Analysis of corporate information systems vulnerability

Abstract

For today, wireless corporate information systems are an integral part of the competitive functioning of a modern enterprise. Ease of use, almost unlimited functionality, not high cost system scan - these are the main advantages of this type of systems. Corporate information systems of large companies regularly undergo changes - the hardware configuration is updated, the network topology changes, new nodes and system targets are emerging. For most cor-porations with distributed infrastructure, the process of continuous provision of comprehensive protection of in-formation assets becomes a daunting task due to the high complexity of architecture and a large number of intercon-nections within individual subsystems. According to the re-sults of analytical studies of leading companies that deal with information security of enterprises in recent years, the tendency to increase the overall level of security of the net-work perimeter of corporate information systems. On av-erage, in 27% of cases, professionals can not overcome the network perimeter and access the resources of the internal local area network. Since enterprise confidential infor-mation (e-mail, account passwords, server access details, hash data user accounts, and other information that is not publicly accessible) is the goal for many cybercriminals, these technologies are often become a subject of attacks. Thus, the problem of identifying and analyzing vulnerabil-ities in information security in corporate information sys-tems is relevant to date. In conducting the analysis we re-lied on the study of foreign scientists and practitioners en-gaged in the study of threats and the development of their prevention systems. The study of this issue enables to iden-tify and classify possible threats and modernize existing or develop new effective methods and measures of infor-mation security