title: ÐÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ð¸Ðµ ÐºÐ¾Ð½ÑÐµÐºÑÑÐ½Ð¾-Ð¾ÑÐ¸ÐµÐ½ÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð½Ð¾Ð³Ð¾ Ð¿Ð¾Ð´Ñ Ð¾Ð´Ð° Ð¿ÑÐ¸ Ð°Ð½Ð°Ð»Ð¸Ð·Ðµ Ð·Ð°ÑÐ¸ÑÐµÐ½Ð½Ð¾ÑÑÐ¸ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÑ ÑÐ¸ÑÑÐµÐ¼
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° ÑÐ¿ÐµÑÐ¸Ð°Ð»Ð¸ÑÑÐ°
titleType: Subtitle
title: Application of a context-oriented approach to the analysis of information systems security
Creators: name: ÐÐµÑÐ³Ð°ÑÐµÐ², ÐÐ°Ð½Ð¸Ð¸Ð»
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2025
Subjects: Ð°Ð½Ð°Ð»Ð¸Ð· Ð·Ð°ÑÐ¸ÑÑÐ½Ð½Ð¾ÑÑÐ¸
ÑÐºÐ°Ð½Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ðµ Ð¿Ð¾Ð²ÐµÑÑ Ð½Ð¾ÑÑÐ¸ Ð°ÑÐ°Ðº
ÑÐ°Ð·Ð·Ð¸Ð½Ð³
ÐºÐ¾Ð½ÑÐµÐºÑÑÐ½Ð¾Ðµ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ðµ ÑÐ³ÑÐ¾Ð·
ÐºÐ¾Ð½ÑÐµÐºÑÑÐ½Ð¾-Ð°Ð´Ð°Ð¿ÑÐ¸Ð²Ð½ÑÐ¹ ÑÐ°Ð·Ð·Ð¸Ð½Ð³
ÑÐµÐ¼Ð°Ð½ÑÐ¸ÑÐµÑÐºÐ¸Ð¹ Ð°Ð½Ð°Ð»Ð¸Ð· Ð·Ð°ÑÐ¸ÑÑÐ½Ð½Ð¾ÑÑÐ¸
ÑÐ°Ð·Ð²ÐµÐ´ÐºÐ° Ð¿Ð¾ Ð¾ÑÐºÑÑÑÑÐ¼ Ð¸ÑÑÐ¾ÑÐ½Ð¸ÐºÐ°Ð¼
vulnerability analysis
attack surface scanning
fuzzing
contextual threat detection
context-adaptive fuzzing
semantic vulnerability analysis
osint

description: Ð¦ÐµÐ»ÑÑ Ð½Ð°ÑÑÐ¾ÑÑÐµÐ¹ Ð´Ð¸Ð¿Ð»Ð¾Ð¼Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÐ¸ ÐºÐ¾Ð½ÑÐµÐºÑÑÐ½Ð¾-Ð¾ÑÐ¸ÐµÐ½ÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð½Ð¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð·Ð°ÑÐ¸ÑÑÐ½Ð½Ð¾ÑÑÐ¸ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÑ ÑÐ¸ÑÑÐµÐ¼, Ð¿Ð¾Ð·Ð²Ð¾Ð»ÑÑÑÐµÐ¹ Ð¿Ð¾Ð²ÑÑÐ¸ÑÑ ÑÐ¾ÑÐ½Ð¾ÑÑÑ Ð¾Ð¿ÑÐµÐ´ÐµÐ»ÐµÐ½Ð¸Ñ Ð¿Ð¾Ð²ÐµÑÑÐ½Ð¾ÑÑÐ¸ Ð°ÑÐ°ÐºÐ¸. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. ÐÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°ÑÑ ÑÑÑÐµÑÑÐ²ÑÑÑÐ¸Ðµ Ð¿Ð¾Ð´ÑÐ¾Ð´Ñ Ðº Ð°Ð½Ð°Ð»Ð¸Ð·Ñ Ð·Ð°ÑÐ¸ÑÐµÐ½Ð½Ð¾ÑÑÐ¸ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÑ ÑÐ¸ÑÑÐµÐ¼. 2. ÐÑÑÐ»ÐµÐ´Ð¾Ð²Ð°ÑÑ Ð²Ð¾Ð·Ð¼Ð¾Ð¶Ð½Ð¾ÑÑÐ¸ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ð¸Ñ ÐºÐ¾Ð½ÑÐµÐºÑÑÐ½Ð¾-Ð¾ÑÐ¸ÐµÐ½ÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð½Ð¾Ð³Ð¾ Ð¿Ð¾Ð´ÑÐ¾Ð´Ð° Ð² Ð°Ð½Ð°Ð»Ð¸Ð·Ðµ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸. 3. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐ°ÑÑ Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÑ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð·Ð°ÑÐ¸ÑÐµÐ½Ð½Ð¾ÑÑÐ¸ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÑ ÑÐ¸ÑÑÐµÐ¼ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ ÐºÐ¾Ð½ÑÐµÐºÑÑÐ½Ð¾-Ð¾ÑÐ¸ÐµÐ½ÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð½Ð¾Ð³Ð¾ Ð¿Ð¾Ð´ÑÐ¾Ð´Ð°. 