Optimal information security system structure synthesis based on logical-probabilistic approach

Abstract

Model and algorithm for optimal information security system structure synthesis are proposed in the paper. For this model construction logical-probabilistic approach is used. Due to this approach we can take into account topology of information system and ways which attacker can use for penetration in the system. Based on this information and attacks probability we can chose optimal configuration of security tools and their location in the network. The algorithm is suggested and obtained experimental results for real small network are presented.