The application of mathematical programming for solving the problem of designing the protection system of the object of critical infrastructure

The possibility and practicability of using integer mathematical programming for solving problems of designing an information protection system for an object of a critical information infrastructure and placing protection tools on the components of this object is investigated. A mathematical model was developed, in which, based on FSTEC order No. 239, sets of measures are formed for each component of the object of a critical information infrastructure, which must be performed, and for each protection tool, sets of measures that are performed by them. In the mathematical model, constraints are set, according to which each measure that is relevant for each component of the object’s network must be performed by at least one mean of protection that is installed on this component. In addition, resource limits are set - the amount of RAM and disk space. The objective function of the model comes down to minimizing the cost of security tools while implementing all security measures for all components of the object. The mathematical model was implemented in Python 3.6 using the Docplex library. The results of the computational experiment indicate that the proposed method allows to obtain a set of protection tools that fully fulfill the necessary measures with minimizing costs, that is, optimal.