for information technologies security evaluation for automated banking systems of Ukraine
Сергей Петрович Евсеев · Ukrainian Scientific Journal of Information Security · 2016
Modern automated banking systems (ABS) are daily exposed to attacks in cyberspace and in the different levels of technical protection of information systems. Particularly acute security issues not only of critical transactions and banking operations, but also protection the full range of banking information (BIn). Therefore, the invention of new sophisticated attacks by criminals and techniques to implement them on the automated banking systems necessitates further improvement of legal and methodological base, devoted to security assessment of information technologies (IT) ABS. Based on the scientific and technical analysis of the best international and national standards and guidelines in the field of information security management, in an article for the first time disclosed a completely new methodology for security evaluation of Ukraine's IT security ABS. A characteristic feature of the proposed methodology is that, in contrast to conventional approaches, the basis of security assessment of Ukraine's IT ABS is developed synergetic model of security threats BIn. The proposed methodology allows to consider all spectrum of the most pressing threats to cyber security, information security and information security of Ukraine's IT ABS and on the basis of the synergistic evaluation to design, implement and maintain secure IT ABS.