Security indicators for modern electronic document management systems

Objective. Modern electronic document management systems (EDMS) provide controlled movement of multiple documents along different routes. Successful functioning of EDMS is determined by the availability of a specific document at the right time for a specific user. The purpose of the study is to develop a mathematical model of EDMS that allows determining the indicator of ED availability taking into account the UBI and performing optimization taking into account the complex organizational structure. Method. The study was conducted using the apparatus of Markov processes and the formation of numerical safety indicators. Particular attention is paid to the calculations of the numerical indicator of availability. Result. An important attribute has been determined - availability, the numerical indicator of which allows assessing the general level of a specific EDMS and simultaneously solving many specific problems of identifying and countering threats of information blocking, malicious delay in approval, deviation from established routes, which affects availability and, accordingly, the overall level of security. Conclusion. Known types of applied models (functional, set-theoretic, graphtheoretic, probabilistic-parametric) do not allow explicitly forming availability assessments. The proposed model allows identifying vulnerabilities in the EDMS, which can be used to implement new UBI and contribute to increasing the level of information security in EDMS projects.

1. Livshits I.I., Sokolov E.O., Lukyanova A.A. Circuit solutions for the practical implementation of secure electronic document management. Part 1. Analytical review. Gas industry. 2022; 9.: 40-56 (In Russ)

2. Livshits I.I., Sokolov E.O., Lukyanova A.A. Circuit solutions for the practical implementation of secure electronic document management. Part 2. New development. Gas industry. 2022; 11: 50-70. (In Russ)

3. Livshits I.I. Cyber risk management practice in oil and gas projects of holding-type companies. Cybersecurity issues. 2020; 1 (35): 42 – 51. (In Russ)

4. Krukovsky M.Yu. Concept of constructing composite document flow models. Mathematical machines and systems. 2004;2:149 – 163. EDN: RPCPIH (In Russ)

5. Kupriyanov Yu.V., Morev S.A. Set-theoretical model of the organization management system. Algorithms, models and data processing systems. 2006;11: 178-183 (In Russ)

6. Lancev E.A., Dorrer M.G. Agent-based simulation modeling of business processes in the EEPC notation. Scientific and technical bulletin of information technologies, mechanics and optics. 2013; 3 (85): 86-92.

7. Eliseev N.I., Tali D.I., Oblanenko A.A. Assessment of the security level of automated information systems of legally significant electronic document management based on the logical-probabilistic method. Cybersecurity Issues. 2019; 6 (34): 7-16. EDN: HIKLQN, DOI: 10.21681/2311-3456-2019-6-07-16 (In Russ)

8. Minaev V.A., Korolev I.D., Mazin A.V., Mezentsev A.S., Poddubny M.I. Justification of formal systems of mathematical logic for solving problems of automatic electronic document management. Radio industry. 2018; 2:105-114. EDN: XQYSTJ (In Russ)

9. Yazov Yu.K. On the issue of assessing the effectiveness of information protection in electronic document management systems / Yazov Yu.K., Avsentiev O.S., Rubtsova I.O. Cybersecurity Issues. 2019;1 (29). EDN: YZFWPB, DOI: 10.21681/2311-3456-2019-1-25-34 (In Russ)

10. Drovnikova I.G., Alferov V.P., Ovchinnikova E.S. Mathematical model of the dynamics of the functioning of the subsystem for the protection of confidential information in electronic document management systems. Security, Safety, Communications. 2020; 5-3:175-182. EDN: BKUXCX (In Russ)

11. Krasnyansky M.N., Obukhov A.D., Korobova I.L. Mathematical model of information processing in the electronic document management system. Bulletin of Tambov State Technical University. 2018; 24(3):. 382-399. EDN: YQOAUH DOI: 10.17277/vestnik.2018;03:382-399 (In Russ)

12. Ventzel E.S. Probability Theory. Textbook for University Students / Series: Higher Education. (9th edition, stereotyped) Moscow, 2003. (In Russ)

13. https://www.securitylab.ru/news/530833.php

14. https://www.securitylab.ru/news/537510.php