ANALYSIS AND RISK MANAGEMENT OF ICS INFORMATION SECURITY RISKS BASED ON COGNITIVE MODELING
The paper considers the problem of optimizing cognitive model parameters in the analysis of information security risks of industrial control systems (ICS), reflecting the optimal distribution of costs for the realization, implementation, and maintenance of countermeasures, taking into account their functional limitations. A genetic algorithm for optimizing the weight coefficients of cognitive models is used, which makes it possible to determine the optimal configurations of protection measures in the process of assessing ICS information security risks under the conditions of complex multi-step attacks. On the example of the oil delivery ICS and receipt point, the optimization of the countermeasure configuration is carried out to select the most effective options for the allocation of resources of means and information security systems to minimize information security risks. The proposed approach enabled the reduction of information security risk assessment by 85%, increase the assessment of the countermeasure operating efficiency, and reduce the assessment of the countermeasure operating cost. Analysis of the correlation between the obtained information security risk assessments within the allocated ICS zones and the costs of measures to reduce them helps to determine the mechanisms for managing the security of the system target resources and maintain its required level of security as well as to assess the costs required for the integration and maintenance of countermeasures. The result testifies to the effectiveness of the proposed approach to optimizing the configuration of the selected countermeasures with due regard for the multicriteria risk optimization and assessing the economic aspects of ensuring the information security of the object.