Very complicated and highly interconnected information systems greatly determine the quality of life. Banking systems, industry, transportation, and other key aspects of modern civilization depend heavily on the reliability of information systems. However, the development of information systems lags far behind the requirements for trust and security. To implement these requirements, a large number of so-called 'imposed' information security measures are now used: antiviruses, firewalls, traffic analyzers, etc. However, their application leads to additional problems: increased complexity, increased performance requirements, energy consumption, and others. The proposed approach makes it possible to develop information systems in such a way that they would ensure their stable operation in an 'aggressive' information environment upon their development. I.e., they do not require additional, imposed means of protection during operation. By analogy with the immunity of living organisms, such a property of information systems is commonly referred to as cyberimmunity.

information systems, information security, imposed security measures, information system development, constructive information security, secure-by-design, cyberimmunity

Dukhvalov Andrey Petrovich,  ,  Kaspersky Lab