Year: 2021
Type: book-chapter
Abstract: The research shows how one of the crisis teams should determine the cause of an undesirable incident (vulnerabilities may be errors in software design and development (firmware), improper change of modes of operation of devices and programs, or failures in their work), assess vulnerabilities in information technology. Emphasis placed on assessing security vulnerabilities, which will allow companies to investigate and address vulnerabilities before they become threats. Types of cyber threats, methodology of their analysis analyzed and methods of vulnerability assessment described. It is determined that the main factor influencing the systematic monitoring and improvement of the evaluation methodology is the rapid change of technologies. The primary task of crisis teams is to identify vulnerabilities in the system that could lead to security breaches or other negative consequences if used. The vulnerability assessment examines potential threats, system vulnerabilities, and impacts to identify key vulnerabilities that need to be addresse. Identified key compromise indicators (IoCs) that indicate that an attack has occurred and can help you understand the type of attack and its source. An algorithm for detecting threats and complex solutions for their analysis proposed. The holistic vision of vulnerability assessment presented, which is demonstrated by the example of the SmartSheet platform. The main steps in vulnerability assessment are as follows: threat assessment, vulnerability assessment, assessment of the probability of impact on a particular situation, development of a recommendation, reassessment or rethinking of threats.
Authors: Ellana Molchanova, Oleh Ilarionov
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: bronze
OpenAlex ID: W4296868046