EU Regulatory Compliance in Network Security

This chapter proposes a method for the technical and economic design of a cyber-resilient information and communication network that simultaneously considers technical, economic, and security parameters. The developed approach is based on a single mathematical model that covers network topology selection, equipment characteristics, routing schemes, and access network connectivity. The model is formalized as a mixed integer linear programming problem, which positively affects the computational complexity of finding the optimal solution. A distinctive feature of the approach is the integration of cybersecurity metrics (in particular, CVSS, compromise probability, and risk assessment) into the objective function alongside cost and performance criteria. This is achieved by adjusting weighting and cost coefficients, enabling the solution to be adapted to the available budget and equipment. The study was conducted for different load and funding scenarios. The results confirmed the effectiveness of the approach: with sufficient funding, the network is designed using the most secure and productive solutions; with a limited budget, the system adapts by reducing the level of security or limiting traffic. The proposed solution allows for the formation of cyber-resilient networks under current EU requirements and creates a basis for further research. In the future, it is planned to expand the range of parameters considered, include new security metrics, and study methods for prioritizing traffic with respect to Quality of Service.