Open AccessCost optimization for information security systems
Author(s) -
A. V. Kryanev,
Nikolay A. Kudryashov,
D. E. Sliva
Publication year - 2020
Publication title -
journal of physics: conference series
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.21
H-Index - 85
ISSN - 1742-6588
DOI - 10.1088/1742-6596/1686/1/012033
Subject(s) - information security management , information security , computer security , computer science , information system , security information and event management , information security standards , task (project management) , security testing , information protection policy , security service , risk analysis (engineering) , information systems security , cloud computing security , asset (computer security) , business , management information systems , network security policy , engineering , systems engineering , cloud computing , electrical engineering , operating system
Protecting information that is potentially accessible through external communication channels from external threats is one of the primary objectives of information security. Creating an information security system requires material investments, the cost of which increases along with the increasing degree of information protection. Therefore, the task of determining the level of investment in information security that provides the minimum total cost of the information protection system and losses from realized threats that remain after the implementation of the information protection system arises. In this paper, we present a scheme that allows us to solve the problem of optimizing the costs of an information security system, the implementation of which ensures a minimum of average total costs for the implementation of the information security system and losses due to the remaining threats realized after the establishment of information security system.