Industrial Automatic Control Systems and Controllers Annotation << Back Estimation of Security of the Enterprise Information System as a Basis for the Design of the Protection System E.A. Vitenburg, A.A. Levtsova The article considers the main methods of assessing the security of the information system, namely: graph method, failure trees method, expert evaluation method. Methods for assessing the security of the information system are formalized. The comparison of these methods from the functional point of view by the criteria: the speed of calculations, the complexity of calculations, the effectiveness of the application, ease of use, the accuracy of calculations, the generation of a quantitative evaluation of security, the visibility of results, the possibility of working with a mildly formal information, the identification of vulnerabilities. Based on the comparative analysis, the best method for evaluating the security of the information system is determined, namely the method of expert assessments. This method will be based on a mathematical model describing the operation of the software complex for assessing the security of the enterprise information system. The developed mathematical model will allow to form the architecture of the software complex for assessing the security of the enterprise information system and the algorithms for the operation of the software modules. Keywords: information system; information security; evaluation of security; methods for assessing security; security evaluation criteria. Contacts: E-mail: e.vitenburg@ec-rs.ru, E-mail: alexandra.levtsova@yandex.ru Pp. 64-67.