METHOD OF DETECTING AND COUNTERACTING DISTRIBUTION OF MALICIOUS PROGRAMS IN COMPUTER NETWORK Russian patent published in 2024 - IPC G06F21/56 G06N5/02 

FIELD: safety of computer systems.

SUBSTANCE: technical result is achieved by implementing a method of detecting and countering the distribution of malicious programs in a computer network, in which a topology of a computer network is formed, malware is distributed over n-assets of the computer network, a directed graph of the trajectories of the implementation of the malicious program with respect to the n-th asset is formed, generating malware detection conditions, detecting malware using detection conditions, making a decision on isolating a fragment of a computer network from n-assets infected with a known malware, setting up a z-th antivirus program, comparing the malware detection conditions with the z-th antivirus program settings, adjusting the z-th antivirus program settings, determining the level of information security risk from unknown malicious programs for n-assets of a computer network, comparing the level of information security risk with the required value, computer network information security incidents are investigated.

EFFECT: reduced level of damage to a computer network.

1 cl, 1 dwg