Analysis and management of information security risks using cognitive modeling technology

Abstract: The issues of applying the cognitive modeling technology to solve the problems of information risks analysis and management are discussed. The brief information related to the methodology of fuzzy cognitive maps (FCM) construction is presented. On the example of a virus attack and building an antivirus system, the main stages of cognitive analysis are considered: generating a set of FCM concepts and links, analysis of FCM stability and selection of FCM links weights, numerical evaluation of risk (damage) from the threat action for different variants of countermeasures implementation for information protection. Based on the obtained computer experiments results the recommendations for the further research are formulated.

Keywords: information security, information risks management, fuzzy cognitive map, stability