Method for management of information security in corporate networks

This work is concerned on development of method for management of information security in corporate networks. Proposed method is based on estimation of effectiveness for realized safeguards under financial constraints, and it uses quantitative risks values. Moreover, it works under ambiguous initial data and fuzzy and quality measures that contributes possibility of attacks and using protection vulnerability and defines damage. We use fuzzy logic and analytic hierarchy process to eliminate these difficulties and following safeguard effectiveness evaluation. Genetic algorithms are applied to solve optimization problem at the stage of risk management.