Ensuring Information Security Research Articles

The Impact of ChatGPT on Finance Technology

With the rapid development of science and technology, financial technology has risen rapidly around the world and has become a key driving force in the financial field. The emergence of natural language processing models such as ChatGPT, has brought new possibilities to financial services. This paper mainly studies the role and impact of ChatGPT in financial technology. Focus includes its applications in customer service, investment advice and risk management, as well as the potential impact of these applications on financial operations and user experience. The purpose of the research is to gain an in-depth understanding of the application of ChatGPT in the financial field, and reveal its potential contribution to improving financial service efficiency. This study uses literature analysis, case analysis and data analysis. Through systematic combing of relevant literature, we can understand the development status of ChatGPT in financial services. The research of this paper found that ChatGPT has a significant influence in the field of financial technology. Its application in customer service can improve service efficiency and provide users with faster and more personalized services. However, to ensure information security and privacy protection, financial institutions need to carefully weigh the pros and cons when adopting ChatGPT technology.

MEMBERSHIP IN CYBER FRIENDS AS A PROMISING ORGANIZATIONAL AND LEGAL FORM OF PARTICIPATION OF CITIZENS OF THE REPUBLIC OF BELARUS IN SECURITY PUBLIC ORDER

A new reality and a new type of social relations have formed in the information space, and, accordingly, a new type of social threats. The influence of the information space on the state of public security is obvious, which determines the need for citizens to assist law enforcement agencies in ensuring information security on the Internet, as well as in public places. This article substantiates the need to consolidate cyberdrugs as one of the promising organizational and legal forms of citizen participation in the protection of public order. The article examines the influence of the information space on the state of public safety and public order, as well as international experience and measures to counteract the influence of negative information on the considered public relations. The analysis allows us to consider cyberdrugs as a promising organizational and legal form of citizen participation in the protection of public order.

Information Security and Privacy Management in Intelligent Transportation Systems

With the global digitalization of services, passenger Intelligent Transportation Systems (ITSs) have emerged as transformative components, yet the practical implementation of state-of-the-art measures to ensure information security and privacy presents substantial challenges. In this article, we propose a framework for information security and privacy management. The framework is validated through two empirical studies. First, the framework is used to extract data during the literature review defining state-of-the-art aspects and measures. Second, a survey-based analysis of running passenger ITSs in selected regions of the European Union provides insights into real-life ITS implementations, enabling a thorough comparison with the proposed state-of-the-art measures. The study also showed that the proposed framework depicts some dependencies between measures, and, thus, using its matrix structure for the state of information security and privacy management in the organization helps to cross-check the usage of policies or methodologies by the organization departments. Our findings resulted in recommendations for organizations developing ITSs to enhance their information security and privacy management systems and bridge the gap between research proposals and practical implementation.

Formation of Drivers of Sustainable Development: Administrative and Legal Support to Ensure Information Security

Formation of Drivers of Sustainable Development: Administrative and Legal Support to Ensure Information Security

METHODOLOGY OF STEP-BY-STEP DESIGN OF INVESTMENT PROJECT PORTFOLIO

Project portfolio management is an important stage in the project life cycle. The project portfolio selection phase is the most important in the portfolio life cycle. Until now, the optimal solution to the problem of this phase has not been found. A methodology for step-by-step design of a portfolio of investment projects is proposed. The first is the formation of a portfolio of projects based on mathematical programming and modeling methods. The second is the evaluation of the effectiveness of the selected projects by the method of analysis of hierarchies. The third is the distribution of investors' funds between the projects of the project portfolio on the basis of playing with nature. The evaluation of the effectiveness of the three projects was carried out by the method of analysis of hierarchies, and the criteria are the following performance indicators: the indicator of scientific and technical efficiency, the economic indicator, the social indicator and the indicator of ensuring information security. Each criterion has four subcriteria. The results of the calculation determine the effectiveness of projects, which allows resources to be allocated between projects.

