RU2390839C1 - Method for centralised automatic setup, monitoring and analysing security of information systems and system for implementing said method - Google Patents

Abstract

FIELD: information technology.

SUBSTANCE: invention involves making standard templates and security policies; detecting contradictions in security policy rules; setting and fixing security configuration parametres in accordance with given security requirements; monitoring and analysis of meeting of security requirements; detection and description of security violations and their compositions related to parametre configurations; generating instructions for their elimination, elimination of detected violations by setting security parametre configurations. Centralisation, automation and remote execution of the said procedures simplifies the process of introducing and monitoring security of information systems, increases efficiency of detecting and correcting administration errors, cuts resource and labour inputs on maintaining information security.

EFFECT: more efficient maintenance of information security and improved manageability of information systems.

14 cl, 3 dwg

Description

The invention relates to computer technology, and in particular to information systems, and can be used to manage information security, carried out in an automated mode by centrally adjusting the values of security configuration parameters of the operating environments of information systems; remote fixing of values of configuration parameters of security of operational environments of information systems; automatic control and analysis of the security of current or pre-recorded system configurations and identification of security breaches caused by errors made during administration; as well as remote resolution of detected security breaches.

Known information security systems, for example, WO 02097587, G06F, publ. 2002-12-05; US2005246776, H04L 9/00; G06F 11/30; G06F 12/14; H04L 9/32, publ. 2005-11-03; EP 1784703, G06F 1/00; H04L 12/26; H04L 29/06, publ. 2007-05-16; GB 2440697, G06F 21/00, publ. 2008-02-06. The system described in WO 02097587 contains a set of modules for collecting system parameters, a security check module, as well as a set of information output units, network communication, component management and system security units.

The disadvantages of these systems are that they only perform fixed checks of system parameters, which makes it impossible to monitor the implementation of information security policies. In addition, the solutions presented in these patents are based on the principle of enumerating a fixed set of objects and system parameters. In this case, no analytical models or methods are used, as a result of which the influence of indirect parameter dependencies on the security of information systems is not taken into account, and, as a result, the causes of detected security violations are not identified and eliminated.

The basis of the invention is the creation of a method for centralized automated settings, control and analysis of the security of information systems and systems for its implementation, which include the creation and editing of standard security templates; creating and editing security policies; identification of contradictions in access control rules that make up security policies; interaction with software tools for controlling and managing access to the operating environment of the information system; setting and fixing security configuration parameters in accordance with security requirements (typical security templates built on the basis of recommendations for the safe configuration of the information system operating environment; rules for restricting access to security policies; fixed (template) safe states of the information system operating environment; effective system administration rules) ; monitoring and analyzing the compliance of existing and fixed security configuration settings with security requirements (standard security templates built on the basis of recommendations for the safe configuration of the information system operating environment; rules for restricting access to security policies; fixed (template) safe states of the information system operating environment; rules for effective system administration ); identification of security violations associated with configuration parameters (deviations from standard security templates; errors in administering system and user programs and resources made during the implementation of security policies; deviations from recorded (template) safe states of the information system operating environment; system management problems consisting in inefficient administration systems); determination of configuration parameters and their values that make up each identified security breach; generation of descriptions of detected security violations and instructions for their elimination; elimination of identified violations by adjusting security configuration parameters in accordance with the instructions that, due to centralization, automation and remote execution of procedures for setting, fixing, monitoring and analyzing security configuration parameters, can significantly simplify the implementation and monitoring of information systems security, increase the efficiency of detection and elimination administrative errors, reduce resource and labor costs for maintaining information security and thereby increase the effectiveness of information security and improve the manageability of information systems.

The solution to this problem is provided by the fact that in the method of centralized automated settings, control and analysis of the security of information systems, a standard security template is created on the basis of recommendations for safe basic configuration of the operating environment of the information system;

create a security policy based on security requirements that make up the rules for differentiating entities' access to objects;

at the same time, from each recommendation that constitutes a typical security template, a system security criterion is formed, presented in the form of tuples "Composition of security configuration parameters" or "Value of the security configuration parameter", describing the conditions under which the system is safe;

at the same time, from each rule of access control constituting a security policy, a system security criterion is formed, which is presented in the form of a tuple "Subject-object-access level" that describes the condition under which the system is safe;

in the access control rules of the created security policy, they search for contradictions in the specified levels of subjects' access to objects, taking into account the hierarchical structure of the subjects (relations "user groups - users") and the hierarchical structure of objects (relations "resource containers - resources") and in case of detection of contradictions form a description of the contradictions allowed when setting the rules for differentiating subjects' access to objects at different levels of the hierarchy of subjects and objects, and correct the rights l to differentiate access of the corresponding security policy, excluding conflicting rules or making changes to existing rules and repeating this procedure for all rules until the contradictions are completely eliminated;

from the set of created standard templates and security policies, choose a template or policy by which the security configuration settings should be configured, or against which the security configuration settings should be monitored, or system security should be analyzed;

when configuring security settings, they interact with the software for controlling and controlling access to the operating environment of the information system, set the values of security configuration settings in accordance with the selected standard template or security policy, and compile a security configuration report containing information about the security settings to be changed and about the results of setting their values;

when performing monitoring or analysis of security configuration parameters, they interact with standard software tools for access control and management of the operating environment of the information system and fix the composition and effective values of the current security configuration parameters, forming a fixed security state of the information system;

from the set of recorded security states of the information system, select the state at which the security configuration parameters should be monitored or the system security should be analyzed;

on the current or selected fixed state of security of the information system, monitor and analyze the implementation of security requirements: standard security templates built on the basis of recommendations for the safe configuration of the operating environment of the information system; rules for restricting access to security policies;

fixed (template) safe states of the operating environment of the information system; effective system administration rules;

in this case, in the case of monitoring the compliance of security configuration parameters with security requirements in terms of meeting the criteria presented in a typical security template in the form of tuples "Composition of security configuration parameters", if the current state is selected, then they interact with standard software tools for controlling and controlling access of the information environment systems fix the composition of the current security configuration parameters, or, if previously fixed with standing, then they extract the composition of the fixed security configuration parameters from it, and then compare the sets of the fixed security configuration parameters with those specified in the selected security template, identify their differences and, based on the results of the comparison, compile a security control report containing a description of the identified deviations from the typical security template in terms of composition safety configuration parameters and instructions for changing the composition of safety configuration parameters to eliminate Nia revealed deviations;

in this case, in the case of monitoring compliance of security configuration parameters with security requirements in terms of meeting the criteria presented in a standard security template in the form of tuples "Value of the security configuration parameter", if the current state is selected, then they interact with standard software tools for controlling and controlling the access of the information environment systems, fix the composition and values of the current configuration security settings, or, if previously selected If the security state is selected, then the composition and values of the fixed security configuration parameters are extracted from it, and then the sets of the fixed security configuration parameters are compared with those specified in the selected security template, and for the confirmed configuration parameters specified in the selected standard security template and recorded in the system, the set of configuration values are compared security settings with those specified in the selected template or in the security policy, reveal their differences I also compile a security control report containing a description of the identified deviations from the standard security template in terms of the composition and values of the security configuration parameters and instructions for changing the composition and values of the security configuration parameters to eliminate the identified deviations;

