Adaptive security in complex information systems

Modern information security standards include such obligatory requirements for secure systems as self-testing, fault-tolerance and active audit. However most of traditional security models were developed without taking into consideration possibility of presence of dynamic elements. This paper is devoted to the description of the approach to design of complex secure systems which is based on the formalization of adaptive functions in information security context. Both practical and theoretical aspects related to the usage of adaptive security in complex systems are highlighted. Integral approach to the problem of usage of adaptive functions for the aims of security is suggested. Issues related to the correspondence of adaptive technologies to recent requirements on the design and implementation of secure information systems were also discussed.