METHOD FOR CONSTRUCTING A POTENTIAL CYBER ATTACK VECTOR USING SET THEORY

The rapid integration of information technologies into key sectors of human and state activity – including energy, transportation, defense, and the economy – enhances the efficiency of modern society. At the same time, the number and complexity of cyber threats are increasing, necessitating the continuous improvement of information security systems. However, upgrading existing information security systems does not guarantee an adequate level of protection due to the growing sophistication of attacks and inefficient use of available security tools. Most scientific research focuses on developing new attack detection methods, while the issue of attack prevention remains relatively underexplored. This article proposes a method for constructing a potential cyberattack vector, which enables evaluation of the effectiveness of an existing information security system or its optimization through resource redistribution. The method is based on constructing sets of system resources at each protection level, as well as the corresponding sets of vulnerabilities. A Boolean adjacency matrix is then created between these sets and analyzed to generate attack vectors. Two approaches to vector construction are considered: the first – through the most vulnerable resource, and the second – through the most widespread vulnerability. The combination of partial vectors across all levels yields a complete potential cyberattack vector. The application of this method allows for the identification of critical information security systems resources, the determination of universal or most vulnerable system components, and the development of strategies to enhance resilience — such as removing weak or redundant components, eliminating common vulnerabilities, and strengthening key nodes. The method has practical value for the design, testing, and improvement of information security systems, and also provides a foundation for further research aimed at accounting for vulnerability dynamics and adaptive adversary strategies.