SSUGT SSUGT news SSUGT developed a “Service for assessing information security threats”

SSUGT developed a “Service for assessing information security threats”

25 November 2024

The Siberian State University of Geosystems and Technologies has developed a "Service for Assessing Information Security Threats". The service is designed to automatically generate a list of information security threats in accordance with the Methodological Document of the FSTEC of Russia dated 05.02.2021. The project mentor and at the same time the scientific supervisor is Associate Professor of the Information Security Department Valentin Valerievich Selifanov.

The developed program was applied during the development of the threat model by employees of:

FSTEC of Russia for the Siberian Federal District;
OOO "Rokada" (Omsk).

According to the developer, practice has shown that the time of the examination by employees of the above-mentioned organizations has decreased by approximately 90%, which indicates an increase in operator productivity and shows the effectiveness of software implementation. The number of errors associated with the human factor has significantly decreased.

This is relevant for all information systems for which it is necessary to build protection, since in order to build system protection, it is necessary to understand what needs to be protected from. This is what a threat model is for, which is a list of security threats with their description.

– Since this work was a diploma, I was engaged in the development during the 4th year. About three months were spent on a detailed analysis of the methodology, a logical understanding of the algorithm for anticipating information security threats and studying existing analogues on the market. The development itself also took about three months, after which testing in specialized organizations and adjusting the program in accordance with the results of testing. At the time of creating this service, I considered all the work to be quite difficult, but very interesting. And, having gone through all the stages of development, I understand that thanks to the project I was able to learn a lot, and now I apply this knowledge and skills in my current work,

– said developer Alexander Soldatov.