METHOD OF INFORMATION SECURITY MANAGEMENT SYSTEMS FUNCTIONAL ANALYSIS
DOI:
https://doi.org/10.28925/2663-4023.2020.8.192201Keywords:
function; functions hierarchy; functional analysis, information security management system, IDEF0Abstract
The process of functional analysis of information security management systems was considered. The relevance of their presentation with many interrelated functions with internal and external interfaces is shown. Taking this into account, the methods of functional analysis of information security management systems are analyzed. Among them, graphic notation IDEF0 is highlighted. This choice is based on the ability to display both interfaces of functions and the conditions and resources of their execution. The orientation of the graphic notation IDEF0 use is established mainly for the presentation of the international standards ISO/IEC 27k series, the display of the main stages of the information security management systems life cycle, the development of individual elements of information security management systems, in particular, risk management. These limitations have been overcome by the method of information security management systems in functional analysis. This was preceded by the definition of the theoretical foundations of this method. Its use allows to allocate their functions at both levels of the system, and levels of its structural elements (subsystems, complexes, components). To do this, define the purpose, viewpoint and establishes information security management as the main activity. It is represented by a set of hierarchically related functions that are represented by a family tree. Each function of this tree defines incoming, outgoing data, management, and mechanisms. This makes it possible to establish their consistency with the organizational structure at the “activity-system”, “process-subsystem”, “operation-module (complex)” and “action-block (component)” levels. In future studies, it is planned to define a hierarchy of functions and develop a logical structure of information security management systems based on the proposed method of functional analysis.
Downloads
References
International Organization for Standardization. (2016, May 27). ISO/IEC/IEEE 24748-4:2016. Systems and software engineering. Life cycle management. Part 4: Systems engineering planning. Geneva, 2016, 62 p.
V. V. Mokhor, and V. V. Tsurkan, “Functions of information security management system”, in Proc. X International Scientific and Technical Conference ITSec: Information Technology Security, Kyiv, 2020, pp. 53.
V. V. Tsurkan, “The functional approach to the information security risk management process modeling”, in Proc. ХІІІ International Scientific Conference Information Technology and Security. Condition assessment, Kyiv, 2013, pp. 193-194.
V. V. Repin, and V. G. Eliferov, The process approach to management. Business Process Modeling. Moscow, Russia: Mann, Ivanov i Ferber, 2013.
Gosstandart of Russia. (2001, Febr. 02). RD 50.1.028:2001. Functional Modeling Methodology IDEF0. Moscow, 2001. 75 p.
N. V. Andreeva, “Functional model of information security management system as a means of implementing ISO/IEC 2700X (BS 7799) standards”, Scientific and Technical Journal of Information Technologies, Mechanics and Optics, no. 5 (39), pp. 40-44, 2007.
A. V. Ljubimov, N. V. Andreeva, and S. V. Shustikov, “Basic parameters of semi-formal models of information security management systems”, Scientific and Technical Journal of Information Technologies, Mechanics and Optics, no. 7 (52), pp. 219-226, 2008.
A. V. Ljubimov, S. V. Shustikov, and N. V. Andreeva, “Functional modeling of information security management system of the organization over the ISO/IEC 2700x standards”, Scientific and Technical Journal of Information Technologies, Mechanics and Optics, no. 7 (52), pp. 251-257, 2008.
A. N. Gupalenko, “The use of functional modeling methods to study enterprise security”, Information counteraction to threats of terrorism, no. 14, pp. 27-30, 2010.
I. V. Mashkina, and M. B. Guzairov, “Methods for developing a managing information security functional model”, IT Security, vol. 15, no. 2, pp. 105-110, 2008.
A. M. Cybulin, “Multi-agent approach to the construction of an automated enterprise information security management system”, Izvestiya SFedU: engineering sciences. Information Security, no. 12, pp. 111-116, 2012.
M. Yu. Komarov, and S. F. Gonchar, “Methods of building an information security management system at critical infrastructure facilities”, Modeling and Information Technology, iss. 81, pp. 12-19, 2017.
Yu. Kozhedub, “Functional model of information security systems”, Information Technology and Security, vol. 6, iss. 2 (11), pp. 29-42, July-December 2018. doi: 10.20535/2411-1031.2018.6.2.153488.
V. V. Mokhor, V. V. Tsurkan, Ya. Yu. Dorohyi, and O. M. Kruk, “Functional modeling of information security risk management system”, Zahist ìnformacìï, vol. 18, no. 1, pp. 74-80, 2016, doi: 10.18372/2410-7840.18.10115.
V. V. Mokhor, V. V. Tsurkan, Ya. Yu. Dorohyi, and O. M. Kruk, “Node tree of information security risk management system functional model”, in Proc. ХVІІІ International Scientific and Practical Conference Information Security in Information and Telecommunication Systems, Kyiv, 2016, pp. 36.
International Organization for Standardization. (2012, Sept. 15). ISO/IEC/IEEE 31320-1:2012. Information technology. Modeling Languages. Part 1: Syntax and Semantics for IDEF0. Geneva, 2012, 120 p.
