|
|
|
|
|
, |
|
|
- |
|
|
|
|
|
. |
Д1Ж |
. |
- |
|
|
: |
|
|
|
|
||
|
|
|
|
|
; |
|
|
|
1. |
|
|
|
|
; |
|
|
|
2. |
|
|
; |
|
|
|
|
|
3. |
|
|
, |
|
; |
|
|
|
4. |
|
; |
|
|
|
|
||
5. |
|
|
|
|
|
|
|
|
6. |
|
; |
|
|
; |
|
|
|
7. |
|
|
. |
|
|
|
|
|
8. |
|
|
. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
, |
|
. |
|
, |
|
- |
|
, |
|
|
. |
|
|
- |
|
|
|
|
|
. |
|
|||
|
, |
|
|
|
|
|
, |
|
|
|
|
|
|
. |
|
||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
. |
: |
|
- |
|
|
, |
|
|
|
, |
|
|
|
, |
, |
|
, |
, |
. |
. |
- |
|
|
|
|
|
||||
|
|
, |
|
|
, |
. |
|
, |
|
, |
|
|
, |
|
, |
|
- |
|
, |
|
|
|
. |
|
|
|
|
– |
|
|
, |
|
|
||
|
, |
, |
|
, |
, |
- |
||
|
|
|
|
|||||
|
|
|
|
, |
, |
|
. |
|
|
|
|
, |
, |
|
. |
, |
- |
|
|
, |
|
|
– |
. |
|
|
|
. |
|
|
: |
|
|
||
|
|
|
|
; |
|
|
||
1. |
|
|
|
|
|
|
|
|
2. |
, |
|
|
. |
; |
|
|
|
3. |
|
|
|
|
. |
|
||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
. |
– |
|
|
, |
, |
|
|
|
Д3Ж. |
|
|
|
|
. |
|
|
|
, |
|
- |
|
|
|
|
|
, |
|
. |
|
|
|
|
|
|
|
|
||
|
|
|
|
|
, |
, |
, |
|
|
|
. |
|
|
|
|
|
|
|
|
|
|
|
. |
|
|
|
|
– |
|
|
|
|
. |
- |
|
|
|
. |
|
|
|
|||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
86 |
|
|
|
, |
|
|
|
|
|
( |
), |
- |
, |
|
|
|
. |
|
|
|
|
, |
|
|
, |
, |
|
|
||
|
|
|
|
|
|
|||
. |
|
|
|
|
|
, |
|
|
, |
|
|
, |
. |
|
|
|
|
|
, |
|
|
, |
|
, |
|
, |
|
, |
|
. |
, |
|
|
. |
, |
|
|
|
|
|
|
|
||
, |
|
, |
, |
, |
|
|
: |
- |
|
|
|
[4]. |
|
||||
|
|
|
|
|
|
|
. |
|
|
|
|
|
, |
|
|
, |
- |
|
|
|
|
|
|
|
||
|
|
|
- |
. |
|
|
, |
- |
, |
|
|
, |
|
|
|
|
|
, |
|
|
|
. |
|
|
|
- |
|
|
|
|
|
|
|
|
|
|
, |
|
|
|
|
|
. |
- |
|
|
|
|
|
|
|
|
|
|
, |
, |
|
|
|
|
. |
- |
|
|
|
|
|
|
|
. |
|
|
|
– |
|
|
|
, |
, |
- |
|
|
|
|
, |
|
|
. |
. |
|
|
|
|
|
|
|
||
|
|
|
|
|
|
|
. |
|
|
|
|
|
|
|
|
. |
- |
|
, |
|
|
, |
|
|
, |
. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
. |
, |
|
|
|
|
, |
|
|
|
, |
|
|
|
. |
|
|
|
|
- |
|
Д5Ж |
|
|
|
|
. |
|
|
|
|
|
|
|
, |
|
||
|
|
|
|
, |
|
|
- |
|
|
|
|
|
|
|
|
||
. |
|
|
|
|
|
|
: |
- |
, |
, |
|
. |
( |
|
|
) |
|
, |
|
|
|
|
, |
- |
||
|
|
|
. |
|
|
|||
|
|
|
, |
|
|
, |
- |
|
|
|
|
|
|
|
|||
|
. |
|
, |
|
|
|
|
|
|
|
|
. |
|
|
|
, |
- |
|
, |
|
|
, |
|
|
. |
|
|
|
|
|
|
|
|||
|
, |
|
, |
|
- |
, |
, |
- |
|
. . |
|
|
|
|
|
|
. |
87
|
, |
|
|
|
. |
|
|
|
|
|
, |
. |
- |
|
|
|
|
|
||
. |
, |
