SYSTEM AND METHOD FOR PREDICTING SIGNS OF INFORMATION SECURITY INCIDENTS IN AUTOMATED CONTROL SYSTEMS Russian patent published in 2024 - IPC G06F21/55 

FIELD: information security.

SUBSTANCE: technical result is achieved when implementing a method for predicting signs of information security incidents in an automated control system, in which performing: collecting events from heterogeneous sources, aggregating events to reduce the number of recurring events, determining the category of events, normalizing events in accordance with the category, enrichment of incoming events with missing and additional information for correct operation of correlation rules, determination of cause-and-effect relationships between normalized and information-enriched events to identify significant information and predict information security incidents, recording in a chronological sequence of events received from sources into an event database, displaying screen notifications on predicted information security incidents on a console.

EFFECT: high efficiency of predicting signs of information security incidents by information protection and event management systems in automated control systems.

1 cl, 2 dwg