МЕТОДИКА ОЦІНКИ ЗАХИЩЕНОСТІ ІНФОРМАЦІЙНИХ СИСТЕМ

The paper considers the current state of developments in the field of security assessment. The problem of information technology security is becoming increasingly important in the implementation of computer systems as their role in the informatization of society. Ensuring the security of information technology is a complex problem that is solved in the areas of improving the legal regulation of information technology, improving methods and means of their development, development of certification systems, ensuring appropriate organizational and technical conditions of operation. The paper considers systemic problems of information systems security, lists the threats that can cause one or more harmful effects on systems. The paper provides a list of standards and regulations that can be used to assess the quality of the information system or individual indicators. The urgency of the work, its purpose and objectives are given. A key aspect of solving the problem of information technology security is to develop a system of requirements, criteria and indicators of the level of information technology security. The paper describes in detail the structure of the ISO 15408 standard, which was chosen as the basis of the developed methodology. The ISO 15408 standard consists of three parts. The paper uses the second part of the standard, which contains a universal systematized catalog of functional safety requirements and provides for the possibility of detailing and expanding them according to certain rules. The developed method of assessing the security of information systems is given. The paper describes the main indicators used to assess the security of information systems in the developed methodology. A software product has been developed that implements the described technique and the program interface is presented in the form of the main program windows. [ABSTRACT FROM AUTHOR]