On the definition of threats and risks of information security with the scenario approach and factorial experiment

Abstract

This paper considers existing approaches of definition threats and risks of information security. The generalized scheme of information security risk assessment is presented, and method for evaluating the probability of threats based on scenario planning approach and factorial experiment is considered on the example of the introduction of insider malicious code.