FIELD: computing technology.
SUBSTANCE: method implemented on a computer for determining the level of danger of information security events (hereinafter referred to as events) that includes: receiving data about events that have occurred on at least one computer; on the basis of the received data on events, ratings are given to each event; determining the level of danger of the event, depending on the ratings.
EFFECT: increasing the level of detection of dangerous information security events in a computer network.
12 cl, 11 dwg
