Concept Of Information Security Research Articles

OHDSI-compliance: a set of document templates facilitating the implementation and operation of a software stack for real-world evidence generation

IntroductionThe open-source software offered by the Observational Health Data Science and Informatics (OHDSI) collective, including the OMOP-CDM, serves as a major backbone for many real-world evidence networks and distributed health data analytics platforms. While container technology has significantly simplified deployments from a technical perspective, regulatory compliance can remain a major hurdle for the setup and operation of such platforms. In this paper, we present OHDSI-Compliance, a comprehensive set of document templates designed to streamline the data protection and information security-related documentation and coordination efforts required to establish OHDSI installations.MethodsTo decide on a set of relevant document templates, we first analyzed the legal requirements and associated guidelines with a focus on the General Data Protection Regulation (GDPR). Moreover, we analyzed the software architecture of a typical OHDSI stack and related its components to the different general types of concepts and documentation identified. Then, we created those documents for a prototypical OHDSI installation, based on the so-called Broadsea package, following relevant guidelines from Germany. Finally, we generalized the documents by introducing placeholders and options at places where individual institution-specific content will be needed.ResultsWe present four documents: (1) a record of processing activities, (2) an information security concept, (3) an authorization concept, as well as (4) an operational concept covering the technical details of maintaining the stack. The documents are publicly available under a permissive license.DiscussionTo the best of our knowledge, there are no other publicly available sets of documents designed to simplify the compliance process for OHDSI deployments. While our documents provide a comprehensive starting point, local specifics need to be added, and, due to the heterogeneity of legal requirements in different countries, further adoptions might be necessary.

DATA PROTECTION AND CONSTITUTIONAL RIGHTS: THE INTERSECTION OF PRIVACY AND INFORMATION SECURITY

In today's digital world, successful governance is impossible without well-deployed digital services and the active participation of individuals who are aware of innovations and their rights. With the continuous advancement of technology, the concept of data protection and information security has become a major source of debate because every corporation has digital services that are tasked with protecting the data of its employees from various third-party interventions. Privacy has now developed as a human right across the world, and it is recognized as a basic right by the Constitution. The courts of law have issued significant decisions, including recommendations and verdicts. This article addresses the legal trends related to data protection.

ANÁLISE DA SEGURANÇA NA TRANSMISSÃO DE DADOS/SEGURANÇA DA INFORMAÇÃO

This article aims to carry out an analysis about information security, areas that specifically deal with the protection of one or more sets of data, in the sense of preserving information and its respective values within a company, or for an individual in particular. Within this context, it is important to remember that the concept of data security or information security is inserted within a larger context, which is computer security, that is, the security of the systems themselves. Ensuring information security in a company, for example, is extremely necessary within a highly competitive market. It is worth emphasizing that information security works based on three tangents, which are confidentiality (where access to data is limited by permissions); integrity (the guarantee of the veracity of information); availability (access to information easily)

Ukraine’s Information Security Policy: at the Crossroads between Russia and the West

CEEOL: https://www.ceeol.com/search/article-detail?id=1197952 This is a study of the development of Ukraine’s information policy within the dichotomy of two concepts of information (or cyber) security – those of Russia and the West. Ukraine may have chosen a policy of integration into Western security structures; however, for decades, it has been firmly connected to the traditions and approaches inherent in the Russian concept of information security. This phenomenon has been observed in the positions taken by researchers and lawmakers in the country and causes some ambiguity. Here, we present an assessment of the contradictory characteristics of Ukraine’s information security policy and compare its Russian influence with its orientation to the West. We conclude that Ukraine is still balancing between these two spheres. Exposure to Russia’s concept remains in academic circles, but the legal and normative sphere tends to follow the Western approach; and gradually, Ukraine’s subjectivity in information security issues is developing at the international level.

