ORGANIZATION OF RULES FOR VERIFICATION OF THE FUNCTIONAL PROFILE OF PROTECTION

Abstract

The article considers the process of formalizing the rules for verifying the functional security profile (FS), which is the basis for conducting state examinations of integrated information security systems (IISS). The scientific novelty of the work is the use of a functional security profile used to assess the completeness and consistency of the implementation of functional security services (FSS) in grid systems, as well as to identify threats to information security. Particular attention is paid to the formalization of the rules defined by the normative document ND TZI 2.5.004-99 «Criteria for assessing the security of information in computer systems against unauthorized access», which allow automating the process of checking the FSIs. The purpose of the article is to consider and improve three main tasks related to the FSI: determining the levels of implementation of the FSI, assessing their completeness and consistency, and identifying the description of functional services in the incoming documentation. The article describes a mathematical model of the FSF that takes into account the levels of FSF, a set of criteria (confidentiality, integrity, availability, etc.) and the conditions for the implementation of services. The formalization of rules allows to effectively check the compliance of the profile with regulatory requirements and automate this process. The methodology of the article is to formulate the conditions for the implementation of functional security services, such as «Trust Confidentiality», using matrices and equations. The analysis of such services demonstrates that their interdependence and exclusivity can be taken into account in automated systems for verifying FSS. Conclusions. The proposed approaches are the basis for the creation of decision support systems that increase the accuracy and speed of the state examination of IPSS. The results of the study are aimed at improving the methodologies for ensuring information security in grid systems.