METHODOLOGY FOR MODELING AND ENSURING INFORMATION SECURITY IN RESOURCE MANAGEMENT

Abstract

The subject of research is an information security in resource management based on the mapping of technological processes of transformation and movement of resources into the phase space. The aim of the research is to develop a methodology, as a set of methods and tools united by a common ideology for information security. The methodology is formed by a set of the following methods and means: method and means of structural modeling, information security analysis and construction of production and technological models, in the form of executable block diagrams, based on predefined block elements of production and technological processes; method and tools of integrating an adversary into the production and technological process model, as a structural part of the executable block diagram of the production and technological model; a method for analyzing and selecting the trajectory of resource movement in the production and technological space based on structural modeling using optimization methods based on the risk minimization criterion for given values of acceptable and acceptable ranges (min,max) of resource transformation and changes in the state of production processes. The set of developed methods is united by the following ideology: methods and tools of forming an information security policy for objects of all levels of the hierarchy of the traffic management system and resource transformation. The result of the research is the formalization of the methodology and the methods and tools that form it to the level of readiness of application to solve practical problems. The scope of application of the proposed methodology and its methods and tools: solving problems of information security at enterprises and in industries by modeling, monitoring and analyzing the trajectories of the movement of resources and the state of production and technological processes.