СУБЪЕКТНО-ОБЪЕКТНАЯ МОДЕЛЬ ДЛЯ УНИФИЦИРОВАННОГО АНАЛИЗА МЕТОДОВ ЗАЩИТЫ ПЕРСОНАЛЬНЫХ ДАННЫХ

The article examines the global challenges facing the Eurasian Economic Union (EAEU) associated with significant progress in the development of information and communication technologies (ICT) and tools that form the international information space, and suggests directions for integration to overcome them. The rapid build-up by the countries of the world of their potential in the field of ICT predetermines the strategic nature of the advanced cooperation of the EAEU member states in the field of information security.Aim. Determine the opportunities and prospects for cooperation between the EAEU Member States in the field of information security in the context of unprecedented digitalization of all spheres of life, due to the rapid development of ICT, while the Treaty on the EAEU of May 29, 2014 does not provide for information security issues.Tasks. Consider the existing regulatory framework for bilateral and multilateral relations of the EAEU countries in the field of information security, determine the vector, priorities of the EAEU countries in building their national policies in the field of international information security with integration partners and the world community.Methods. In this paper, using the methods of logical and deductive analysis, possible conditions for cooperation between the EAEU countries in the field of international information security are identified to overcome global challenges and threats and ensure the post-cuperation development of Eurasian integration.Results. The study showed that today information security is not only a necessary condition for ensuring national sovereignty in the economic sphere, but these are issues of ensuring the independence of the state in the social, cognitive, military and political spheres. When considering the EAEU as one of the leading centers of power in the polycentric world, it is necessary to improve the existing paradigm for the development of Eurasian integration, laid down by the Treaty on the EAEU of May 29, 2014, in order not to be in conditions of unjustified expectations, providing for the involvement of issues of a new quality and character.Conclusion. Considering that information policy issues are not regulated by the Treaty on the EAEU of May 29, 2014, seems justified and a very timely launch of the process of considering the possibility of creating a high-level working group on the formation of the Eurasian agenda in the field of international information security.

With the acceleration of informatization, the security of sensitive data in information systems has increasingly become the focus of global attention. Especially in the context of the widespread application of big data, cloud computing and other technologies, data leakage and privacy risks are becoming more and more serious. Traditional data protection methods can no longer effectively deal with complex network attacks and data leakage problems, and new technical means are urgently needed to improve data security. Blockchain technology shows strong data protection potential due to its characteristics of decentralization, non-tampering and traceability, and is gradually being applied to the protection of sensitive data in information systems. This paper analyzes the application of blockchain technology in data storage, transmission and access control, and discusses its effectiveness in improving data security. We selected the customer information system of a well-known financial institution as the research object, and used blockchain technology to encrypt, store and distribute management of sensitive data. The experimental results show that after the introduction of blockchain technology, the data leakage rate of the system has dropped by 78%, and at the same time, the response time of the system has increased by 22% compared with traditional data protection technology. In addition, the access control mechanism based on smart contracts significantly improves the transparency and traceability of data operations, effectively reducing unauthorized access. This article proves the effectiveness of blockchain technology in protecting sensitive data security in information systems through the analysis of practical cases.

In the modern era of big data, obtaining information has become more convenient and hidden. Therefore, the information security of networks is becoming increasingly important in the national security strategy. In the learning process, teachers should pay attention to strengthening the penetration of education in the field of network information security in order to better raise students’ awareness of preventing network information security in order to further form good quality, as well as increase information literacy on the Internet among students of educational institutions. This article first analyzes the importance of penetration of education in the field of network information security, and then analyzes the current state of education in the field of network information security in teaching computer networks, and finally, focuses on the study of specific strategies for penetration of education in the field of network information security, in the hope of contributing to the development of the country’s network. The practice of education in the field of information security provides certain suggestions and ideas.

