Field Of Information Security Research Articles

Incorporating Machine Learning Strategies to Smart Gloves Enabled by Dual-Network Hydrogels for Multitask Control and User Identification.

Smart gloves are often used in human-computer interaction scenarios due to their portability and ease of integration. However, their application in the field of information security has been less studied. Herein, we propose a smart glove using an iontronic capacitive sensor with significant pressure-sensing performance. Besides, an operator interface has been developed to match the smart glove, which is capable of multitasking integration of mouse movement, music playback, game control, and message typing in Internet chat rooms by capturing and encoding finger-tapping movements. In addition, by integrating machine learning, we can mine the characteristics of individual behavioral habits contained in the sensor signals and, based on this, achieve a deep binding of the user to the smart glove. The proposed smart glove can greatly facilitate people's lives, as well as explore a new strategy in research on the application of smart gloves in data security.

What are developers talking about information security? A large-scale study using semantic analysis of Q&A posts.

Digitalization and rapid technological improvement in the present day bring numerous benefits, but they also raise the complexity and diversity of cyber security risks, putting critical information security issues on the agenda. Growing issues and worries about information security endanger not only the security of individuals and organizations but also global social and economic stability. This study investigates the issues and challenges regarding information security by analyzing all the postings on ISSE (Information Security Stack Exchange), a Q&A website focused on information security. In order to identify the primary topics addressed in postings shared on the ISSE platform, we employed a probabilistic topic modeling method called latent Dirichlet allocation (LDA), which is generative in nature and relies on unsupervised machine learning processes. Through this investigation, a total of 38 topics were identified, demonstrating the present state of information security issues and challenges. Considering these topics, a comprehensive taxonomy of seven categories was devised to address information security issues, taking into account their backgrounds and perspectives. Subsequently, we conducted an examination of the prevalence and complexity of the matters at hand. In addition, we have defined the prevailing technologies utilized in the realm of information security, including tasks, certifications, standards, methods, tools, threats, and defenses. We have provided a number of implications for different stakeholders, including academics, developers, educators, and practitioners, who are working towards advancing the field of information security.

Application of Multimedia Watermarking Technology in the Field of Information Security

This paper aims at comprehensively discussing the principle, methods, applications, challenges and future development of multimedia watermarking technology. In order to achieve this goal, this paper first introduces the basic concept and classification of multimedia watermarking technology, and then expounds in detail the core principles of spatial domain, frequency domain and mixed domain watermarking technology and the methods of watermark embedding and extraction. In terms of methods, this paper reveals their technical differences in robustness, invisibility and capacity through in-depth analysis of the characteristics of watermarking technology in different domains. In terms of application, the article shows the extensive application of multimedia watermarking technology in copyright protection, content authentication, covert communication and multimedia data integrity and authenticity verification through specific case analysis, highlighting its important value in the field of information security. Generally speaking, this paper systematically analyzes the principle, method and application of multimedia watermarking technology, which provides an important theoretical basis and practical guidance for further research and development in this field.

Organizational and legal principles of information security of enterprises in the conditions of martial law in Ukraine

Purpose. To investigate the peculiarities of organizational and legal provision of information security (IS) in the conditions of martial law (ML). To propose changes to legislative provisions to improve legal regulation in this area. To develop systematic measures to balance the rights and obligations of individuals and legal entities in the field of IS in the conditions of ML. Methodology. The general scientific and special legal methods of cognition are used: hermeneutic method allowed us to substantiate expansion of IS field; content analysis – to determine organizational principles of IS of enterprises in conditions of ML; structural and legal – to propose indicator conditions for legal norms; special-legal – to propose system of local regulatory acts for the legal provision of IS; comparative legal – to propose special legal regime for IS of enterprises. Findings. It is indicated that during the state of war, the IS field of enterprise expands significantly and becomes an element of the national security system. The peculiarities of organizational and legal support and the basic organizational principles of IS of enterprises in the conditions of ML are determined. It is proposed to introduce a special legal regime for implementation of IS of enterprises in conditions of ML and use of the state’s capabilities in this area under specified legal regime. Amendments to the articles of Special Part of Code of Ukraine on administrative offenses are proposed for effective regulatory support of the special legal regime for implementation of IS of enterprises Originality. A legal tool is proposed to limit dissemination of information about a company’s activities – the introduction of local law documents to classify information about the company’s activities during ML into category “with limited access”. Indicator conditions and additions to legislative norms are proposed. Practical value. The developed proposals, indicator conditions and additions to legislative norms will contribute to strengthening the IS of enterprises.

