METHODOLOGY FOR ASSESSING THE EXISTING LEVEL OF INFORMATION SECURITY OF THE EDUCATIONAL INFORMATION SYSTEM

Abstract

This article is devoted to the problem of assessing the level of information security of educational information systems in the context of digital transformation of society. It proposes a methodology based on expert information and a knowledge base consisting of fuzzy production rules to determine the level of information security of educational in formation systems. This approach is characterized by the ability to formalize qualitative assessments of the state of the system using the theory of fuzzy sets and assess the level of information security not only in real time, but also at the stage of their creation, develop ment and implementation. In addition, the presented technique involves the construction of a hierarchy of damage to the system, which can complicate the process of their iden tification. The application of the proposed methodology is illustrated by the example of calculating the existing level of information security and the level of destructive impact of damage to structural components of educational information systems and information security tools on the educational process within the framework of the system under study. The developed methodology and algorithms, compared with existing analogues, take into account the impact of damage to information resources and information security tools on each other within hierarchical levels, as well as qualitative expert assessments of damage conditions. The implementation of this methodology makes it possible to increase the effectiveness of the quality management process of educational information systems and the educational process as a whole.