Personal information security as a social problem

Informatization of society has led to a set of fundamentally new problems that humanity has not faced throughout the history of its development. These are the challenges of ensuring the information security of man, society, the state and the entire biosphere of our planet. The article considers the key information security issues of the contemporary world. The authors focus on the nature and essence of information, analyze the concept of information security in a wider and narrower interpretations. They argue that the practices of applying information technologies without ensuring the necessary information security significantly increase the likelihood of information threats, primarily the information inequality, the possibility of manipulations, cyber illnesses, computer crimes, information warfare, etc. Artificial intelligence is one of the key elements of the information age, which is already able to analyze, process and classify huge volumes of rapidly changing and extremely heterogeneous data; thus, the widespread use of artificial intelligence technologies becomes an essential factor in ensuring information security. Artificial intelligence can facilitate the free exchange of information, but it can also be used to spread disinformation and fake news. At the same time, the content moderation for information hygiene purposes can be based on the artificial intelligence algorithms. Thus, artificial intelligence technologies can and should serve as a means of ensuring personal information security. This means that security measures must be comprehensive and include not only instrumental and technological but also ideological and cultural measures - educational in nature, providing the appropriate orientation of the individual.

Цветовой дизайн персональных концепций безопасности

The active use of the colour decoration of human life has not yet been accompanied by examining its presence in the personal security concepts of various subject categories. Meanwhile, personal security concepts are mental structures that integrate subjective representations, needs, values and attitudes in the security field and, therefore, determine a person’s daily activity and actions in special situations. The aim of this paper is to study the colour design of university students’ personal safety concepts. The research methods are an associative experiment and a conversation. The work uses the results of 9 series of experiments conducted from 2018 to 2023 on 1313 university students. Based on the study results, using colour in designing students’ personal safety concepts is confirmed. Colour design is more in demand when constructing personal danger concepts than personal safety concepts. In personal safety concepts, green, blue and white are more often used, in personal danger concepts such colours as red, black and grey are more frequently applied. In designing personal security concepts, not only “pure” colours are employed, but also “mixed” ones, as well as shades of colour perception. Colour design is more likely to be traced in personal security concepts of a generalised level (personal concepts of security / danger) than in specialised concepts (personal concepts of information and psychological security, personal concepts of security in life, in a profession, etc.). The presented materials expand the scientific understanding of personal security concepts. They can be used in the practice of environmental management of human life to promote its security, comfort, and safety. A more targeted study of the colour perception features from positions relevant to the interests of building personal security concepts by various subject categories is required.

Image Hiding in an Audio File Using Chaotic Method via Genetic Algorithm

Information security is one of the most important parts of information technology and communication in the modern world. Information security has gained a lot of attention recently due to the need to transmit information through global communication channels and through the Internet. In this research, the genetic algorithm is used to develop the chaotic maps that are randomly generated by the chaotic system to find the best map by which the locations of image data are inferred to be hidden in the audio. An average image size of 64×64 pixels is used to be hidden in an audio recording of 7 seconds duration at average resolution specifications. The results show that one of the chaotic maps created at the 739 generations is the best in determining image byte hiding locations in the high-frequency band of the audio. The quality measures show the cover audio that includes the hidden image is not much different from the original input one. This confirms the validity of the proposed method and the good selection of hiding locations in accordance with information security concepts.

Цветовой дизайн персональных концепций безопасности

The active use of the colour decoration of human life has not yet been accompanied by examining its presence in the personal security concepts of various subject categories. Meanwhile, personal security concepts are mental structures that integrate subjective representations, needs, values and attitudes in the security field and, therefore, determine a person’s daily activity and actions in special situations. The aim of this paper is to study the colour design of university students’ personal safety concepts. The research methods are an associative experiment and a conversation. The work uses the results of 9 series of experiments conducted from 2018 to 2023 on 1313 university students. Based on the study results, using colour in designing students’ personal safety concepts is confirmed. Colour design is more in demand when constructing personal danger concepts than personal safety concepts. In personal safety concepts, green, blue and white are more often used, in personal danger concepts such colours as red, black and grey are more frequently applied. In designing personal security concepts, not only “pure” colours are employed, but also “mixed” ones, as well as shades of colour perception. Colour design is more likely to be traced in personal security concepts of a generalised level (personal concepts of security / danger) than in specialised concepts (personal concepts of information and psychological security, personal concepts of security in life, in a profession, etc.). The presented materials expand the scientific understanding of personal security concepts. They can be used in the practice of environmental management of human life to promote its security, comfort, and safety. A more targeted study of the colour perception features from positions relevant to the interests of building personal security concepts by various subject categories is required.