The article examines burning issues of the formation of an international regime in the field of ensuring international information security in the context of geopolitical transformations and turbulence. The theory of international regimes developed by Russian and foreign researchers is used as a theoretical and methodological basis for the study.Based on the classical definition of the international regime, the authors focus on the norms and principles in the field of international information security. The norms and principles in the field of international information security as the rules of responsible behavior in the global information space were first proposed by Russia and its SCO partners in 2011 as part of a discussion of the UN General Assembly. However, Russian initiatives met with resistance from the United States, resulting in a fragmentation of the existing regulatory regime in the field of international information security. Currently, the relevant norms and principles, which are based on the fundamental principles of international law, enshrined in the UN Charter, are presented in the resolutions of the UN General Assembly, and are also enshrined in the reports of the Group of Governmental Experts on achievements in the field of informatization and telecommunications in the context of international security.The norms fixed in the documents are not mandatory, but they make an important contribution to ensuring international stability by structuring the expectations of various actors in the field of information security. However, the lack of formal consolidation and institutionalization of these norms within the framework of international treaties reduces their legitimacy.

The paper proposes a method of assessing the effectiveness of the security of confidential data of a distributed information system, based on a model for determining the current threats to the security of confidential data in the information system, on algorithms of fuzzy inference and the theory of fuzzy neural systems, unlike known ones, it uses sufficient and necessary indicators, excludes expert errors , increases the detection of actual threats to the security of confidential information system data by 5%, reduces the cost of purchasing information protection tools from 15 to 30%. It takes into account the following factors: the IT infrastructure of the distributed information system, the capabilities of attackers and their level of motivation in the information system. The proposed approach differs from existing ones by an automated process, the need to involve highly qualified specialists in the field of information security, and low computational complexity; absence of deficiencies in expert assessments; allows you to determine the list of current information security threats in information systems of various classes and types. The task of ensuring the security of confidential data is urgent, which is due to the growth of computer attacks and leaks of information, which are reflected in the statistical data on the commission of crimes in the field of high technologies, the growth of criminal activity using modern communication devices and the Internet. The existing methods of identifying current threats to information security and assessing the effectiveness of the security of confidential data cannot be used at all stages of the life cycle of distributed information systems, they do not take into account the following indicators in the complex: IT infrastructure of distributed systems, current threats to information security, security requirements of confidential data, their cost as important indicators when solving these problems. One of the most important tasks of ensuring the security of confidential data is the evaluation of the effectiveness of the protection system. In this regard, the goal of the research is to improve the quality of the assessment of the effectiveness of the security of confidential data of a distributed information system by determining sufficient and necessary indicators using modern information technologies, which allow the most effective solution of the following tasks: determining the parameters of the adaptive production fuzzy neural systems, which most suitable for solving the tasks, the application of Data Science technologies in data processing, algorithms of fuzzy output.

The subject of the article is the formation of professional competencies in the field of information security. Object of the article: training of specialists, ensuring the formation of professional competencies in the field of information security. The purpose of the study is to identify the level of formation of professional competencies in the field of information security among students in the process of their preparation. The methodology of the work is to substantiate and actualize the problem of information security of future specialists in the online space. Research of the process of formation of competences in the field of information security as a component of professional competence in the conditions of inclusive education, as well as identification of the stage-by-stage level of their formation. opportunities for health and people with disabilities; determining the conditions for increasing motivation, developing skills to assess, analyze, effectively organize their own activities in the field of information security in vocational training; development of criteria and identification of the levels of formation of professional competencies in the field of information security among students in the process of their education. The field of application of the results is the training of future specialists, aimed at the formation of professional competencies in the field of information security in the process of educational activities. Conclusion: the formation of the ability / readiness to live safely when performing future work functions in the specialty acquires special significance in the training of future specialists with disabilities. The implementation of the experimental methodology testifies to a steady growth in the rate of mastering by students of professional competencies in the field of information security.

