Алгоритм построения профилей защиты и заданий по безопасности банковского ПО

Abstract

The project analyzes and develops an algorithm for constructing protection profiles and tasks for the security of banking software. Lack of similar solutions, increased needs with the release of new provisions 683-P and 684-P, ease and availability of use, transmission and maintenance of our solution allows us to get demand when entering the market. The practical significance of the project lies in the accelerated formation of documents, the availability of the necessary data and components, as well as the ease of administration of the solution, which will keep the site up to date. The result of the work is the creation of a software algorithm for building protection profiles and tasks for the security of banking software. For the algorithm, the GOSTs described in the work, ready-made and approved by FSTEC protection profiles, as well as the created database, which contained the security environment, security objectives, functional security requirements and trust requirements, were used. The result of the work is a full-fledged algorithm, when using which, protection profiles are created in accordance with all GOSTs.