Adaptation of Network Traffic Routing Policy to Information Security and Network Protection Requirements

The paper examines the challenges of ensuring information security in the context of growing traffic volumes and the complexity of topologies of distributed information and communication systems. The necessity of adapting the routing policy to the current cybersecurity requirements, considering the risks of targeted attacks and anomalous activity, is substantiated. The limitations of traditional technical security tools that are ineffective in a dynamic digital environment are analyzed A formalized approach to building an adaptive routing policy that integrates mathematical modeling, risk-based metrics, ISO/IEC 27033, 15408, and NIST SP 800-207 standards, as well as software-defined networking technologies and telemetry protocols (NetFlow, sFlow) is proposed. The architecture of an automated routing system that can adapt to real-time changes in the threat environment has been developed. The system provides context-dependent control of data flows, increases the level of cyber resilience of the network, and implements the principles of the Zero Trust Architecture (ZTA). The results obtained can be used to protect critical information systems in both the corporate and public sectors.