Optimization tasks related to quantifying the security level based on vulnerability analysis of automated systems
Year: 2026
Type: article
Abstract: Objective . The article discusses the problem of quantifying the level of security of automated systems of internal affairs bodies (AS) in the context of a constant increase in the number of identified vulnerabilities and limited resources spent on their elimination. An analysis of approaches to assessing the security of information systems is conducted, and their limitations associated with the lack of a formalized accounting of resource constraints and relationships between vulnerabilities are shown. Method . A mathematical apparatus based on a set of optimization models is proposed. Three tasks are considered: minimizing the likelihood of exploiting system vulnerabilities by selecting the optimal elements of the AS control system; selecting the most vulnerable elements for priority verification; selecting a set of vulnerability mitigation tools, taking into account their cost and error tolerance. Dynamic programming and optimization methods were applied. Result . The results of the computational experiment on model data demonstrate the effectiveness of the proposed approach, which makes it possible to move from "greedy" algorithms for eliminating vulnerabilities to optimal security strategies. Joint solution of optimization problems ensures rational allocation of resources and reduction of the probability of vulnerabilities under time and cost constraints. Conclusion . The developed method and models can be used as a basis for practical mechanisms for managing the security of ATS automated systems. The application of the proposed approach opens up the prospect of integrating quantitative methods into the assessment processes and increasing the level of security of automated law enforcement systems.
Authors: A. O. Efimov, E. A. Rogozin
Institution: Voronezh Institute of Ministry of Internal Affairs
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: diamond
OpenAlex ID: W7160036367