Abstract:The purpose of the article: conducting a system analysis of the requirements for the subsystem for preventing computer attacks on critical information infrastructure in order to substantiate the directions for further improved scientific and methodological apparatus for the full functioning of the subsystem for preventing computer attacks. Research method: theoretical and systematic analysis of the requirements of legal acts, scientific publications, protection technologies and means of their implementation in departmental systems for detecting and counteringcomputer attacks.The result obtained: the rationale for the need to build mechanisms for preventing computer attacks on critical information infrastructure objects and the requirements for the subsystem for preventing computer attacks was carried out, an approach was proposed to prevent computer attacks at the stages of reconnaissance by an attacker of critical information infrastructure objects, based on the introduction of a security event correlation mechanism with automatic adaptation to the analyzed information infrastructure and the functions it performs at the current time and a detailed specification of the correlation rules.Scope of the proposed approach: a subsystem for preventing computer attacks of departmental systems for detecting and countering computer attacks, which should identify and prevent attempts to conduct computer attacks on critical information infrastructure objects in advance.The scientific novelty consists in a comprehensive analysis of the need to build mechanisms for preventing computer attacks on critical information infrastructure objects, an analysis of the requirements for the computer attack prevention subsystem, its functions and means of implementation. It is shown that the functions of preventing computer attacks in domestic technical solutions are not fully implemented, and that there is a substitution of the concept of “subsystem for preventing computer attacks” by the concept of “control and technical measures”. It is substantiated that for the implementation of the functions of preventing computer attacks, there is a technological backlog in the form of a ready-made technology based on the technology for building SIEM systems. It is shown that there is a need to refine the scientific and methodological apparatus for implementing computer warning functions based on artificial intelligence methods and big data technologies.Contribution: Kotenko I.V. - analysis of the functionality of the subsystem for preventing computer attacks, setting the task and proposals for developing the functionality of the subsystem for preventing computer attacks on critical information infrastructure objects; Saenko I.B. - analysis of the subsystem for preventing computer attacks in the general context of the theory of information security, substantiation of the implementation of the functions of preventing computer attacks based on the technology of building SIEM systems and big data; Zakharchenko R.I. - analysis of technical solutions that ensure the implementation of the subsystem for preventing computer attacks, Velichko D.V. - an approach to detecting computer attacks at the stages of reconnaissance by an attacker of objects of critical information infrastructure. All authors participated in the writing of the article.

INFORMATION SECURITY AUDIT OF AN OPTOELECTRONIC DEVICE ENGINEERING ENTERPRISE

Development of a Method for Conducting an Audit of the Information Security System

Objects of information security audit and directions of their verification

TECHNICAL AUDIT OF SECURITY OF INFORMATION - TELECOMMUNICATION SYSTEMS OF ENTERPRISES

DESIGNING AN AUXILIARY AUTOMATED MANAGEMENT DECISION MAKING SYSTEM BASED ON INFORMATION SECURITY LEVEL ANALYSIS

Internal audit in the enterprise economic security management: important aspects

SMART HOME SYSTEM SECURITY RISK ASSESSMENT

STRATEGIC MANAGEMENT OF ENTERPRISE INFORMATION SECURITY: MODERN APPROACHES AND CHALLENGES

Internal audit and control in the system of economic security in conditions of digitalization of the economy

Stages and procedures for forming a method to assess reliability of the information security systems in automated systems and main areas of its implementation in the normative-technical documentation

FACTORS OF THE INFORMATION SUPPORT SYSTEM ORGANIZATION AT AN INDUSTRIAL ENTERPRISE

Subsystem for Prevention of Computer Attacks Against Objects of Critical Information Infrastructure: Analysis of Functioning and Implementation

The Role of Computerized Accounting Advanced Information Systems in The Efficiency and Effectiveness of Internal Audit

Security of IT/OT Convergence: Design and Implementation Challenges

An algorithm based on artificial intelligence for solving information security tasks

Improvement of the information security of the management system

A Review and Analysis of Automatic Optical Inspection and Quality Monitoring Methods in Electronics Industry

The need for effective information security awareness practices in Oman higher educational institutions

The impact and value of information system audit enterprises risk management influencing quality assurance and system optimization—a touch from supply chain domains

IoT device security audit tools: a comprehensive analysis and a layered architecture approach for addressing expanded security requirements

Information security index of an individual computer