in this case, in the case of performing a security analysis of the system, they verify the compliance of the security configuration parameters with the security requirements in terms of meeting the criteria presented in the security policy in the form of tuples "Subject-object-access level", if the current state is selected for analysis, then they interact with standard software control and access control of the operating environment of the information system, fix the composition and values of the current configuration security settings, or, if a previously fixed state is selected, then the composition and values of the fixed security configuration parameters are extracted from it, and then the sets of the fixed security configuration parameters are compared with those specified in the selected security policy regarding the subsets of subjects and objects, are calculated for all confirmed subject-object pairs, specified in the selected security policy and recorded in the system, the current levels of subjects' access to objects, taking into account the impact on permissions access of all currently recorded security configuration parameters and their values and then compare the values of the calculated effective access levels with those indicated in the selected template or in the security policy, identifying their differences, fixing the composition and values of the configuration parameters that affected the access level deviations, and compiling an analysis report security containing a description of the identified errors in the administration of system and user programs and resources made during the implementation of the policy safely the composition, values of security configuration parameters and levels of subjects' access to objects, a list of security configuration parameters and their values that constitute detected violations, and instructions for changing the composition and values of security configuration parameters to eliminate detected violations and factors affecting access levels;

in this case, in the case of analyzing the compliance of the security configuration parameters with the fixed (template) safe state of the operating environment of the information system, if the current state is selected for analysis, they interact with standard software tools for monitoring and controlling access of the operating environment of the information system, recording the composition and values of the current configuration parameters security, or if a previously fixed state is selected, then the composition and values of cited security configuration parameters, then from the set of previously recorded security states of the information system, one more state is selected, which is defined as a fixed (template) safe state, and then the current security configuration parameters are compared with those specified in the fixed (template) safe state in terms of composition and values, calculate for all confirmed subject-object pairs indicated in the selected fixed (template) safe state and fixed in the system, the effective levels of subjects 'access to objects, taking into account the impact on access permissions of all current recorded security configuration parameters and their values, calculate the required levels of subjects' access to objects for the same subject-object pairs, taking into account the impact on access permissions of all configuration safety parameters and their values indicated in a fixed (template) safe state, computed calculated current and required access levels and a safety analysis report containing a description of the identified deviations from the recorded (template) safe states of the information system operating environment in terms of composition, values of security configuration parameters and access levels of subjects to objects, a list of security configuration parameters and their values that constitute detected violations, and instructions for changing the composition and values of security configuration parameters to eliminate identified deviations and factors of influence on access levels;

in this case, in the case of an analysis of compliance with the rules of effective administration of the information system, if the current state is selected for analysis, they interact with standard software tools for controlling and controlling access to the operating environment of the information system, fix the composition and values of the current security configuration parameters, or if a previously fixed state, then the composition and values of the fixed configuration security parameters are extracted from it, and the effect system administration efficiency and declare it to be the standard, and then control the occurrence of system management problems consisting in inefficient system administration, remotely interacting with standard software tools for controlling and controlling access to the operating environment of the information system, fixing the composition and values of the current security configuration parameters, evaluating them current system administration performance by comparing the administrators performance benchmark system with the current one, determining the numerical characteristics that reduce the effectiveness of system administration, and compiling a security analysis report containing a description of the system management problems consisting in ineffective system administration, a schedule of changes in the system administration efficiency over time, a list of numerical characteristics that reduce the efficiency, and recommendations for improving the efficiency of system administration;

in order to eliminate the detected security breaches, configure the security configuration parameters in accordance with the instructions generated in the security control reports or in the security analysis reports, and compile a security configuration report containing information about the modified security configuration parameters and the results of setting their values;

periodically repeat the above steps in the necessary sequence for setting, fixing, monitoring and analyzing security configuration parameters, compile a lot of reports on monitoring, analyzing and configuring security, thereby continuously ensuring the security of the information system.

The state of an information system is considered the whole set of security configuration parameters, namely, subjects, objects and their security attributes, the composition of which is determined by the type of operating environment of the information system. In general, security configuration is made up of security configuration settings such as users and user groups; file system elements (disks, directories, files, links), registry elements (sections, keys, parameters, links); kernel objects (tasks, processes, threads, drivers, synchronization objects, etc.); shared resources (directories, printers); software services; COM / DCOM objects; Directory service objects local and global system security policy settings; options and security settings for user and special software; configuration settings for network services; security attributes of subjects and objects (security identifiers, privileges of users and user groups, information about the owners of objects, lists of access rights, access labels and integrity, hierarchical distribution of subjects, objects, access rights, access labels and integrity).

Typical security templates are compiled on the basis of expert recommendations on safe basic configuration of system information resources of the corresponding operating environment (Windows, UNIX, etc.). Security policies extend the scope of standard security templates by accounting for user information resources in addition to system ones. Security policies are based on corporate requirements for access control and management for the information system, taking into account their implementation in the appropriate operating environment.

Each recommendation that makes up a standard security template forms a system security criterion, presented in the form of tuples "Composition of security configuration parameters" or "Value of the security configuration parameter", describing the security conditions of the system in the form of a set of configuration parameters or their values, respectively.

Each access control rule constituting a security policy forms a system security criterion, represented as a tuple "Subject-object-access level", which describes the relationship of the sets of subjects, objects and access levels set for them, during which the system is safe. When drafting a security policy, they search for inconsistencies in the specified levels of subjects' access to objects, determining in the set of “Subject-object-access level” tuples the presence of restrictions defined for one pair “subject-object”, but with different access levels, taking into account the hierarchical structure subjects (relations "user-user groups") and the hierarchical structure of objects (relations "resource-resource containers"), and to exclude detected contradictions, form a description of errors made when specifying avil restricting access of subjects to objects at different levels of the hierarchy of subjects and objects, and make the correction rules restricting access appropriate security policies, eliminating conflicting regulations or making changes to the existing rules, and repeating this procedure for all of the rules to the complete elimination of contradictions.

To configure and control the security carried out in accordance with the standard security template, the configuration parameters listed in the selected security template are enumerated, then iteratively interacting with the standard software for monitoring and controlling access of the operating environment of the information system for each of the listed parameters and, if settings, configure this configuration parameter of the system security, or, in the case of security control, fix it presence and current value.

Security policy settings are performed in the same way as settings according to standard security templates, except that the access levels specified in the security policy are configured as direct access rights, removing the remaining rights granted for each subject-object pair other security configuration settings and their values.

The setting for the fixed (template) safe state of the operating environment of the information system is carried out in the same way as the setting for the standard security template.

To analyze the security carried out in accordance with the security policy, to analyze the compliance of security configuration parameters with the fixed (template) safe state of the operating environment of the information system and to analyze compliance with the rules for effective administration of the information system, they interact with standard software tools for controlling and controlling access to the operating environment of the information system and record the current composition and values of all safety configuration parameters and.

A numerical indicator of the effectiveness of system administration is defined as the average number of access control records, i.e. masks of access rights, access labels and integrity set for users of the system. The change in this indicator is influenced by such configuration characteristics that change during the administration of the system, as the number and nesting of subjects (users, groups) and hierarchical objects (file system, registry).

The calculation of the level of access of the subject to the object is carried out by sequentially forming the set of rights available to the subject on the basis of direct access rights of the object specified for a particular subject, taking into account the rights that apply to hierarchies of subjects and objects, i.e. subject to inherited, group and direct permissions and prohibitions; rights corresponding to security configuration settings; rights corresponding to the values of the security configuration parameters; rights assigned to dependent objects in the information system; rights obtained from access and integrity tags.

