{'fraction_non_alphanumeric': 0.009922041105598866, 'fraction_numerical': 0.0, 'mean_word_length': 5.598130841121495, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Determining Key Risks for Modern Distributed Information Systems

This work aims to study the problem of identifying and assessing information security risks in complex, distributed, and scalable information systems, as well as building a profile of key risk factors that can cause potential information security incidents in the physical and functional allocation of resources. As part of this work, a study was carried out of the main information security risks that can be identified at the time of creating and operating a typical distributed information system designed to support information processes and provide information services. The result of the study is the ranking of major risk factors according to their importance and frequency in practice, as well as highlighting the most significant security controls. The data for analysis was compiled based on the results of interviews and questionnaires of information security specialists with different training levels and different focuses in their activities within this knowledge area. The paper presents summarized information on classical approaches to information security risks modeling based on quantitative, qualitative, and hybrid analysis, as well as the latest methodologies based on solving the problems of intelligent classification and analysis of data on risk factors in the system distribution, and in operation with large data sets.