Method of risk assessment of information security of electronic resources of computer network at threats of unauthorized access
The article provides a methodology for assessing the risk of information security of a computer network based on the results of the analysis of signs of vulnerability and protection of elements of the information system. The formation of the space of signs of information protection is being carried out. The analysis of possible options for threats of unauthorized access to electronic resources of a computer network is carried out. Decisions are made to reduce information security risks. The rapid growth rate of information technology contributes to the expansion of a person’s business relations in all spheres of his activity via the Internet. With the development of communication tools, such as computer networks, WEB sites, problems arose in protecting information (business, scientific) electronic resources of systems from attacks on it by private individuals. The risk of information security of electronic resources on the Internet is still great if they are not adequately protected from unauthorized access. In this regard, the development of effective means of protecting information of electronic resources from unauthorized access remains relevant. Unauthorized access to a computer network, as a rule, is carried out through vulnerabilities in the ER, therefore, to reduce the risk of penetrating system information, effective methods for identifying vulnerabilities, their assessment and their exclusion are necessary. The information security of a computer network largely depends on the competent conduct of a number of organizational and design work. It is shown that in order to assess the risk of information security to the network, information is needed on vulnerabilities that open up unauthorized access to its electronic information system, as well as knowledge about the ways end-users interact with the network.