Methods of intelligent multi-agent information security risk management

Fisun Vladimir Vladimirovich

The main approaches to the construction of intelligent methods and algorithms for assessing and managing information security risks of objects of critical information infrastructure of information and telecommunication systems are considered [1,2,3]. The requirements for information security risk management, determined by both international and domestic standards, are analyzed. The analysis showed that the standards do not define specific methods and algorithms for information security risk management of information infrastructure of information and telecommunication systems. Based on the analysis carried out, a method and algorithm for managing information security risks of information infrastructure of information and telecommunication systems are being developed. It is proposed to build an information security risk management subsystem based on the technology of distributed intelligent multiagents, which is based on the "agent-manager" technology [4]. The main features of the application of this technology and its main properties are considered. It is shown that the incompleteness, uncertainty and weak structuring of the initial data in the analysis of system risks lead to the need to use intelligent control methods, the mathematical basis of which is the theory of fuzzy sets and methods of fuzzy inference. A numerical experiment is performed on the developed mathematical model and the results of its analysis are presented. It is shown that the use of the proposed methods in the construction of a risk management system for information security of information infrastructure of information and telecommunication systems increases the efficiency and reliability of management decisions and makes it possible to find management decisions in the field of Pareto-optimal decisions. The proposed solutions lead to a significant increase in the stability of the information security subsystem of the information infrastructure of information and telecommunication systems, as well as to a significant decrease in the volume of service traffic.

Keywords:computer attack, classification, knowledge base, expert system, identification uncertainty, intelligent system, information security management, information security risk management.