Структурно-функциональная модель имитации компьютерных атак на автоматизированные системы

The article presents a structural and functional model of computer attacks simulation on automated systems based on the system approach methodology and functional modeling IDEF0. This model allows to choose the most rational structure of the system for detection, prevention and elimination of computer attacks consequences, as well as to achieve the necessary level of reliability of simulation. The article describes the structure and process of functioning of the computer attack simulation subsystem, which is based on a formalized representation of the set of vulnerabilities of an automated system in the form of ordered sets of tags (identifiers) used to specify the procedures for forming and configuring a set of exploits used in simulating attacks on an automated system. It is concluded that the developed model makes it possible to increase the efficiency of the process of testing real as by simulating attacks based on automation of procedures for forming and configuring a set of exploits, to provide the necessary level of reliability of the process of simulating attacks by reproducing their various types, to create rational systems for detecting, preventing and eliminating the consequences of computer attacks on automated systems by expanding the area of synthesis of the structural and functional model and its formalized description of the desired level of detail.