Approaches to improve the activity of computer incident response teams

Developing an expert system method for assessment of destructive information-psychological influence

“…The method of quantitative paired comparison with the square root definition, which is a kind of quantitative paired comparison method, is used for this. The paired comparison is an establishment procedure of preferences alternatives when comparing all possible pairs and further organizing objects based on comparison results [16]. The paired comparison method is one of the most widely used expert procedures for determining the relative weights of objects.…”

“…Passing to the second line, the expert writes in the first cell the result of the second factor comparison with the first, in the second -one, in the third -the result of the second factor comparison with the third, etc. [16,20].…”

“…Similar expert approaches were set up to create decisive rules relating to the attacker detection in the information-communication networks and systems [15] and in the method of criticality level assessment as the emergence result of the information security incidents [16].…”

Method for Cyberincidents Network-Centric Monitoring in Critical Information Infrastructure

“…Similarly to the approach described in [17][18][19][20], based on expert evaluation (which does not require large time cost for statistical data forming) is forming a set of rules (17) …”