Search

The concept of "information" is used very widely today. A large amount of information literally overwhelms people. Scientific knowledge, for example, according to experts, increases by 2 times every five years. Information has consumer qualities, as well as its owners. It is very important for the owner to keep secret commercially important information that allows him to successfully compete in the production market. This requires certain actions aimed at protecting confidential information.

This article reveals the concept of the threat of information in computer systems, displays possible sources of threats, and reveals information risks when working with computer systems and methods for assessing these threats, since in modern times, in a competitive environment, various actions are common, the purpose of which is to obtain confidential information in a variety of ways. ways, up to direct espionage with the use of modern technical means of reconnaissance. Therefore, the protection of information from unauthorized possession is of great importance.

Progress in the information technology sphere has also affected all types of life activity, bringing many positive aspects. It certainly brought all kinds of risk fronts that are associated with the protection of information. It is no secret to anyone that "Cloud technologies" constitute an integral part of the life of society in the 21st century. When information is provided with confidentiality, availability and integrity, information is secure. The methods of organizational and technical support of information security are: creation of systems and means to prevent UA (unauthorized access) to information that is being processed, improvement and use of information security tools, and identification of those that pose a danger to IT systems, programs and technical devices. modeling and use of information systems force the leaders of various organizations to find the latest ways to improve the efficiency of enterprises and organizations in the information field. "Cloud technologies" offer a full range of services related to information , such as: storage, search and transmission of information, ensuring its security and much more.

This article presents a statistical analysis of the vulnerabilities of modern software. The vulnerabilities were analyzed by error types and CVSS severity. The actual task of the security service of any organization is to protect against external and internal threats. During attacks, cybercriminals use means and methods to penetrate the infrastructure, anchor in it and hide the traces of attacks. Stages of attacks are carried out through the exploitation of both those already found by information security specialists, but not fixed in the attacked infrastructure, and using undetected vulnerabilities called "zero-day vulnerabilities." Statistical analysis of vulnerabilities will help information security specialists and software developers understand which testing and which errors need to spend more time. To reduce the amount of manual work, it is common practice for specialists to use automatic scanning tools. But vulnerability scanners have costs (false positives and false negatives), so the data obtained during the scan must be rechecked manually.