Information security in the Republic of Moldova in the context of the European integration process

In this article, the author analyze the information security phenomenon of the Republic of Moldova in the context of the European integration process of our country, in the conditions of the war started by Russian Federation in Ukraine. It is highlighted that at the present time, the Republic of Moldova does not have sufficient protection of the public sector and the private sector against incidents, risks and threats related to the security of networks and IT systems, therefore in the context of the obligations assumed by the Republic of Moldova with reference to securing information in the context of the European integration process, a legal basis was created. The author mention that the phenomenon of Russian media propaganda represents one of the main challenges for the information space of the Republic of Moldova. In conclusion, the author emphasize that informational threats threaten the stability, national and political security of the state, and informational aggressions in the chain can constitute an informational war, in which the specialized information services froabroad foreign countries. Ensuring information security requires a joint effort between intelligence services, academic environments and non-governmental organizations. The purpose of the information security strategy of any state is to legally correlate and systematically integrate the priority areas with responsibilities and powers to ensure information security at the national level, intended to protect the sovereignty, independence, territorial integrity of the state.

Effective Communication: Digital, Informational, Sociolinguistic Aspects (European Experience)

The modern era of digital technologies and globalization has led to significant changes in approaches to communication. The present paper analyzes how digital, informational and sociolinguistic aspects influence the processes of effective communication, with a special focus on the European experience. The impact of digital transformation, information transparency, linguistic diversity and cultural adaptation on communication processes in modern society has been considered. The research has found that digitalization contributes to increased accessibility and speed of communication, but also poses challenges related to the digital divide and data protection. Information transparency and accessibility proved to be crucial to ensuring trust and effective exchange of information. Sociolinguistic aspects, especially language and cultural adaptation, have become of key importance to the development of effective intercultural communication, which is critical in a multilingual and culturally diverse European environment. The ability to adapt communication approaches to the specifics of each culture and language context has proven to be crucial in achieving success in international interaction and cooperation. Awareness of the cultural differences, norms, values and language of each target audience helps create more accurate and effective communication strategies, ensuring greater engagement and efficiency. Practical applications of these findings may involve the development of communication strategies that take into account cultural diversity and language, as well as ensure information security and transparency.

Technology for using special encryption functions in PostgreSQL

Cryptographic encryption mechanisms in the open source PostgreSQL server DBMS are discussed. Special high-level and low-level functions of symmetric encryption of the Pgcrypto module for ensuring information security of data are analyzed. The analysis of special functions of the third-party GPG program is performed, which allow performing asymmetric encryption in the PostgreSQL database server. A combined data encryption technology in database tables is proposed, using a hierarchy of keys (asymmetric and symmetric encryption) with a passphrase, which is also encrypted to ensure better protection of encrypted data. This technology is being tested on the example of developing a function for encrypting data, which is triggered by a trigger when inserting rows into a database table, and a data decryption function when reading encrypted data from a table.

Information Security Risk Measurement Using Information Security Index (KAMI) at Information Technology And Database Center (PTIPD)

UIN Sunan Gunung Djati Bandung, as a rapidly growing higher education institution, faces great challenges in ensuring information security. This research aims to improve information security at UIN Sunan Gunung Djati Bandung by applying the Information Security Index (KAMI). This method is used to analyze information security risks with the aim of identifying potential threats, vulnerabilities, and possible impacts. The results of the analysis revealed that there are security measures already in place, but also highlighted areas that require further attention. By achieving a final score of 415, signifying category II (Basic Framework Fulfillment), this research made a significant contribution to the understanding of information security in higher education. Through the application of WE, this research not only provides a comprehensive overview of the status of information security at UIN Sunan Gunung Djati Bandung, but also opens up opportunities to identify and address potential threats more effectively. Thus, the results of this study have important implications in improving information security and protection in higher education institutions, and can be a valuable guide for similar institutions in their efforts to mitigate information security risks.

Dynamic encryption method for MQTT communication

Internet of vehicles (IoV) system is mixed-criticality, and different functions have different requirements for information security and real-time performance. Thesis aims to design a comprehensive dynamic encryption algorithm to ensure the function of the IoV system while taking into account the security level required by different critical functions. The algorithm can flexibly coordinate the security requirements between different functions, improve the efficiency and reliability of the system to the greatest extent, and ensure information security. In order to verify the performance of the algorithm, thesis uses Pycharm platform to carry out simulation experiments through python programming and verifies the feasibility of the algorithm.

