Foundation Of Information Security Research Articles

A Systematic Review on Cybersecurity Threats and Challenges in Hospitals

The inception of cybercrime can be traced back to the late 1970s, a period that coincided with the early development of the computer information technology (IT) sector. Due to its system vulnerabilities, healthcare has become particularly vulnerable to digital assaults. Hardware, software, networks, operating systems, medical devices, processes, and users make this sector vulnerable. This report identifies healthcare cybersecurity issues and solutions and opportunities for improvement in response to rising threats. This review’s methodology was organised so that it complies to PRISMA criteria. A thorough search was undertaken in Web of Science, Scopus, Google Scholar, Saudi Digital Library, ACM Digital Library, PMC, and NCBI/PubMed. The search strategy included threats, ransomware, cybercrime, healthcare, and hospitals. The above overview of “cybersecurity” includes technological and organisational measures. Healthcare organisations cybersecurity defence concerns were the focus of the research questions. The search technique targeted relevant literature from bibliographic databases to answer these research concerns. A total of 352 potential entries were obtained from the search in the chosen databases. Of these, 13 were manually picked following preliminary assessment. The study examined these studies, which fit its focus on “cybersecurity, dangers, and challenges,” in detail. Data confidentiality, integrity, and availability are the foundation of information security. The study examined cyberthreats and their cascade effects. The growing usage of varied technologies for sensitive patient data transfer makes it difficult for healthcare organisations to stay up with the newest cybersecurity breaches and threats. A cohesive and integrated strategy involving training programmes, awareness campaigns, and cyberattack information sharing is advocated to protect healthcare organisations from cyberattacks. To protect our infrastructure and provide excellent patient care, all healthcare workers must recognise and accept their role in cybersecurity risk management.

Methodological foundations of information security of students at school

The article presents the experience of researching information security issues in modern educational organizations (preschool, general education, professional), which made it possible to conclude that the search for the methodological foundations of this activity in a modern school is relevant. As a methodological basis, the study considers a systematic approach applied to the analysis of objects that have many interrelated elements, united by common functions and goals, management and functioning, and which involves structural and functional modeling of the process of building the information security of school students. The model of organization of this activity is considered, including the target (goal, objectives, principles), content (pedagogical conditions, components of information security behavior as the basis of information security of school students), organizational and technological (the logic of constructing technology stages), control and evaluation (monitoring, evaluation) components. The presented structural and functional model is characterized by reproducibility, provided that the described components and their content are implemented in the presented sequence.

Social-legal foundations of information security of the state, society and individual in Ukraine

Ukraine is experiencing military aggression due to the full-scale invasion of Russia, which uses information weapons. Therefore, the problem of ensuring a sufficiently high level of information security in Ukraine is relevant. The purpose of the research – to highlight the essence and features of the concept of "information security", and related terms, and to perform a comprehensive analysis of the current regulatory framework on ensuring a reliable level of information security as the basis of national security. To achieve this purpose, the author uses empirical, theoretical and comprehensive methods of scientific research, namely: observation, comparison, abstraction, analysis and synthesis, and comparative-legal, Aristotelian, analogy and deduction methods. The author proves the significance of ensuring information security at the level of each entity as the foundation for the existence of the Ukrainian information society and a means of counteracting the aggressive actions of the Russian Federation. The factors influencing information security are identified, in the context of which the significant role of the culture of protection of society is demonstrated. The significance of ensuring an appropriate level of cybersecurity as a defining element of information defence, the provision of which should be as consistent as possible with the State information policy, is substantiated. The author outlines the potential consequences of failure to maintain a reliable level of information and cybersecurity against the background of a full-scale invasion, namely: the overthrow of the government, collapse of Ukraine’s reputation in the international arena, chaotic processes in society and growing discontent, economic crisis and human casualties. The author describes the current state of information security in the country and suggests ways to improve it, in particular by reforming the existing legal regulation, considering the political experience of other countries and scientific achievements, transforming the State information policy with a focus on preventing information offences, international cooperation in the global information space and developing the information culture of the population. These recommendations can be used to eliminate shortcomings in the legal regulation of information security issues and to develop proposals for reforming the national information policy

