Generation of Metadata for Network Control

摘要

In this paper we propose a method of ensuring network information security by controlling network connections using metadata. The metadata contains information about admissible task interactions and application locations in a corporate network. Metadata is formed based on a mathematical model of an information technology. Information technology models are represented in the form of directed acyclic graphs. This paper describes hierarchical decompositions of directed acyclic graphs. Hierarchical decomposition makes it possible to optimally form blocks of information transformations for their placement on hosts of distributed information and computing system (DICS). Protocols of metadata usage are briefly discussed. The problem of transforming directed acyclic graphs into metadata is solved. Security risks introduced by user interaction with information technology process are considered.