Integrating Full-Color 2D Optical Waveguide and Heterojunction Engineering in Halide Microsheets for Multichannel Photonic Logical Gates.

Ensuring information security has emerged as a paramount concern in contemporary human society. Substantial advancements in this regard can be achieved by leveraging photonic signals as the primary information carriers, utilizing photonic logical gates capable of wavelength tunability across various time and spatial domains. However, the challenge remains in the rational design of materials possessing space-time-color multiple-resolution capabilities. In this work, a facile approach is proposed for crafting metal-organic halides (MOHs) that offer space-time-color resolution. These MOHs integrate time-resolved room temperature phosphorescence and color-resolved excitation wavelength dependencies with both space-resolved ex situ optical waveguides and in situ heterojunctions. Capitalizing on these multifaceted properties, MOHs-based two-dimensional (2D) optical waveguides and heterojunctions exhibit the ability to tune full-color emissions across the spectra from blue to red, operating within different spatial and temporal scales. Therefore, this work introduces an effective methodology for engineering space-time-color resolved MOH microstructures, holding significant promise for the development of high-density photonic logical devices.

Ways to implement risk management in the fight against organised crime

The aggravation of the state of operations under martial law poses a threat to a wide range of rights, interests of individuals and society. To prevent further deterioration of the crime situation, it is necessary to find progressive mechanisms to combat organised crime. The purpose of this study was to formulate scientifically sound proposals for the development of mechanisms for combating organised crime and counteracting the establishment of corrupt ties by criminals in institutions, organisations, and enter- prises, especially those belonging to the national security system. According to the purpose and specifics of the subject under study, the historical approach, comparative legal, and systemic-structural methods were employed. The study outlined the content of the processes of organising the management of subsystems involved in ensuring national security. The need to ensure its effective implementation is evidenced by statistical data on the complication of the operational situation in certain regions, the general socio-po- litical situation and threatening trends in the criminalisation of society. The state of stagnation does not correspond to the course of the most secure development of society, and therefore the main task of the state is to actively protect citizens from dangerous anti-social, criminal, and violent manifestations. It was sub- stantiated that the success of counteracting these negative phenomena depends primarily on the unification of certain mechanisms at both the international and domestic levels, including standards. It was proved that legal forms of combating organised crime should be improved towards the betterment of standards in the risk management system, specifically, ensuring information security, and stimulating the protection of information flows. It was argued that the introduction of the term “compliance audit” into certain laws of Ukraine defining the basic principles of implementation of the state financial control, audit of financial statements, and organisation of audit activities will provide a positive effect in combating these negative phenomena. The findings of this study can serve as the basis for the preparation of forecast and programme documents by supreme audit institutions, anti-corruption bodies, and the business community to counteract manifestations of organised crime, identify and eliminate corrupt ties with criminals

Cybersecurity in international commercial arbitration (Legal vision)

Attracting foreign investment requires assurances from states to safeguard against infringements and losses. Arbitration serves as a crucial factor in enticing investors. However, for arbitration to be effective, ensuring information security is imperative. Maintaining confidentiality and preventing disclosure are vital, yet they pose challenges. International experiences indicate that companies might accept unjust settlements to prevent revealing their trade secrets. To tackle these obstacles, various arbitration bodies have endeavored to establish legal mechanisms for ensuring information security. This involves targeting individuals involved in arbitration proceedings and enhancing technical infrastructure. For instance, the International Council for Arbitration (ICCA), in collaboration with the New York State Bar Association (NYSBA) and the International Institute for Conflict Prevention and Resolution (CPR), devised an Electronic Security Protocol for Commercial Arbitration. These initiatives aim to shield participants in international commercial arbitration from the risks of divulging sensitive information due to breaches in information security. The protocol offers a framework of guidelines for arbitrators and parties on safeguarding confidential information throughout the arbitration process. It encompasses aspects like confidentiality agreements, data protection, access control, security measures for electronic devices and data, and procedures for handling incidents. By adhering to these guidelines, arbitrators and parties can uphold the protection of confidential information, thus ensuring that international commercial arbitration remains a secure platform for dispute resolution.

