnodar Krai, Management of FSB of the Russian Federation in Krasnodar Krai.
What significant projects in the field of complex security would not you on perspective?
Vladimir Shelepov: First, ahead we have a Universiade in Krasnoyarsk - an action less loud, than the FIFA World Cup, but from it not less important in respect of the solution of a task of security. Secondly, it is necessary to execute order of the President concerning heritage of World Cup 2018. The third – the European Football Championship in 2020. At last, you should not forget about security of cultural events. The market of security systems will grow in general, and the segment of information security will grow even quicker.

