About behavioral analytics for a system of protection against targeted attacks and its application for operating systems of the Astra Linux family

The article discusses the task of developing a behavioral analytics subsystem for a system of protection against targeted attacks and the application of its work on operating systems of the Astra Linux family. A review of possible types of targeted attacks and typical actions to be assessed when building a protection system against targeted attacks is provided. Various types of security systems and their ranking according to protection technologies are considered. It is proposed to use a multidimensional Gaussian distribution model (GMM) to analyze the behavior of objects of information interaction together with the domestic system of protection against targeted attacks AVSOFT ATHENA running the Astra Linux operating system, which analyzes network activity and analyzes the use of resources.