To solve the technical problem, a system that implements a method of centralized automated settings, control and analysis of the security of information systems includes a control unit for configuration of security parameters and a central unit for monitoring and security analysis, which include

control modules for security configuration parameters that together form a control unit for security configuration parameters and, in addition to the function of collecting security configuration parameters, perform their configuration according to the specified composition and values;

a set of modules that form the central unit for monitoring and security analysis, including the network interaction and system security module, in addition to the information and control interface of the central unit with the control unit for configuring security parameters, i.e. with all active modules for managing security configuration parameters, which ensures integrity control of the system software, identification of control modules for security configuration parameters and protection of transmitted data;

the system management module, in addition to the function of integrating all the modules of the central unit and providing a user interface to the system operator, which determines the type of operating environment of the information system and connects the appropriate control model and access control of the operating environment, interactive interaction with the security requirements editing module, as well as cataloged storage of recorded states , security templates, security policies and generated reports;

a module for describing the model of control and access control of the operating environment, containing rules for calculating the level of access of the subject to the object based on the state of the operating environment for the corresponding type of operating environment;

a security requirements editing module designed to generate system security criteria by setting system security conditions, as well as searching, describing and correcting inconsistencies in the specified conditions, thereby forming a set of standard security templates and security policies used in setting up, monitoring and analyzing information security systems;

which are connected through the system management module to the security processor module, in addition to security verification functions, which calculate access levels on a variety of security configuration parameters, verify that the system’s security conditions are specified in the form of criteria from standard templates and security policies, compare fixed states, evaluate the effectiveness of system administration identification of security breaches and their compositions;

and with the reporting module, in addition to outputting the resulting information in the form of a report, additionally having feedback through the control module and the network interaction and security module of the system with configuration parameter management modules to configure security configuration parameters and correct detected security violations.

The proposed method and system is aimed at setting up, monitoring and analyzing security configuration parameters for all identifiable entities of the operating environment, their security attributes, system and software options and settings. The proposed method and system provides for the creation of arbitrary standard templates and security policies, on the basis of which settings, control and analysis of the security of information systems are performed. Security analysis employs a model of access control and management that corresponds to the type of operating environment of the information system, which allows supporting various systems by adapting the model without changing the configuration of the information system and the content of the proposed method and system. The proposed method and system, in addition to providing the results of the security analysis in the form of a description of the detected security breaches and a set of instructions that eliminate the detected breaches, allows you to configure security configuration settings, bringing them into line with security templates and policies or fixed (template) system states, and thereby Automatically detect and fix administrative errors of the following types: deviations from standard security templates; Administration errors of system and user programs and resources made during the implementation of security policies; deviations from the fixed (template) safe states of the operating environment of the information system; system management problems, consisting in its inefficient administration. Examples of resolved security breaches are changes in the composition of software available to users, initial user environment settings, running services and processes; change the user composition of groups; failure to comply with the basic security measures presented in the system in the form of standard security templates for various operating environments; deviations from a typical software configuration; implementation errors and deviations from security policy access control rules; redundancy and complexity of modifying security configuration parameters specified in the system for system and user information resources; the presence of unused (disabled) security features of access control software; low level (insufficiency) of protection determined by configuration parameters of access control software. Therefore, the proposed method and the system that implements it surpasses in many parameters the capabilities of modern solutions for setting up and analyzing security, which directly compare the sets of parameters of the information system and do not use any models and analysis methods.

The invention is illustrated using figures 1-3. Figure 1 presents a sequence diagram of the method of centralized automated settings, control and analysis of the security of information systems in terms of operations carried out according to the security template, security policy or a fixed (template) state of the system. Figure 2 shows the sequence diagram of the method of centralized automated settings, control and analysis of the security of information systems in terms of assessing the effectiveness of system administration. In figure 3. a modular diagram of a system that implements a method of centralized automated settings, control and analysis of the security of information systems is presented.

The main objective of the proposed method and system is the centralization and automation of the security management of information systems in terms of setting, monitoring, analyzing security configuration parameters and identifying security violations that are associated with administrative errors made in configuration parameters.

The main source of information system security violations is the huge number of vulnerabilities that violators use to allow unauthorized access or denial of service. Vulnerabilities arise due to errors made during the design, programming and administration of information systems. The most widespread are programming errors, which manufacturers regularly fix with the help of code updates (the so-called "patches", "update packages"). At the same time, statistics obtained by reputable organizations such as CERT and Secunia indicate that more than 20% of types of vulnerabilities are caused by erroneous actions of administrators and users. The essence of administration in the context of information security is to configure the security mechanisms of the information system, i.e. setting parameters affecting the confidentiality, integrity and accessibility of system and user information resources, the functioning of security equipment, applications and information systems in general. Many of these parameters that are configured during administration will be called configuration security settings. Such parameters include, for example, user privileges, group membership of users, access rights to files and directories. Errors made during the security setup are the causes of vulnerabilities in the security configuration settings, and, as a result, lead to security breaches in information systems.

The manifestation of security configuration parameters vulnerabilities is caused by non-compliance with security measures recommended by information security experts, developers of operating environments and software manufacturers; inconsistency and errors in the implementation of access control rules specified in security policies; deviation from the principle of effective administration of information systems; failure to follow a typical software configuration.

Vulnerabilities in security configuration settings cannot be resolved by updating software modules that correct coding errors or using additional security features that enhance the capabilities of regular access control and management mechanisms. To ensure the security of the maintained information system and the implementation of the corporate security policy, a qualified administrator must constantly analyze information about security breaches and follow current recommendations for maintaining information security, which is a non-trivial task, since it requires the prompt detection of security breaches, localization and re-setting of the parameters that caused them to appear . To do this, you must have in-depth knowledge about the features of the serviced information systems and security software, constantly analyze the values of a huge variety of configuration security parameters. For example, in the Windows operating environment, there are more than 30 types of application-level protection objects (user accounts, file system and registry objects, services, printers, etc.) and kernel level (processes, threads, synchronization objects, etc.) . For each protection object, a rights mask of 32 access bits is supported. In the file system and registry hierarchy, access to an object is determined not only by the direct rights assigned to the object, but also inherited from the container objects located higher in the hierarchy. In addition, privileges assigned to users and groups, as well as local and group security policy settings, affect accessibility. Thus, the number of possible significant combinations of security configuration parameters that require the administrator to constantly monitor and intervene amounts to many millions. Thus, for the administration of information systems, appropriate tools are needed that allow you to manage an impressive amount of security configuration settings.

The proposed method is carried out by performing the following actions (Fig.1-2).

Initially, security requirements are set for compliance with which tuning, monitoring or analysis of the security of an information system is performed. At the same time, the specified security requirements make up a standard security template, security policy, or a fixed (template) state of the system.

When creating a standard security template, they are based on recommendations for secure basic configuration of system information resources of the corresponding operating environment (for example, for Windows operating environments: Murugiah Souppaya, Karen Kent, Paul M. Johnson "Guidance for Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist "csrc.nist.gov/itsec/SP800-68-20051102.pdf$;" NSA Windows XP Security Guide Addendum "; www.nsa.gov/notices/notic00004.cfm?Address=/snac/os/winxp / NSA_Wi ndows_XP_Security_Guide_Addendum.pdf; "Microsoft Windows 2000 Network Architecture Guide"; www.nsa.gov/notices/notic00004.cfm?Address=/snac/os/win2k/w2k_net_arch_guide.pdf; "Windows Server 2003 Security Guide"; www. nsa.gov/notices/notic00004.cfm?Address=/snac/os/win2003/MSCG - 001R-2003. pdf; "Windows 2000 Security Hardening Guide" www.microsoft.com/downloads/details.aspx?FamilylD=15E83186-A2C8-4C8F-A9DO-A0201F639A56&DisplayLang=en; "Windows XP Security Hardening Guide" www.microsoft.com/Downloads/ details.aspx? familyid = 2D3E25BC-F434-4CC6-A5A7-09A8A229F118 & displaylang = en; "Windows 2003 Security Hardening Guide"; www.microsoft.com/technet/security/prodtech/windowsserver2003/w200 3hg / sgch00.mspx; Windows 2000 / XP / 2003 distribution,% systemdir% \ security \ templates; "Microsoft Windows Server 2003 operating system. Guidelines for the safe configuration and control of the certified version", http://altx-soft.ru/rbn_Server_2003_(Ent-St).pdf; "Microsoft Windows XP Professional Operating System. Guidelines for the Safe Configuration and Control of the Certified Version," www.altx.ru/po_rukovodstvo.pdf). At the same time, each recommendation that makes up a typical security template forms a system security criterion represented in the form of tuples "Composition of security configuration parameters" or "Value of the security configuration parameter" describing the security conditions of the system in the form of a set of configuration parameters or their values, respectively. Depending on what tasks a network node solves (a workstation or a server) and what operating environment is deployed on it, certain sets of recommendations are formulated for safe basic configuration of information resources. The structure of the system includes standard security templates for typical assignments of workstations and servers.