Theoretical and Methodological Foundations of Information Security

The article is devoted to the theoretical and methodological foundations of ensuring the information security of the state. Information wars in the global information space have become an urgent threat to the security and sovereignty of Russia. The article is devoted to the analysis of the theoretical foundations and methodology of studying the mechanism of ensuring information security, disclosure of essential features, the structure of the outlined category. Revealing the essential aspects of information security, the level of its provision in Russia is investigated. The purpose of the work is to assess the effectiveness of state program-targeted planning in the field of information security, to identify problem areas in this area. The article provides an overview of regulatory documents regulating information security issues. A special contribution to the author's research is that the specificity of the system of special methods in the topic under study is manifested in the complementarity of regulation determined by key vectors. At the same time, the key methodological function of information law is the formation of a set of tools purposefully designed to regulate relations in the information sphere in accordance with the objective laws of the dynamic development of the global information society and the existing state policy of digitalization. At the same time, the set of legal methods of regulating public relations in connection with countering threats and challenges to the security of the individual, society and the state in the information environment, based on the methods, are transformed based on the specifics of the subject area.

METHODOLOGICAL FOUNDATIONS OF COUNTRY’S INFORMATION SECURITY CONSIDERING THE CONDITIONS OF THE CURRENT STAGE’S DEVELOPMENT

The article provides methodological foundations of information security in the state as one of the Ukrainian national security components. The complex conditions in the modern period of the Ukrainian state-building process are revealed in detail. These conditions are determined by the influence of a number negative external and internal factors, namely: the process of a new political geography formation in the world; the spread of national movement’s influence on relations between countries and within society; the embodiment of a full-scale military invasion by the russian federation; aggravation of interstate economic and territorial contradictions; an increase in internal conflicts of ethnic and religious nature in the country; growth of crime and corruption in the state; the struggle of different parties and social organizations for leadership among themselves; the uncontrolled proliferation of weapons; the low economic state of the country and the decline in the living standard of the majority country’s population and more.
 The system of the state information security is presented. Its main components are determined and the sources are classified according to the groups of influence on its foundation which represents the information. It reveals the mechanism for adapting the system to protect the information sphere from changes in external and internal factors affecting it.
 It is shown that prevention of influence on information space of our country and its electronic resources and also the state management’s system including the military automated control systems, especially in conditions of conducting full-scale armed aggression from the side of the russian federation is the priority task which solution will provide observance of an appropriate national state’s security level, regarding one of its basic components (information security) at a proper level.
 The results of research is advisable to use by researchers and teaching staff dealing with information security of the state on a systemic level when developing the concept and program of creating an adaptive system protection in the information sphere affecting the overall state of Ukrainian national security at the present period of its location.

Constitutional-legal aspects of information security in the context of globalization

One of the main issues of world politics since the 21st century is a scientific and technological breakthrough that can have far-reaching consequences in all areas of human activity. The computerization and information revolution have led to scientific and technological progress in the military field. The application of high technology has radically changed the nature and capabilities of conventional armaments, intelligence and military command systems, and expanded the possibilities of long-distance warfare. Today, the tactics of creating conflicts in many military and other fields with the help of information technology are changing in the world. Who controls information and misinformation plays an important role. Sometimes misinformation becomes a dangerous weapon. Although the existing terms "Information Security" and "Information War" are more commonly used in the military field, they are beginning to take on a slightly different meaning with the development of mass media and communication technologies. This article identifies the legal characteristics and legal specifics of the information rights of citizens, proclaimed by the Constitution of Azerbaijan. The article substantiates the need to consider the constitutional and legal foundations of information security as a complex political and legal phenomenon. It is proposed to analyze the constitutional and legal aspects of information security in the synthesis of constitutional ideology, constitutional theory and constitutional practice of the development of Azerbaijani statehood. The author proves that the constitutional legal provision of the information security of Azerbaijan considers positive international experience in this field

