Нотация и модификация методики выявления компьютерных инцидентов в соответствии с серией ГОСТ 59709-59712

Авторы и правообладатели:

• Павлычев А. В. , Дальневосточный федерального университета (Владивосток, Россия)

• 1. Цимбал В.Н. Анализ деятельности государственных органов Российской Федерации по противодействию киберпреступности // Вестник Моск. ун-та МВД России. – 2024. – № 4. – С. 183–191.
• 2. Martins B.F. Conceptual characterization of cybersecurity ontologies // IFIP Working Conference on The Practice of Enterprise Modeling. – Cham: Springer International Publishing, 2020. – P. 323–338.
• 3. Konev A. Functional Modeling as a Basis for Classifying Security Threats // 2022 International Siberian Conference on Control and Communications (SIBCON). – Tomsk, Russian Federation, IEEE, 2022. – P. 1–6.
• 4. Soldatov E. Incident Management System Modeling Issues // AISMA-2024: International Workshop on Advanced Information Security Management and Applications. ISMA 2024. Lecture Notes in Networks and Systems. – Cham: Springer Nature Switzerland, 2024. – Vol. 863. – P. 293–299.
• 5. Polishchuk O. The formation of a safety ecosystem in the context of ensuring the national homeland security / O. Polishchuk, Y. Bobrova, Y. Bobrov // International Journal of Safety and Security Engineering. – 2021. – Vol. 11, No. 6. – P. 683–689.
• 6. Fuentes-García M. Present and future of network security monitoring / M. Fuentes-García, J. Camacho, G. MaciáFernández // EEE Access. – 2021. – Vol. 9. – P. 112744–112760.
• 7. Ullah F. On the scalability of big data cyber security analytics systems / F. Ullah, M.A. Babar // Journal of Network and Computer Applications. – 2022. – Vol. 198. – P. 103294.
• 8. Naseer A. Real-time analytics, incident response process agility and enterprise cybersecurity performance: A contingent resource-based analysis // International Journal of Information Management. – 2021. – Vol. 59. – P. 102334.
• 9. Van der Kleij R. Developing decision support for cybersecurity threat and incident managers // Computers & Security. – 2022. – Vol. 113. – P. 102535.
• 10. Salem A.H. Advancing cybersecurity: a comprehensive review of AI-driven detection techniques // Journal of Big Data. – 2024. – Vol. 11, No. 1. – P. 105.
• 11. Ghurab M. A detailed analysis of benchmark datasets for network intrusion detection system // Asian Journal of Research in Computer Science. – 2021. – Vol. 7, No. 4. – P. 14–33.
• 12. Carvalho D.V. Machine learning interpretability: A survey on methods and metrics / D.V. Carvalho, E.M. Pereira, J.S. Cardoso // Electronics. – 2019. – Vol. 8, No. 8. – P. 832.
• 13. Husselman L. Anomaly Detection with Windows Event Logs: A comparative study between traditional and ML based approaches. – University of Zurich, 2024.
• 14. Павлычев А.В. Использование алгоритма машинного обучения Random Forest для выявления сложных компьютерных инцидентов / А.В. Павлычев, М.И. Стародубов, А.Д. Галимов // Вопросы кибербезопасности. – 2022. – № 5 (51). – С. 74–81.
• 15. Sattar S. Anomaly detection in encrypted network traffic using self-supervised learning / S. Sattar, S. Khan, M. Khan, A. Akhmediyarova, O. Mamyrbayev, D. Kassymova, D. Oralbekova, J. Alimkulova // Scientific Reports. – 2025. – Vol. 15, No. 1. – P. 26585.
• 16. Salman H.A. Random forest algorithm overview / H.A. Salman, A. Kalakech, A. Steiti // Babylonian Journal of Machine Learning. – 2024. – Vol. 2024. – P. 69–79.
• 17. Ayua S.I. Random forest ensemble machine learning model for early detection and prediction of weight category // Journal of Data Science and Intelligent Systems. – 2024. – Vol. 2, No. 4. – P. 233–240.