MODEL FOR CALCULATING THE LEVEL OF CYBER SECURITY OF CRITICAL INFRASTRUCTURE FACILITIES

Abstract

The growing number of cyberattacks on critical infrastructure facilities in Ukraine is a steady trend that necessitates systematic improvement of approaches to cybersecurity. The issue of improving the security of information and communication systems and information resources of critical information infrastructure facilities is of particular relevance. Despite the existence of certain mechanisms in Ukrainian legislation for assessing the state of cybersecurity of such facilities, their practical implementation remains difficult and resource-intensive. In many cases, critical infrastructure owners and operators do not have sufficient capacity to effectively implement the established requirements, which necessitates the development of more accessible and adaptive assessment models. At the current stage in Ukraine, the process of identification and protection of critical infrastructure is at an initial level, which creates risks for national security and the functioning of important social systems. The article proposes a model for calculating the level of cybersecurity of critical information infrastructure facilities, which provides for the possibility of expanding the system of characteristics by applying a set-theoretic approach. The formalization of subsets of criteria (classes of cybersecurity measures) and the corresponding system of parameters is carried out, which allows for a quantitative assessment of the level of security of the object. The proposed model has the potential for practical use as a tool for monitoring and improving the effectiveness of cybersecurity measures. In further research, it is planned to use the proposed model to develop a method for improving the level of cybersecurity.