Автоматизація процесів побудови та супроводу комплексних систем захисту інформації

Abstract

The abstract discusses the issues of creating and implementing comprehensive information protection systems (CIPS) in modern information and telecommunications systems (ITS). The relevance of the study is due to the rapid growth in the volume of data subject to protection in accordance with the requirements of ND TZI (regulatory documents of the technical information protection system) and the inadequacy of traditional ‘manual’ methods of building protection systems to the dynamics of modern cyber threats. The main shortcomings of the classical approach to creating CIS are analysed, including: the high labour intensity of developing project documentation, the significant influence of the human factor in configuring protection measures, the static nature of the security policies implemented, and the complexity of maintaining the current state of security after system certification. Particular attention is paid to the problem of ‘paper security,’ when the system formally meets the requirements but remains technically vulnerable due to configuration errors. A methodology for automating the stages of the ISMS life cycle by implementing Infrastructure as Code (IaC) and Security as Code (SaC) approaches is proposed. The possibility of using configuration management systems (e.g., Ansible, Chef, Puppet) for automated deployment of security policies is considered, which guarantees the identity of settings on all network nodes and eliminates administrator errors. The effectiveness of using the Security Content Automation Protocol (SCAP) for continuous monitoring of system compliance with established requirements was also investigated. It was substantiated that the transition from periodic manual control to automated monitoring allows maintaining the ISMS up to date in real time, significantly reduces the time required for preparation for state examination, and reduces the cost of operating the protection system.