A Graph-Based Approach to Quantitative Assessment Information Security in Distributed Computing Systems

Disruption of the normal functioning of distributed computing systems due to computer attacks, the impact of malicious software and other methods of implementing unauthorized access to the information processed in them can lead to significant damage, sometimes not measurable in monetary terms. The problem of information protection in distributed computing systems related to critical infrastructure objects is especially relevant. Achieving the required level of information protection necessitates assessing the security of information in distributed computing systems at all stages of the life cycle. The paper presents an approach to quantitative assessment of the level of protection from computer attacks in in distributed computing systems, which ensures increased efficiency of security management by using a complex indicator that takes into account both the characteristics of the security breach process and the characteristics of the security process, as well as the use of a security graph that takes into account the real structure of in distributed computing system.