Architectural Model ONYX for X-Adaptive Control of Information Systems Under Arbitrary Destabilizing Factors

Background. Modern information systems operate under the permanent influence of hybrid destabilizing factors whose nature — ranging from targeted cyberattacks to stochastic technical failures, sabotage, key personnel departure, and sanctions imposition — is often a priori unknown. Existing methods for controlling information systems under destabilizing factors are fragmented: they either focus on narrow technical aspects or are limited to administrative regulations, failing to provide holistic coverage of all hierarchical levels of the system. Objective. The objective is to develop a generic architectural control model, ONYX, representing an information system as a computable state space and ensuring verifiable adaptation to destabilizing factors of arbitrary nature in order to preserve its functionality. Methods. The state of an information system is represented as an attributed multigraph. For hierarchical systems, the Hierarchical Organization Postulate is introduced, decomposing the graph into the following levels: Management, Personnel, Hardware, and Software. The validity and intendedness of states are determined by the predicates and , respectively, based on first-order logic. System control is implemented by the operator R using a database of verified templates. Results. The ONYX model has been developed, representing an information system as a multigraph with a control operator. Theorems have been proved on the solution existence criterion, namely X-adaptivity, on the solvability of recovery by the operator , on safety invariance, and on the relative completeness of the operator. The following consequences have been derived: the “Cone of Influence” effect and the principle of layer-based threat neutralization. The scientific novelty lies in the universality of the formalism for hierarchical and swarm systems, the definition of necessary and sufficient conditions for the solvability of the recovery task, the proof of the consequences of hierarchy, the substantiation of cross-level recoverability, and the introduction of a validity invariant for automatic control. Theoretical and Practical Significance. The theoretical significance consists in creating a mathematical apparatus for controlling the structural dynamics of complex systems under destabilizing factors of arbitrary nature. The practical significance lies in formalizing the requirements of information security standards, including ISO/IEC 27001, GOST R ISO/IEC 270xx, and NIST CSF, for building next-generation SOAR systems that integrate organizational and technical protection measures.