The proposed work developed critical strategy to solve basic problem; the Violation performance of individual services by constructing attack graphs, and automatic extraction and verification (analysis) properties of this graph allows to partially solve such problems. Furthermore describes the security architecture, processes and organization structure of security analysis system (SAS), for the Ministry of Regional Municipalities and Water Resources (MRMWR) in sultanate of Oman. The proposed architecture is derived based on the current state assessment of the IT infrastructure, the future strategic direction and leading practices principles that consider the development of architecture, models and security analysis system (SAS), based on the formation of attack graph and the calculation of a variety of security metrics.
Security analysis, Security architecture, Models and security, Attack graph, Security metrics