4. Ð ÐµÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°ÑÑ ÑÐ¸ÑÑÐµÐ¼Ñ Ð³ÐµÐ½ÐµÑÐ°ÑÐ¸Ð¸ ÐºÐ¾Ð½ÑÐµÐºÑÑÐ½Ð¾-Ð¾ÑÐ¸ÐµÐ½ÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð½ÑÑ ÑÐ»Ð¾Ð²Ð°ÑÐµÐ¹ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½Ð¾Ð¹ Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÐ¸. Ð ÐµÐ·ÑÐ»ÑÑÐ°ÑÐ¾Ð¼ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÐ¸ Ð¸ ÐµÐµ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½Ð°Ñ ÑÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ñ Ð² Ð²Ð¸Ð´Ðµ ÑÐ¸ÑÑÐµÐ¼Ñ, ÐºÐ¾ÑÐ¾ÑÐ°Ñ Ð¿ÑÐ¸Ð¼ÐµÐ½ÑÐµÑ ÐºÐ¾Ð½ÑÐµÐºÑÑ Ð¿ÑÐ¸ Ð°Ð½Ð°Ð»Ð¸Ð·Ðµ Ð·Ð°ÑÐ¸ÑÐµÐ½Ð½Ð¾ÑÑÐ¸. ÐÐ° Ð¿ÑÐ°ÐºÑÐ¸ÐºÐµ Ð±ÑÐ»Ð¾ Ð´Ð¾ÐºÐ°Ð·Ð°Ð½Ð¾, ÑÑÐ¾ Ð¿ÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½Ð½Ð°Ñ Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÐ° Ð¿Ð¾Ð·Ð²Ð¾Ð»ÑÐµÑ Ð²ÑÑÐ²Ð»ÑÑÑ ÑÐ½Ð¸ÐºÐ°Ð»ÑÐ½ÑÐµ Ð´Ð»Ñ Ð¸Ð½ÑÑÐ°ÑÑÑÑÐºÑÑÑÑ Ð¿Ð¾ÑÐµÐ½ÑÐ¸Ð°Ð»ÑÐ½ÑÐµ ÑÐ¾ÑÐºÐ¸ Ð²ÑÐ¾Ð´Ð°, ÐºÐ¾ÑÐ¾ÑÑÐµ Ð·Ð°ÑÐ°ÑÑÑÑ Ð¾ÑÑÐ°ÑÑÑÑ Ð½ÐµÐ·Ð°Ð¼ÐµÑÐµÐ½Ð½ÑÐ¼Ð¸ ÑÑÐ°Ð½Ð´Ð°ÑÑÐ½ÑÐ¼Ð¸ Ð¸Ð½ÑÑÑÑÐ¼ÐµÐ½ÑÐ°Ð¼Ð¸, Ð¸ÑÐ¿Ð¾Ð»ÑÐ·ÑÑÑÐ¸Ð¼Ð¸ ÑÐ½Ð¸Ð²ÐµÑÑÐ°Ð»ÑÐ½ÑÐµ Ð¿Ð¾Ð´ÑÐ¾Ð´Ñ. ÐÐ±Ð»Ð°ÑÑÑ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ð¸Ñ: ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ Ð´Ð»Ñ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð·Ð°ÑÐ¸ÑÑÐ½Ð½Ð¾ÑÑÐ¸ ÐºÐ¾ÑÐ¿Ð¾ÑÐ°ÑÐ¸Ð²Ð½ÑÑ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÑ ÑÐ¸ÑÑÐµÐ¼ Ð² ÑÐ¾Ð´Ðµ Ð°ÑÐ´Ð¸ÑÐ¾Ð² Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸.
description: The aim of this thesis is to develop a methodology for context-oriented security analysis of information systems that enhances the accuracy of attack surface identification. Objectives of the research include: 1. To analyze existing approaches to security analysis of information systems. 2. To explore the potential of applying a context-oriented approach in security analysis. 3. To develop a methodology for security analysis of information systems based on the context-oriented approach. 4. To implement a system for generating context-oriented dictionaries based on the developed methodology. Research outcomes: The result of this work is the development of a methodology and its software implementation as a system that applies context in security analysis. Practical application has demonstrated that the proposed methodology identifies infrastructure-specific potential entry points that are often overlooked by standard tools using generic approaches. Scope of application: The results can be used for the security analysis of corporate information systems during security audits.