Файл: Метода оценки экономической эффективности системы защиты информации для коммерческих предприятий.pdf

Метод оценки экономической системы защиты информации
211
References
1.
Analiz rynka IB v Rossii. Chast' 1 [Analysis of the IB market in
Russia. Part 1], available at: https://www.anti-malware.ru/analytics/
Market_Analysis/analysis-information-security-market-russia-part-1
(ac- cessed 17 October
2020).
2.
Berezhnaia E.V. Matematicheskie metody modelirovaniia sistem
[Mathematical methods for modeling economic systems]. Moscow: Finansy i statistika, 2006, 432 p.
3.
Polianskii D.A. Ekonomika zashchity informatsii [Information se- curity economics]. Vladimir: Vladimirskii gosudarstvennyi universitet,
2009, 592 p.
4.
Motzek A., Möller R. Context- and bias-free probabilistic mission impact assessment. Computers & Security, 2017, no. 65, pp. 166-186. DOI: https://doi.org/10.1016/j.cose.2016.11.005 5.
Motzek A., Möller R., Debar H., Garcia-Alfaro J., Granadillo G.G.
Selection of Pareto-efficient response plans based on financial and opera- tional assessments. EURASIP Journal on Information Security, 2017, no. 1, pp. 1-22. DOI: https://doi.org/10.1186/s13635-017-0063-6 6.
Aslanyan Z., Nielson F. Pareto Efficient Solutions of Attack-Defence
Trees. International Conference on Principles of Security and Trust, 2015, pp. 95-114. DOI: https://doi.org/10.1007/978-3-662-46666-7_6 7.
Maslova N.A. Metody otsenki effektivnosti sistem zashchity informatsionnykh sistem [Methods for assessing the effectiveness of infor- mation systems protection systems]. Iskusstvennyi intellekt, 2008, no. 4, pp. 253-264.
8.
Anderson R., Moore T. The Economics of Information Security. Sci-
ence, 2006, no. 314, pp. 610-613. DOI: https://doi.org/10.1126/science.1130992 9.
Wheeler E. Security Risk Management: Building Information
Security Risk Management Program from the Ground Up. Syngress Pub-
lishing, 2011.
10.
Economics of Information Security and Privacy III, available at: https://ru.scribd.com/document/379404173/Economics-of-Information-
Security-and-Privacy-III/ (accessed 15 October
2020).
11.
Golikov Iu.A. Ekonomicheskaia effektivnost' sistemy zashchity informatsii [Economic efficiency of information security systems]. Novosi- birsk: Sibirskii gosudarstvennyi universitet geosistem i tekhnologii, 2012, 41 p.

А.С. Шабуров, А.И. Шлыков
212 12.
Baranova E.K. Metodiki analiza i otsenki riskov IB [Methods of analysis and assessment of information security risks]. Obrazovatel'nye
resursy i tekhnologii, 2015, no. 1(9), pp. 73-79.
13.
Tsukanova O.A. Ekonomika zashchity informatsii [Economics of information security]. Saint Petersburg: Sankt-Peterburgskii natsional'nyi issledovatel'skii universitet informatsionnykh tekhnologii, mekhaniki i optiki, 2014, 79 p.
14.
GOST R ISO/MEK 27005-2010. Informatsionnaia tekhnologiia.
Metody i sredstva obespecheniia bezopasnosti. Menedzhment riska informatsionnoi bezopasn [GOST R ISO/MEK 27005-2010. Information technology. Security techniques. Information security risk management].
Dostup iz spravochno-pravovoi sistemy Konsul'tantPlius.
15.
Shlykov A.I., Shaburov A.S. O formalizatsii podkhodov k razrabotke modelei mnogokriterial'noi otsenki effektivnosti sistem zashchity informatsii [On the formalization of approaches to the development of mod- els of multi-criteria evaluation of the effectiveness of information security systems]. Avtomatizirovannye sistemy upravleniia i informatsionnye
tekhnologii: materialy vserossiiskoi nauchno-tekhnicheskoi konferentsii
(Perm 9-11 June 2020). Perm': Permskii natsional'nyi issledovatel'skii politekhnicheskii universitet, 2020, vol. 2, pp. 408–414.
16.
Polozhenie Gostekhkomissii ot 25 noiabria 1994 goda po attestatsii ob"ektov informatizatsii po trebovaniiam bezopasnosti informatsii
[Regulations of Gostekhkomissii dated 25 november 1994 on certification of information objects for information security requirements]. Dostup iz spravochno-pravovoi sistemy Konsul'tantPlius.
17.
GOST R ISO/MEK 17799-2005. Informatsionnaia tekhnologiia.
Prakticheskie pravila upravleniia informatsionnoi bezopasnost'iu [GOST R
ISO/MEK 17799-2005. Information technology. Code of practice for infor- mation security management]. Dostup iz spravochno-pravovoi sistemy
Konsul'tantPlius.
18.
Gosudarstvennyi reestr sertifitsirovannykh sredstv zashchity informatsii N ROSS RU.0001.01BI00 [State register of certified protection equipment N ROSS RU.0001.01BI00], available at: https://fstec.ru/ tekhnicheskaya-zashchita-informatsii/dokumenty-po-sertifikatsii/153-sis- tema-sertifikatsii/591-gosudarstvennyj-reestr-sertifitsirovannykh-sredstv- zashchity-informatsii-n-ross-ru-0001-01bi00 (accessed 22 October
2020).

Метод оценки экономической системы защиты информации
213 19.
Aktual'nye kiberugrozy - 2019 [Topical Cyber Threats - 2019], available at: https://www.ptsecurity.com/ru-ru/research/analytics/cybersecu rity-threatscape-q1-2019/ (accessed 17 October
2020).
20.
Shlykov A.I. Razrabotka modeli opredeleniia kritichnykh resursov i sviazannykh s nimi riskov informatsionnoi bezopasnosti [Development of a model for determining critical resources and the related risks of information security]. Innovatsionnye tekhnologii: teoriia, instrumenty, praktika.
Materialy XI Mezhdunarodnoi internet-konferentsii molodykh uchenykh,
aspirantov, studentov (15 November - 31 December 2019). Perm': Permskii natsional'nyi issledovatel'skii politekhnicheskii universitet, 2019, pp. 244-248.
Сведения об авторах
Шабуров Андрей Сергеевич (Пермь, Россия) – кандидат техни- ческих наук, доцент кафедры «Автоматика и телемеханика» Пермского национального исследовательского политехнического университета
(614990, Пермь, Комсомольский пр., 29, e-mail: shans@at.pstu.ru).
Шлыков Алексей Игоревич (Пермь, Россия) – магистрант ка- федры «Автоматика и телемеханика» Пермского национального иссле- довательского политехнического университета (614990, Пермь, Ком- сомольский пр., 29, e-mail: thekingofthedas@gmail.com).
About the authors
Shaburov Andrey Sergeevich
(Perm, Russian Federation) is a Ph. D in Technical Sciences, Associate Professor of the Department of Automa- tion and Telemechanics Perm National Research Polytechnic University
(614990, Perm, 29, Komsomolsky pr., e-mail: shans@at.pstu.ru).
Shlykov Alexey Igorevich
(Perm, Russian Federation) is a Master
Student Perm National Research Polytechnic University (614990, Perm, 29,
Komsomolsky pr., e-mail: thekingofthedas@gmail.com).
Получено 07.10.2020