title: ÐÐ»Ð³Ð¾ÑÐ¸ÑÐ¼ Ð¾ÑÐµÐ½ÐºÐ¸ ÑÐ¸ÑÐºÐ¾Ð² Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ð½ÑÑ ÑÐ¸ÑÑÐµÐ¼ ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸Ñ ÑÐµÑ Ð½Ð¾Ð»Ð¾Ð³Ð¸ÑÐµÑÐºÐ¸Ð¼Ð¸ Ð¿ÑÐ¾ÑÐµÑÑÐ°Ð¼Ð¸ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ Ð¼ÐµÑÐ°ÑÐ²ÑÐ¸ÑÑÐ¸ÑÐµÑÐºÐ¾Ð³Ð¾ Ð¿Ð¾Ð´Ñ Ð¾Ð´Ð°
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð±Ð°ÐºÐ°Ð»Ð°Ð²ÑÐ°
titleType: Subtitle
title: Algorithm for assessing information security risks of automated process control systems based on the metaheuristic approach
Creators: name: Ð¤Ð¾Ð¼Ð¸Ð½Ð°, ÐÐ°ÑÑÑ
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2022
Subjects: Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÑ
Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ð½Ð°Ñ ÑÐ¸ÑÑÐµÐ¼Ð° ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸Ñ ÑÐµÑ Ð½Ð¾Ð»Ð¾Ð³Ð¸ÑÐµÑÐºÐ¸Ð¼ Ð¿ÑÐ¾ÑÐµÑÑÐ¾Ð¼
Ð¾ÑÐµÐ½ÐºÐ° ÑÐ¸ÑÐºÐ¾Ð²
Ð¼ÐµÑÑ Ð¾Ð±ÑÐ°Ð±Ð¾ÑÐºÐ¸ ÑÐ¸ÑÐºÐ¾Ð²
Ð³ÐµÐ½ÐµÑÐ¸ÑÐµÑÐºÐ¸Ð¹ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼
information security
automated process control system
risk assessment
risk treatment measures
genetic algorithm

description: Ð¢ÐµÐ¼Ð° Ð²ÑÐ¿ÑÑÐºÐ½Ð¾Ð¹ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ: Â«ÐÐ»Ð³Ð¾ÑÐ¸ÑÐ¼ Ð¾ÑÐµÐ½ÐºÐ¸ ÑÐ¸ÑÐºÐ¾Ð² Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ð½ÑÑ ÑÐ¸ÑÑÐµÐ¼ ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸Ñ ÑÐµÑÐ½Ð¾Ð»Ð¾Ð³Ð¸ÑÐµÑÐºÐ¸Ð¼Ð¸ Ð¿ÑÐ¾ÑÐµÑÑÐ°Ð¼Ð¸ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ Ð¼ÐµÑÐ°ÑÐ²ÑÐ¸ÑÑÐ¸ÑÐµÑÐºÐ¾Ð³Ð¾ Ð¿Ð¾Ð´ÑÐ¾Ð´Ð°Â». ÐÐ±ÑÐµÐºÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÐµÑÑÑ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÑ Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ð½Ð¾Ð¹ ÑÐ¸ÑÑÐµÐ¼Ñ ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸Ñ (ÐÐ¡Ð£) ÑÐµÑÐ½Ð¾Ð»Ð¾Ð³Ð¸ÑÐµÑÐºÐ¸Ð¼ Ð¿ÑÐ¾ÑÐµÑÑÐ¾Ð¼ (Ð¢Ð). ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÑÑÑÑ Ð¼ÐµÑÐ¾Ð´Ñ Ð¸ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼Ñ Ð¾ÑÐµÐ½ÐºÐ¸ Ð¸ Ð¾Ð±ÑÐ°Ð±Ð¾ÑÐºÐ¸ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÑ ÑÐ¸ÑÐºÐ¾Ð² ÐÐ¡Ð£ Ð¢Ð. Ð¦ÐµÐ»ÑÑ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÐµÑÑÑ Ð¿Ð¾Ð²ÑÑÐµÐ½Ð¸Ðµ ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÐÐ¡Ð£ Ð¢Ð Ð² ÑÑÐ»Ð¾Ð²Ð¸ÑÑ Ð´ÐµÑÑÑÑÐºÑÐ¸Ð²Ð½ÑÑ Ð²Ð¾Ð·Ð´ÐµÐ¹ÑÑÐ²Ð¸Ð¹ Ð·Ð° ÑÑÐµÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ¸ÑÐº-Ð¾ÑÐ¸ÐµÐ½ÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð½Ð¾Ð³Ð¾ Ð¿Ð¾Ð´ÑÐ¾Ð´Ð°. ÐÐ±Ð»Ð°ÑÑÑ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ð¸Ñ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐ¾Ð² ÑÐ°Ð±Ð¾ÑÑ: Ð¿Ð¾ÑÑÑÐ¾ÐµÐ½Ð¸Ðµ ÑÑÑÐµÐºÑÐ¸Ð²Ð½ÑÑ ÑÐ¸ÑÑÐµÐ¼ Ð·Ð°ÑÐ¸ÑÑ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¸ ÐÐ¡Ð£ Ð¢Ð. ÐÐ»Ñ Ð²ÑÐ¿Ð¾Ð»Ð½ÐµÐ½Ð¸Ñ ÑÐ°Ð±Ð¾ÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð»Ð¸ÑÑ Ð¼ÐµÑÐ¾Ð´Ñ Ð¼ÐµÑÐ°ÑÐ²ÑÐ¸ÑÑÐ¸ÑÐµÑÐºÐ¾Ð³Ð¾ Ð¿Ð¾Ð´ÑÐ¾Ð´Ð° Ð´Ð»Ñ Ð¿Ð¾Ð¸ÑÐºÐ° Ð¾Ð¿ÑÐ¸Ð¼Ð°Ð»ÑÐ½Ð¾Ð¹ ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ð¸ ÑÐ¸ÑÑÐµÐ¼Ñ Ð·Ð°ÑÐ¸ÑÑ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¸ ÐÐ¡Ð£ Ð¢Ð. ÐÑÐ½Ð¾Ð²Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ. ÐÐ·ÑÑÐµÐ½Ñ Ð±Ð°Ð·Ð¾Ð²ÑÐµ ÑÐ²ÐµÐ´ÐµÐ½Ð¸Ñ Ð¾ Ð¼ÐµÐ½ÐµÐ´Ð¶Ð¼ÐµÐ½ÑÐµ ÑÐ¸ÑÐºÐ° Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸. ÐÐ¾ÑÑÑÐ¾ÐµÐ½Ð° Ð¼Ð¾Ð´ÐµÐ»Ñ ÑÐ¸ÑÑÐµÐ¼Ñ Ð·Ð°ÑÐ¸ÑÑ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¸ Ð¸ Ð¼Ð¾Ð´ÐµÐ»Ñ ÐÐ¡Ð£ Ð¢Ð. ÐÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ ÑÑÑÐµÑÑÐ²ÑÑÑÐ¸Ðµ Ð¼ÐµÑÐ¾Ð´Ñ Ð¸ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼Ñ Ð¾ÑÐµÐ½ÐºÐ¸ ÑÐ¸ÑÐºÐ¾Ð² Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸. ÐÑÐ¾Ð¸Ð·Ð²ÐµÐ´ÐµÐ½Ð° Ð¾ÑÐµÐ½ÐºÐ° ÑÐ¸ÑÐºÐ¾Ð² Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÐÐ¡Ð£ Ð¢Ð. Ð¡ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸ÐµÐ¼ Ð¼ÐµÑÐ°ÑÐ²ÑÐ¸ÑÑÐ¸ÑÐµÑÐºÐ¾Ð³Ð¾ Ð¿Ð¾Ð´ÑÐ¾Ð´Ð° ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼ Ð´Ð»Ñ Ð¾ÑÐµÐ½ÐºÐ¸ ÑÐ¸ÑÐºÐ¾Ð² Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÐÐ¡Ð£ Ð¢Ð Ð¸ ÑÐ¾ÑÐ¼Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð¾Ð¿ÑÐ¸Ð¼Ð°Ð»ÑÐ½Ð¾Ð³Ð¾ ÐºÐ¾Ð¼Ð¿Ð»ÐµÐºÑÐ° Ð·Ð°ÑÐ¸ÑÐ½ÑÑ Ð¼ÐµÑ Ð´Ð»Ñ Ð¸Ñ Ð¾Ð±ÑÐ°Ð±Ð¾ÑÐºÐ¸.
description: Topic of the qualification work: "An algorithm for assessing the risks of information security of automated process control systems based on a metaheuristic approach". The object of the graduate qualification work is the information security of automatedÂ  process control system. The subject of the graduate qualification work is the methods and algorithms for assessing and processing information risks of automated process control system. The purpose of the work is improving the efficiency of information security in the face of destructive impacts through the use of a risk-based approach. The area of application of the results of the work: the construction of effective information security systems for automated process control systems. Methods of the metaheuristic approach were used to search for the optimal configuration of the information security system for automated process control systems. The main results of the study: studying basic information about information security risk management. A model of the information security system and a model of automated process control systems have been built. The existing methods and algorithms for assessing information security risks are analyzed. An assessment of the risks of information security of automated process control systems was carried out. Using a metaheuristic approach, an algorithm has been developed for assessing the risks of information security of automated process control systems and the formation of an optimal set of protective measures for their processing.