Analysis of internal threats to information security of enterprises

Authors: Gluhov N. I., Nasedkin P. N.

Annotation: In this work the authors analyze the internal threats to information security. The article provides the research results obtained by analyzing the threats related to the information losses and presents a new approach to estimate possible damage to an enterprise by considering an ontological model of interrelation of basic concepts. Based on the ontological model the generalized formula to estimate a potential damage to an enterprise has been developed. This formula reflects the dependence of estimation of a potential damage on safety threats and their sources from the point of view of each information asset and information properties. In the work the main sources of threats, kinds of the information, expenses for the budget and basic problems in control and counteraction to internal threats of information safety are listed.

Keywords: threat sources, risks, ontological model, internal threat analysis, confidential information leaks