Using Decision Support Methods under the Searching of Sources of Attacks on Computer Networks in the Conditions of Uncertainty

It was proposed theoretical and, in part, methodological approach to the creation of special decision support systems (DSS) to search the most likely sources of attacks.Systematic, generalized and developed ideas about methods decision support searching the sources of attacks on computer networks.It was proposed structure scheme of the process of finding sources of attacks based on decision-making methodology, the main goal of which is to minimize the number of options put forward so that at the next stages a limited number of alternatives should be evaluated in detail.Each stage was briefly characterized separately, namely: identifying a problem situation, formation and coordination of the target hierarchy, formation of alternatives (solutions), analysis of alternatives, and formation of selection criteria, optimal choice, and solution of a problem situation.In particular, the problem of multi-criteria choice and its system model, generalized methods of solution are considered.The proposed solution to the problem situation involving the method of determining fuzzy judgments DM, which combining classical approaches with fuzzy automatic control based on expert judgments and the idea of splitting the criterion space into domains, the combined method of decision support.It was proposed structure of DSP, with the help of which the choice of alternatives (solutions), which is the definition of the most likely source of attacks, allows to use general information about the threat of cyberspace for a given network, which is defined as the number of unknown attacks per unit of time, set up adaptive SDA.It also allows developing a new generation of firewalls that are based not only on protocols, but on address information from network packets as well.