ANALYSIS OF THREATS AND VULNERABILITIES IN SECURE INFORMATION SYSTEMS

 

Vladislav G. Yarikov

Candidate of Sciences (Pedagogy), Associate Professor, Department of Methods for Teaching Mathematics and Physics, ICT,

Volgograd State Social and Pedagogical University
This email address is being protected from spambots. You need JavaScript enabled to view it.
Prosp. Lenina, 27, 400005 Volgograd, Russian Federation

 

Alexandra N. Panchenko

Student, Department of Information Security,

Volgograd State University
This email address is being protected from spambots. You need JavaScript enabled to view it.
Prosp. Universitetsky, 100, 400062 Volgograd, Russian Federation

 

Abstract. This article conducts a comprehensive analysis of threats and vulnerabilities within secure information systems, a critical issue exacerbated by the increasing pace of digitalization and the proliferation of sophisticated cyber threats. The study systematically examines the foundational aspects of information security, beginning with a classification of information systems based on their usage, licensing, and operational models. It further delineates a multi-layered defense strategy encompassing physical, network, application, and organizational levels to ensure robust protection. The core of the analysis focuses on comparing prominent threat assessment methodologies – OCTAVE, EBIOS, and STRIDE – highlighting their unique processes, applications, and inherent limitations for evaluating system risks and vulnerabilities. The research provides a detailed typology of threats, distinguishing between external and internal sources, and analyzes prevalent attack vectors, including viruses/malware, Denial-of-Service (DoS/DDoS) attacks, and complex Advanced Persistent Threats (APTs). The conclusion emphasizes the necessity of a continuous, adaptive, and multi-faceted security approach. It underscores that regular threat analysis, coupled with the ongoing refinement of protective measures and personnel training, is indispensable for maintaining data integrity and confidentiality in the evolving digital landscape.

 

Key words: cybersecurity, threat analysis, vulnerabilities, OCTAVE, EBIOS, STRIDE, DoS/DDoS, Advanced Persistent Threats.

 

This work is licensed under a Creative Commons Attribution 4.0 International License.