Security policies are based on corporate requirements for access control and management put forward to the information system, taking into account their implementation in the appropriate operating environment (Windows, UNIX, etc.). When creating security policies, they are based on security requirements that make up the rules for restricting the access of subjects to objects. Moreover, from each access control rule that makes up the security policy, a system security criterion is formed, which is presented in the form of a tuple "Subject-object-access level" that describes the condition under which the system is safe. Security policies extend the scope of standard security templates by accounting for user information resources in addition to system ones.

In the rules for access control of the created security policy, they search for contradictions in the specified levels of subjects' access to objects, taking into account the hierarchical structure of subjects (relations "user-user groups") and the hierarchical structure of objects (relations "resource-resource containers") and, if contradictions are detected form a description of errors made when defining the rules for differentiating subjects' access to objects at different levels of the hierarchy of subjects and objects, and also make corrections to the rules of Neighboring access the appropriate security policies, eliminating conflicting regulations or making changes to the existing rules, and repeating this procedure for all of the rules to the complete elimination of contradictions.

When setting security requirements in the form of a fixed (template) state of the system, they interact with standard software tools for controlling and controlling access to the operating environment of the information system and fix the composition of the current security configuration parameters and their effective values, forming a fixed security state of the information system. This action is repeated as many times as necessary for the required number of nodes of the information system, forming a set of fixed security states for each node. In this case, the state of the information system is considered the whole set of security configuration parameters, namely, subjects, objects and their security attributes, the composition of which is determined by the type of operating environment of the information system. In general, security configuration is made up of security configuration settings such as users and user groups; file system elements (disks, directories, files, links), registry elements (sections, keys, parameters, links); kernel objects (tasks, processes, threads, drivers, synchronization objects, etc.); shared resources (directories, printers); software services; COM / DCOM objects; Directory service objects local and global system security policy settings; options and security settings for user and special software; configuration settings for network services; security attributes of subjects and objects (security identifiers, privileges of users and user groups, information about the owners of objects, lists of access rights, access labels and integrity, hierarchical distribution of subjects, objects, access rights, access labels and integrity).

After that, the choice of a reference security configuration is performed, on which will be further configured, controlled or analyzed.

If the security requirements are formulated as a standard template, security policy or a fixed (template) state, then from the set of created standard templates and security policies, a template or policy is selected, according to the component criteria which must be configured, or for compliance with which configuration parameters should be monitored security, or system security should be analyzed.

When configuring security settings, they interact with the software for monitoring and access control of the operating environment of the information system, set the values of security configuration settings in accordance with the selected standard template or security policy, and compile a security configuration report containing information about the security settings to be changed and about the results of setting their values. At the same time, for the configuration carried out in accordance with a standard template or security policy, the configuration parameters listed in the selected template or security policy are enumerated, then iteratively interacting with the standard software tools for controlling and controlling access to the operating environment of the information system and configure This system security configuration parameter. At the same time, the access levels specified in the security policy are configured in the form of direct access rights, removing the remaining rights granted for each custom subject-object pair by other security configuration settings and their values. The setting for the fixed (template) safe state of the operating environment of the information system is carried out in the same way as the setting for the standard security template.

When performing monitoring or analysis of security configuration parameters, they either interact with standard software tools for controlling and controlling access to the operating environment of the information system and fix the composition of the current security configuration parameters and their effective values, forming a fixed security state of the information system; or from the set of previously recorded security states of the information system, select the state at which the security configuration parameters should be monitored or the security of the system should be analyzed.

At the same time, for security monitoring, carried out in accordance with a standard security template, the configuration parameters listed in the selected security template are enumerated, then iteratively interacting with the standard software for monitoring and controlling access of the operating environment of the information system for each of the listed parameters and recording its presence and present value.

To analyze the security carried out in accordance with the security policy, to analyze the compliance of security configuration parameters with the fixed (template) safe state of the operating environment of the information system and to analyze compliance with the rules for effective administration of the information system, they interact with standard software tools for controlling and controlling access to the operating environment of the information system and record the current composition and values of all safety configuration parameters and.

Then, at the current or selected fixed state of security of the information system, the following security requirements are monitored and analyzed as follows: standard security templates built on the basis of recommendations for the safe configuration of the operating environment of the information system; rules for restricting access to security policies; fixed (template) safe states of the operating environment of the information system; effective system administration rules.

In the case of monitoring the compliance of security configuration parameters with security requirements in terms of meeting the criteria presented in a standard security template in the form of tuples "Composition of security configuration parameters", if the current state is selected, they interact with standard software tools for controlling and controlling access to the operating environment of the information system, fix the composition of the current security configuration settings, or, if a previously committed state is selected, then retrieve and it contains the composition of the recorded security configuration parameters, then compares the sets of the recorded security configuration parameters with those specified in the selected security template, identifies their differences and compares the security monitoring report containing the description of the revealed deviations from the standard security template by the composition of the security configuration parameters and instructions to change the composition of security configuration settings to eliminate identified rejected d.

In the case of monitoring the compliance of security configuration parameters with security requirements in terms of meeting the criteria presented in a standard security template in the form of tuples "Value of the security configuration parameter", if the current state is selected, then they interact with standard software tools for controlling and controlling access to the operating environment of the information system, fix composition and values of the current configuration safety parameters, or, if a previously fixed state is selected, t about, the composition and values of the fixed security configuration parameters are extracted from it and then the sets of the fixed security configuration parameters are compared with those indicated in the selected security template, and for the confirmed configuration parameters specified in the selected standard security template and recorded in the system, the multiple values of the security configuration parameters are compared with the indicated in the selected security template, identify their differences and compile a security monitoring report Nost, containing a description of the revealed deviations from the typical security template on the composition and the values of the configuration of security settings and to change the composition of the instructions and configuration of security settings to address the identified deviations.

In the case of a security analysis, the systems verify that the security configuration parameters meet the security requirements in terms of meeting the criteria presented in the security policy in the form of tuples "Subject-object-access level". Moreover, if the current state is selected for analysis, then they interact with standard software tools for controlling and controlling access of the operating environment of the information system, fix the composition and values of the current configuration security parameters, or, if a previously fixed state is selected, then the composition and values of the fixed configuration are extracted from it security settings and then compare the set of fixed security configuration settings with those specified in the selected security policy The differences in the subsets of subjects and objects are calculated for all confirmed subject-object pairs specified in the selected security policy and recorded in the system, the effective access levels of the subjects to the objects, taking into account the impact on access permissions of all current recorded security configuration parameters and their values and then compare the values of the calculated effective access levels with those indicated in the selected security policy, identifying their differences, fixing the composition and values of the configuration parameters that served as factors influencing the deviations of access levels, and compiling a security analysis report containing a description of identified errors in the administration of system and user programs and resources made during the implementation of the security policy, in terms of composition, values of security configuration parameters and levels of subjects' access to objects, a list of configuration safety parameters and their values that constitute the identified violations, and instructions for changing the composition of configuration pairs ters of security and their values for the elimination of violations and the factors of influence on the access levels.

