Cyber threats classifier of automated banking systems information resources

Abstract

A group of methods is considered that allows you to determine the degree of risk by assessing the level of compliance with a given set of information security requirements and a group of methods for assessing the security risk of information resources based on determining the probability of attacks, as well as the level of losses. An improved classification of threats to the security of banking information resources is proposed, which, unlike the existing ones, is based on a synergistic threat model that allows classifying threats to security components by types of services and hierarchy levels of the automated banking system infrastructure.