Theoretical-Semantic Aspects of Integrated Information Systems Security Policy
Examines theoretical and semantic aspects of the integrated system for the protection of information systems based on business process models with specific components of protection. A systematic view on the Organization of the comprehensive protection of information systems currently associated with a business continuous approach that allows you to embed IP protection issues in the modern IT environment management methodology for enterprise. Trust protected resource are IP business processes and their continuous operation from the point of view of information security threats. It has been shown that the main difficulties implementing business process approach linked to the lack of formalisms that describe such weakly formalizuemye concept design process integrated system protection, as the quality of information security, threat, attacker, mechanisms and the object of protection, with the need to develop areas of preference, taking into account the subjective assessments of decision-makers. The objective function of the protection system appears, usually in the form of basic properties of security (confidentiality, integrity, availability, etc.), which are measured in linguistic scales and as a consequence are the bearers of a particular semantics. The semantics of the target function gives rise to uncertainty in the formation of areas of preference mechanisms and objects of protection. Basic security properties presented in linguistic fuzziness elements bring scales in the business process model and the formation of areas of preference mechanisms and objects of protection. It is shown that the semantics is characteristic of all mechanisms and objects of protection in the model business process approach to comprehensive protection and that the theoretical aspect involves the natural representation of fuzzy sets, representing the semantics of values of linguistic variables in terms of mathematical informatics. Analysis of theoretical-semantic aspects of a business process approach to IP protection allows you to justify the necessity of combining life cycles of information system and its complex system of protection.