METHODS FOR ASSESSING THE SECURITY STATE OF NETWORKS AND DATA STORAGE ENVIRONMENTS IN CLOUD SERVICES

Abstract

The conducted research presents the criteria and method for assessing the security state of cloud service networks and data storage environments as key linear components of the cloud services cybersecurity assessment system. The study is based on the developed generalized mathematical model for assessing the cybersecurity state of cloud services of information infrastructure objects. The relevance of the problem related to the growing number of cyber incidents in cloud environments caused by configuration errors during the setup of cloud services is substantiated. It is demonstrated that the network level and the data storage environment are critical components of cloud infrastructure. The analysis of existing international standards and regulations on cloud service protection revealed the absence of clear recommendations. In the presentation of the research results, the module for assessing the network security state (parameter N) and the module for assessing the data storage environment security state (parameter S) were formalized. For each module, assessment criteria, answer options, and corresponding mathematical formulas were defined that detail the scope of assessment for each cloud service. Algorithmic models were developed for both modules to provide a visual representation of the structure of criteria for assessing the security level of cloud services. It is shown that the obtained values of parameters N and S influence the formation of the cybersecurity level of a cloud service and the final recommendation regarding its further use by business. The study notes the possibility of practical application of the developed criteria and methods, while all further research is aimed at developing a comprehensive assessment method, determining weighting coefficients for the answers received from auditors, forming a recommendation system, and creating a secure web application.