1STRUCTURAL MODEL OF THE CYBERSECURITY ASSESSMENT SYSTEM OF CLOUD SERVICES OF INFORMATION INFRASTRUCTURE OBJECTS

Abstract

During this investigation, a structural model of the system for evaluating the cyber security of cloud services of information infrastructure objects will demonstrate, which is intended to be used for the evaluation of all public cloud services. A structural model of the cyber security evaluation system of cloud services has been developed, consisting of 11 module evaluation parameters, namely: network, data storage, server, virtualization, operating system, containerization, continuous operation, applications and data processing. For the developed a structural model of the evaluation system, all the modules involved in the evaluation of the used cloud service are presented, as well as the formulas for calculating each of the 1 evaluation parameters involved in a successful system are presented. For the developed a structural model of the evaluation system, a schematic image has been developed that demonstrates the dependence of all system components and the used evaluation parameters of cloud services, as well as interaction with the database, which places all information about questions, answers, recommendations, and evaluations made by the auditor, is presented. In addition, the schematic image shows the process of recording the evaluation results to the database. The visualization of the results of the conducted assessment is presented by generating a separate web page, the data for which is taken from the database tables containing the results of the conducted assessment and a recommendation is presented regarding the possibility of using or not using the cloud service in the productive environment of the company based on the points obtained from the assessment results 11 modules. Additionally, it is possible to download the evaluation results into a separate report that can be presented to the company's management for a final decision. So, this work describes the modules and databases used to build a structured model of the evaluation system, as well as the algorithm for evaluating the cyber security of a cloud service and providing a final conclusion regarding the recommendation to use or not use the evaluated cloud service.