Peculiar Properties Of Creating A System Of Support To Make Anti-Crisis Decisions By Experts Of The Situational Center At The Cyber Protection Object

Abstract

Considering the uncertainty of the parameters affecting the conditions for the normal functioning of the cyber protection object, it is proposed to create a support system for making anti-crisis decisions by the experts of the situational center, which is an integral part of the information security system of the cyber protection object. The basis of the information security system of a cyber protection object shall be a classical control loop that ensures the collection, processing and analysis of information, as well as modeling the development of information danger at the cyber protection object and the development and implementation of anti-crisis management to prevent the emergence of threats to information circulating during the functioning of the cyber protection object, and also elimination or minimization of their consequences. In the study, the risk indicator for information circulating during the functioning of a cyberprotection object is the summation between the risk indicators of information disclosure and information leakage, as well as the risk indicator for computer information circulating during the functioning of the cyber protection object. The indicator of the risk of information leakage includes indicators of the risk of information leakage through technical channels, information leakage through communication channels, speech information leakage, as well as information leakage, shown information. The risk indicator for computer information includes indicators of the risk of loss and alteration of information, as well as obtaining unauthorized access to information. In the context of untimely, incomplete and suboptimal information concerning the condition of information security of the cyber protection object, to solve the problem of multi-criteria optimization for the formation of alternatives to anti-crisis decisions by the experts of the situational center, in the study, firstly, the methods of obtaining initial information about the advantages of the on traditional heuristic procedures of expert evaluation, and concerning formal methods of comparator identification. It is shown that regardless of the method of obtaining the initial information and the form of its presentation, the most adequate is the interval assessment of the preferences of the decision maker. Secondly, a model of a multicriteria scalar assessment of the usefulness of feasible alternative solutions has been synthesized. The presented results represent the scientific basis for the development of a support system for making anti-crisis decisions in critical situations by experts of the situational center to ensure the appropriate level of information security of the cyber protection object.