SUBSTANTIATION OF NECESSITY TO DEVELOP EXPERT SYSTEM FOR THREAT ASSESSMENT

Drugal A. O., Tsaregorodtsev A. V.

An assessment of information security threats is necessary to develop an appropriate threat model. The new FSTEC information security threat assessment methodology has significantly increased the complexity of this process. This paper considers the features of the methodological document, notes the main factors that increase the complexity of threat assessment and substantiates the necessity to intellectualize this process. The result of the paper is a model of expert system usage for assessing information security threats.

Keywords: information security, threat assessment, expert system, threat model, threats to information security.