Abstract:The purpose of the article: conducting a system analysis of the requirements for the subsystem for preventing computer attacks on critical information infrastructure in order to substantiate the directions for further improved scientific and methodological apparatus for the full functioning of the subsystem for preventing computer attacks. Research method: theoretical and systematic analysis of the requirements of legal acts, scientific publications, protection technologies and means of their implementation in departmental systems for detecting and counteringcomputer attacks.The result obtained: the rationale for the need to build mechanisms for preventing computer attacks on critical information infrastructure objects and the requirements for the subsystem for preventing computer attacks was carried out, an approach was proposed to prevent computer attacks at the stages of reconnaissance by an attacker of critical information infrastructure objects, based on the introduction of a security event correlation mechanism with automatic adaptation to the analyzed information infrastructure and the functions it performs at the current time and a detailed specification of the correlation rules.Scope of the proposed approach: a subsystem for preventing computer attacks of departmental systems for detecting and countering computer attacks, which should identify and prevent attempts to conduct computer attacks on critical information infrastructure objects in advance.The scientific novelty consists in a comprehensive analysis of the need to build mechanisms for preventing computer attacks on critical information infrastructure objects, an analysis of the requirements for the computer attack prevention subsystem, its functions and means of implementation. It is shown that the functions of preventing computer attacks in domestic technical solutions are not fully implemented, and that there is a substitution of the concept of “subsystem for preventing computer attacks” by the concept of “control and technical measures”. It is substantiated that for the implementation of the functions of preventing computer attacks, there is a technological backlog in the form of a ready-made technology based on the technology for building SIEM systems. It is shown that there is a need to refine the scientific and methodological apparatus for implementing computer warning functions based on artificial intelligence methods and big data technologies.Contribution: Kotenko I.V. - analysis of the functionality of the subsystem for preventing computer attacks, setting the task and proposals for developing the functionality of the subsystem for preventing computer attacks on critical information infrastructure objects; Saenko I.B. - analysis of the subsystem for preventing computer attacks in the general context of the theory of information security, substantiation of the implementation of the functions of preventing computer attacks based on the technology of building SIEM systems and big data; Zakharchenko R.I. - analysis of technical solutions that ensure the implementation of the subsystem for preventing computer attacks, Velichko D.V. - an approach to detecting computer attacks at the stages of reconnaissance by an attacker of objects of critical information infrastructure. All authors participated in the writing of the article.

Objects of information security audit and directions of their verification

INFORMATION SECURITY AUDIT OF AN OPTOELECTRONIC DEVICE ENGINEERING ENTERPRISE

Development of a Method for Conducting an Audit of the Information Security System

TECHNICAL AUDIT OF SECURITY OF INFORMATION - TELECOMMUNICATION SYSTEMS OF ENTERPRISES

Internal audit in the enterprise economic security management: important aspects

Stages and procedures for forming a method to assess reliability of the information security systems in automated systems and main areas of its implementation in the normative-technical documentation

Basic Principles of Secure Information Systems

AUDIT PROCEDURES OVER FIXED ASSETS AT THE ENTERPRISE

STRATEGIC MANAGEMENT OF ENTERPRISE INFORMATION SECURITY: MODERN APPROACHES AND CHALLENGES

DESIGNING AN AUXILIARY AUTOMATED MANAGEMENT DECISION MAKING SYSTEM BASED ON INFORMATION SECURITY LEVEL ANALYSIS

The Formal Metabasis For Conformity Assessment of Information Security Software and Hardware

Subsystem for Prevention of Computer Attacks Against Objects of Critical Information Infrastructure: Analysis of Functioning and Implementation

Audit Methods for Financial Assets Information Disclosure

AUDIT OBJECTIVES OF FINANCIAL STATEMENTS, AUDIT RISK AND BASIC ASSESSMENT OFFINANCIAL STATEMENTS

MODERN INFORMATION SECURITY AND INFORMATION SECURITY

Business Activity-Oriented Security Model of Information Systems

Information component of ensuring the enterprise financial security

Basics of enterprise information security

STATUS AND DEVELOPMENT OF IT AUDIT IN THE CONDITIONS OF THE DIGITAL ECONOMY

State institution non-financial asset audit strategy development

SUBSTANTIATION OF THE DIRECTIONS OF ORGANIZATION OF INTERNAL AUDIT OF FIXED ASSETS OF AGRICULTURAL ENTERPRISES