Інформаційна система управління подіями кібербезпеки для створення правил Firewall

Abstract

In order to reach the goal, in the thesis work, a detailed information about the actuality of the development of the software module of the cybersecurity control system was reviewed, a selection of software and technical aids for the creation of the module was primed, and a test was carried out with virtual information systems. The thesis presents a software module for automating the creation of rules for Firewall according to IDS indicators and rules defined by the security administrator. Keywords: IDS systems, cyber security, firewall, information systems, APT attacks, software module. The purpose of the thesis is to develop a program module for managing cybersecurity events. In order to achieve the goal in the thesis, the general questions about the urgency of the development of the software module for the management of the events of cybersecurity are considered, the choice of software and technical means for the creation of the module is substantiated, as well as its testing in the virtual information system has been conducted. In the thesis is presented a program automation module for creating rules for Firewall according to IDS indicators and rules defined by the security administrator.