The purpose of the study is to develop a model for developing competencies in the field of information security for bachelors in the field of Applied Information Science. The relevance of this problem is determined by modern requirements for enterprise employees and, accordingly, the process of their training. Demand for qualified employees who have skills not only in their field of activity, but also in areas relevant to the information society, such as information culture and the ability to provide an information enterprise.Materials and research methods. To achieve this goal, a competency-based approach was used to activate the process of developing the readiness and ability of subjects to make independent decisions, express independent judgments and at the same time participate in a common cause, create relationships with other participants in joint activities. The following methods were used in the work: analysis of pedagogical, scientific, technical and methodological literature on the research problem, systematization and generalization and visual presentation of the results.Results. As part of the study, a tabular model for the formation of competencies in the field of information security was developed based on the competency-based approach. The article reflects a model for developing competence in the field of information security using the example of additional professional competencies - 2 (the ability to take part in project management, organizing IT infrastructure and information security management) in the process of studying the discipline “Information Security”. The component blocks of the developed model are described: diagnostic, motivational, theoretical, practical and control-analytical. In accordance with the stages of this process of developing competencies and the tasks to be solved at each stage, various innovative forms and methods are presented. The results of the paper show that the process of developing competencies in the field of information security among bachelors in the “Applied Information Science” area is complex and multifaceted. Even though bachelors of applied computer science will not perform the same job functions as information security specialists, their training should be sufficient to enable them to design and build safe and reliable information systems. The pedagogical search is not completed, but it has acquired the necessary boundaries, unique centers of crystallization around which the academic discipline is designed.Conclusion. We can conclude that training specialists in the field of information security is an urgent task of modern society, the solution of which is dependent on scientific justification and identification of a set of necessary competencies that a modern specialist should have. The components of competencies in the field of information security that we have identified, the generalized tabular model of these competencies that we have proposed, as well as the stages, methods and forms of developing these competencies among bachelors of Applied Information Science require additional study. The conducted research allows us to outline ways to solve the multifaceted and complex problem of forming students’ competencies in the field of information security, taking into account modern requirements for the training of specialists not only in the field of computer science and information technology.

The paper proposes a model for determining actual threats to the information security of distributed information systems, based on algorithms of fuzzy inference and the theory of fuzzy neural systems, unlike known ones, uses sufficient and necessary indicators, excludes expert errors, increases the detection of the number of actual threats to information security of distributed systems by 5 %, reduces the cost of purchasing information protection equipment from 15 to 30%. It takes into account the following factors: the IT infrastructure of the distributed information system, the capabilities of attackers and their level of motivation in the distributed information system, the list of existing protection tools in the distributed information system.
 The proposed approach differs from existing ones in the following: lack of involvement of highly qualified specialists in the field of information security; the process is automated, has a low computational complexity; absence of deficiencies in expert assessments; allows you to determine the list of current information security threats in information systems of various classes and types.
 The task of ensuring the security of confidential information becomes the most urgent, which is due to the growth of computer attacks and leaks of information, which are reflected in the statistical data on the commission of crimes in the field of high technologies, the growth of criminal activity using modern communication devices and the Internet.
 Existing methods of modeling current threats to information security and assessing the effectiveness of the information protection system cannot be used at all stages of the life cycle of distributed information systems - they do not take into account the following indicators in the complex: IT infrastructure of distributed information systems, current threats to information security, security requirements for confidential information, a list of means of protecting confidential information and their value as important indicators when solving these problems.
 In order to achieve the goals of ensuring the security of confidential information, it is necessary to: organize the effective creation of an information protection system (information security system), effective modeling (identification of the list) of current threats to information security, identification of the current violator, and also provide the opportunity to conduct a qualitative assessment of the effectiveness of the information security (protection) system.
 One of the most important tasks of ensuring the security of confidential information is the assessment of the effectiveness of the protection (security) system. In this regard, the goal of the work (research) is to improve the quality of the evaluation of the effectiveness of the protection (security) systems of distributed information systems by determining sufficient and necessary evaluation indicators using modern (promising) information technologies that allow the most effective solution of the following tasks: determination operating parameters of adaptive production fuzzy neural systems, which are most suitable for solving the tasks, application of Data Science technologies in data processing, fuzzy output algorithms.