|
|
|
|
- |
|
|
. |
|
|
|
- |
|
, |
, |
, « |
». |
|
, |
|
|
- |
|
|
|
|
. |
|
|
|
|
|
- |
, |
|
|
|
|
- |
|
. |
|
|
, |
, |
||
|
|
|
|
|||
. . |
Д5Ж |
|
|
|
|
- |
. |
|
|
|
, |
|
- |
|
|
|
|
, |
- |
|
|
|
|
|
CASE- |
||
|
|
|
, |
|
|
- |
|
, |
|
|
, |
|
: CRAMM, |
RiskWatch, |
, |
MethodWare, |
|
|
. . - |
|
|
CRAMM |
. |
|
|
|
- |
|
|
|
|
|
||
, |
1985 ., |
|
|
|
|
- |
|
|
|
|
|
||
[6]. |
|
CRAMM |
|
|
, |
|
|
|
. |
|
- |
||
|
|
|
|
|
||
CRAMM |
|
|
|
|
. |
- |
|
|
|
|
|
|
|
: |
; |
|
|
|
|
|
1. |
; |
|
|
|
|
|
2. |
|
|
|
|
|
|
3. |
|
; |
|
|
|
|
4. |
|
; |
|
|
|
|
5. |
|
. |
|
|
|
: |
|
|
CRAMM |
|
|
||
1. |
; |
CRAMM |
|
|
|
- |
|
CRAMM – |
|
, |
- |
||
2. |
|
|
||||
|
|
CRAMM |
/ |
; |
|
|
3. |
, |
|
; |
|
|
|
|
|
|
|
|
||
4.CRAMM |
|
|
|
|
|
|
; |
|
|
|
CRAMM |
|
- |
5. |
|
|
|
|
||
, |
, |
CRAMM |
|
|
; |
; |
6. |
|
|
|
. |
||
7. |
|
|
|
|
|
|
|
OCTAVE (OЩОЫКЭТШЧКХХв |
CЫТЭТМКХ TСЫОКЭ, AЬЬОЭ, Кnd Vulnerability |
||||
Evaluation) |
|
|
|
, |
« |
- |
, |
|
» Д7Ж. |
|
|
|
|
|
|
88 |
|
|
|
|
|
|
|
, |
|
|
, |
|
|
- |
. |
|
, |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
||
– |
|
|
|
|
|
. |
, |
|
- |
|
|
|
|
|
|
|
« |
|
|
|
FRAP (Facilitated Risk Analysis Process |
|
|
|
|
||||
|
») Д7Ж, |
|
|
|
|
Peltier and Associates, |
|||
|
|
|
, |
|
|
|
|
|
. |
, |
|
|
. |
. |
|
|
|
|
- |
|
|
|
|
|
|
|
|
||
, |
|
MethodWare |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
RiskAdvisor Д8Ж. |
|
. |
|
|
|
|
|
|
- |
|
|
AЮЬЭЫКХТКЧ/NОаГОКХКЧН RТЬФ |
MКЧКРОЦОЧЭ |
||||||
|
|
|
|||||||
SЭКЧНКЫН (AS/NГS 4360:1999) |
|
|
|
ISO 17799. |
, |
|
|||
|
, |
, |
. |
|
|
|
|
– |
|
|
|
|
|
|
|
||||
|
, |
|
, |
|
|
|
|
|
, |
|
, |
|
|
|
|
|
. |
|
|
|
. |
– |
, |
, |
|
|
, |
|
|
|
|
|
|
|
|
|
|||
|
|
|
. |
|
|
|
|
|
|
|
|
|
RiskWatch Д7Ж |
|
|
|
|
|
|
|
|
(ROI). |
|
|
|
|
|
. |
- |
|
|
|
|
|
|
|
|
||
|
, |
|
, |
|
|
|
|
|
- |
|
|
, |
, |
|
|
|
. |
|
|
|
|
« |
» Д9Ж, |
|
|
|
|
|
Digi- |
talSecurity, |
|
, |
|
|
|
|
|
|
- |
|
|
|
« |
|
», |
|
|
|
. |
|
|
: |
|
|
|
|
, |
||
|
, |
|
, |
|
|
, |
|
||
|
|
|
|
|
|
|
|||
|
, |
|
|
|
|
|
( |
|
- |
, |
|
, |
) |
. |
. |
|
, |
|
|
, |
|
. |
|
|
, |
|
|
|
|
|
|
|
|
|
|
|
. |
|
|
|
|
|
|
|
|
|
|
|
|
. |
« |
» Д10Ж, |
|
|
: « |
|
» |
« |
- |
|
|
|
|
- |
- |
||||
». « |
- |
» |
|
, |
|
|
|
|
|
. « |
|
» |
|
|
|
|
|
- |
|
- |
|
|
|
|
|
|
|||
|
|
. |
|
|
|
|
|
|
|
89
, |
- |
, |
,
CASE- ,
.
