Research and Analysis of the Development of an Informatıon Securıty Automatıon Model

This paper is, research and analysis of the development of an ınformatıon securıty automatıon model. Creating a set of highly interconnected tools, methods, and personnel used to collect, store, process, and release large volumes of data, multiple components, and data streams to achieve goals is one of the key tasks. Adaptability is one of the main qualities of an enterprise intrusion detection system that meets the specified requirements. This provides the ability to analyze data, generate knowledge based on it, and automatically change system configuration to block detected threats to information security. For this purpose, the directions of attacks aimed at breaching information security have been defined. The intrusion detection system is shown to be compatible with a special Petri net that models its operating process. In this case, the main goal was to show the set of conditions necessary for successful detection of the attack. If these conditions are present, then it can be said that the attack has been accurately detected, if they are absent or partially present, then it can be said that there is no attack. Taking into account what has been said, the graph-scheme of the activity model of the network modeling the intrusion detection system has been developed.