Security evaluation in secure architecture of distributed information systems

The necessary condition of secure architecture of distributed information systems is the possibility of effective enumerating of information flows and the analysis of their contents. Completeness of the analysis of security of distributed information systems comes down to completeness of enumerating of information flows and possibility of the analysis of their contents. Contradictions of secure architecture of distributed information systems can arise if there is a forbidden information flow, or a ban on an allowed information flow, or an admission of failure is possible. The paper gives an example of architecture of distributed information systems in which the analysis of interactions of components represents a complex computing problem and an example of secure architecture when it is possible to effectively analyze all interactions in distributed information systems.