Enterprise Information Security Research Articles

Development Trend Analysis of Computer Management Information System

Based on the retrospect and analysis of the main points of the development of computer management information system, on the basis of the study of relevant data such as enterprise units, mass media, personal information and information security, and according to the actual situation of our country, this paper intentionally and systematically collects relevant research materials on the role of management information system in the survival and development of enterprises, and aims at one or more merits. To study its impact, this paper focuses on three aspects: application analysis, development direction and implementation strategy, which can provide strong reference and guidance for the application of enterprise computer management system.

Security control heterogeneous big data cloud storage system based on adaptive cache

In order to improve enterprise information security and the performance of storage system in data processing process, the application of adaptive memory cache mechanism in remote sensing data storage is studied. Firstly, alluxio is used to build a unified virtual file system, and the caching mechanism based on spatial relationship and historical data access inference is studied. Secondly, Presto based on memory computation is introduced as the storage component of remote sensing data meta-data, providing real-time read-write support for massive remote sensing data meta-data and advanced semantic information. Through experiments, the process of adaptive memory buffer remote sensing data storage system takes less time than the traditional storage method.

МОДЕЛЮВАННЯ І РЕІНЖИНІРИНГ ПРОЦЕСІВ СИСТЕМИ ЗАХИСТУ ІНФОРМАЦІЇ НА ОСНОВІ ТЕОРІЇ ГРАФІВ І МЕТОДОЛОГІЇ IDEF

The main categories of information security threats for an enterprise and theories that can form the basis of an information security system are considered in the work. Contextual and functional diagrams of the processes for ensuring the information system of an enterprise innotations IDEF0, IDEF3, DFD, as well as diagrams of individual subprocesses are constructed, their decomposition according to the IDEF methodology is performed. It was revealed that the subprocess“Elimination of threats” caused the most questions, and the feasibility of constructing a mathematical model of the information protection system was substantiated. A formal description of the information protection system as a model with full overlap is given, as well as its improvedversion is given taking into account vulnerabilities and system barriers. It is proposed to use the security value to evaluate the designed system. The main measures of reengineering the process of developing an information security system are identified. A comparative analysis of the diagramsfor the AS-IS and TO-BE options has been performed. The diagram of the subprocess of developing an information security system in the IDEF0 notation is analyzed, taking into account the improvedmathematical model of an enterprise information security system. The expediency of applying the principle of "reasonable sufficiency", which allows you to maintain a balance between the cost ofprotection and the resulting effect, is substantiated. The prospect of using a risk-oriented model to eliminate the shortcomings of the security model with complete overlap in modeling the processesof functioning of the information protection system is determined. It is concluded that it is necessary to study the effectiveness of reengineering using a risk-based model, which will allow us to assessthe risks from the implementation of information security threats and make the best decision to minimize risks and introduce new means of protecting the information security of the enterprise.

Development of a Model for Detecting Unauthorized Traffic

Information systems and technologies are the main means of increasing people’s productivity and efficiency. And today, along with the tasks of effective processing and transmission of information, the most important task is to ensure the information security of enterprises. According to the global study by InfoWatch, the number of information leaks is growing every year. The largest number of data leaks were recorded in high-tech companies, educational institutions, government agencies and banks. Most often, network traffic is a threat. This threat consists in the interception of data over the network, the purpose of which is to obtain confidential data, passwords, corporate secrets, addresses of network computers, etc. There is a need to create hardware and software tools to protect network resources. Therefore, creating a tool for detecting unauthorized traffic is relevant. The authors consider the problem of information security in the enterprise computer network and carry out the analysis of unauthorized traffic in order to identify its signs. The researchers analyze methods for detecting unauthorized traffic to select the best one and present a developed formalized model for detecting unauthorized traffic.

