СПОСОБ ЗАЩИТЫ КОРПОРАТИВНОЙ СЕТИ НА ОСНОВЕ ДИНАМИЧЕСКОГО РАСПРЕДЕЛЕНИЯ ИНФОРМАЦИОННЫХ РЕСУРСОВ

Abstract

The general trend in ensuring network security is the transition to the use of comprehensive information security systems. As the statistics of cyber attacks have shown, the objects of destructive influences, as a rule, are software and information resources of corporate networks. Within the framework of the well-known concept of comprehensive protection of network resources, the principle of situational transfer of information resources to protected nodes is substantiated. The article formulates the problem of dynamic distribution of local databases across nodes of a corporate information network. The implementation of such a mechanism is carried out in the event of a threat to the integrity of information resources by a priori formalization and initiation of an algorithm for solving the problem of assignments of a special type in Boolean variables. The features of the mathematical model of an extremal problem are the minimization of the cost of computing resources when solving a set of applied problems and taking into account the requirement for placing local databases on several network nodes with backup capabilities. In other words, a situationally formed plan for storing information resources involves placing one local database on at least the main and backup servers. The article considers the general methodology for determining the plan for placing databases on corporate network nodes and an example of its numerical implementation using the integer programming method. Based on the research results, recommendations are formulated consisting of choosing the optimal option for placing distributed database components on corporate network nodes, which ensures its full functionality and minimizes the risks of violating the integrity of information resources.