Instruments and Systems: Monitoring, Control, and Diagnostics Annotation << Back The architecture of an intelligent module for detecting threats when protecting information O.V. SHCHEKOCHIKHIN, D.S. ALEKSEEV, V.N. SHVEDENKO The author substantiates the necessity of creating an effective information security system based on an intelligent module for detecting information security threats. The architecture of the filtering server is proposed, the main task of which is to identify atypical processes in the information system. The basic element of the server architecture is the module for intelligent processing of data streams in the information system. The main methods and technologies of data mining, their applicability to solving information protection problems are considered. Particular emphasis is placed on the need to apply methods that use the Kalman filter, the most effective for diagnosing exceptions – “emissions” in the flow of information data and methods based on neural networks for the possibility of solving problems in any conditions, including under uncertainty. The tools for integrating a set of information security modules are proposed. The choice of the control effect of the filtering server is carried out by the library of behavior models, which is formed on the basis of decision tables. Keywords: information protection, artificial intelligence, Kalman filter, decision tables, behavior model. Contacts: E-mail: o_shekochihin@ksu.edu.ru Pp. 11-16.