METHOD OF DETECTION OF INFORMATION LEAKAGE BY REJECTING TRAFFIC FROM THE INFORMATION COMMUNICATION NETWORK

Abstract

In the work, an analysis of the methods of detecting the leakage of language information was carried out. The analysis showed the absence of a single scientific methodical apparatus or automated software complexes to ensure the operational implementation of traffic analysis. Therefore, the work is devoted to information leakage detection based on the deviation of traffic from the information communication network. An improved method of providing operational traffic analysis and informing about a suspicious situation is proposed. A situation that requires further detailed traffic analysis by automated software complexes or relevant specialists. The developed method allows informing, in real-time, the responsible specialists about a possible leak of information, which is based on the analysis of the deviation of the nature of the traffic from the elements of the information speech network. Deviations, the nature of the traffic from the elements of the network parameters are measured relative to the usual traffic of the telephone or voice network relative to these parameters. A comparative analysis of normal traffic with real-time traffic is carried out. This method further improves the methodology. The improvement was carried out due to practical recommendations regarding constant coefficients, and calculations. These coefficients for the improved method were chosen by calculation and empirically, which allows for a significantly reduced response of the traffic estimation system. This system uses the developed methodology to detect possible leakage of language information.