Optimizing the selection of information security remedies in terms of a Markov security model

An information security model expressed in terms of Markov processes is considered. Within this model the functioning of information system as a sequence of failures and recovery actions that appear in response to security threats is described. A detailed investigation of the model is provided, and its important characteristic called the relaxation time is introduced. A permissible range of security parameters is constructed by using the relaxation time. The problem of selection of information security remedies as a problem of non-linear optimization with boolean variables is stated and discussed.