Mathematical Model of Threats to Information Systems

摘要

Existence of the need to assess the quality of computer networks security requires the development of a formalized evaluation method. One of the elements of such method is the model of threats to information system. In the article it is described a model of threats to integrity of information system exposed as a 3-level attributed metagraph. Threat model includes the threats on software, operating system and network layers. The model is used as part of the methodology for assessing the quality of computer network security.