In this case, the calculation of the level of access of the subject to the object is carried out by sequentially forming the set of rights available to the subject on the basis of direct access rights of the object set for a particular subject, taking into account the rights that apply to hierarchies of subjects and objects, i.e. subject to inherited, group and direct permissions and prohibitions; rights corresponding to security configuration settings; rights corresponding to the values of the security configuration parameters; rights assigned to dependent objects in the information system; rights obtained from access and integrity tags.

In the case of analyzing the compliance of security configuration parameters with the fixed (template) safe state of the operating environment of the information system, if the current state is selected for analysis, they interact with standard software tools for controlling and controlling access of the operating environment of the information system, fix the composition and values of the current security configuration parameters, or if a previously fixed state is selected, then the composition and values of the fixed configuration are extracted from it ionic safety parameters, then from the set of previously recorded security states of the information system, one more state is selected, which is defined as a fixed (template) safe state, and then the current security configuration parameters are compared with those specified in the fixed (template) safe state according to the composition and values, calculate for all confirmed subject-object pairs indicated in the selected fixed (template) safe state and recorded in the system Moreover, the current levels of subjects 'access to objects, taking into account the effect on access permissions of all current recorded security configuration parameters and their values, calculate the required levels of subjects' access to objects for the same subject-object pairs, taking into account the effect on access permissions of all security configuration parameters and their values indicated in a fixed (template) safe state, compare the calculated effective and required access levels and compile a safety analysis report a containment containing a description of deviations from the fixed (template) safe states of the information system operating environment in terms of composition, values of security configuration parameters and access levels of subjects to objects, a list of security configuration parameters and their values that constitute detected violations, and instructions for changing the composition and values security configuration parameters to eliminate identified deviations and factors affecting access levels.

In the case of analyzing compliance with the rules of effective administration of the information system, if the current state is selected for analysis, then they interact with standard software tools for controlling and controlling access to the operating environment of the information system, fix the composition and values of the current security configuration parameters, or, if a previously committed state is selected, then extract the composition and values of the fixed security configuration parameters from it, evaluate the effectiveness of administratively system and declare it a reference, and then monitor the occurrence of system management problems consisting in inefficient system administration, remotely interacting with standard software tools for controlling and controlling access of the operating environment of the information system, fixing the composition and values of the current security configuration parameters, evaluating the current ones system administration efficiency by comparing the reference value of system administration efficiency with the current one, limiting numerical characteristics that reduce the efficiency of system administration, and compiling a security analysis report containing a description of system management problems that involve inefficient system administration, a schedule for changing the effectiveness of system administration over time, a list of numerical characteristics that reduce efficiency, and recommendations for improving administration efficiency system.

Moreover, a numerical indicator of the effectiveness of system administration is defined as the average number of access control records, i.e. access rights, access tags and integrity established for users of the system. The change in this indicator is influenced by such configuration characteristics that change during the administration of the system, as the number and nesting of subjects (users, groups) and hierarchical objects (file system, registry).

In order to eliminate security violations identified during monitoring and analysis according to the security requirements formulated in standard templates, security policies and fixed (template) states, configure security configuration settings in accordance with the instructions generated in security monitoring reports or in analysis reports security, and compile a security configuration report (3) containing information about the configurable security settings and the results of Ki values.

Periodically repeat the above steps in the necessary sequence for setting, fixing, monitoring and analyzing security configuration parameters and compile a lot of reports on monitoring, analysis and security settings, thereby continuously ensuring the security of the information system.

The data obtained as a result of the application of this method can eliminate errors made in the configuration security settings in the current state of the system and which may occur during its operation.

To automate the proposed method, a system is used (Fig. 3), which includes a security configuration parameter control unit 4 and a central security monitoring and analysis unit 5, which include security configuration parameter control modules 6, which together form a security configuration parameter control unit and a combination of modules forming the central block of security monitoring and analysis 5, including the network interaction and security module of system 7, connecting the neutral unit 5 with all active modules for managing security configuration parameters; a system management module 8, connecting all the modules of the central unit 5 and providing connection to a module for describing a model of control and access control of the operating environment 9, interaction with the security requirements editing module 10; a module for describing a model of control and access control for the operating environment 9 and a module for editing security requirements 10, which are connected via the system control module 8 to the security processor module 11, as well as to the reporting module 12, which has feedback through the control module and the network interaction and security module system 7 with configuration parameter management modules 6.

The method of centralized automated settings, control and analysis of the security of information systems is implemented in the proposed system as follows.

The modules for managing security configuration parameters 6, in addition to collecting security configuration parameters, perform their adjustment according to the given composition and values. The number of security configuration parameters management modules 6 used in the system is determined by the number of analyzed and configured nodes of the information system (workstations and servers). The implementation of modules 6 is determined by the type of operating environment of the information system. In the general case, modules 6 interact with standard software tools for controlling and access control of the operating environment 9 of the information system and either fix the composition of the current security configuration parameters and their effective values, forming a fixed security state of the information system, or determine a new security state of the information system, while controlling Security configuration settings such as users and user groups file system elements (disks, directories, files, links), registry elements (sections, keys, parameters, links); kernel objects (tasks, processes, threads, drivers, synchronization objects, etc.); shared resources (directories, printers); software services; COM / DCOM objects; Directory service objects local and global system security policy settings; options and security settings for user and special software; configuration settings for network services; security attributes of subjects and objects (security identifiers, privileges of users and user groups, information about the owners of objects, lists of access rights, access labels and integrity, hierarchical distribution of subjects, objects, access rights, access labels and integrity).

The result of the operation of the security configuration parameters management modules 6 is either a set of fixed states of the information system or a variety of security configuration parameters modified during configuration.

Control modules for configuration parameters 6 of security form a control unit for configuration parameters of safety 4, the remaining modules form its central block 5.

The network interaction and security module of system 7 provides the information and control interface of the central unit 5 with the control unit for configuring security parameters 4, i.e. with all active modules for managing security configuration parameters; it also monitors the integrity of the system software composition, identifies security module configuration management modules and protects transmitted data.

The system management module 8 connects all the modules of the central unit 5, provides a user interface to the system operator, and also determines the type of operating environment of the information system, connects the module for describing the model of control and access control of the operating environment 9, interacts interactively with the security requirements editing module 10, cataloged storage fixed states, security templates, security policies, and generated reports.

The module for describing the model of control and access control of the operating environment 9 contains the rules for calculating the level of access of a subject to an object based on the fixed state of the corresponding operating environment, namely the formation of a set of direct access rights of an object specified for a specific subject, taking into account the rights that apply to hierarchies of subjects and objects , i.e. subject to inherited, group and direct permissions and prohibitions; rights corresponding to security configuration settings; rights corresponding to the values of the security configuration parameters; rights assigned to dependent objects in the information system; rights obtained from access and integrity tags. For each type of operating environment in the system, an appropriate model for controlling and controlling access of the operating environment is determined and connected.