МОДЕЛЮВАННЯ ХАРАКТЕРИСТИК ОБЛАДНАННЯ КОМП’ЮТЕРНИХ МЕРЕЖ У РАКУРСІ ІНФОРМАЦІЙНОЇ БЕЗПЕКИ

The study focuses on the development of models for analyzing and assessing information security risks in computer networks that are used in the development of enterprise information security systems and in auditing the level of protection of already existing information systems, the development of a family of security models of computer network communications equipment. The developed algorithms and models have been implemented in the system of analysis and correction of information security violations, the use of which has allowed to reduce the time of correction of the consequences of such violations. The basic elements of violations, which are described by the information structure and determine the influence on the activity of information systems, are revealed. It is determined that most information security events are related to the communication equipment of the computer networks on which the information systems operate. Further research has been aimed at finding and developing security models for communication levels of operation of computer networks and a system for correcting information security violations. To implement the algorithm, a number of models, that describe the characteristics of network equipment in the security perspective, have been developed. The model of switch security describes the switch characteristics that affect the security and reliability of the network infrastructure. The tunneling security model reflects the security of the gateway portion of the deployed VPN tunnel. The intrusion detection security model involves the use of a compatible model with the shielding model, namely extending the state-based filtering parameter. The routing security model considers the types and protocols of routing. The use of models in the correcting system of the consequences of information security violations has made it possible to fully or partially automate the response to security events occurring in information systems. The developed models allow to take into account the peculiarities of the information system, the nature of the threat scenarios and the features of the network equipment.

Data security over wireless transmission for enterprise multimedia security with fountain codes

With the explosive growth of multimedia data, Enterprise Multimedia Security (EMS) is a serious matter to maintain enterprise information security. As the rise of social media applications triggers higher bandwidth demand and shorter end-to-end delay requirements, edge computing has emerged as a promising technique to reduce delay. Edge servers are often deployed around mobile devices via a one-hop wireless network connection. However, migrating multimedia data over wireless networks to edge servers for edge computing is vulnerable to eavesdroppers. Ensuring the security of enterprise multimedia data in the edge computing is a top priority. To cater for the data security over wireless transmisson for edge computing, window-based fountain codes, is treated as a feasible technology to compensate this gap. Based on the characteristics of the fountain codes, data security over wireless transmisson is implemented only when the target receiver accumulates enough coding packets in advance of the eavesdropper. In the general wireless transmission, the eavesdropper receives data packets or not depends on whether the wireless channel lose packets. To ensure data security, we introduce the constellation-rotation technique and interfering noise into wireless signal which can disturb the eavesdropper’s signal quality and increase the packet loss in the eavesdropper. Specifically, we study how to partition the video streaming into windows, which takes the end-to-end delay into consideration while guaranteeing lower intercept probability which indicates the probability video data is leaked to the eavesdropper.

State and enterprise information security management: legal and organizational aspects

The components of the state information policy on information security and the basic activities of public authorities in this field are reviewed in the article. The internal and external information challenges facing Ukraine and ways of ensuring information security are analyzed. Information security is seen as a component of national security, as well as a global problem of information security, information space, information sovereignty and information support decision-making. The article is devoted to the review of approaches to the essence of threats to information security and politico-juridical analysis of threats to information security of Ukraine at the present stage. The threats of information security are analysed in the context of the system of threats of national security. On base of the analysis of the condition normative-legal regulation to information safety of the Ukraine are determined main value and defect in normative field state on provision of information security. The definition of information security of the enterprise is given. The basic goals, objectives, principles and types of threats. At their core formed methodical approach to developing the information security systems of industrial enterprises. The proposed enterprise information security system is regarded as a model of information warfare with the factors of internal and external environment, based on the analysis of modern approaches to the definition of information security, and on a synthesis of theoretical positions and experience of functioning of the organizations. The use of the developed approach the Holy Practice of management of industrial enterprises will help to increase the efficiency of development, implementation and use of information security and prevent system or methodological errors at each stage.

