МОДЕЛЬ БЕЗОПАСНОСТИ С «ЧАСОВЫМ» МЕХАНИЗМОМ СИСТЕМЫ ЗАЩИТЫ ИНФОРМАЦИИ

Abstract

The main point of the new approach to security should be the development of effective security models that are adequate to the current level of development of software and hardware, as well as the possibility of flexible security management depending on the requirements, acceptable risk and resource consumption. The task of the kernel integrity control subsystem is to ensure the security of the system during its operation and detect incorrect interference of system subjects in its operation. The system integrity control subsystems are based on two main components: static and dynamic. The frequency of the kernel integrity control subsystem actuation determines the time that the system will be in the "information leak" state in the event of a violation of the system integrity. There are two approaches to determining the time interval T: the first approach is characterized by minimizing the loss of system performance due to the presence of the kernel integrity control subsystem in the system, the second approach is characterized by the fact that it provides a higher level of security in case of possible losses of system performance.