ISSN 0021-3454 (print version)
ISSN 2500-0381 (online version)
Menu

2
Issue
vol 67 / February, 2024
Article

DOI 10.17586/0021-3454-2016-59-12-980-990

UDC 004.056.53

MODELING THREAT OF ATTACK ON A PROTECTED INFORMATION SYSTEM

K. A. Shcheglov
ITMO University, Saint Petersburg, 197101, Russian Federation; OOO «Scientific Production Enterprise «Information technologies in business»; postgraduate; development manager


A. Y. Shcheglov
ITMO University, Saint Petersburg, 197101, Russian Federation; OOO «Scientific Production Enterprise «Information technologies in business»; Professor; General Director


Read the full article 

Abstract. The problem of information security is interpreted as a problem of reservation of threats of information system vulnerabilities by threats of vulnerabilities of the information security system. The approach allows assessing and modeling the threat characteristics and the reliability parameters of protected information system. Requirements to development of a valid threat attacks Markov models with discrete states and continuous time are formulated.
Keywords: information system, information security system, attack, threats of vulnerabilities, threat of attack, reservation of vulnerabilities, modeling, Markov models, characteristics of attack threats

References:
  1. Kotenko D.I., Kotenko I.V., I.B. Saenko I.B. Trudy SPIIRAN (SPIIRAS Proceedings), 2012, no. 3(22), pp. 5–30. (in Russ.)
  2. Koller D., Friedman N. Probabilistic Graphical Models. Principles and Techniques, MIT Press, 2009.
  3. Kotenko I.V., Stepashkin M.V. Trudy ISA RAN, 2007, no. 31, pp. 126–207. (in Russ.)
  4. Rosenko A.P. Vnutrennie ugrozy bezopasnosti konfidentsial'noy informatsii: Metodologiya i teoreticheskoe issledovanie (Internal Threats to Security of Confidential Information: Methodology and Theoretical Research), Moscow, 2010. (in Russ.)
  5. Ivanov K.V., Tutubalin P.I. Markovskie modeli zashchity avtomatizirovannykh sistemspetsial'nogo naznacheniya(Markov Models of Protection of the Automated Systems of a Special Purpose), Kazan', 2012. (in Russ.)
  6. Karpov V.V. Programmnye produkty i sistemy, 2003, no. 1, pp. 31–36. (in Russ.)
  7. Shcheglov K.A., Shcheglov A.Yu. Izv. vuzov. Priborostroenie, 2015, no. 12(58), pp. 957–965. (in Russ.)
  8. Shcheglov K.A., Shcheglov A.Yu. Voprosy Zashchity Informatsii, 2014, no. 3(106), pp. 52–65. (in Russ.)
  9. Shcheglov K.A., Shcheglov A.Yu. Information Technologies (Informacionnye Tehnologii), 2015, no. 12(21), pp. 930–940. (in Russ.)
  10. Shcheglov K.A., Shcheglov A.Yu. Information Technologies (Informacionnye Tehnologii), 2016, no. 1(22), pp. 54–64. (in Russ.)
  11. Shcheglov K.A. Vestnik Komp'iuternykh i Informatsionnykh Tekhnologii (Herald of Computer and Information Technologies), 2016, no. 1, pp. 32–44. (in Russ.)
  12. Aliev T.I. Osnovy modelirovaniya diskretnykh sistem (Bases of Modeling of Discrete Systems), St. Petersburg, 2009.
  13. Venttsel' E.S. Issledovanie operatsiy (Operations Research), Moscow, 1972, 552 p. (in Russ.)