ECONOMIC ASPECT OF MODELING INFORMATION SECURITY SYSTEMS USING MATHEMATICAL OPTIMIZATION METHODS

Abstract

In the context of rapid digitalization, the protection of information assets is becoming a priority, since the growing intensity of cyber threats requires the development of effective mechanisms to minimize potential losses. The paper considers possible approaches to determining the effectiveness and economic feasibility of creating information protection systems. The main components of a company's security policy and the role of senior managers in the organization of cybersecurity are analyzed. As the problem of information risk management becomes increasingly critical, this necessitates the search for strategies aimed at optimizing costs and reducing economic losses from destructive cyber impacts. The article also considers the features of external malicious influences and analyzes the motivation of attackers. The previously proposed mathematical model of maximizing the effectiveness of information protection tools with restrictions on the amount of costs is used and their economic justification is provided. The use of mathematical modeling transforms the decision-making process in the field of cyber security from intuitive to evidence-based. This allows us to justify investments in the information security system as a factor in increasing profitability through loss prevention, as well as to solve the problem of choosing the optimal set of protection tools in conditions of resource shortage. The mathematical model in this context acts as an objective tool for verifying the effectiveness of the system for countering current threats. The paper also analyzes new trends in the development of information security systems.