МОДЕЛЮВАННЯ СИСТЕМИ ІНФОРМАЦІЙНОЇ БЕЗПЕКИ В УМОВАХ НЕВИЗНАЧЕНОСТІ ВПЛИВУ ДЕСТАБІЛІЗАЦІЙНИХ ФАКТОРІВ НА ОСНОВІ НЕЙРОНЕЧІТКИХ МЕРЕЖ

The most important result of the formation of the information society of the XXI century was the emergence of a global information space, which unfolded a fierce struggle for information excellence. As a result, in modern society, information security is a critical component of national, regional and international security. The information security system should be aimed at ensuring information security as a property and as a state, as well as to create secure conditions for the use of information resources as an activity. Information is increasingly being used as a threat to competitors, information systems, software. Conceptual and scientific-methodological foundations of information security are still in the process of develop-ment and research. However, there are already models of information security and protection of information systems that try to answer the question: how to reduce the risk of system failure, what types of attacks can be eliminated, what types of threats exist. That is why the development of an economically determined risk assessment model for the information security system of the enterprise is an important aspect for the organization of the enterprise. Imbalances and failures in the information system can cause significant economic damage. That is why the creation of an ideal system that is certainly able to withstand the full set of threats requires significant costs, so the formation of an economically viable system to minimize information security risks at the level of the business entity is extremely important. At the enterprise level, the first step towards the for-mation of information security should be the development of a conceptual scheme, the overall structure of the information security model, which should be based on other models related to the protection of tangible and intangible assets and reduce the likelihood of information. At the organizational and managerial level, after a deep analysis under the guidance of a per-son directly responsible for the information security of the organization, coordinating and controlling it, aware of business goals, risks and threats, taking into account the opinions of experts, mathematical and functional models are formed, the or-ganizational and corporate component of security is determined information system. Accordingly, the information security of an organization can be defined as the protection of information and supporting infrastructure from accidental or intentional impacts, natural or artificial, that could cause unacceptable damage.

ІНФОРМАЦІЙНА БЕЗПЕКА ЯК СИСТЕМОУТВОРЮЮЧИЙ ЕЛЕМЕНТ МОДЕЛІ ЗАБЕЗПЕЧЕННЯ НАЦІОНАЛЬНОЇ БЕЗПЕКИ УКРАЇНИ

The article is devoted to a comprehensive study of the information security of Ukraine. The author's vision of ways to improve the administrative and legal foundations of information security as a system-forming element of the national security model of Ukraine is formulated. Based on the results of the research, the paper provides a theoretical generalization and a new solution to the scientific problem, as a result of which the following most important results were obtained. The author's definition of the concept of "violation of the definitions of national security" is formulated as an act intentionally committed with the aim of grossly violating the set of definitions of information security, state information security and state policy of the state; "public danger of violating the definitions of the national security of Ukraine", as a set of actions intentionally committed with the aim of grossly disrupting the systemic activity of individuals and/or legal entities and their social relations that protect the vital interests of a person and citizen, society, timely detection, prevention and neutralization real and potential threats to national interests. The ordinal ranking of the information security system of the service-combat activity processes of the security and defense sector in general and the NSU in particular, which includes management and executive elements, has been improved. Control elements include: the legal element, which includes legislative, regulatory and scientific bases  is a legal regulator of relations that arise at the operational and tactical levels of management, taking into account critical information; organizational element, which includes organizational and technical measures and methods, as well as regime measures and methods; affects the information security policy and ensures the activity of competent state authorities in general and NSU in particular; the economic element includes the sources of financing security measures. The executive elements include the technical element, which includes the application of engineering and technical measures that make information inaccessible for illegal actions. In order to improve the norms of the current criminal legislation, the following changes and additions are reasonably proposed: to supplement Chapter 20 of the Criminal Code of Ukraine with Article 436-1. Violation of the definitions of the national security of Ukraine, which provides for 4 parts with a defined level of criminal liability. The author's position on the modified method of analysis and assessment of the level of risk situations in the processes of information security of the security and defense sector is given, and attention is also focused on problematic issues that arise at the current stage of the state's development.

