ФУНКЦИОНАЛЬНАЯ МОДЕЛЬ ИССЛЕДОВАНИЯ БЕЗОПАСНОСТИ СИСТЕМЫ ДИСТАНЦИОННОГО ОБУЧЕНИЯ

Abstract

The article analyzes the scope of the distance learning system and considers architecture and typical subsystems. Conclude that educational institution distance learning system is a distributed heterogeneous system with a web interface and round-the-clock access to the global network. The distance learning system processes, in addition to publicly available information, various types of confidential data, for example, personal data, electronic payments, author's training courses. Intentional and unintentional threats affect this information during storage, processing and transmission, which leads to violation of the information security components: accessibility, integrity and confidentiality. Therefore, it is necessary to apply protection measures to counter threats. Security specialists use systematic and expert approaches to evaluate the measures effectiveness. The measures effectiveness indicators are safety risk registers, penetration tests, indicators of the system current security and their deviation from targeted security or regulatory safety requirements. The purpose of the work is the development of an approach to assessing the distance learning system current safety state. To achieve the goal, the author proposes a functional model for the safety investigation. The model describes the current system security as a function of the many implemented protection measures, the results of penetration testing and security risks. To calculate the risks, the author proposed to use a three-factor model that takes into account the threat frequency, damage and the protection measures effectiveness factor to counteract the threat. A qualitative scale evaluates the value of the resulting safety function. The value of the function is calculated using the ball-rating scale and the normalized value of the safety risk for each distance learning functional subsystem. The results of the work are a list of security threats for four distance learning functional subsystems, a functional safety assessment model in the IDEF0 notation and a mathematical description of the safety function. In conclusion, the author describes the scope of the model possible application and the relevance of automation in the form of a software.