Security requirements editing module 10 generates system security criteria by setting system security conditions. Security requirements editing module 10 allows you to create system security criteria, presented in the form of tuples "Composition of security configuration parameters", "Security configuration parameter value" or "Subject-object-access level", describing, respectively, the set of configuration parameters, their values or relations sets of subjects, objects and access levels set for them, at which the information system is safe. When compiling a security policy, the security requirements editing module 10 also searches for inconsistencies in the specified levels of subjects' access to objects, determining in the set of tuples “Subject-object-access level” the presence of restrictions defined for one pair “subject-object”, but with different levels access, taking into account the hierarchical structure of subjects (relations "user groups - users") and the hierarchical structure of objects (relations "resource containers - resources"), and to exclude detected prot orechy forms the description of errors made when setting the rules restricting access of subjects to objects at different levels of the hierarchy of subjects and objects, and allows you to make corrections to the rules restricting access appropriate security policies in order to avoid conflicting rules or amendments to existing rules. Thus, the result of the work of the security requirements editing module 10 is a set of standard security templates and security policies used in setting up, monitoring and analyzing the security of an information system.

The module for describing the model of control and access control for the operating environment 9 and the module for editing security requirements 10 are connected via the system control module 8 to the module of the security processor 11, which calculates the access levels on the set of security configuration parameters, verifies that the security conditions of the system are specified as criteria from typical templates and security policies, matching fixed conditions, evaluating the effectiveness of system administration, identifying violations th security and their compositions.

When configuring in accordance with a standard template or security policy, the security processor module 11 enumerates the configuration parameters specified in the selected template or security policy, then iteratively interacts with the corresponding active security configuration parameter management module for each of these parameters to configure this system security configuration parameter. At the same time, the access levels specified in the security policy are configured in the form of direct access rights, removing the remaining rights granted for each custom subject-object pair by other security configuration settings and their values. The setting for the fixed (template) safe state of the operating environment of the information system is carried out in the same way as the setting for the standard security template.

When monitoring or analyzing the security configuration parameters, the security processor module 11 either interacts with the corresponding security configuration parameters management module 6 and receives from it the composition of the current security configuration parameters and their effective values, or receives the operator’s previously recorded security status of the information system, on which safety configuration parameters should be monitored or should be analyzed system security.

When security monitoring is carried out in accordance with a standard security template, the security processor module 11 enumerates the configuration parameters specified in the selected security template, which allows the corresponding security configuration parameter management module 6 iteratively to fix its presence and current value for each of the listed parameters.

When analyzing the security carried out in accordance with the security policy, analyzing the compliance of security configuration parameters with the fixed (template) safe state of the operating environment of the information system and analyzing compliance with the rules for effective administration of the information system, the security processor module 11 initiates the fixing of the current composition and values of all security configuration parameters.

Further, on the current or selected fixed state of security of the information system, the security processor module 11 monitors and analyzes the following security requirements: standard security templates based on recommendations for the safe configuration of the operating environment of the information system; rules for restricting access to security policies; fixed (template) safe states of the operating environment of the information system; effective system administration rules.

In the case of monitoring the compliance of security configuration parameters with security requirements in terms of meeting the criteria presented in a typical security template in the form of tuples "Composition of security configuration parameters", if the current state is selected, the security processor module initiates fixing the composition of the current security configuration parameters, or, if selected previously fixed state, the module of the security processor 11 extracts from it the composition of the fixed configuration pairs meters of safety, and then compares the captured configuration sets the security parameters specified in the security template is selected, reveals their differences in composition and configuration of security settings required changing the composition of the configuration of security settings required to address the identified deviations.

In the case of monitoring the compliance of security configuration parameters with security requirements in terms of meeting the criteria presented in a standard security template in the form of tuples "Security configuration parameter value", if the current state is selected, the security processor module initiates fixing the composition and values of the current security configuration parameters, or, if a previously committed state is selected, the module of the security processor 11 extracts the composition from it and the values are fixed x security configuration parameters and then compares the set of fixed security configuration parameters with those specified in the selected security template, compares for the confirmed configuration parameters specified in the selected standard security template and recorded in the system, the set of security configuration parameters values specified in the selected security template, reveals them differences in the composition and values of safety configuration parameters and changes in composition and Achen configuration of security settings required to address the identified deviations.

In the case of system security analysis, the security processor module 11 verifies that the security configuration settings meet the security requirements in terms of meeting the criteria presented in the security policy in the form of tuples "Subject-object-access level". Moreover, if the current state is selected for analysis, the security processor module 11 initiates a fixation of the composition and values of the current security configuration parameters, or, if a previously fixed state is selected, the security processor module 11 extracts the composition and values of the fixed security configuration parameters from it and then compares the sets of fixed security configuration parameters with those specified in the selected security policy in terms of subsets of subjects and objects, calculates for all confirmed subject-to-object pairs specified in the selected security policy and recorded in the system, the effective access levels of subjects to objects, taking into account the impact on access permissions of all current recorded security configuration parameters and their values, and then compares the values of the calculated effective access levels with those specified in the selected security policy, identifying their differences, fixing the composition and values of configuration parameters that served as factors of influence on deviations of access levels, a list of security configuration parameters and their values constituting the identified violations, and changes in the composition of security configuration parameters and their values necessary to eliminate detected violations and factors affecting access levels.

At the same time, the security processor module 11 calculates the level of access of the subject to the object using the rules of the corresponding control and access control model by sequentially generating a set of access rights based on the direct access rights of the object specified for a particular subject, taking into account the rights that apply to the hierarchies of subjects and objects , i.e. subject to inherited, group and direct permissions and prohibitions; rights corresponding to security configuration settings; rights corresponding to the values of the security configuration parameters; rights assigned to dependent objects in the information system; rights obtained from access and integrity tags.

In the case of analyzing the correspondence of the security configuration parameters to the fixed (template) safe state of the operating environment of the information system, if the current state is selected for analysis, the security processor module 11 initiates a fixation of the composition and values of the current security configuration parameters, or, if a previously committed state is selected, the module security processor 11 extracts from it the composition and values of the fixed security configuration parameters, then compares the current security configuration settings with the composition and values indicated in the fixed (template) safe state, calculates for all confirmed subject-object pairs specified in the selected fixed (template) safe state and recorded in the system, the effective levels of subjects' access to objects, taking into account the impact on access permissions of all current recorded security configuration parameters and their values, calculates the required access levels for the same subject-object pairs UPA of subjects to objects, taking into account the impact on access permissions of all security configuration parameters and their values specified in a fixed (template) safe state, compares the calculated effective and required access levels and fixes deviations from the fixed (template) safe states of the information system operating environment by composition , values of security configuration parameters and access levels of subjects to objects, a list of security configuration parameters and their sign eny constituting the violations, and changes in the composition and configuration of security settings required to address the identified deviations and factors of influence on the access levels.

In the case of analysis of compliance with the rules of effective administration of the information system, if the current state is selected for analysis, the security processor module 11 initiates a fixation of the composition and values of the current security configuration parameters, or, if a previously fixed state is selected, the security processor module 11 extracts the composition from it and the values of the fixed security configuration settings, evaluates them as a reference system administration efficiency, and then monitors in the occurrence of system management problems consisting in inefficient system administration, initiating a fixation of the composition and values of the current security configuration parameters, evaluating the current system administration efficiency from them, comparing the reference value of the system administration efficiency with the current one, determining the decrease in system administration efficiency and fixing system management problems, consisting in inefficient system administration, a schedule of changes in efficiency system administration over time, a list of numerical characteristics that reduce efficiency, and changes in the principles of system administration necessary to increase efficiency. In this case, the module of the security processor 11 defines a numerical indicator of the effectiveness of system administration as the average number of access control records, i.e. access rights, access tags and integrity established for users of the system. The security processor module 11 takes into account the impact on this indicator of such configuration characteristics that change during the administration of the system, such as the number and nesting of subjects (users, groups) and hierarchical objects (file system, registry).