1. |
, . . |
|
|
|
|
/ . . |
, . . |
|
// |
- |
|
III |
, |
|
|
|
|
|
. – |
: |
. |
: |
, |
|
|
- |
|
|
|
|
|||||
2011. – . 75 – 80. |
|
|
|
|
|
|
|
|
|
|
|
2. |
, . . |
|
|
|
|
|
|
Д |
|
|
- |
Ж / . . |
// |
|
|
|
|
« |
|
|
|
|
- |
|
». – 2015. – №1. – |
|
|
: СЭЭЩЬ://ааа.ОНЮ-СОЫКХН.ЫЮ/ЩНП/2015/1/25.ЩНП ( |
- |
||||||
|
: 09.09.2016). |
|
|
|
|
|
|
|
|
|
|
3. |
, . . |
|
|
|
|
|
|
|
|
|
- |
|
/ . . |
, . . |
// |
|
|
|
|
|
|
||
|
|
|
|
: |
|
|
БIV |
|
|
|
- |
|
|
. – |
.: |
. |
, 2011. – |
. 45 – 48. |
|
|
|
|
|
4. |
, . . |
- |
|
|
/ . . |
. – |
.: |
: |
|
, 2008. – |
|
232 . |
, . . |
|
|
|
|
|
|
|
Д |
- |
|
5. |
|
|
|
|
|
|
|
||||
|
Ж / . . |
// |
|
|
|
|
|
|
|
. – |
|
2014. – № 3. – |
|
: http://ekonomika.snau-ФК.ЫЮ/2014/03/3966 ( |
|
|
: |
||||||
12.11.2015). |
, . . |
|
|
|
|
|
|
|
|
|
|
6. |
|
|
|
|
|
|
|
|
|
||
Д |
|
Ж / . . |
|
|
, . . |
// ITManager. – 2003. – №3. – |
|
||||
: СЭЭЩ://МТЭПШЫЮЦ.ЫЮ/ЬОМЮЫТЭв/КЫЭТМХОЬ/ЫТЬФ/ ( |
|
: 28.07.2010). |
|
|
|
||||||
7. |
, . . |
|
|
|
|
: |
|
|
/ . . |
||
. – |
.: |
- |
. |
- |
. – 2014. – 322 . |
|
|
|
|
|
|
8. |
, . . |
MОЭСШНАКЫО Д |
|
Ж |
/ . . |
|
, . . |
||||
. – |
|
: http://m.cnews.ru/reviews/free/security2004/index.shtml ( |
|
- |
|||||||
: 28.07.2010). |
, . . |
|
|
|
|
|
|
|
|
- |
|
9. |
|
|
|
|
|
|
|
|
|
||
|
|
Д |
|
|
Ж / |
. . |
|
// – |
|
|
: |
СЭЭЩ://МТЭПШЫЮЦ.ЫЮ/ЩЫШНЮМЭЬ/НЬОМ/КХРШ/ ( |
|
|
: 28.07.2010). |
|
|
|
|
||||
10. |
, . . |
|
|
|
|
|
|
|
|
|
- |
« |
» Д |
|
|
Ж / . . |
|
, . . |
. – |
|
|
: |
|
http://emag.iis.ru/arc/infosoc/emag.nsf/BPA/5b998f309fa7de60c3256d57004031 ( |
|
|
: |
||||||||
28.07.2010). |
|
|
|
|
|
|
|
|
|
|
|
90