Topical issues of the problem of assessment of threats of cyber attacks on information resources of significant facilities of critical information infrastructure

• Main Authors: Sergey V. Skryl', Victor V. Gaifulin, Dmitry V. Domrachev, Vladimir M. Sychev, Yulia V. Gracheva
• Format: Article
• Language: English
• Published: Moscow Engineering Physics Institute 2021-01-01
• Series: Bezopasnostʹ Informacionnyh Tehnologij
• Subjects: computer attack, critical information infrastructure objects, cyber stability of critical information infrastructure objects, the effectiveness of mechanisms for detecting, preventing and eliminating the consequences of computer attacks on information...
• Online Access: https://bit.mephi.ru/index.php/bit/article/view/1323

This paper opens a series of studies devoted to the problems of assessing the characteristics of measures to ensure the cyber resilience of information resources of critical information infrastructure objects. The paper substantiates the relevance of issues of increasing the efficiency of mechanisms for detecting, preventing and eliminating the consequences of computer attacks on the information resources of critical information infrastructure objects as a prerequisite for ensuring the cyber stability of these objects. A detailed analysis of the methodological apparatus of probabilistic assessment of the relevance of threats to information security is provided, the provisions of which are reflected in the regulatory and methodological documents of the FSTEC of Russia. The circumstances that do not allow characterizing the existing level of development of mathematical methods in the field of information protection against unauthorized access as high are analyzed. The necessity of solving the problems of adequate assessment of the effectiveness of mechanisms for detecting, preventing and eliminating the consequences of computer attacks on the information resources of critical information infrastructure objects is substantiated as a prerequisite for substantiating the requirements for measures to ensure the cyber stability of these segments.