Theoretical developments and practical experience of countering cyberthreats in the field of information security of Ukraine are analyzed. It is determined that the crime prevention in the field of information security is structurally composed of several stages. They include: search for primary information on criminal activity in the information field ; prevention of cybercrime; detection of illegal actions in the field of information security while operative investigative activities and pre-trial investigation of criminal proceedings. The most common illegal actions in the field of information security is unauthorized tampering in the work of information and telecommunications systems. In order to identify these crimes during operative investigative activities within the criminal procedure operational officers and investigators must possess methods of detecting specified illegal actions and objects that can be subject to research. Theoretical bases of recommendations for search, detection, fixation and seizure of these facilities should be appropriate criminalistic methods. Legal basis for the formation of these methods should be legislative and departmental regulatory acts. However, in a number of normative legal acts related to ensuring cybersecurity in Ukraine, there are inconsistencies in the conceptual apparatus, especially with regard to specific object types of forensic science, signs of unauthorized tampering in the work of information and telecommunications systems. It was found out that counteraction to cyberthreats in the field of information security in Ukraine should be based on a system integrated approach to use of all structural elements, coordination of its subject activities including forensic experts. The theoretical basis for the formation of a system integrated approach to crime prevention in this field is the implementation of research on research of theoretical applied branches of jurisprudence: criminalistics, theory of forensic science, theory of operative investigative activities.

This scientific article examines in detail the main issues related to the development of information support for the expert electronic document management system in the area of information security. The analysis of the system's information flows is performed. A flow chart of information flows in the automated document management system in the field of information security is given. Based on the system analysis of the area of document support for information security, a model architecture of the automated electronic document management system is proposed. Its subsystems are detailed, and its components – structural modules – are identified. The interaction of these modules and subsystems is considered. An information model of the database of electronic documents in the field of information security is proposed, presented in IDEF1x notation. The features of the formation of this database are described, taking into account the specifics of the subject area and the dynamics of legislation in the field of information security. The subject area of documentation support in the field of information security is characterized by dynamic development and the lack of a unified systematic approach to the formalization of electronic document management processes. In the context of constant changes in legislation and tightening of requirements for information security, the issue of developing information support for electronic document management systems is becoming relevant. A systematic approach to the analysis of processes and information flows allows identifying key aspects that require attention, as well as developing effective models and architectures of automated control systems. The purpose of this scientific article is to develop information support for electronic document management processes in the field of information security based on an expert information and analytical system (EIAS).

We note that the effective and active struggle of European countries with information terrorism takes place within the framework of the European Union, all its member-countries, as well as neighboring countries and applicants for accession. Therefore, it should be stressed that the EU is pursuing itself a very active policy in the field of information security. At the moment, it brings together highly developed countries that have a tremendous impact on international relations by establishing norms and standards of conduct of states in the political, economic, social, informational and other spheres. The main objective of the EU is to strengthen the European Commission’s dialogue with international organizations and partners on the issue of network security and, in particular, on the growing dependence on electronic networks. Political priorities in the field of information security, defined by the governing bodies of the European Union, are being implemented at the national level by both state authorities and nongovernmental organizations. Analyzing all the above, it can be concluded that within the framework of the EU, information security is considered, first of all, as a state of information networks and systems that provides an adequate level of protection of the integrity, availability, authenticity and confidentiality of information and the appropriate level of counteraction to external negative influences. Priorities of EU policy in the field of information security are the creation and implementation of programs and various technical means of protection of information and communication technologies; development of normative legal acts that establish a list of crimes in the IT sphere and criminal liability; ensuring a high level of public awareness of the risks, threats and ways of protecting their information systems / networks from undesirable effects.