Витік інформації як ключова проблема інформаційно-аналітичного забезпечення економічної безпеки підприємства в умовах цифровізації економіки

The article is aimed at researching the key problem of information and analytical provision of enterprise in the context of digitalization of the economy. The publication indicates the growth of the role of information in the implementation of management activities by an economic entity and its general role in the operation of the modern enterprise. Approaches to interpretation of the concepts of «information» and «information provision» are examined. It is defined that today the main problem of information-analytical provision of economic activity is the leakage of confidential information as one of the forms of materialization of threats to the information security of enterprise, which consists in violation of confidentiality, integrity and availability of information. It is further defined that the leakage of information at the enterprise is usually caused by the following actions: unauthorized access to confidential information; disclosure of confidential information (including the unintentional disclosure); leakage of information via the imperfect technical channels. The channels of possible information leakage are considered. In addition, the analysis of statistical data on information leakage in the global dimension was carried out. According to the researches, in 2019, among the total volume of information leakage, 49.7% of the volume is accounted for by external actors and 50.3% by internal offenders. In general, in the system of information and communication provision, special attention of the management of enterprise should be directly paid to internal communications, since more than 90% of the information comes in from employees. It should be noted that the reasons for the leakage of the enterprise’s information due to the fault of internal actors may be: unintentional actions on the part of the enterprise’s employees related to errors in the processing, storage or transmission of confidential data; the caused by certain reasons actions of employees who have access to confidential information. This may include the actions of employees who use the enterprise’s data for fraud purposes, as well as the actions of former employees who, motivated by their desire for retaliation for dismissal, «contribute» to the leakage of confidential information, passing it on to competitors or using it for their own mercenary purposes.

ІНФОРМАЦІЙНА БЕЗПЕКА ПІДПРИЄМСТВА ТА ОРГАНІЗАЦІЙНІ ЗАХОДИ ЇЇ ЗАБЕЗПЕЧЕННЯ

Organization of an effective system of economic security is an important aspect of business growth in modern management conditions. Due to the large role of information resources, the reality of threats, the information security problems of enterprises and organizations in Ukraine are relevant. Without protection of the enterprise information environment, it is impossible to ensure its economic security. The heads of enterprises in the field of economics and business do not have special literature on information security. Questions of concepts, characteristics, and components of information security are not fully understood. Scientific provisions for managing information security of enterprises have not been developed. The purpose of the study is the theoretical justification of the organizational support of the enterprise information security. The author has proposed measures to optimize information security management. In the scientific literature there is no single view on the concept of “information security”. The author carried out a theoretical analysis of this concept. The concept of “information security” is the security state of data processing and storage systems. This is to ensure the confidentiality, accessibility and integrity of information. These are measures aimed at ensuring the security of information from: unauthorized access, use, publication, destruction, alteration, viewing, verification of recordings or destruction. We have studied the research direction on the concept content of “information security”. Information security management must adhere to the principles of information security. We offer the following principles: legality; planning; complexity; continuity; interaction of subjects of ensuring information security; improvement; scientific validity; technical implementation; the control; warning. The main measures for managing information security of enterprises and organizations are summarized. Keywords: threats, protection of information, measures, information security, principles, management.

Modelling and analysis of corporate efficiency and productivity loss associated with enterprise information security technologies

By providing effective access control mechanisms, enterprise information security technologies have been proven successful in protecting the sensitive information in business organizations. However, such security mechanisms typically reduce the work productivity of the staff, by making them spend time working on non-project related tasks. Therefore, organizations have to invest a signification amount of capital in the information security technologies, and then to continue incurring additional costs. In this study, we investigate the non-productive time (NPT) in an organization, resulting from the implementation of information security technologies. An approximate analytical solution is discussed first, and the loss of staff member productivity is quantified using non-productive time. Stochastic Petri nets are then used to provide simulation results. Moreover, sensitivity analysis is applied to develop a cost-effective strategy for mitigating the negative impact of implementing information security technologies. The presented study can help information security managers to make investment decisions, and to take actions toward reducing the cost of information security technologies, so that a balance is kept between information security expense, resource drain and effectiveness of security technologies.

