WAF ЗАХИСТУ ВНУТРІШНІХ СЕРВІСІВ У СТРУКТУРІ ZERO TRUST

Valerii  Lakhno; Borys  Husiev; Victor  Smolii; Andrii  Blozva; Dmytro Kasatkin; Tetiana Osypova

doi:10.28925/2663-4023.2021.13.8191

Authors

Valerii Lakhno National University of Life and Environmental Sciences of Ukraine Kyiv https://orcid.org/0000-0001-9695-4543
Borys Husiev National University of Life and Environmental Sciences of Ukraine Kyiv https://orcid.org/0000-0003-1658-7822
Victor Smolii National University of Life and Environmental Sciences of Ukraine Kyiv https://orcid.org/0000-0003-2834-6989
Andrii Blozva National University of Life and Environmental Sciences of Ukraine Kyiv https://orcid.org/0000-0002-4377-0916
Dmytro Kasatkin National University of Life and Environmental Sciences of Ukraine Kyiv https://orcid.org/0000-0002-2642-8908
Tetiana Osypova National University of Life and Environmental Sciences of Ukraine Kyiv https://orcid.org/0000-0002-9199-3436

DOI:

https://doi.org/10.28925/2663-4023.2021.13.8191

Keywords:

informational security; methods of system analysis; criterion for evaluating the information security system

Abstract

Approaches to the application of methods of system analysis to solve problems related to information security of enterprises in transport, which have a complex IT structure with a large number of components.

It is shown that the active expansion of the areas of informatization of the transport industry, especially in the segment of mobile, distributed and wireless technologies, is accompanied by the emergence of new threats to information security. It is shown that in order to build an effective information security system, the selection and implementation of adequate technical means of protection should be preceded by a stage of description, analysis and modeling of threats, vulnerabilities, followed by calculation of risks for IS and determining the optimal strategy for information security system. After evaluating the different NIB options according to several criteria, a decision is made: if the recommendations coincide, the optimal solution is chosen with greater confidence. If there is a contradiction of recommendations, the final decision is made taking into account its advantages and disadvantages, for example, the strategy of information security system development is chosen, which turned out to be optimal for at least two criteria. If different NIB development strategies are obtained for all three criteria, it is necessary to vary the values of pessimism-optimism in the Hurwitz criterion or change the data, for example, about possible threats to IP or automated enterprise management system.

An algorithm for modeling the decision-making process for selecting the optimal strategy for managing investment design components of the information security system for the transport business entity is proposed.