Aerospace Instrument-Making Annotation << Back SOFTWARE IDENTIFICATION USING IN THE TASK OF ELECTRONIC DATA MEDIA AUDIT K.I. Salakhutdinova, I.S. Lebedev, I.E. Krivtsova, A.S. Anisimov The study considers the information security field in automated systems which is processing the information, both open and classified, in terms of the potential unauthorized prohibited software installation by an automated system users. The paper describes the importance of the audit of data storage media in order to control the automated system user’s actions for unauthorized installation of programs. The technique of audit, signatures formation of the studied executable files and program identification are described below; both for the approach based on the statistical Chi-square homogeneity criterion and for the approach based on the machine classification algorithm. As the file characteristics was considered the sequence frequency for a ten features – assembler commands, each of which has shown the its result. The program identification method allows to conduct data storage media audit is presented, its limitations are given. The method allows to directly identify the executable file, not its metadata recorded in the configuration files, and thus can be used in computer forensics by special departments. Keywords: data storage media audit, statistical criterion, machine learning, program identification, ELF-files, information security. DOI: 10.25791/aviakosmos.09.2019.865 Contacts: - Pp. 20-28.