Constant perfection of methods of unauthorized access to information, as well as significant damage to this kind of action resulted in a focused and systematic improvement of technologies of information security and mechanisms for responding to security threat information. One of the main areas of improvement is to ensure the compliance of the characteristics of these mechanisms demands adequate responses to threats and, consequently, adequate evaluation of the effectiveness of response measures. The basic concept is implemented in practice evaluation of the security of objects of informatization, is the concept of certification tests. Under this concept implies the assessment of the protection of informatization objects certification path used means of information protection from unauthorized access. One of the most promising alternative solutions to the problem of adequate evaluation of the security of objects of informatization is a synthesis of characteristics of processes of information security on the object of informatization within the corresponding target function. This article shows the possibility of obtaining a numerical evaluation of the security of information objects with the use of mathematical modeling of information security threats, caused by illegal actions, and processes for responding to such actions. This approach will allow to evaluate the effectiveness of the various responses and on the basis of these assessments to justify the most effective system for ensuring security of objects of informatization.
Constant perfection of methods of unauthorized access to
information, and significant damage to this kind of action
resulted in a focused and systematic improvement of
technologies of information security and mechanisms to
address threats to information security. One of the main areas
of improvement is to ensure the compliance of the
characteristics of these mechanisms demands adequate
responses to threats and, consequently, adequate evaluation of
the effectiveness of response measures [
Obviously, such an assessment should be carried out
systematically [
In accordance with the system approach investigation of mechanisms in responding to threats to the security of information of the objects of informatization (IО) connected with the security assessment of the IO, i.e., the capacity of these mechanisms to adequately respond to information security threats the IO.
II. THE EXISTING CONCEPT OF EVALUATION OF THE SECURITY OF THE IO ON THE BASIS OF CERTIFICATION TESTS
The basic concept is implemented in practice evaluation of
the security of the IO is the concept of certification tests.
Under this concept implies the security assessment of the IO
certification path used means of information protection from
unauthorized access. In accordance with the Governing
document "Protection from unauthorized access to
information. Terms and definitions" under the certification of
information security means activities for confirmation of
conformity of possibilities of means of information protection
requirements of state standards, normative documents
approved by Federal certification bodies within the
competence of those bodies [
The obvious advantage of this concept for assessing the security of the IO is the ease of estimation procedures. Shortcomings that limit its use are:
1) the lack of a formal interpretation of characteristics of
threats to information security;
2) lack of formalized representation of the dynamics of the
impact of threats to information security and processes for
responding to such threats;
3) lack of a formalized model of security information,
taking into account the peculiarities of the offender's actions as
a source of threats [
These shortcomings lead to many errors in the justification
of the ways and means of information security [
III.
THE PROPOSED CONCEPT FOR ASSESSING THE SECURITY
OF THE IO ON THE BASIS OF MATHEMATICAL MODELING
As the practice of conducting research in this direction,
one of the most promising solutions to the problem of
adequate evaluation of the security of the IO is a synthesis of
characteristics of processes of information security for the IO
within the corresponding target function (e.g. [
As an example of such a system consider a system of the
performance characteristics of responses to threats to the
security of e-banking [
The basis of the synthesis of this system based on the principle of the identity of the system structure characteristics of the effectiveness of such measures hierarchical representation of the functional model of the processes of responding to threats to the security of electronic banking. In turn, the functional model of the processes of responding to such threats is based on the functional model of illegal actions concerning the remote banking services (RBS), and that, in turn, based on the conceptual model of the offender.
Under these conditions, the model of the intruder is interpreted as a model of illegal actions in respect of the services of RBS. The major restrictions on the interpretation of this model are:
1) this kind of illegal action is a method of implementation of security risks of e-banking;
3) for this kind of source is characterized by a single (during the study period) the impact on the environment of RBS;
4) once the impact on the environment of RBS is also done for reasons of stealth;
5) breach of security of e-banking is associated with the operation of illegal actions associated with the following operations: – receiving confidential information of the bank clients; – modification, or destruction of the information; – blocking of the information security environment of the RBS in certain circumstances.
Target motivation are illegal actions on the modification or destruction of information clients of the bank.
The correspondence between the compositional characteristics of the grouping of States of a functional model of the processes of responding to threats to the security of electronic banking, the compositional characteristics of the grouping of States of a functional model of illegal actions in connection with the services, RBS and classification bases synthesized system characteristics are listed in Tab. 2, and the structure of the system in Fig. 1.
TABLE 2 COMPLIANCE COMPOSITE FUNCTIONAL BASIS OF MODELS OF STUDIED PROCESSES, BASES FOR CLASSIFICATION OF THE SYSTEM PERFORMANCE CHARACTERISTICS RESPONSES TO THREATS TO THE
SECURITY OF OBJECTS OF INFORMATIZATION 1 2 3 4 e t iso le p ev m l o C
IllrseeegsrapvleiccaetcstoiRfonBthsSein srePiencrsuoperco-iebtnysadsnteihnksrgifenoatgorts the appearance of identify signs of ability to identify signs of signs of illegal actions illegal actions illegal actions ifsSnretarauvgdiecruseelsseopnRfetcBctaSorrpyoeifrnagtioothnuest sadtceatfgiionenistsioonf oiflletghael ialbleilgitayl atcotioidnesntify stages of Irsleellreavgtiiacolens atoctionspsecifiinc tsseoeestrrsavvebiicccluieesrsshitmyeerxnisptkosseoodff rseoiespstrpkavsobicrltieusshnmeitxieepnsot-soefdsfetoorr-vseicceusrtihotyef the objective function the objective the effective response to illegal actions function response security threats in e-banking
Given the fact that the implementation of the functions
respond to the attacker is a reaction to unlawful acts in the
formation of the characteristics of the timeliness of response to
this kind of threat conditions timely response are [
With the random nature of the values that make up the
conditions (1) to (3), the expression for E characteristics
timeliness in responding to threats to the security of electronic
banking can be represented as a probability [
E = P(t(у) < t(о), t(о) < t(у) + (у), t(о) + (о) ≤ t(у) + (у)) (4)
Thus, it is clear that the method of evaluation of security of IO by organizing and modeling the characteristics of the processes of information security on these objects and devoid of the shortcomings to the assessment of security of IO on the basis of certification tests.
Timely response to security threats in ebanking timeliness of response to the actions of the attacker in relation to the service payment systems timeliness of response to the actions of the attacker in relation to the
service "Client-Bank"
A method of evaluating the security of objects of Informatization on the basis of certification tests has a number of drawbacks that can be eliminated when using the proposed approach to this evaluation through mathematical modeling. This method allows to obtain an adequate assessment of the effectiveness of information security at the Olympics in a wide range of parameters of the security threat information and apply the protection mechanisms.
Modeling in System