Python as an automation tool in IS. Monitoring the relevance of protection against malicious code

One of the necessary, periodically performed by information security (IS) department procedures is to assess the level of compliance of the actual state of any IS measure with the established requirements. These procedures involve a significant amount of manual work, which leads to a waste of time, human, technological resources. In this case it is not always possible to provide a high level of reliability of the results. To reduce costs, increase the degree of reliability and accuracy of the results of assessment of the IS state, and, accordingly, increase the level of confidence in the IS state assessment, it is possible by the use of “small automation” means when performing routine operations of collection, correlation, normalization, analysis of data sets. The most acceptable means of automation is the programming language python, which, in addition to convenience of use, powerful functionality, has an extensive analytical apparatus. This article discusses the use of python as a “small automation” tool for monitoring the relevance of antivirus protection system.