Semantic approach to automated formation of information security systems documentation

Abstract

The article investigates the problem of automated generation of complex documentation for information secu rity systems based on semantic analysis of the regulatory and legal framework. A systematic analysis of the re quirements of regulatory documents and international standards for information security system documentation is conducted. Critical contradictions between the dynamic nature of regulatory requirements and the static na ture of existing automation tools are identified. It is shown that manual processing of large volumes of weakly structured documents does not ensure acceptable quality and speed, while the use of generative artificial intel ligence models does not guarantee the reliability of the generated information. The necessity of integrating se mantic analysis tools with generative artificial intelligence to ensure guaranteed and explainable results is sub stantiated. Existing approaches to document generation automation are analyzed, including template-based sys tems, markup tools, ontological models, and large language models. A conceptual model of an intelligent in formation security authorization support system is proposed, combining a multi-agent architecture, ontological knowledge representation, and the capabilities of large language models. A semantic approach to the genera tion of complex documents based on ontological modeling of the information security engineering domain is developed. The proposed model ensures traceability between requirements, solutions, and knowledge sources, supports dynamic updates of the regulatory framework, and enables automated generation of documentation in accordance with current security standards. The developed approach significantly reduces the time and labor required for preparing information security documentation.

Prombles in programming 2025; 4: 78-87