Algorithm of Information Security Risk Assessment Based on Fuzzy-Multiple Approach

Abstract

The subject of the study is the process of assessing the level of information security risk that is being implemented with the help of the fuzzy logic apparatus. The purpose of this work is to develop a methodology for assessing the degree of information security risk, which would avoid the uncertainty factor, that occurs when some parts of information about the analyzed automated information system are absent. The methodology is based on the use of fuzzy logic and fuzzy sets and implies the introduction of the term sets for each of the system characteristics and the linguistic assessment of the indicators. The tasks to be solved are to analyze existing information security risk assessment methodologies for identifying their strengths and weaknesses. On the basis of the conducted analysis, a new method for assessing the risk of automated information systems information security is proposed. The following results were obtained: the advantages and disadvantages of qualitative and quantitative methodologies for assessing the risk degree of automated systems information security were identified; the main stages of the proposed methodology were described; the degree of information security risk is calculated in comparison to the FAIR methodology. Conclusion: The methodology presented in the article provides an opportunity to translate the obtained results of risk assessment from a mathematical language into a linguistic form that is more comprehensible to the decision-maker. This increases the effectiveness of the management of automated information systems protection mechanisms.

Dynamic model of cybersecurity states diagnostics for information systems using Fuzzy-technologies

“…Існують багато підходів щодо моделювання оцінки захищеності інформаційних систем від кіберзагроз з використанням різних математичних підходів. В роботі [4] оцінка ризику інформаційної безпеки реалізується завдяки апарату нечіткої логіки з введенням лінгвістичних змінних. В роботі [5] це здійснюється завдяки стохастичним різницевим рівнянням для дескриптор них систем, де випадковим впливом виступає білий шум.…”

The role of innovative technologies in ensuring the competitiveness of the enterprise

“…The study by Gordon L. A., et al [17] is devoted to the inevitable direction in the activities of enterprises to ensure not only competitiveness but also survivalthe use of modern information security systems. The work by Yevseiev S., Shmatko O., Romashchenko N. [18] proves that modern technologies for ensuring the appropriate level of competitiveness are based on modern algorithms, in particular, the assessment of the level of information security risk, which is realized through the apparatus of fuzzy logic. Wang D. [19] studied the role of information technologies in the creation and application of innovative business models.…”