International legal framework for information security: problems and priorities

This article examines the international legal aspect and comparative characteristics of the development of information security in Russia and the countries of the world. The definition, forms, types and characteristics of various aspects and aspects of information security of information systems are revealed. Subject, object and conceptual possibilities of information security. The article is devoted to the legal regulation of information security in international cooperation. A detailed analysis of international regulatory legal acts that consolidate the foundations of information security has been carried out. The main directions of development of Russian and foreign legislation in the field of information security and the role of international bodies in ensuring information security are considered. The author concludes that the issue of improving the legal provision of information security in the field of international cooperation is clearly evidenced by the intensification of state cooperation within the framework of regional associations in the field of information security, as well as the conclusion of a number of international agreements and the adoption of joint statements in this area. In accordance with the current legislation, the article defines the level and degree of information protection. The emphasis is on the latest changes in legislation on information, information technologies as a set of measures to prevent unauthorized use, abuse, changes in information, facts, data in the historical and legal aspect of ensuring information security of information systems.

Countering Informational Influences of the Russian Federation: National Experience

The urgency of the chosen issue is due to the fact that since the beginning of the hybrid aggression in 2014, the domestic information space has been subject to various interventions from Russia: from biased Russian media coverage of events in Ukraine to outright lies from the Russian authorities. At the same time, such attention to our state by Russia has led to the formation in Ukrainian society of a certain level of resistance to hostile information influences and the acquisition by domestic state and public institutions, as well as scientific circles of unique experience in countering Russia in this area. The methods of counteraction developed so far are quite diverse in nature, and therefore require critical evaluation in order to improve the foundations of information security of both Ukraine and the world democratic community. The purpose of this article is to assess the state of information security of the nation and to determine further directions for its improvement on the basis of a retrospective analysis of the process of counteracting Russian information influences on Ukrainian society and the state. Reflective approach was chosen as the main one to study the national experience of counteracting the information influences of the Russian Federation, as it provides an opportunity to comprehend Ukraine's experience as a purposeful and organized process of strengthening the resilience of domestic state and public institutions to clearly planned multilevel aggression and creation of the foundations for the development of own information space. A comparison of main information operations of the Russian Federation targeting Ukraine, of the described in the article stages of Russian aggression with the measures taken by the Ukrainian state and society gives an opportunity to allege that the crisis stage in the information struggle and the formation of domestic sovereign information space as a phenomenon is over. So, if at the early stages of information aggression the Kremlin relied on the attractiveness of its civilizational concepts, such as "Russian World" or "Moscow - Third Rome", which should have led to Russia's victory by "soft power", today we observe the change of course towards cluster influences, tendencies (problems in the Ukrainian energy sector, "anti-vaccination" campaigns, etc.) aimed at destabilizing the domestic political situation in the country and bringing discord in relations with foreign partners. Currently, the information campaigns of the Russian Federation from an individual phenomenon (operational line of hybrid war) have been transformed into secondary (service) tool of other areas of aggression: military, economic, etc. Under the difficult conditions of multifaceted opposition to the aggressor, Ukraine managed to create a basis for the development of its own information space and its protection from unfriendly influences not only of Russia but also of other potentially interested geopolitical actors. At the same time, both the state and society need to focus on further development of their own system of counteraction - to improve existing legislation, build appropriate institutions, form a scientific and methodological basis for the use of adequate and possibly asymmetric means of counteracting Russia.

