Information Security Audit Method Based on the Use of a Neuro-Fuzzy System

Abstract

The article proposes measures to improve information security audit procedures (ISA) for various objects of informatization (OBI). It is shown that it is advisable to assess the level of information security (IS) for OBI based on evaluating the effectiveness of a set of criteria for the method of analysis of hierarchies (MAH). At the same time, such an assessment of the degree of IS and all associated ISA audit procedures are most effective for a multilateral assessment of IS OBI. Both standard numerical information security metrics and metrics proposed by information security experts and agreed with the OBI management can be used as assessment metrics. A modified method for the analysis of hierarchies is proposed, based on the application of the apparatus of the theory of fuzzy sets and neural networks. This method enables management to make informed management decisions in the field of information security OBI. The solutions obtained are aimed at improving not only the OBI IS itself, but also ultimately optimize the OBI control system, reduce costs and increase the efficiency of OBI business processes as a whole. It is shown that the use of the mathematical apparatus of the Moscow Aviation Institute and the corresponding software, in particular, the developed intellectual system, makes it possible to increase the degree of reliability of the results of a comprehensive audit of IS OBI. Moreover, this statement is true for the procedures of the internal ISA OBI and the external ISA.