РОЗРОБКА МЕТОДОЛОГІЧНИХ ЗАСАД ОЦІНЮВАННЯ ТА ДІАГНОСТИКИ ІНФОРМАЦІЙНОЇ БЕЗПЕКИ ПІДПРИЄМСТВ АГРОПРОДОВОЛЬЧОЇ СФЕРИ

Introduction. The purpose of the article was to develop methodological foundations for assessing and diagnosing the information security of agricultural enterprises. Methods of research. The tasks of the article were solved by means of general and special methods of research: analysis and synthesis, systematization and generalization, method of grouping, dialectical approach. Results. The ways and methods of the information security assessment of the enterprise were defined and characterized. Among them are: standard-based assessment, risk-oriented assessment and economic indicators. Much of the methodology for assessing the level of an enterprise information security, agrarian enterprise in particular, were based on the identification of information risks based on US and British methods CRAMM, FRAP, OCTAVE, NIST, MSAT, COBRA and Russian GRIF 2006 methodology. Originality. It was proved that for methodological bases development of estimation and diagnostics of enterprise information security level it is expedient to use advantages of estimation methods by standard, at risk of information system and using group and private indicators of economic component of information security estimation. Practical importance. The concept of the methodology development for economic assessment and information security diagnostics of agri-food enterprises was proposed, which takes into account the advantages of the considered diagnostics and assessment methods of the information security level of agricultural enterprises, offers a quantitative and qualitative assessment of its components, determines the impact of integrated indexes on the performance indicators and safety of subjects agricultural business, and, as a result, offer effective ways to optimize the management of information security companies in agri-food sector. The main scientific provisions of the article can be used in the practice of agricultural enterprises. Keywords: concept, economic indicators of assessment, enterprise of agro-food sphere, management of information security, methodology, methods of assessment of information security, risk-oriented approach, standard.

Improving the efficiency of the formation of professional competencies Masters in “Information Security” based on the use o CASE-technologies

Purpose of the study. In modern conditions, building an effective information security system for an enterprise requires specialists with appropriate professional competencies and systems approach skills in analyzing a combination of factors that influence the state of information security of an enterprise. For the preparation of such kind of specialists, qualitative changes in the content of educational disciplines are required, based on the use of methods and means of system analysis in the process of building an information security system. The current approaches to assessing the risk of an enterprise are based on the formation of a register of its information resources necessary for the further processing of risks. Adequate assessment of the value of a resource is impossible without a correct understanding of the semantics of this resource and its role in the implemented business processes. Modern approaches to the formation of the register of enterprise information resources, according to the authors, do not offer an effective method of identifying resources and estimating their value.This paper considers an approach based on the use of structural and functional analysis methods and CASE-technologies in the formation of a register of information resources of the enterprise in the training of masters in the direction of “Information Security”. Materials and methods. For the formation of the register of enterprise information resources, it is proposed to build a structural-functional enterprise model using the IDEF0 notation. Business process modeling was performed in the Business Studio environment of «Modern Control Technologies». As an example for risk analysis, the activities of a typical IT-industry company engaged in the development and implementation of enterprise management information systems were considered. Results. The technique was successfully tested in the educational process. According to the authors of the article, the use of this technique in conducting laboratory classes for masters enrolled in the “Information Security” direction has made it possible to increase the efficiency of the formation of professional competencies in students and, consequently, in general, the quality of education. The results obtained can be used not only as a training method for specialists in the field of information security. The application of the methodology of forming the register of information resources of an enterprise considered in the article in practical activities to ensure the information security of an enterprise will increase the validity of decisions to protect the information of the enterprise. Conclusion. The paper proposes a method to justify the choice of the main directions for the protection of enterprise information based on the analysis of its business processes. A distinctive feature of the technique is the use of modern CASE-technologies for decision-making in the field of enterprise information security. The implementation of the methodology allows you to create a register of information resources of the enterprise, including an assessment of the likely damage for each resource. The registry shows the bottlenecks in the organization of protection, which should be given priority when planning measures to protect information. On the basis of the data obtained, it is possible to form a strategy and tactics for developing an enterprise information protection system that is reasonable from an economic point of view.

