Approach to information security control of complex computer networks

This research considers a structure of metrics enabling estimation the information security status in a complex computer network. The structure under consideration consists of 4 layers: integral layer, subnet layer, segment layer and host layer. Each layer contains a set of metrics reflecting particular aspects of the network functioning on this layer. The process of information security management consists in selecting the subset of metrics according to a specific management task, monitoring and forecasting the metrics and applying protective measures.