Подходы к оценке защищённости информационных систем с криптографическим преобразованием объектов

The file system is one of the components of an information system, especially vulnerable to attacks by intruders. Consequently, it is impossible to increase the security level of an information system without ensuring a sufficient level of protection for file system objects, attacks on which affect, among other things, the interests of users of information systems. In order to make decisions on the use of certain mechanisms for protecting file system objects, a regular assessment of their current level of security is necessary. The purpose of the study. Building a model for assessing the security of an information system with cryptographic transformation of file system objects in the context of an attacker using a wide range of attacks on the file system. Materials and methods. The analysis of scientific publications on the problem of assessing the security of information systems allowed us to propose a methodology for assessing the security of information system assets. The methodology is based on a combination of a probabilistic approach to the analysis of possible scenarios for the implementation of threats in information systems for file system objects, expert assessments of basic attack events and representations in the form of attack trees. The threat implementation representation in the form of attack trees is used to simulate the actions of an attacker. Results. A structural model of an information system with cryptographic transformation of objects has been developed. Its valuable assets have been allocated. The list of the main threats to information security relevant for such systems is defined. Possible variants of the ways of implementing attacks and possible scenarios of the development of events in the processes of transferring file system objects with cryptographic transformation are modeled. A set of measures for the protection of information system objects with cryptographic transformation of objects is proposed. The calculation of the probabilities of attacks on an asset along the path determined by the attack tree, the possibility of implementing an attack, the degree of effectiveness of the proposed countermeasures is proposed. Conclusion. The presented methodology for assessing the security of an information system with cryptographic transformation of objects makes it possible to use well-known approaches in a comprehensive manner, and will be useful to developers and researchers in practical and scientific activities to ensure information security.

High capacity double precision image steganography based on chaotic maps

Steganography is the process of hiding confidential information within non-secret multimedia such that the 3rd party cannot distinguish if there is a secret message in it or not. Whereas cryptography is the technique of using mathematical concepts to convert information into unreadable codes via a key. This paper will propose two approaches, lossless and lossy image steganography. Both of them will use cryptography and steganography based on three different chaotic maps to ensure information security. In the cryptography part, two chaotic maps will be used to encrypt the secret information, while in the steganography section, one chaotic map is used to embed the message. The secret information will be concealed in the least significant bits (LSBs) of the double-precision image’s pixels. The double precision image is a high-quality image and can be represented in 64 bits per pixel for grayscale images, leading to a very high redundant bit. Simulation results show a high embedding capacity of 60.938% and 400% for lossless and lossy approaches respectively with a peak signal to noise ratio (PSNR) reach of 69.964 dB. Furthermore, this system is extremely secure due to the use of 3 chaotic maps with key space 2448.

Feature Selection using the Concept of Peafowl Mating in IDS

Cloud computing has high applicability as an Internet based service that relies on sharing computing resources. Cloud computing provides services that are Infrastructure based, Platform based and Software based. The popularity of this technology is due to its superb performance, high level of computing ability, low cost of services, scalability, availability and flexibility. The obtainability and openness of data in cloud environment make it vulnerable to the world of cyber-attacks. To detect the attacks Intrusion Detection System is used, that can identify the attacks and ensure information security. Such a coherent and proficient Intrusion Detection System is proposed in this paper to achieve higher certainty levels regarding safety in cloud environment. In this paper, the mating behavior of peafowl is incorporated into an optimization algorithm which in turn is used as a feature selection algorithm. The algorithm is used to reduce the huge size of cloud data so that the IDS can work efficiently on the cloud to detect intrusions. The proposed model has been experimented with NSL-KDD dataset as well as Kyoto dataset and have proved to be a better as well as an efficient IDS.

