A statistical approach to the assessment of security threats information system

Abstract

The article considers issues of assessment of security threats to information systems. The analysis of existing approaches to the problem and requirements of the national standards. Noted the disadvantage of the classical approach to the assessment of possible threats. Proposed an alternative approach based on the use of statistics of incidents, in particular, proposed the creation of a single database of incidents.