Theoretical aspects of information security (Q1037161)

The paper presents a formal model of a security control system for an automated system. There are also analyzed errors in making decision concerning system's security under condition of partial information availability. The entire work is very well structured and has a good mathematical background, all the propositions and the theorems being mathematically proved. Because of the obtained results, the authors propose managing errors by varying the control policy applied. They also obtained expressions for loss related to wrong decision making and they showed that the more complete control was the less the values of this loss. While presenting the model and demonstrating the mathematical background, the authors made some assumptions. In future improvements of the model these assumptions can be removed or modified. The paper can be seen as a starting point for studying and constructing security control systems.