The security processor module 11 is connected to the reporting module 12, which, based on the results of the operation, the security processor module 11 generates reports that are the results of the system.

When configuring the security configuration parameters, the reporting module 12 compiles a security configuration report containing information about the configurable security configuration parameters and the results of setting their values

In the case of monitoring the compliance of security configuration parameters with security requirements in terms of meeting the criteria presented in the standard security template in the form of tuples "Composition of security configuration parameters", the reporting module 12 draws up a security control report containing a description of deviations from the standard security template in terms of the composition of configuration security settings and instructions for changing the composition of security configuration settings to eliminate you revealed deviations.

In the case of monitoring the compliance of security configuration parameters with security requirements in terms of meeting the criteria presented in the standard security template in the form of tuples "Value of the security configuration parameter", the reporting module 12 draws up a security monitoring report containing a description of the deviations from the standard security template in terms of composition and safety configuration parameters and instructions for changing the composition and safety configuration parameters clarity to address the identified deviations.

In the case of a security analysis, the systems verify that the security configuration parameters meet the security requirements in terms of meeting the criteria presented in the security policy in the form of “Subject-object-access level” tuples, the reporting module 12 compiles a security analysis report containing a description of the detected system administration errors and user programs and resources allowed in the implementation of the security policy, in composition, values of configuration parameters b security and access levels of subjects to objects, a list of security configuration parameters and their values that make up violations, and instructions for changing the composition of security configuration parameters and their values to eliminate detected violations and factors affecting access levels.

In the case of analyzing the compliance of the security configuration parameters with the fixed (template) safe state of the operating system environment of the information system, the reporting module 12 compiles a security analysis report containing a description of deviations from the fixed (template) safe states of the operating system environment of the information system in terms of composition, values of the security configuration parameters and levels of subjects' access to objects, a list of security configuration parameters and their the values that constitute the identified violations, and instructions for changing the composition and values of the security configuration parameters to eliminate the identified deviations and factors affecting access levels.

In the case of an analysis of compliance with the rules of effective administration of the information system, the reporting module 12 draws up a security analysis report containing a description of the system management problems consisting in inefficient system administration, a schedule for changing the effectiveness of system administration over time, a list of numerical characteristics that reduce efficiency, and recommendations for improve system administration.

The reporting module 12 additionally has feedback through the control module 8 and the network interaction and security module of the system 7 with the corresponding configuration parameter management modules 6 to configure security configuration parameters in order to correct the detected security violations in accordance with the instructions given in the reports compiled by the module reporting 12.

Thus, the system provides an increase in the level of information security by automating and centralizing the analysis and eliminating vulnerabilities of security configuration parameters.

Thus, the proposed method and system implements centralized remote control of the security of information systems by adjusting the values of the configuration parameters of information systems, fixing and automatically analyzing a given system configuration, identifying security violations caused by errors made during administration.

Claims (14)

