CASPIAN JOURNAL
MANAGEMENT AND HIGH TECHNOLOGIES
THE DEVELOPMENT OF A THREAT MODEL FOR CRITICAL INFORMATION INFRASTRUCTURE FACILITIES CONSIDERING SOCIAL ENGINEERING METHODS
 |
Read | Novikova Elizaveta F., Khalizev Vyacheslav N. THE DEVELOPMENT OF A THREAT MODEL FOR CRITICAL INFORMATION INFRASTRUCTURE FACILITIES CONSIDERING SOCIAL ENGINEERING METHODS // Caspian journal : management and high technologies. — 2019. — №4. — pp. 127-135. |
/127-135.jpg)
Novikova Elizaveta F. - post-graduate student, Kuban State Technological University, 2 Moskovskaya St., Krasnodar, 350072, Russian Federation, lizanovicova@mail.ru
Khalizev Vyacheslav N. - Cand. Sci. (Engineering), Professor, Kuban State Technological University, 2 Moskovskaya St., Krasnodar, 350072, Russian Federation, ha53@mail.ru
A new approach to the development of an information threat model of critical information infrastructure objects is considered. The significance of this work is determined by the increasing computerization of the population, which increases the likelihood of threats from the use of social engineering methods. Due to the lack of a fully developed regulatory and methodological base in the field of security of CII objects, the work uses the “classical” FSTEC methodology to create a mandatory model of information security threats. This model is expanded by components that take into account the human factor, which is absent in the "classical" methodology. The article defines the types of violators who can use the social engineering methods, as well as directly correlates the violators and the methods that they implement. Possible trees of threats and attacks are given. The results of this study are the basis for the software implementation of an information threat model and the development of countermeasures.
Key words: критическая информационная инфраструктура, категорирование, объект критической информационной инфраструктуры, модель потенциального нарушителя, модель угроз безопасности информации, человеческий фактор, социальная инженерия, critical information infrastru