Russian Federation
The article discusses the problem of assessing threats to the information security of higher education institutions, taking into account the specifics of the educational process. A threat assessment model based on the analysis of data flows between participants in educational activities is proposed. The classification of the university's information resources and the identification of key data flows at various stages of the educational process are carried out. The systematization of external and internal threats, including threats specific to the educational environment, has been carried out. A methodology has been developed for calculating integral risk indicators, taking into account the criticality of assets, vulnerability of channels, the likelihood of threats and seasonal factors. Testing of the model using the example of the interim assessment process has confirmed its ability to identify critical points that are not obvious with traditional approaches. Based on the modeling results, organizational and technical recommendations are formulated to improve the security of the university's information resources.
information security, threat assessment, data flows, educational process, university, risk analysis, information protection, personal data, threat modeling, information resources
1. Arapov, D. V. Avtomatizirovannaya mobil'naya sistema prinyatiya resheniy dlya ispol'zovaniya v special'noy medicine / D. V. Arapov, V. A. Kuricyn, S. A. Skorobogatov // Modelirovanie sistem i processov. – 2024. – T. 17, № 3. – S. 7-16. – DOIhttps://doi.org/10.12737/2219-0767-2024-5-13. – EDN CMPAPT.
2. Informacionnoe obespechenie dlya ocenki ugroz informacionnoy bezopasnosti kiberfizicheskih sistem / Imad El' Abed, K. A. Radkevich, A. N. Solov'ev, S. I. Polovenya // Problemy infokommunikaciy. – 2021. – № 2(14). – S. 91-98. – EDN HIWHIQ.
3. Hlebnikov, M. M. Razrabotka i testirovanie algoritma ocenki informacionnoy bezopasnosti sistem "umnogo doma" na osnove kompleksnogo metoda ocenki ugroz / M. M. Hlebnikov // Vremya nauki: aktual'nye voprosy, dostizheniya i innovacii : sbornik statey V Mezhdunarodnoy nauchno-prakticheskoy konferencii, Penza, 10 fevralya 2025 goda. – Penza: Nauka i Prosveschenie (IP Gulyaev G.Yu.), 2025. – S. 42-45. – EDN KXUXMR.
4. Smolenceva, L. V. Ocenka ustoychivosti finansovyh informacionnyh sistem v kontekste suschestvuyuschih ugroz v kiberprostranstve / L. V. Smolenceva, A. S. Gareeva // Vestnik Universiteta upravleniya "TISBI". – 2024. – № 4. – S. 18-33. – EDN LXXCXS.
5. Regressionnyy analiz ocenki zagruzki platnogo otdeleniya stomatologicheskoy polikliniki / T. P. Novikova, A. A. Bodin, A. I. Zarevich // Nauchno-tehnicheskiy vestnik Povolzh'ya. – 2023. – № 3. – S. 77–80.
6. Zarevich A.I., Vegner E.V., Vintizenko I.I. Avtomatizirovannyy kompleks dlya diagnostiki impul'sov relyativistskogo SVCh-generatora // Pribory i tehnika eksperimenta. – 2004. – № 3. – S. 78-82.
7. Vliyanie vneshney svyazi rezonatorov na stabil'nost' i vyhodnuyu moschnost' relyativistskogo magnetrona / I. I. Vintizenko, V. I. Gusel'nikov, A. I. Zarevich, S. S. Novikov // Pis'ma po tehnicheskoy fizike. – 2003. – T. 29, № 4. – S. 294-296. DOI: https://doi.org/10.1134/1.1573295
8. Stroitel'naya mehanika v lesnom hozyaystve na osnove cifrovogo dvoynika / A. Zarevich, A. Poluektov, Yu. Sumina, k. t. n. Makarenko // Veb-konferenciya BIO. – 2024. – Tom 145. – S. 05005. – DOIhttps://doi.org/10.1051/bioconf/202414505005. – EDN PZLChH.
