Децентрализованный подход к сбору и обработке данных информационной инфраструктуры предприятия

Abstract

The level of security of the information and communication sector of the enterprise is a consequence of the effectiveness of solving the problems of system analysis, management and in formation processing of a corporate computer network. The article analyzes the issue of responding to incidents in cyberspace based on existing centralized and distributed systems forcollecting and analyzing events. Threats of unauthorized influences from trusted users are considered. An original method of system analysis, management and information processing of acorporate computer network is reviewed. The scientific novelty of the proposed solution consistsin the possibility of automatic management of the traffic of the computer network and the localinformation processes of its hosts based on an objective and informative register of events protected from various external disturbances (from impersonation attacks to falsification of records) by using a modified decentralized blockchain storage with a logged events trust management system