Informational and legal characteristics of the main components of the state security sector

The article is devoted to the study of the informational and legal characteristics of the main components of the national security sector of the state. It is noted that the category “national security” reflects the qualitative state of the regulation of social relations in the state and emphasizes the fact that the security of the state consists in ensuring national identification. It has been established that the provision of state security is structured through the differentiation of national security by sector-specific (includes: military security, public security, state security, cyber security, foreign policy security, environmental security, information security) and subject characteristics (includes the activities of authorized subjects). The concept of “state security sector” is defined as a set of legal relations, the content of which is the activity of authorized subjects to ensure national security as a whole, and in certain differentiated directions. Amendments to the Law of Ukraine “On National Security” are proposed.
 Attention is focused on the fact that the information and legal characteristics of the state security sector are an integral component of the national security of the state as a whole and its individual components. The importance of eliminating information threats has institutionalized a separate area of state security - information security. It was established that cyber security is an independent component of state security derived from information security, which emerged as a result of the development of digital technologies and the spread of the use of information and telecommunication systems for the purposes of information dissemination.
 The institutional system of ensuring information security is singled out, which is formed from a set of authorized subjects, which are grouped depending on their legal status and available powers in the field of information security as follows: 1) state bodies authorized to ensure national security; 2) bodies of executive power, which are empowered in the specified sphere of public relations; 3) law enforcement agencies; 4) auxiliary entities that can carry out separate activities aimed at ensuring information security.

The Influence of Digital Transformation of Higher Education on China University Teaching Management

With the rapid development of information technology, higher education is welcoming the era of digital transformation. This paper discusses the influence of the digital transformation of higher education on the management of China university teaching, and through the analysis of the relevant background, process and effect, deeply analyzes the comprehensive changes of the digital transformation on the education system. Digital transformation enables universities to build more advanced digital infrastructure, strengthen the digital management of teaching resources, and achieve a significant improvement in teaching efficiency. The comprehensive sharing and collaboration of information also provides more opportunities for cooperation between teachers and students, and promotes the overall upgrading of education and teaching. However, digital transformation has also brought a series of challenges. Information security, digital literacy of teachers and students, adjustment of management system and other issues need to be solved urgently. In the process of digital transformation, universities need to adopt practical strategies to improve the digital literacy level of teachers and students, ensure information security and flexibly adjust the management system. The digital transformation of higher education has a dual impact on the management of China university teaching, which not only brings brand-new opportunities for teaching, but also presents a series of challenges that need to be taken seriously. Only through comprehensive and in-depth understanding and response can universities better meet the future educational challenges in the digital age.

Investigation on the monolithically integrated chaotic optical transmitting chip based on parallel EAMs.

Chaotic optical communication ensures information security at the physical layer. However, the monolithic integration of lasers and lithium niobate Mach-Zehnder modulators remains a challenge, limiting the progress of integrated chaotic optical communication systems based on an electro-optic feedback. Here, we propose the monolithically integrated chaotic optical transmitting chip based on the parallel EAMs and validate its performance from the perspectives of phase portraits, fast Fourier transform (FFT), probability density function (PDF), largest Lyapunov exponents, and bifurcation. The results demonstrate the feasibility of the chip, which is beneficial for the miniaturization and integration of the system.

Real-time Cyber-Physical Security Solution Leveraging an Integrated Learning-Based Approach

Cyber-Physical Systems (CPS) has emerged as a paradigm that connects cyber and physical worlds, which provides unprecedented opportunities to realize intelligent applications such as smart home, smart cities, and smart manufacturing. However, CPS faces a great number of information security challenges (e.g., attacks) due to the integration of CPS as well as the human behaviors and interactions. Therefore, accurate and real-time attack detection and identification are essential to ensure information security and reliability of CPS. In this paper, we propose a novel integrated learning method that accurately detects an attack of a CPS system and then identifies the attack type in real time. Specifically, we consider a One-Class Support Vector Machine (OCSVM) model that only relies on the data from the normal state for training to achieve a real-time and effective detection of a CPS system state (i.e., normal or under-attack). If the system is detected to be under-attack, we then develop a Pairwise Self-supervised Long Short-Term Memory (PSLSTM) approach to identify the attack type, which aims to accurately distinguish the known attack types and discover unknown new attacks. Lastly, experimental results show the proposed method achieves promising performances compared with conventional and state-of-the-art learning-based benchmarks.