Design of Information System Vulnerability Governance Platform Based on Distributed Asset Acquisition and Vulnerability Verification Radar

There are a large number of information vulnerabilities in enterprise information systems. Many hackers use vulnerabilities to obtain enterprise or personal information, which greatly jeopardizes enterprise information security. This paper proposes a design method of integrated information system vulnerability governance platform based on distributed asset acquisition and vulnerability verification radar, discusses the business flow and architecture of the vulnerability governance platform, the logical relationship between modules, business function modules, and the technical framework for building platforms.

About one of the tools of the enterprise information security audit

About one of the tools of the enterprise information security audit

Інформаційна та кібернетична безпека сучасного підприємства: забезпечення та моделювання

Інформаційна та кібернетична безпека сучасного підприємства: забезпечення та моделювання

ДОСЛІДЖЕННЯ ФУНКЦІЇ ІНТЕНСИВНОСТІ КІБЕРАТАК ЗА ДОПОМОГОЮ СТЕПЕНЕВОГО Р-ПЕРЕТВОРЕННЯ АНАЛІТИЧНОЇ ФУНКЦІЇ

Strengthening cybersecurity requires identifying the subjects of the threat, their goals, intentions of attacks on the infrastructure and weaknesses of the information security of the enterprise. To achieve these goals, enterprises need new information security solutions that extend to areas that are protected by traditional security. The levels of evolution and adaptability of viruses, as well as cybersecurity protection policies, respectively, are presented. It is shown that errors in predicting the functions of the intensity of cyberattacks at an enterprise are partially due to the selection of a model in the study of indicators of cyberattacks. Known methodologies for analyzing the intensity of cyberattacks at an enterprise are presented. It is proved that the problems of studying the intensity of cyberattacks and their predictions have been little studied in the scientific literature, which is associated with the unpredictability of cyberattacks and the absence in many cases of real data, as well as available methods for predicting them. Mathematical modeling of time series of the intensity of cyberattacks per enterprise is presented to provide comprehensive solutions and predictions of strengthening the enterprise's resistance against current targeted cyber threats. We consider a first-order nonlinear differential equation, the Bernoulli equation, which describes the process of the time series of the intensity of cyberattacks. The analysis of the intensity function of cyberattacks is carried out analytically due to the power-law p-transformation by the analytical function. Statistical data on the number of cyberattacks at the enterprise are considered, provided that a scheduled audit is carried out once a quarter. The types of cyberattacks to defeat network infrastructure, proprietary applications, the level of patches and server configurations, standard software, and their number at the enterprise for certain time periods are presented. A geometric visualization of the change in the steepness of the logistic curve of the intensity of cyberattacks is presented at various parameter values with a uniform step for the period between scheduled audits when applying p-conversion.

SELECTING SAFETY PACKAGE COMPONENTS OF ENTERPRISE INFORMATION SYSTEM FOLLOWING REQUIREMENTS OF STANDARD LEGAL DOCUMENTS

Introduction. Production processes quality depends largely on the management infrastructure, in particular, on the information system (IS) effectiveness. Company management pays increasingly greater attention to the safety protection of this sphere. Financial, material and other resources are regularly channeled to its support. In the presented paper, some issues on the development of a safety enterprise information system are considered.Materials and Methods. Protection of the enterprise IS considers some specific aspects of the object, and immediate threats to IT security. Within the framework of this study, it is accepted that IS are a complex of data resources. A special analysis is resulted in determining categories of threats to the enterprise information security: hacking; leakage; distortion; loss; blocking; abuse. The connection of these threats, IS components and elements of the protection system is identified. The requirements of normative legal acts of the Russian Federation and international standards regulating this sphere are considered. It is shown how the analysis results enable to validate the selection of the elements of the IS protection system.Research Results. A comparative analysis of the regulatory literature pertinent to this issue highlights the following. Different documents offer a different set of elements (subsystems) of the enterprise IS protection system. To develop an IS protection program, you should be guided by the FSTEC Order No. 239 and 800-82 Revision 2 Guide to ICS Security.Discussion and Conclusions. The presented research results are the basis for the formation of the software package of intellectual support for decision-making under designing an enterprise information security system. In particular, it is possible to develop flexible systems that allow expanding the composition of the components (subsystems).