Целью статьи является рассмотрение вопросов связанных с обеспечением безопасности государственных информационных систем в Российской Федерации. Актуальность этих вопросов обусловлена в первую очередь тем, что с каждым годом в России не уменьшается число кибератак (наносящих значительный ущерб государству) на различные сферы её экономики, в том числе, на её государственные информационные системы. Несколько лет назад начала реализацию национальная инициатива в области кибербезопасности – NICE ( « The National Initiative for Cybersecurity Education » ), что не обойдено вниманием российских и других специалистов в области информационной безопасности. К основным направлениям защиты информационной собственности отнесены: охрана (государственной, служебной, коммерческой, банковской, налоговой, страхования, персональных данных и др.) тайн и интеллектуальная собственность. Государственные информационные системы (ГИС) включают информационно-технологические средства и системы, при создании которых опираются на передовые научные изыскания, такие как знания, передовые технологии (ноу-хау) и др. и являются неотъемлемой частью и достаточно сложной системы государственного управления. Предметом исследования являются ГИС, как основа управления государственных органов. В работе первоочередное внимание уделено современным тенденциям в области обеспечения защиты информации ГИС, краткому обзору законодательства в области ГИС и критической информационной инфраструктуре.

With the advent of the era of big data, the Internet is becoming increasingly inseparable from the life, studies and practice of modern students. The Internet is a double–edged sword. By providing students with convenient opportunities to live and study, issues of online education in the field of information security, such as online intimidation, dissemination of false information, continue to attract people’s attention. Education in the field of network information security for students is associated with the healthy growth of students, the stability of the whole country, the economy and the livelihood of the whole society. Based on this, this article analyzes the current situation in the field of network information security of students’ education in the context of big data, and measures are being taken to strengthen the training of students’ network information security in the context of big data.

Information security acts as the basic concepts of modern international relations. The level of penetration of information technologies and global networks into society is directly related to the level of development of the country. The Russian Federation has undertaken a number of foreign policy initiatives aimed at ensuring international information security and proclaiming the transparent course taken by the country to create conditions for the establishment of a full-fledged international legal regime for the formation of a secure information environment. The article discusses the main trends in the formation of an international regime to ensure information security. It is revealed that international cooperation makes it possible to establish problem-oriented approaches to identifying threats from other states to the internal information infrastructure and critical facilities of the state in order to undermine territorial integrity. The author comes to the conclusion that interstate agreements in the field of international information security make it possible to establish problem-oriented approaches to identifying threats from other states to the internal information infrastructure and critical facilities of the state in order to undermine territorial integrity. At the same time, the development of joint measures for the development of normative legal norms of international law determined the stages of achieving the specified safety indicators, resource provision and legal support. In order to develop legal support for international information security, further interstate cooperation is necessary in order to seek to increase interaction and improve the international legal framework for the implementation of specific joint initiatives in the field of international information security.

Advanced encryption and decryption strategies are of great significance for information protection and data security. Visual optical information encryption and decryption technology plays an important role in the field of information security. However, the current optical information encryption technologies have shortcomings such as the need for external decryption equipment, the inability to read out repeatedly, and information leakage, which hinder their practical application. By combining the excellent thermal response characteristics of the MXene-isocyanate propyl triethoxy silane (IPTS)/polyethylene (PE) bilayer and the structural color generated from the laser fabricated biomimetic structural color surface, an approach of encrypt, decrypt, and transmit information has been proposed. The microgroove-induced structural color is attached to the MXene-IPTS/PE bilayer to form a colored soft actuator (CSA) to realize information encryption and decryption, and information transmission. Benefiting from the unique photon-thermal response of the bilayer actuator and the precise spectrum response of the microgroove-induced structural color, the information encryption and decryption system has the advantages of being simple and reliable, which has the potential application in the field of optical information security.