Development of a Methodology for Assessing the Security of Information in Information Systems by Vulnerability Analysis Method

This research covers methods of vulnerability analysis used during information security evaluation in information systems. The object of the research is information systems. The subject is security evaluation of an information system using vulnerability analysis. The purpose of the study is improving the quality of information security evaluation in information systems by developing evaluation methodology taking relevant guidance documents of the regulator into account. During the research methodological regulations, existing international standards and methodologies of penetration testing were analyzed. The methodology of information security evaluation in information systems using vulnerability analysis was developed. The methodology meets the requirements of the regulator and unites the best local and international industry standards. This research also includes implementation of the methodology to an existing informatization object. The results of this study can be used in the process of attestation of information systems and in information security audit. The research paper contains 89 pages, 14 figures, 16 tables, 36 sources and 1 appendix.