Mathematical model of a secure information system

Abstract

A modern information system is a complex of technical facilities, software, data, and users designed to ensure the efficient collection, storage, processing, transmission, and protection of information using modern digital technologies. In contemporary information systems, particular attention is paid to information security. The primary function of a secure information system is to ensure the confidentiality, integrity, and availability of information. This enables the secure storage, processing, and transmission of data while reducing the risks of cyberattacks and other threats. In the context of the rapid development of digital technologies, global digitalization of the economy, and widespread use of the Internet, secure information systems (SISs) have ceased to be merely tools for internal control and have become a key element of organizational resilience, trust, and competitiveness. The modern approach to SISs requires moving beyond traditional cybersecurity methods toward a comprehensive, adaptive, and predictive model of information protection.
This article is devoted to the development of a mathematical model of a secure information system consisting of a protected object and security systems, taking into account the current state of the system. In order to disrupt system operation and gain unauthorized access to protected data, attackers employ various types of attacks. Since the system functioning process is stochastic in nature, a stochastic process is used as the mathematical model. Analysis of the proposed model makes it possible to obtain the following estimates: the probability that no failure will occur during the recovery cycle of the process, as well as the mean time to failure of the information system. The model also makes it possible to take into account the effects of false and hidden failures.

Keywords: information system, mathematical model, hidden failures, false failures, security system.