A METHOD FOR CALCULATING THE PROTECTION OF A CORPORATE NETWORK UNDER CONDITIONS OF UNCERTAINTY

Abstract

A relevant task in the analysis and management of a corporate network information system is to select such a configuration of system elements and their parameters that ensures the highest possible functional efficiency under conditions of uncertainty. One of the promising approaches to solving the problem of cybersecurity assessment for critical infrastructure objects is the use of fuzzy set theory, for example, for assessing information security risks. In practice, situations often arise in which the final calculation results are significantly influenced by inconsistencies in conclusions or errors made by experts.This paper investigates the protection system of a corporate network, taking into account its architectural and functional components under conditions of partial or complete uncertainty. To achieve this goal, a tuple of fuzzy sets was constructed to describe the most important aspects of the corporate network’s operation and security. The tuple includes both technical characteristics (e.g., information flow intensity, security level, data leakage parameters, firewall activity, operation of the backup system, etc.) and organizational components (access control, authentication policy, user identification, auditing, etc.). Each parameter was given an appropriate fuzzy interpretation in the form of linguistic variables: “low,” “medium,” and “high” levels.For parameter calculations, trapezoidal and triangular methods were applied. The calculations are illustrated with graphical material. The obtained data can also be used for automated monitoring of the network’s security state, evaluation of the effectiveness of implemented security measures, and formulation of recommendations for improving the level of protection.