1. A method for centralized automated management of security parameters for Windows operating systems, including collecting information, setting up a security system using templates, analyzing configuration parameters, creating a security status report, characterized in that they create a standard security template based on recommendations for safe basic configuration of the operating environment information systems;
create a security policy based on security requirements that make up the rules for differentiating entities' access to objects;
at the same time, from each recommendation constituting a typical security template, a system security criterion is formed, presented in the form of tuples "Composition of security configuration parameters" or "Value of the security configuration parameter", describing the conditions under which the system is safe;
at the same time, from each rule of access control constituting a security policy, a system security criterion is formed, presented in the form of a tuple "Subject-object-access level", describing the condition under which the system is safe;
in the access control rules of the created security policy, they search for contradictions in the specified levels of subjects' access to objects, taking into account the hierarchical structure of subjects and the hierarchical structure of objects, and, if contradictions are detected, form a description of errors made when defining the rules for restricting access of subjects to objects at different hierarchy levels subjects and objects, as well as adjust the access control rules of the relevant security policy, excluding conflicting rights mud or making changes to the existing rules, and repeating this procedure for all of the rules to the complete elimination of contradictions;
from the set of created standard templates and security policies, choose a template or policy, according to the component criteria of which the configuration should be performed, or compliance with which should be monitored security configuration parameters, or system security should be analyzed;
when configuring security settings, they interact with the software for monitoring and access control of the operating environment of the information system, set the values of security configuration settings in accordance with the selected standard template or security policy, and compile a security configuration report containing information about the security settings to be changed and about the results of setting their values;
when performing monitoring or analysis of security configuration parameters, they interact with standard software tools for monitoring and access control of the operating environment of the information system and fix the composition of the current security configuration parameters and their effective values, forming a fixed security state of the information system;
from the set of recorded security states of the information system, select the state at which the security configuration parameters should be monitored or the system security should be analyzed;
on the current or selected fixed state of security of the information system, monitor and analyze the implementation of security requirements: standard security templates built on the basis of recommendations for the safe configuration of the operating environment of the information system; rules for restricting access to security policies; fixed safe states of the information system operating environment; effective system administration rules;
in this case, in the case of monitoring compliance of security configuration parameters with security requirements in terms of meeting the criteria presented in a standard security template in the form of tuples "Composition of security configuration parameters", if the current state is selected, then they interact with standard software tools for controlling and controlling access of the information environment systems fix the composition of the current security configuration parameters, or, if previously fixed with standing, then they extract the composition of the fixed security configuration parameters from it, and then compare the sets of the fixed security configuration parameters with those specified in the selected security template, identify their differences and, based on the results of the comparison, compile a security control report containing a description of the identified deviations from the typical security template in terms of composition safety configuration parameters and instructions for changing the composition of safety configuration parameters to eliminate Nia revealed deviations;
in this case, in the case of monitoring the compliance of security configuration parameters with security requirements in terms of meeting the criteria presented in a standard security template in the form of tuples "Value of the security configuration parameter", if the current state is selected, they interact with standard software tools for controlling and controlling access of the information environment systems, record the composition and values of the current configuration security settings, or, if a fix is selected earlier If the security state is selected, then the composition and values of the fixed security configuration parameters are extracted from it, and then the sets of the fixed security configuration parameters are compared with those indicated in the selected security template, and for the confirmed configuration parameters specified in the selected standard security template and recorded in the system, the set of configuration values are compared security settings with those specified in the selected template or in the security policy, reveal their differences I also compile a security control report containing a description of the identified deviations from the standard security template in terms of the composition and values of the security configuration parameters and instructions for changing the composition and values of the security configuration parameters to eliminate the identified deviations;
in this case, in the case of a safety analysis of the system, they check the compliance of the security configuration parameters with the security requirements in terms of meeting the criteria presented in the security policy in the form of tuples "Subject-object-access level", if the current state is selected for analysis, then they interact with standard software control and access control of the operating environment of the information system, fix the composition and values of the current configuration security settings, or, if a previously fixed state is selected, then the composition and values of the fixed security configuration parameters are extracted from it, and then the sets of the fixed security configuration parameters are compared with those specified in the selected security policy regarding subsets of subjects and objects, calculated for all confirmed subject-object pairs, specified in the selected security policy and recorded in the system, the current levels of access for subjects to objects, taking into account the impact on permissions access of all current recorded security configuration parameters and their values, and then compare the values of the calculated effective access levels with those specified in the selected template or in the security policy, identifying their differences, fixing the composition and values of the configuration parameters that served as factors influencing the deviations of access levels, and making security analysis report containing a description of the identified errors in the administration of system and user programs and resources made during the implementation security policy, the composition, the values of the configuration of security settings and the level of access of subjects to objects, a list of the configuration of security settings and their values that make up the violations, and to change the composition and configuration of security settings instructions to eliminate violations and the factors of influence on levels of access;
in this case, in the case of analyzing the compliance of security configuration parameters with the fixed safe state of the information system operating environment, if the current state is selected for analysis, they interact with standard software tools for controlling and controlling access to the information system operating environment, fix the composition and values of the current security configuration parameters, or if a previously fixed state is selected, then the composition and values of the fixed security configuration parameters, then from the set of previously recorded security states of the information system, one more state is selected, which is defined as a locked safe state, then the current security configuration parameters are compared with those indicated in the locked safe state according to the composition and values, are calculated for all confirmed pairs "subject -object "specified in the selected committed safe state and recorded in the system, the current levels subjects 'access to objects, taking into account the effect on access permissions of all current recorded security configuration parameters and their values, for the same subject-object pairs, the required levels of subjects' access to objects are calculated, taking into account the effect on access permissions of all security configuration parameters and their values, indicated in a locked safe state, compute the calculated current and required access levels and compile a security analysis report containing a description of deviations from the recorded safe states of the information system operating environment in terms of composition, values of security configuration parameters and access levels of subjects to objects, a list of security configuration parameters and their values that constitute detected violations, and instructions for changing the composition and values of security configuration parameters to eliminate detected deviations and factors affecting access levels;
in this case, in the case of an analysis of compliance with the rules of effective administration of the information system, if the current state is selected for analysis, they interact with standard software tools for controlling and controlling access to the operating environment of the information system, fix the composition and values of the current security configuration parameters, or if a previously fixed state, then the composition and values of the fixed security configuration parameters are extracted from it, and the effect system administration efficiency and declare it to be the standard, and then control the occurrence of system management problems consisting in inefficient system administration, remotely interacting with standard software tools for controlling and controlling access to the operating environment of the information system, fixing the composition and values of the current security configuration parameters, evaluating them current system administration efficiency by comparing the administrators performance benchmark system with the current one, determining the numerical characteristics that reduce the effectiveness of system administration, and compiling a security analysis report containing a description of the system management problems consisting in ineffective system administration, a schedule of changes in the system administration efficiency over time, a list of numerical characteristics that reduce the efficiency, and recommendations for improving the efficiency of system administration;
To eliminate the detected security breaches, configure the security configuration parameters in accordance with the instructions generated in the security control reports or in the security analysis reports, and compile a security configuration report containing information about the modified security configuration parameters and the results of setting their values;
periodically repeat the above steps in the necessary sequence for setting, fixing, monitoring and analyzing security configuration parameters, compile a lot of reports on monitoring, analyzing and configuring security, thereby continuously ensuring the security of the information system. 2. The method according to claim 1, characterized in that the state of the information system considers the whole set of security configuration parameters, namely, subjects, objects and their security attributes, the composition of which is determined by the type of operating environment of the information system. 3. The method according to claim 1, characterized in that the standard security templates are based on expert recommendations for safe basic configuration of system information resources of the corresponding operating environment, taking into account the expansion of the scope of standard templates under the influence of security policies, leading to the appearance of user information resources in addition to system . 4. The method according to claim 1, characterized in that the security policies are based on corporate requirements for access control and management put forward to the information system, taking into account their implementation in the corresponding operating environment. 5. The method according to claim 1, characterized in that in each recommendation constituting a typical security template, a system security criterion is presented, presented in the form of tuples "Composition of security configuration parameters" or "Value of the security configuration parameter", describing the security conditions of the system in the form sets of configuration parameters or their values, respectively. 6. The method according to claim 1, characterized in that in each access control rule constituting a security policy, a system security criterion is formed, represented as a tuple "Subject-object-access level", describing the relationship of the sets of entities, objects and defined for them access levels at which the system is safe. 7. The method according to claim 1, characterized in that, when compiling a security policy, they search for contradictions in the specified levels of subjects' access to objects, determining in the set of tuples "Subject-object-access level" the presence of restrictions defined for one pair "subject-object ", but with different levels of access, taking into account the hierarchical structure of subjects and the hierarchical structure of objects, and to exclude detected contradictions, a description of errors made when defining the rules for restricting access of subjects to objects on ase in the hierarchy of subjects and objects, and make the correction rules restricting access appropriate security policies, eliminating conflicting regulations or making changes to the existing rules, and repeating this procedure for all of the rules to the complete elimination of contradictions. 8. The method according to claim 1, characterized in that for the configuration and control of security carried out in accordance with a standard security template, the configuration parameters listed in the selected security template are enumerated, then iteratively interacts with standard monitoring tools for each of the listed parameters and access control of the operating environment of the information system and, if configured, configure this configuration parameter for system security or, in the case of The security troll records its presence and current value. 9. The method according to claim 1, characterized in that to configure the security carried out in accordance with the security policy, enumerate the configuration parameters specified in the selected security policy, then iteratively interact with each of the listed parameters with standard software for access control and management operating environment of the information system and configure this configuration parameter of the system security, while the access levels specified in the security policy are configured vayut in the form of direct access rights, taking the rest of the rights granted to each customized pair of "subject-object" other configuration security settings and their values. 10. The method according to claim 1, characterized in that for security settings performed by the fixed template state of the operating environment of the information system, the configuration parameters listed in the selected fixed template state are enumerated, then iteratively interacts with standard monitoring tools for each of the listed parameters and access control of the operating environment of the information system and configure this system security configuration parameter. 11. The method according to claim 1, characterized in that for the analysis of security carried out in accordance with the security policy, analysis of compliance of security configuration parameters with the recorded safe state of the operating environment of the information system and analysis of compliance with the rules for effective administration of the information system interact with standard software tools for monitoring and access control of the operating environment of the information system and record the current composition and values of all configuration security settings. 12. The method according to claim 1, characterized in that a numerical indicator of the effectiveness of system administration is defined as the average number of access control entries, i.e. access rights, access tags and integrity established for users of the system. 13. The method according to claim 1, characterized in that the calculation of the level of access of the subject to the object is carried out by sequentially generating a plurality of rights available to the subject based on direct access rights of the object specified for a particular subject, taking into account the rights that apply to hierarchies of subjects and objects, t .e. subject to inherited, group and direct permissions and prohibitions; rights corresponding to security configuration settings; rights corresponding to the values of the security configuration parameters; rights assigned to dependent objects in the information system; rights obtained from access and integrity tags. 14. The system of centralized automated configuration, monitoring and analysis of the security of information systems, including a control unit for security configuration parameters and a central unit for monitoring and security analysis, comprising a system management module, a network interaction and system security module, a security processor module and a reporting module, characterized in that the control unit configuration security settings additionally included modules that perform auto matized configuration of security configuration parameters according to the given composition and values of security configuration parameters, as well as access levels of subjects to objects, the set of modules forming the central unit additionally includes a module that provides integrity monitoring of the system software, identification of security configuration parameters control modules and protection transmitted data, the system control module additionally provides for determining the type of operating the environment of the information system and the connection of an additional module for describing the model of control and access control of the operating environment, interactive interaction with the additionally introduced module for editing security requirements, as well as cataloged storage of recorded states, security templates, security policies and generated reports; in the module describing the model of control and access control of the operating environment for the corresponding type of operating environment, it is further provided for the definition of rules for calculating the levels of access of the subject to the object based on the fixed state of the operating environment; the security processor module additionally provides functions for calculating access levels on a variety of security configuration parameters, verifying that the security conditions of the system are specified in the form of criteria from standard templates and security policies, matching fixed conditions, evaluating the effectiveness of system administration, identifying security violations and their composition; the reporting module additionally provides the ability to provide feedback through the control module and the network interaction and security module of the system with configuration parameter management modules to configure security configuration parameters in order to correct detected security violations.

Images