Quantum random number cloud platform

Randomness lays the foundation for information security. Quantum random number generation based on various quantum principles has been proposed to provide true randomness in the last two decades. We integrate four different types of quantum random number generators on the Alibaba Cloud servers to enhance cybersecurity. Post-processing modules are integrated into the quantum platform to extract true random numbers. We employ improved authentication protocols where original pseudo-random numbers are replaced with quantum ones. Users from the Alibaba Cloud, such as Ant Financial and Smart Access Gateway, request random numbers from the quantum platform for various cryptographic tasks. For cloud services demanding the highest security, such as Alipay at Ant Financial, we combine the random numbers from four quantum devices by XOR the outputs to enhance practical security. The quantum platform has been continuously run for more than a year.

The Problem of Ensuring the Information Security of Children and Adolescents in the Context of Educational Internet Projects Implementation

The continuous development of technologies on the Internet leads to new threats that can harm the physical and mental health of children and adolescents and their personal safety. The article analyses the importance of creating a culture of information security for children and adolescents, which is necessary to neutralize the negative consequences of Internet threats, highlights the main problems in ensuring the security and development of children in the information space. The article describes the results of the study of Internet projects directed at creating a culture of information security of children and adolescents, as well as projects aimed at ensuring their information security on the Internet. It has been shown that sufficient attention to the problem of creating a culture of information security for children and adolescents has already been paid at the State level and the relevance of solving the problem of developing and implementing educational programs that provide systematic study of the foundations of information security for students has been justified.

POLITICAL AND LEGAL FOUNDATIONS OF INFORMATION SECURITY IN THE MODERN WORLD

The analysis of the current political and legal foundations of information security and comparison of its different historical stages have proved that many factors directly affect this process. They include inter-state historical relations and the world order, the struggle of various countries and regions for resources, the development of information and communication technologies, as well as the self-awareness of people. The authors of the article have concluded that information security lays the basis for state security in general and increases its power. The level and nature of communication between countries and their blocs are determined by the ability to influence each other through a system of propaganda and communication routes, including goods, services, the education system, scientific studies and social networks. Cybercrime can be combatted not only through toughening political and legal restrictions but also through forming a global humanitarian approach to human values, which is ensured by the education system, the exchange of universal cultural values and the formation of new human qualities. The political and legal foundations of modern information security are as follows: historical relations between various states and regions; the current world order as the leading factor in forming the concept of information security; the power of each state and its role in the international security system as a political actor; the nature and development of information society in each region of the world; a set of international laws and treaties regarding the use of information, its preservation and disposition; the legal framework of each state; general trends in the formation of the global information space and its features associated with information and communication technologies. Information can work to the benefit only if different countries and regions cooperate since their interdependence grows each year, including in the sphere of information support. To obtain these results, system analysis of the legal framework of economic security, both in individual countries and internationally, as well as an abstract logical analysis of the practice of making political decisions to ensure information security were used. The rules and guidelines of information security, described in the scientific literature, as well as applied in practice in individual countries, have been studied.

On the Annihilators of Boolean Polynomials

Boolean functions in general and Boolean polynomials (Zhegalkin polynomials or algebraic normal forms (ANF)) in particular are the subject of theoretical and applied studies in various fields of computer science. This article addresses the linear operators of the space of Boolean polynomials in n variables, which leads to the results on the problem of finding the minimum annihilator degree for a given Boolean polynomial. This problem is topical in various analytical and algorithmic aspects of cryptography. Boolean polynomials and their combinatorial properties are under study in discrete analysis. The theoretical foundations of information security include the study of the properties of Boolean polynomials in connection with cryptography. In this article, we prove a theorem on the minimum annihilator degree. The class of Boolean polynomials is described for which the degree of an annihilator is at most 1. We give a few combinatorial characteristics related to the properties of the space of Boolean polynomials. Some estimates of the minimum degree of an annihilator are given. We also consider the case of symmetric polynomials.

