Model-based Information Security Management Systems Architecture

The representation of the architecture of an information security management system has been investigated. The peculiarities of how the organization, as an environment, influences its key concepts and properties have been demonstrated. This influence is reflected in the elements of connections, principles, and the evolution of the information security management system. Describing its architecture within a specific organization—considering the type, size, and nature of the organization—has been reduced to constructing a model from the perspective of stakeholders. To achieve this, it is proposed to use systems engineering based on a model, preceded by an analysis of its features and advantages. Secure system development patterns and extensions of the Unified Modeling Language, including UMLsec and SysML, have been discussed. Among these, SysML has been highlighted, and its practical application has been analyzed. Additionally, relational probabilistic models have been researched as alternatives. Further stereotypes of the SysML language have been identified.Moreover, a method for presenting and justifying the design of information security management systems, referred to as REISMSAD, has been proposed. Its use is oriented toward developing and documenting architectural decisions, as well as justifying the project's development within the organization. This approach has enabled the formulation of tasks for verifying the architectural decisions of information security management systems. As a result, it has become possible to apply formal methods based on labeled transition systems to solve these tasks. Consequently, achieving a unified representation of the architecture model of the information security management system has become feasible, primarily from the perspectives of various stakeholders. The language for modeling systems serves as the basis for such formalization. According to its graphical notation, an architecture element is represented as a block, along with its properties and the relationships between them.