CASPIAN JOURNAL
MANAGEMENT AND HIGH TECHNOLOGIES
ANALYSIS OF INFORMATION SECURITY' TOOLS FOR APCS OF GAS PRODUCING ENTERPRISES
 |
Read | Rimsha Andrew S., Rimsha Konstantin S. ANALYSIS OF INFORMATION SECURITY' TOOLS FOR APCS OF GAS PRODUCING ENTERPRISES // Caspian journal : management and high technologies. — 2019. — №3. — pp. 102-121. |
Rimsha Andrew S. - graduate student, Tyumen State University, RimshaAndrew@gmail.com
Rimsha Konstantin S. - student, Tyumen State University, RimshaKonstantin@ya.ru
The objectives of the study described in this article are an analysis of the actual classes of information security solutions for the APCS of gas producing enterprise; a selection of the most appropriate class of solution and comparison of representatives of this class used in the market; a formation of a new approach to threat modeling; the development of an information security risk assessment methodology; the development of software implementation for this methodology. To achieve these goals, several scientific problems have been solved. A study of several information security tools was carried out considering their use in automated systems; established criteria for comparing the considered decisions, as a result, the tool was determined according to its characteristics that best meet the comparison criteria; the popular solutions of this class listed, considering their advantages and disadvantages. Considering the specific features of providing information security for APCS, certain requirements are formed, not one of these solutions did not fully satisfy these requirements. Consequently, the proposed methodology for modelling threats and assessing the risks of information security that meets the requirements; describes the interface and the possibility of the software implementation of the proposed methodology. The developed program allows you to simulate threats and assess the risks of information security of APCS of gas producing enterprises.
Key words: автоматизированная система управления, информационная безопасность, средства защиты информации, газодобывающее предприятие, средства моделирования угроз, оценка рисков, идентификация уязвимостей, программный комплекс, APCS, information security, informati