QUESTIONS OF INDIRECT IMPACT MODERN INFORMATION LEAK PREVENTION SYSTEMS AND USER ACTION CONTROL SYSTEMS TO INFORMATION SECURITY

Abstract

Приводится обобщение функций DLP-систем с точки зрения их рассмотрения, как класса специального программного обеспечения поддержки администратора безопасности информационной системы. Предложен подход к рассмотрению указанных классов программного обеспечения с точки зрения моделей угроз указанных систем и нарушителя, эксплуатирующего недекларируемые возможности их функциональных модулей. The article provides a detailed analysis functionality of data loss prevention systems (DLP systems) and employee monitoring systems (EMS systems) in terms of their indirect impact on various aspects of information security in corporate information systems. The functions of DLP systems are summarized from the point of view of their consideration as special software class to support the information system security administrator. Introduce the conceptual model of employee monitoring systems and given their functions taxonomy variant as a similar class of special software. An approach is proposed to consider these classes of software from the point of view of threat models of these systems and the intruder exploiting the undeclared capabilities of their functional modules.