This article is cited in 5 papers

Developing the system of intelligent services to protect information in cyber warfare

I. V. Kotenko, I. B. Saenko

St. Petersburg Institute for Informatics and Automation of RAS

Abstract: Cyber warfare marks a new level of information confrontation occurring in computer infrastructure. New and very promising area of information security in conditions of cyber warfare is to build the system of intelligent information protection services. The system of intelligent information protection services uses the technology of security information and event management, which enables to withstand cyber-attacks and cyber terrorism and to ensure the necessary level of infrastructure cyber security. The paper discusses the basic issues to develop a system of intelligent protection services and its individual components. Based on the analysis of general regulations for realizing a system of intelligent information protection services, the paper provides a number of basic approaches to implement intelligent services, such as services for collecting, converting and storing information about security events, services for modeling of attacks and protection system behavior, security decision support services and information visualization services.

Keywords: information security, information protection services, security event, intellectualization of protection, network attack modeling, repository, visualization.

UDC: 004.056.53

Received: 01.06.2012