SUN’IY INTELLEKT ELEMENTLARI ASOSIDA AXBOROT XAVFSIZLIGI RISKLARINI BAHOLASH YONDASHUVI
DOI:
https://doi.org/10.65164/d4hcds83Keywords:
axborot xavfsizligi, risklarni baholash, sun'iy intellekt, mashinaviy o‘rganish, CVSS, Nmap, Nuclei, Nikto, semantik sinflash, kiberxavfsizlik monitoringi.Abstract
Ushbu tezisda axborot xavfsizligi risklarini baholashda ochiq kodli audit vositalaridan olingan topilmalarni sun'iy intellekt elementlari yordamida tahlil qilish yondashuvi bayon etiladi. Yondashuvda Nmap, Nuclei va Nikto kabi vositalar natijalari yagona finding modeliga keltiriladi, topilmalar xavfsizlik mazmuniga ko‘ra semantik sinflarga ajratiladi va risk darajasi CVSS balli, tashkilot profili, topilma kategoriyasi hamda ehtimollik omillari asosida aniqlanadi. Sun'iy intellekt topilmalarni avtomatik guruhlash, takroriy ogohlantirishlarni kamaytirish, ehtimollik oralig‘ini moslashtirish va risk natijalarini izohlash bosqichlarida qo‘llanadi. Taklif etilgan yondashuv kiberxavfsizlik monitoringida topilmalarni ustuvorlashtirish va himoya choralarini asosli rejalashtirishga xizmat qiladi.
References
1. NIST SP 800-30 Rev.1. Guide for Conducting Risk Assessments. National Institute of Standards and Technology, 2012.
2. ISO/IEC 27005:2022. Information security, cybersecurity and privacy protection - Guidance on managing information security risks.
3. FIRST. Common Vulnerability Scoring System v3.1: Specification Document, 2019.
4. OWASP. OWASP Risk Rating Methodology.
5. Nmap Project. Nmap Network Scanning Documentation.
6. ProjectDiscovery. Nuclei Documentation.
7. CIRT.net. Nikto Web Scanner Documentation.
8. Goodfellow I., Bengio Y., Courville A. Deep Learning. MIT Press, 2016.
9. Russell S., Norvig P. Artificial Intelligence: A Modern Approach. Pearson, 2021.
