Industrial Automatic Control Systems and Controllers Annotation << Back Method for Automatic Detection of Anomalies in the Information Security Event Space Buchaev A.Ya., Begaev A.N., Komarov I.I. The purpose of the work is to develop and the quality evaluate of the automatic detection of anomalies method in the information security events space. Relevance: the task of detecting hidden information security incidents is complicated by the need to analyze a large number of observed parameters, as well as the variability of their combinations and values. Therefore, the most simple and low-cost "template" mechanisms have limited use, and methods using artifi cial intelligence systems are often focused on postincident analysis and do not correspond to the available computing resources. Result: a low-cost automatic method for information systems states detection that are characterized by an abnormal state of a combination of observed parameters, which may indicate the presence or possibility of information security incidents, including without the use of pre-marked incident descriptors. The proposed method has a commonality in rules of the information systems informative features processing the synthesis of which is context-dependent. The proposed solution demonstration is carried out using the example of a graphic image anomalies detecting, the space of information features of which corresponds to the accepted hypotheses. Keywords: cybersecurity, features vector, information security events, statistical stability, linearization, image processing DOI: 10.25791/asu.2.2024.1488 Pp. 31-41.