METHOD OF CONSTRUCTING SYSTEM FOR DETECTING INFORMATION SECURITY INCIDENTS IN AUTOMATED CONTROL SYSTEMS Russian patent published in 2021 - IPC G06F21/00 

FIELD: physics.

SUBSTANCE: invention relates to information security. Method of constructing a system for detecting information security incidents (IS) for automated control systems, which includes steps of constructing and forming IS incident detection subsystems, during which, using a method of morphological analysis, forming subsystems of level planning, coordination, control of data protection means and collection of data on object state, stage of evaluation of implementation of functions in versions of construction of information security incident detection system of ACS, during which conformity of realized functions is evaluated in each version of constructing a system from a plurality of versions formed at a previous step, a step of estimating cost and versions of constructing a system for protection against computer attacks, a step for evaluating an optimum version of constructing an information security incident detection system with a minimum detection time.

EFFECT: technical result consists in reduction of information security incident detection time.

1 cl, 1 dwg