Vladimir M. Shishkin, Konstantin E. Kolesnikov

St. Petersburg Institute for Informatics and Automation of the RAS, General Department of the Ministry of Justice of the Russian Federation for St. Petersburg

In the paper, the possibility of a differential model of confrontation (DSM) is shown to provide a forecast of the development of security incidents in information systems. The methodology and technology of its interaction with SIEM class systems are proposed. Experiments have been carried out to simulate the work of the differential confrontation model with the data flow from the SIEM system, some results are shown

system of differential equations, confrontation, information security, SIEM, modeling