The Problem of Selecting APCS’ Information Security Tools

Rimsha, Andrew S.; Rimsha, Konstantin S.

doi:10.1007/978-3-030-32648-7_17

Cited by 2 publications

(1 citation statement)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Such technologies provide an excellent infrastructure for medical purposes, which will allow the elderly and disabled to receive some affordable medical services comfortably at home. Rimsha A.S. and Rimsha K.S., in [46], discussed the problem of choosing information security tools for one of the varieties of cyber-physical systems-automated control systems of a gas-producing enterprise. Several classes of solutions have been studied, taking into account their application in automated systems.…”

Section: Overview Of Articles Related To the Description Of Protected...mentioning

confidence: 99%

A Survey on Threat-Modeling Techniques: Protected Objects and Classification of Threats

et al. 2022

View full text Add to dashboard Cite

Information security is one of the most important attributes of distributed systems that often operate on unreliable networks. Enabling security features during the development of a distributed system requires the careful analysis of potential attacks or threats in different contexts, a process often referred to as «threat modeling». Information protection should be comprehensive, but it is also necessary to take into account the possibility of the emergence of threats specific to a certain information system. Many public and private organizations are still trying to implement system models and the threats directed at them on their own. The main reason for this is the lack of useful and high-quality methodologies that can help developers design system models. This review explores a variety of the literature on confidentiality- and integrity-aware system design methodologies, as well as threat classification methods, and identifies key issues that may be referenced by organizations to make design system processes easier. In particular, this article takes a look at the extent to which existing methodologies cover objects of protection and methods of classifying threats, as well as whether there are such models of systems in which the object itself and the threats directed at it are described. This includes whether the compiled models exhibit symmetry or asymmetry. This literature research shows that methodologies appear to be heterogeneous and versatile, since existing methodologies often only focus on one object of protection (a system). Based on the given analysis, it can be concluded that the existing methodologies only relate superficially to the description of system models and threats, and it is necessary to develop a more complete abstract model of the protected object and threats aimed at it in order to make this model suitable for any organization and protect it against most threats.

show abstract

Section: Overview Of Articles Related To the Description Of Protected...mentioning

confidence: 99%