METHOD FOR IDENTIFYING VULNERABLE VIRTUAL INFRASTRUCTURE CONFIGURATIONS BASED ON EQUIVALENT TRANSFORMATIONS OF YANOV SCHEMES
The article deals with additional objects of information protection for virtual infrastructure used in data processing centers. The main stages of the scenario of modern cyberattacks on data processing centers are revealed. Impracticality of using traditional information protection means for neutralizing vulnerabilities specific for virtual infrastructure objects is shown. Configuration files of virtual infrastructure objects, incorrect setting of which can lead to potential vulnerabilities, are presented. Currently, the lack of a complete list of secure settings for virtual infrastructure objects causes the presence of potential vulnerabilities in the virtual infrastructure configuration. To improve data center information security, this article suggests a method of detecting virtual infrastructure configuration vulnerabilities based on equivalent Yanov's schemes conversions.