ASPECTS OF CREATING SECURED INFORMATION AND COMMUNICATION SYSTEMS

Abstract

The article considers the creation of secure information and communication systems in the context of the reform of the cyber defense system in Ukraine based on international standards and practices. The normative, organizational and technical aspects of creating secure ICS in accordance with the requirements of the legislation are highlighted. Currently, there is a transition from the classical model of creating complex information protection systems and their state expertise to a risk-oriented approach based on the use of security profiles and authorization of security systems. The components of modern information infrastructure are considered and analyzed, in particular, automated systems of classes 1, 2 and 3, cloud technologies and services/services provided by centralized service infrastructures, as well as approaches to organizing protection when processing state information resources or information with limited access. Among the widespread security services (functions), the use of secure Internet access nodes, cyber incident response centers (Security Operations Center), qualified providers of electronic trust services and electronic identification means are highlighted. Special attention is paid to the organization of information protection and cyber protection of ICS deployed in cloud infrastructure (cloud services), based on the model of joint responsibility between the cloud service provider and the ICS owner. The main approaches to the organization of information protection (information security) and cyber protection are summarized depending on the class of the system, the degree of restriction of access to information and the conditions of operation of the information infrastructure.