{'fraction_non_alphanumeric': 0.016728624535315983, 'fraction_numerical': 0.0, 'mean_word_length': 4.9502762430939224, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Threat Landscape as an Information Security Analysis Means

A landscape of information threats, its place in the information security, problems of its formation and analysis are considered in this work. An analogy is drawn with the software testing principles and its application to search for threats to information security and use in the landscape formation. A methodology to form a threat landscape is represented. The data sources and their features are examined to form the threat landscape. It is suggested to categorize the threats by the direction of attack, type, target and danger. The application of the methodology for building a threat landscape is considered on the example of a small office infrastructure. To visualize the landscape, it is proposed to use scatter diagrams. By grouping threats by direction, type and magnitude, it is possible to identify the main areas of threats in the landscape, which is shown by an example. The conclusion considers the formation problems of a threat landscape, as well as its application for analyzing the attack chains.