MODEL OF INTERACTION BETWEEN COMPUTER INCIDENTS, EVENTS, AND INFORMATION SECURITY INCIDENTS

The purpose of the article is to clarify the relationship between the concepts of computer incidents, events and incidents of information security. Various definitions of these terms have appeared in the scientific literature and standards, the understanding of which complicates practical activities to respond to the entire wide and diverse range of information security events and incidents. To detect signs of possible threats and classify them using neural networks and machine learning, it is necessary to have a clearer understanding of the ratio of multiple computer attacks, events and incidents of information security. The paper uses methods of comparative analysis of documents, an integrated approach to the study of terms and their content in the field of information security. Therefore, reducing the basic concepts to a single understanding will help improve the response system. As a result of the research, the author proposed a model for the interaction of nested sets of computer attacks, incidents and information security events, the list of unacceptable events is highlighted.