Conceptual foundations of information security of national economy in the conditions of digitalization

The article focuses on defining the conceptual foundations of information security of the national economy in terms digitalization. The study revealed the dual relationship between the processes Djilas and the development of the economic system, actualized the problem of information security in today’s economy. Based on the analysis of the chronology of major cyber-attacks on information systems, the level and dynamics of cyber-attacks and cybercrime, the financial losses of the national economy from cybercrime the need for information security was justified. The conceptual-categorical basis of information security of the national economy was formed. The links between the basic categories of development of digitalization processes, management of the national economy and provision of information security were determined. Based on the analysis of the scientific literature, three main conceptual approaches to defining the essence of information security were defined, in accordance with which information security is considered as a component of national security; the protection of the information environment and national interests from possible threats; the state of the system, which is able to ensure appropriate security settings. The content of the notion ‘information security of the national economy’ was extended and defined as a condition of protection of the information environment, ensuring the realization of national economic interests, the stability of the national economy to both internal and external, real and potential threats associated with the rapid development of digitalization. The structural model of information security of the national economy was developed, based on systemic and protective approaches, its properties and interrelation of elements with external environment were defined. It was proved that the protection of national economic interests is the basis of the information security of the national economy. The proposed system of information security of the national economy has identified a legitimate basis for further study of the priority directions of ensuring information security in terms of digitalization.

Conceptual foundations of information security in ukraine as a condition of innovative development of the development and trend of modern society

Представлено концептуалізацію подолання проблем інформаційної безпеки як умови інноваційного розвитку держави та сучасного тренду суспільства. Для реалізації цієї мети проаналізовано комплекс проблем інформаційної безпеки, які пов’язані з проникненням інформаційно-комунікаційних технологій (ІКТ) в усі сфери життєдіяльності людини; розкрито причини відставання України у розвитку інформаційного суспільства в контексті цивілізаційного розвитку сучасного світу та показано шляхи їх подолання. З'ясовано проблеми, чому знання та інформація не сформувалися в Україні як впливова економічна та соціально-політична сила; виявлено проблеми організації безперервної освіти і вдосконалення освітньої сфери, яка виявилася загальною тенденцією (трендом) світового розвитку і основою інноваційного суспільства

Data classification – the foundation of information security

Data is the lifeblood of any organisation and has enormous value. Such data includes intellectual property and trade secrets, financial and customer records, and information related to employees. Much of that data is sensitive, and it is also of enormous value to those who would like to steal it for financial gain or commercial advantage.Data classification is a foundational technology for ensuring effective data security and information governance by applying protective markings to documents.Combined with clear policies and processes, this bolsters the capabilities of other controls used by organisations to safeguard data, such as data loss prevention and encryption technologies, helping to improve the overall security posture and to protect an organisation. It's key to your organisation's security, says Colin Tankard of DigitalPathways.

The (Social) Construction of Information Security

While the philosophical foundations of information security have been unexamined, there is an implicit philosophy of what protection of information is. This philosophy is based on the notion of containment, taken from analogies with things that offer physical security (e.g., buildings, safes, fences). I argue that this implicit philosophy is unsatisfactory in the current age of increased connectivity, and provide an alternative foundation. I do so from a constructionist point of view, where the coevolution of social and technical mechanisms is seen as the source of the security of an information system, rather than rational design choices only. I employ the concept of causal insulation from system theory in order to give an account of the fundamental characteristics of information security research. This generates definitions that can be used for philosophically informed discussions on the protection of information in new systems.

From the Editor-in-chief

In my last editorial I discussed the foundations of information security, focusing on some of the things that information security professionals need to do to be successful in securing systems and networks. Although we can choose our approach and focus, the truth is that we have less control over other factors that affect our success. The information security function may, for example, be placed in a lower tier of an organization chart (giving it little leverage and influence within the organization to which it belongs) or it may be allocated too few resources to enable it to accomplish what needs to get done.

From the editor-in-chief

Trying to secure computers, data stored in them and transmitted between them, devices that are used with computers and networks, media, and similar elements is the task that information security professionals face. Few would dispute that this is a very arduous undertaking. Although we typically are caught up in one proverbial whirlwind after another, every once in a while it behoves us to “come up for breath,” so to speak — to revisit the foundations of information security.