On the question of the genesis of the concept of information security as a component of national security

This article is devoted to the genesis of the concept of information security. Historical interpretations of this concept are analyzed, different interpretations of this concept by domestic scientists are given. The relevance of information security, in particular, during a full-scale war with the Russian Federation was emphasized.
 The purpose of the study is the analysis of theoretical developments regarding the evolution of the concept of information security through the clarification of its essence as the main and integral direction of national security.
 It is emphasized that when considering the normative definition of information security, it should be noted that the current legislation of Ukraine does not contain an appropriate detailed interpretation of this concept, but normative acts concerning information security issues naturally consider it in the context of a more general concept of national security.
 Information security is not only an independent component of national security, but also an integral part of political, economic, defense and other components of national security, since all types of relations between subjects of the information society are based on the consumption and exchange of information.
 It has been proven that the information security of Ukraine should be considered as a state in which self- preservation, stable and progressive development of the information sphere is ensured in the presence of real and potential threats, in particular the security of information infrastructure, information space, information resources, information processes and their subjects, and as well as the achievement of relevant national goals and realization of national interests in the information sphere.
 It is proposed to consider information security as a permanent process of activities of competent authorities, aimed at prevention, countering threats in the information sphere, the use of active measures of information influence, as well as a set of conditions of such activity, which are implemented and can be controlled for a long time.

On Improving the System of Statistical Indicators of the Secure Use of Digital Technologies

The article presents some results of the study of problems of improving the secure use of digital technologies in the new stage of the development of information and communication technologies (ICT). The relevance is explained by the fact that the use of ICT in the current conditions of the development of the information society and the digital transformation of the economy not only leads to the known positive socio-economic effects but also presupposes the inevitable negative impacts. The objective of protecting the interests of an individual, society, and the state from internal and external information threats is related to the concept of information security. The expansion of its boundaries – from low-level technical measures for the protection of information systems (computer security and cybersecurity) to the strategic management of economic production in this context – has created a new relevant category, digital security, and dictates the expediency of combining these terms into a general concept of «secure use of digital technologies».The author analyzed the existing methodological approaches to the statistical study of the problems under consideration and developed several proposals for improving the corresponding system of statistical indicators. Methods of descriptive statistics, correlation-regression analysis, and machine learning methods (in particular, various variants of classification algorithms based on decision trees) were used in the analysis to achieve this goal.While studying information and methodological sources which are indirectly related to statistical resources (a well-known web platform that brings together researchers in the field of data science and machine learning, Kaggle, was examined), the author analyzed the results of a thematic survey of companies. As a result of modeling the influence of the «secure use of digital technologies» factor on the efficiency of economic activity, it was established that its variation by about a third determines the level of economic efficiency of the company within the presented population. The application of machine learning techniques has resulted in acceptable quality predictive models for classifying companies by economic activity in the same factor context.From a practical point of view, according to the author, the application of the proposed approach to the formation of a system of statistical indicators shall be beneficial for managing processes that ensure the security of the use of digital technologies at the enterprise, region, and country level as a whole.

Information Security: Modern Realities

The article discusses the concept of information security, its general meaning, ways to strengthen it, considers ways to protect personal data, considers the concept of information security. Some advice is given to ordinary users.

Digitalization and cybersecurity in the context of national security of the Russian Federation: challenges and solutions

This paper examines the current state of digitalization and cybersecurity of the Russian Federation in the context of ensuring national security of the state, as well as the impact of these factors on the social sphere. The relevance of the study is due to the increasing number of information threats to modern society. Thus, the number of attacks on Russian cyberspace, which has become another space for the socio-economic processes of the state, increased significantly in 2022, and unfriendly countries openly declare a cyber war waged against Russia. In this regard, the purpose of the work was to study the current state of digitalization and cybersecurity in the Russian Federation using the SWOT analysis method, as well as to develop practical recommendations based on the data obtained. Russia has all the prerequisites for further digitalization and transition to «Industry 4.0», although there are still a number of obstacles to the final completion of the «Revolution 4.0». However, to complete this process, it is necessary to overcome obstacles in the form of imperfections of the regulatory framework, uneven process of regional digitalization, dependence on foreign technologies, and personnel shortages. For the further development of this sphere, it is necessary to systematize national legislation and create a unified information security code that would contain a specific definition of the boundaries of «information security» and «cybersecurity». Therefore, it is also necessary to update the concept of information security and adopt the concept of cybersecurity. Modern geopolitical conditions are both a threat and a window of opportunity. The political leadership should provide the maximum possible support to the domestic IT sector in order to stop the outflow of personnel and finally eliminate dependence on information technology. With the right approach, the Russian Federation will be able to become a world leader in the field of cybersecurity and use this area to develop cooperation with states from around the globe.

