Development of a method for monitoring anamous behavior of a user in a distributed information computer system: building a mathematical model

The article is devoted to the analysis of the problem of developing a monitoring system for anomalous user behavior in distributed information computing systems and the construction of a mathematical model of the developed system. The study analyzes modern methods for analyzing user behavior in the information system. The main attention is paid to the fact that the existing methods of protecting information systems have a number of shortcomings, which can be corrected when using the developed method, while the method provides protection from both internal and external violators. To develop a monitoring system for abnormal user behavior in distributed information computing systems, it is necessary to solve a number of problems: to analyze methods for monitoring user behavior in the information system; build an objective function and select criteria for assessing the quality of methods for analyzing anomalous user behavior in a distributed information computing system. The study used the methods of information security theory, automata theory, pattern recognition theory and the theory of computing systems design.