Justification Models of Organizational and Technical Support of Measures to Create Information Protection System of Informatization Objects

The relevance of the article is due to the need to protect information at all stages of creating an information system in the absence of appropriate organizational and technical support. To justify this kind of provision, mathematical models are needed that take into account the conditions and the random nature of the implementation of heterogeneous information processing processes in time at each stage, threats to its security and protection from these threats. The article discusses approaches to the development of such models based on the apparatus of flow theory and the theory of composite Petri ‒Markov networks, the possibilities of which for modeling the processes under study have not been previously considered.

The purpose of the article. To reveal the content of issues related to the justification of organizational and technical support for information protection at the stages of creating an information system, to show the need and ways to quantify threats to its security and protection from these threats. For this purpose, the methods of functional and structural analysis, probability theory and flow theory were applied. In the course of solving the scientific problem, the relevance of substantiating the organizational and technical support of information protection at the stages of creating information systems is shown, descriptive models of its processing processes are developed, time diagrams of threat scenarios are given in the absence of protection measures and in the conditions of using preventive organizational and technical measures, indicators and analytical ratios for their calculation are proposed. The scientific novelty of the article consists in the fact that for the first time it examines the issues of organizational and technical support for information protection at the stages of creating an information system, examines the theoretical aspects of quantifying threats to its security and protection from these threats based on flow theory and prospects for applying the theory of composite Petri-Markov networks. Significance (theoretical). The conditions for the implementation of the studied processes and the possibility of applying the theory of flows and the apparatus of composite Petri–Markov networks for their modeling are established. Significance (practical). The results obtained in the work can be used to justify the organizational and technical provision of information protection at the stages of creating information systems of various organizations (both state and non-state), for which the implementation of threats at these stages may lead to damage to their activities.

1. GOST 34.601-90. Information technology. Set of standards for automated systems. Automated systems. Stages of development. Moscow: Standartinform Publ.; 2009. (in Russ.)

2. Avsentiev O.S., Valde A.G., Konkin Yu.V. Ensuring the Protection of Information in the Process of Creating an Information System of an Informatization Object. Chemistry and Technology of Fuels and Oils. 2021;3:36.

3. GOST R 50922-2006. Protection of information. Basic terms and definitions. Moscow: Standartinform Publ.; 2007. (in Russ.)

4. Avsentev O.S., Valde A.G. To the question of formation of information protection system from leakage through technical channels occurring due to side electromagnetic radiation on informatization objects. The bulletin of Voronezh Institute of the Ministry of Internal Affairs of Russia. 2021;2:22‒33. (in Russ.) EDN:VNLGMX

5. Yazov Yu.K., Avsentev O.S., Avsentev A.O., Rubcova I.O. Method for Assessing Effectiveness of Protection of Electronic Document Management Using the Petri and Markov Nets Apparatus. SPIIRAS Proceedings. 2019;18(6):1269‒1300. (in Russ.) DOI:10.15622/sp.2019.18.6.1269-1300. EDN:FBTRZZ

6. Avsentiev O.S., Avsentiev A.O., Krugov A.G., Yazov Yu.K. Simulation of processes for protecting voice information objects against leakage through the spurious electromagnetic radiation channels using the Petri - Markov nets. Journal of Computational and Engineering Mathematics. 2021;8(2):3‒24. DOI:10.14529/jcem210201. EDN:VOKXXO

7. Yazov Yu.K., Anishchenko A.V. Petri-Markov Networks and Their Application for Modelling Processes of Information Security Threats Implementation in Information Systems. Voronezh: Kvarta Publ.; 2020. 173 p. (in Russ.)

8. Yazov YU.K., Anishchenko A.V., Suhoverhov A.S. Fundamentals of the Theory of Composite Petri-Markov Networks and Their Application for Modelling the Processes of Implementation of Information Security Threats in Information Systems. St. Petersburg: Scientia Publ.; 2024. 196 p. (in Russ.) DOI:10.32415/scientia_978-5-6052111-2-9. EDN:CGTNTU

9. GOST R 51583-2014. Information protection. Sequence of protected operational system formation. General provisions. Moscow: Standartinform Publ.; 2014. (in Russ.)

10. Yazov Yu.K., Solov'ev S.V. Methodology for Assessing the Effectiveness of Information Protection in Information Systems against Unauthorised Access. St. Petersburg: Naukoemkie tekhnologii Publ.; 2023. 258 p. (in Russ.) EDN:WVCHKW

11. Menshakov Yu.K. Theoretical Foundations of Technical Reconnaissance. Ed. Yu.N. Lavruhina. Moscow: Bauman MSTU Publ.; 2008. 536 p. (in Russ.)