Analysis on Network Information Security Protection Technology of Intelligent Terminal Power Monitoring System of Substation under the Support of Multimodal Multimedia Information

According to the perspective of multimode multimedia data, the protection technology of network information security is mainly discussed. The theoretical basic research is outlined, its meaning, level, reasons, and consequences are expounded, and the future research content and development trend are discussed. With the rapid development of online services and mobile technology, the world has entered the era of multimedia big data. There have been a large number of scientific studies in the multimedia industry, which explain the various fields of big data, including the capture, storage, reference, excavation, and search of multimedia big data. The article expounds the specific concept of power monitoring system network information security, establishes the safety regulations of electric power monitoring system, formulates the corresponding ideas for the safety guarantee level of electric power monitoring system, and promotes the long-term development of China’s electric power enterprises. The safe operation of the power monitoring system is directly related to the stable operation of all power supply systems and even the social economy. At this stage, the situation of network security management in China’s power monitoring system is still not optimistic. We take the multimode multimedia data, organize the research dynamics of the network security protection technology, and discuss the future research trend.

The Constitutionalization of information security in Russian Law: improving the theoretical model

Research discusses one of the constitutional amendments of 2020. In accordance with the new version of paragraph “m” of Part 1 of Article 71 of the Constitution of the Russian Federation, the exclusive powers of the Russian Federation include issues of ensuring the security of the individual, society and the state when applying information technologies, and digital data turnover. The consolidation of the problem of information security at the constitutional level determines the need for a partial modernization of its theoretical model. Modification and revision of some of its components will lead to higher effectiveness of constitutional regulation and improve the quality of application of industry legislation in the field of information technology and information protection. The purpose of the research is to investigate the main directions of enhancing the theoretical model of information security in terms of constitutional changes. The employed research methods are formal-legal, logical, system, statistical, structural-functional, modeling, and forecasting. The outcome of the study can be outlined as follows. The research clarifies the concept of information security, proposes to generalize the range of basic subjects of public relations related to information security, expand their rights and obligations, highlight the constitutional and sectoral legal regimes of information protection, and strengthen responsibility for offenses in the information sphere. In conclusion the study argues that updating the theoretical model of information security of the Russian Federation should be carried out in the following key areas: firstly, developing information security targets expressed in strategic and program documents of the state; secondly, clarifying classification of information security threats; thirdly, expanding legal regulation density; fourth, strengthening the law-enforcement mechanisms of information security; fifth, establising and maintening optimal balance between legal, technical and ethical regulation of information technologies, primarily digital technologies; and finally, definiing acceptable and unacceptable boundaries of application of information technology and digital data in people's lives.

ПРОГРАММНАЯ РЕАЛИЗАЦИЯ ЗАЩИТЫ ОТ НЕСАНКЦИОНИРОВАННОГО ДОСТУПА

Information security tools are an integral part of system users. The concept of information security implies the development and expansion of the scope of innovative technologies in information processing. To keep the information security system up to date, it is necessary to periodically update and supplement the structure of information protection, information security threat model and hardware and software complex. This paper analyzes the existing methods of information protection and proposes the implementation software system modules for personality recognition by photo and video, voice recognition, deep neural network and the creation of configuration for its weights file. Based on the generated data set, a method for synthesizing the parameters of a mathematical model of a convolutional neural network, presented as an array of real numbers, which are unique identifiers of a personal computer user, has been developed and proposed. This study uses the features of simulation modeling of user authorization systems, as well as the error function when compiling a neural network model. The training model of multi-factor biometric authentication is trained using categorical cross-entropy. The training sample is generated by adding distorted images from the database by changing the receptive fields of the convolutional neural network. The objective of this study is the application of new methods and means of protecting information of workstations from information threats. The result of the study is the developed information security system designed to ensure the information security of users of personal computers and workstations of enterprises.

International information security: universal legal dimension

The article is devoted to the development of the system of legal support of international information security. A scientific understanding of the concept of international information security and the main threats in this area has been carried out. The strategic objectives and main directions of the state policy of the Russian Federation in the field of international information security are analyzed. The current state of the system of legal support of international information security and the main problems in this area are investigated. A systematic analysis of various approaches of states regarding the applicability of the norms and principles of current International Law to the ICT environment, the development and adoption of new rules, principles and norms related to security in the ICT environment. Of particular interest from the standpoint of International and national Law is the problem of voluntary and non-binding norms of responsible behavior of states in the ICT environment. The research conducted by the authors made it possible to scientifically substantiate conclusions from interdisciplinary positions regarding the priority vectors of the development of the system of legal support for international information security at the universal, regional and bilateral levels in the conditions of geopolitical confrontation of the leading world powers.

