METHODS FOR ENHANCING FAULT TOLERANCE IN SYSTEMS WITH HYBRID ARCHITECTURE Kuzevanov Igor

Аннотация

INTRODUCTION Modern information systems increasingly utilize The relevance of this study is driven by the growing hybrid architectures that combine elements of demands for reliability and continuity of business cloud technologies, on-premises servers, and edge processes, particularly in the context of intensive computing. These systems enable organizations to use of cloud technologies and distributed manage data and computing resources more computing. efficiently by distributing workloads across The aim of this work is to analyze existing methods various components, thereby providing high for enhancing fault tolerance in systems with flexibility and scalability. However, as the hybrid architecture, identify their advantages and complexity of such architectures grows, so does the disadvantages, and offer recommendations for number of potential vulnerabilities, making the their optimal application in modern information issue of ensuring fault tolerance critically environments. important. Fault tolerance, defined as the system's 1. Types of Failures and Vulnerabilities in ability to continue functioning in the event of Hybrid Systems partial or complete failures, becomes a crucial aspect in the design and operation of hybrid The threats and vulnerabilities that arise in systems. distributed systems are associated with risks that https://www.theamericanjournals.com/index.php/tajiir 13 THE USA JOURNALS THE AMERICAN JOURNAL OF INTERDISCIPLINARY INNOVATIONS AND RESEARCH (ISSN- 2642-7478) VOLUME 06 ISSUE09 can jeopardize the stability and security of these including denial-of-service attacks (DoS/DDoS), systems. Vulnerabilities are weaknesses within the data interception and eavesdropping, insider system, including software bugs, ineffective threats from employees, and infections by malware security measures, or unreliable passwords, which and ransomware. Each of these threats can have can be exploited by malicious actors to attack the serious consequences, including data loss and system. Threats, in turn, represent potential disruption of the organization's operations [1]. negative consequences of exploiting these Hybrid systems introduce new threat vectors not vulnerabilities, such as unauthorized access, data present in traditional IT environments. In breaches, or system failures. Ensuring security in particular, data transmitted between cloud and on- distributed systems is of paramount importance premises components may be at risk of given their complexity, high level of integration, interception or tampering. Moreover, the complex and frequent use for critical tasks. structure of hybrid systems increases the number Since distributed systems form the backbone of of potential attack points, giving malicious actors many essential services, such as online banking, more opportunities to exploit vulnerabilities. healthcare, and telecommunications, disruptions To ensure comprehensive protection of hybrid caused by security threats can have severe systems, various penetration testing consequences. For example, DDoS attacks, which methodologies are employed. Each of these overwhelm the system with fake traffic, can render methods focuses on specific aspects of the system it inaccessible to legitimate users. and allows its security to be assessed from The security of distributed systems also directly different perspectives. The combined use of these impacts customer trust in an organization. Any methods enables the most accurate identification breach, particularly those involving data leaks, can of potential vulnerabilities and enhances the level severely damage a company's reputation, leading of protection [2]. Table 1 presents the existing to financial losses and a loss of customer trust. types of penetration testing. Distributed systems face a variety of threats, Table 1. Types of Penetration Testing [3]. Type of Testing Description This method involves testing the system without prior knowledge of its internal structure, simulating the actions of an external attacker. The goal is to gain unauthorized access and identify vulnerabilities without the involvement of Black Box developers. Unlike the black box method, white box testing is conducted with full access to system information. This method includes analyzing the source code, architecture, and infrastructure, allowing for the identification of vulnerabilities at the code and White Box configuration levels. Gray Box This method is a compromise between black box and white box testing. The tester has https://www.theamericanjournals.com/index.php/tajiir 14 THE USA JOURNALS THE AMERICAN JOURNAL OF INTERDISCIPLINARY INNOVATIONS AND RESEARCH (ISSN- 2642-7478) VOLUME 06 ISSUE09 limited knowledge of the system, allowing them to focus on identifying vulnerabilities in specific components while remaining relatively independent of the developers. Physical Penetration This method focuses on the physical security of the system, including attempts to Testing access hardware or