Бізнес-освіта як інструмент забезпечення інформаційної безпеки сімейного бізнесу

Бізнес-освіта як інструмент забезпечення інформаційної безпеки сімейного бізнесу

The effect of automation of accounting and financial statements on enterprises safety

The subject of the research is theoretical, methodological and practical aspects of accounting automation and financial reporting on enterprise security. The purpose of the work is to identify problems and establish trends in the implementation of accounting and financial reporting on the basis of automation and substantiation of the problem of computerization of accounting processes, information security of enterprises and management of the future. Methodological basis of the article became general scientific methods of cognition, generalization, method of comparative analysis and other methods of research. Results of work. The role of implementation of automation, software and computerization of accounting processes and financial reporting on the security of domestic enterprises and organizations has been determined. An informative characteristic of competitive advantages and properties of the most used programs is provided. At the same time, risks and threats to information security of enterprises, their sources and manifestations are revealed. The complex of measures for preservation and strengthening of information security is substantiated. A plan and measures for their implementation have been developed. Submitted suggestions for further research in order to strengthen the security of enterprises and improve its management. The field of application of the results is that the stated proposals on automation of accounting and financial reporting can be used by managers and specialists of enterprises for the purpose of safety improvement. Conclusions. The introduction of automated systems and programs for accounting and accounting and financial reporting is a significant factor in improving the efficiency of domestic enterprises. At the same time, the security of the operation of enterprises increases due to greater accuracy and impartiality of the information used, and a significant reduction of their costs on accounting and analytical processes. However, because of the specifics of automation and computerization (connecting to more global networks, using typical programs and metrics, etc.), the openness of information systems increases, the threats to commercial secrets and the risks of competitive business increase in general. It updates the importance of providing and further improving the information security of enterprises and organizations in the long run.

Calculation of risks of information security of telecommunication enterprise

The goal of this work is to identify and assess information security risks for a typical distributed information system within three controlled areas. The main emphasis, application of information security in the considered information system is done to minimize damage from security threats, aimed at the integrity and availability of the hardware and software complex of the information system, and not to the confidentiality of information resources processed with their help. The study examined international and national standards in the field of information security, which regulate issues of information security risks management. In particular, the basic requirements for the assessment and processing of information security risks were established, based on the international standard “ISO 27001: 2013 Information technologies. Methods of protection. Information security management systems”, as well as a comparison of this standard with its version from 2005 is made. As a leading method of risk assessment and processing, the most economical the qualitative method was chosen, in the absence of ready data on the number of attacks implemented in the considered information system for a certain period of time. In the process, valuable assets of the organization were considered, and based on the business process of the telecommunication company, major and minor assets were allocated, as well as the corresponding information security threats in accordance with the security threat data bank of the Federal Service for Technical and Export Control. The result of this work was the calculation of information security risks, based on the allocation of valuable assets of the organization, the degree of potential damage in the implementation of threats to such assets and the probability of the implementation of threats to the information system of the telecommunication enterprise. In addition, acceptable risks were identified, the processing of which is not required due to the fact that the actual cost of minimizing them is greater than the losses from the implementation of threats over them. In conclusion, possible measures were proposed to minimize information security risks, including a backup system, a system for protecting against unauthorized access, an anti-virus protection system, firewalling, and organizational measures and physical protection measures. The proposed method makes it possible to reasonably assess information security risks of an organization in conditions of insufficient initial data, as well as the absence of additional hardware and software for assessing information security risks, which allows applying it to model organizations based only on scaling of the considered system, if there is no state information secret in the processed data. The risk management procedure helps not only to identify and eliminate the analysis of vulnerabilities and innovations in the field of risk assessment, but also to increase the literacy level of staff, involved in the assessment and risk management process.