Information Security's Place in the National Security System: Actual Problems of Information Law

The work is devoted to the study of information risks in the national security system. Today's challenges and risks in the information sphere force us to look for new relationships between industries to improve the quality of life and reduce information threats. The presented information threats require identification and leveling in the future if such external restrictions arise. The article reveals the role and place of information security in the national security system of the country. This paper discusses the basic concepts of information security in the system of ensuring the national security of Russia, as well as the types of threats to information security, methods and means of combating these threats. This article examines the problem of legal provision of information security. According to the results of the study, the author concludes that the information policy of the Russian Federation is the regulator of public and private legal relations, through which the strategic objectives of the state are realized. Information security, as a type of national security, by its regulatory influence permeates all the diversity of social relations arising in the process of human and state life. It follows from this that the legislator should improve not only the norms of a public-legal nature containing prescriptions and prohibitions, but also private-law norms, the construction of which is based on permissive (dispositive) regulation.

Russian Strategic Communication - Endless Information Warfare

Strategic communication determines the communicative aspects of national soft power, and it is an integral part of the national security structure of a modern state. Russian military thought makes a substantial deviation from the term „strategic communication“, defining and applying the communicative contents of soft power by the terms „information security“ and „information warfare“. Russian understanding uses these forms of strategic communication in a constant struggle for supremacy and control of all information domains. Thus, Russia declares a permanent state of war in the information sphere. Based on a comprehensive analysis of the Russian scientific and operational approach to the interpretation of strategic communication, the article provides insight into Russia’s basic idea and genesis of information warfare. By reviewing strategic documents and applied organisational forms, the paper contributes to understanding the vital level of strategic communication on the applied aspects of national security of the Russian Federation. The article elaborates application forms of the Russian’s concepts of information security and information warfare, information operations, and psychological operations. Paper offers a case of Russia’s information warfare toward Serbia. Conclusively, Russia is very active in an informative sphere in international relations, which should have in mind in the relations with that power.

National idea in the Republic of Kazakhstan: electronic media and information security

The article raises the question about the importance of interaction with the actualinterests of society in the development of the national policy of a sovereign state. In theconditions of the existence of a democratic media society, it is necessary to pay attention to therisks that may arise when implementing the concept of information security in the media spaceof the country. The media should use their own professional tools to implement this concept,being the main non-subjective intermediary between the government and society.

The "Securitization" theory and the problem of political rhetoric in social networks

In the usual sense, "information security" means a set of measures necessary to protect against leakage or hacking of computer systems, programs and data. However, recently the concept of security has begun to change - in connection with this, the approach to the concept of information security has begun to be filled with new social and political meanings. Cyberspace is a defining feature of modern life. Therefore, the concept of "national security" began to extend in terms of "Cyber Security Politics", concept including new reference objects, such as Internet networks and messengers, socio-political threats and challenges. The emergence and development of this approach was largely influenced by the theory of speech acts of the Copenhagen School "securitization" concept. The main purpose of the study is to determine how "cybersecurity" is connected in general with the theory and practice of state security policy, to determine the role of politicians and media specialists’ rhetoric in social media, in election campaigns; and to show the methods of speech acts influence on ensuring and maintaining information/Internet security. Based on content analysis and discursive analysis of speech acts used in social media such as Facebook, Twitter and others, the following results were obtained: the importance of posing the problem of the social threat of social media to the formation of mass consciousness is indicated, the need to solve the problem at the legislative level is pointed. Cybersecurity threats are one of the main national security, public safety, politics and economy challenges every nation faces in XXI century. The existence of numerous cyber security issues on various spheres of life naturally increase political interest in resolving them. The novelty of the study lies in the analysis of the Kazakhstani segment of the Internet, comparative analysis with problematic cases of cyber threats in the USA and Russia. The results of the study are of practical importance for the media professionals, content managers of social media, in order to mainain the Internet security. Keywords: cybersecurity, concept of “securitization”, preventing threats and challenges of a socio-political nature, social media, rhetoric.