Conceptual Framework for Enhancing Cyber Resilience of Information and Communication Systems in the Context of Evolution of Cyber Threats

The article discusses the issue of ensuring the cyber resilience of critical information and communication systems in the context of the rapid evolution of cyber threats, in particular those created or controlled using artificial intelligence technologies. Based on an analysis of current standards, recommendations, and frameworks, it is proven that although existing cyber resilience strategies are conceptually valuable and contain progressive solutions, they have a number of limitations in the context of countering polymorphic, metamorphic, adaptive, competitive, and intellectually controlled cyber attacks. Among the key problems are the failure to take into account the evolutionary nature of cyber threats, the asynchrony of cyber events in the system, the complexity of interpreting the actions of decision-making modules, and the limited ability to accumulate and use knowledge in cyber defense processes. It has been established that, given the growing variability and unpredictability of cyberattacks, there is an objective need for new methodological principles capable of ensuring the stable functioning of ICS even under conditions of multi-level destructive influence. In order to eliminate these limitations, new principles of cyber resilience have been proposed: evolution, temporal relativity of events, situational awareness, and intelligent knowledge management. Each of the principles is justified in the context of its impact on the cyber resilience of ICS, and the mechanisms for implementation and possible tools for technical implementation are described. Particular attention is paid to combining the principle of evolution with methods of topological data analysis to identify structural patterns in the dynamics of cyber threats. The proposed principles are considered as a conceptual basis for building self-learning, adaptive, and transparent cyber defense architectures of the new generation, capable of dynamic updating in a changing and aggressive cyber environment.