Model of current threats to security of confiden-tial data in divisional information systems

The paper proposes a model for determining actual threats to the information security of distributed information systems, based on algorithms of fuzzy inference and the theory of fuzzy neural systems, unlike known ones, uses sufficient and necessary indicators, excludes expert errors, increases the detection of the number of actual threats to information security of distributed systems by 5 %, reduces the cost of purchasing information protection equipment from 15 to 30%. It takes into account the following factors: the IT infrastructure of the distributed information system, the capabilities of attackers and their level of motivation in the distributed information system, the list of existing protection tools in the distributed information system.
 The proposed approach differs from existing ones in the following: lack of involvement of highly qualified specialists in the field of information security; the process is automated, has a low computational complexity; absence of deficiencies in expert assessments; allows you to determine the list of current information security threats in information systems of various classes and types.
 The task of ensuring the security of confidential information becomes the most urgent, which is due to the growth of computer attacks and leaks of information, which are reflected in the statistical data on the commission of crimes in the field of high technologies, the growth of criminal activity using modern communication devices and the Internet.
 Existing methods of modeling current threats to information security and assessing the effectiveness of the information protection system cannot be used at all stages of the life cycle of distributed information systems - they do not take into account the following indicators in the complex: IT infrastructure of distributed information systems, current threats to information security, security requirements for confidential information, a list of means of protecting confidential information and their value as important indicators when solving these problems.
 In order to achieve the goals of ensuring the security of confidential information, it is necessary to: organize the effective creation of an information protection system (information security system), effective modeling (identification of the list) of current threats to information security, identification of the current violator, and also provide the opportunity to conduct a qualitative assessment of the effectiveness of the information security (protection) system.
 One of the most important tasks of ensuring the security of confidential information is the assessment of the effectiveness of the protection (security) system. In this regard, the goal of the work (research) is to improve the quality of the evaluation of the effectiveness of the protection (security) systems of distributed information systems by determining sufficient and necessary evaluation indicators using modern (promising) information technologies that allow the most effective solution of the following tasks: determination operating parameters of adaptive production fuzzy neural systems, which are most suitable for solving the tasks, application of Data Science technologies in data processing, fuzzy output algorithms.

Basic Security Mechanisms in Linux

The article provides an overview of the key security aspects of the Linux operating system. The relevance of this work lies in the fact that in light of the rapid development of technology and increased threats in the field of information security, special attention is paid to mechanisms that ensure stable protection of data and system resources. The article begins by reviewing basic security principles such as the principle of least privilege and need-based access. Next, we look at modern authentication and authorization mechanisms, including the role of Pluggable Authentication Modules (PAM) and Security-Enhanced Linux (SELinux) multi-user rules. Particular attention is paid to access control systems, including mechanisms for managing access rights to files through the Discretionary Access Control (DAC) and Mandatory Access Control (MAC). The iptables and firewalld firewalls are analyzed as key tools for ensuring the security of network interactions. The article also covers current Linux security trends and challenges, as well as an overview of the latest kernel and software updates. Ultimately, the reader will gain a comprehensive understanding of Linux security mechanisms, allowing him to make informed decisions to effectively protect his systems and data.

Dynamic Optical Encryption Fueled via Tunable Mechanical Composite Micrograting Systems.

Optical grating devices based on micro/nanostructured functional surfaces are widely employed to precisely manipulate light propagation, which is significant for information technologies, optical data storage, and light sensors. However, the parameters of rigid periodic structures are difficult to tune after manufacturing, which seriously limits their capacity for in situ light manipulation. Here, a novel anti-eavesdropping, anti-damage, and anti-tamper dynamic optical encryption strategy are reported via tunable mechanical composite wrinkle micrograting encryption systems (MCWGES). By mechanically composing multiple in-situ tunable ordered wrinkle gratings, the dynamic keys with large space capacity are generated to obtain encrypted diffraction patterns, which can provide a higher level of security for the encrypted systems. Furthermore, a multiple grating cone diffraction model is proposed to reveal the dynamic optical encryption principle of MCWGES. Optical encryption communication using dynamic keys has the effect of preventing eavesdropping, damage, and tampering. This dynamic encryption method based on optical manipulation of wrinkle grating demonstrates the potential applications of micro/nanostructured functional surfaces in the field of information security.

Color image encryption algorithm based on quantum random walk and multiple reset scrambling* *This work was supported by the Open Fund of Advanced Cryptography and System Security Key Laboratory of Sichuan Province (Grant No. SKLACSS–202208), the Science and Technology Research Program of Chongqing Municipal Education Commission (Grant no. KJZD-M202000501) and National Natural Science Foundation of China (No.61772295).

In order to address the issues of privacy breaches, data tampering, and security threats in the realm of image encryption and information security, it is essential to ensure the confidentiality, integrity, and reliability of image data. In this paper, we propose a novel hybrid color image encryption scheme that increases the complexity of the key space and provides better data integrity protection by combining the quantum random walk and SHA-256 algorithm. At the same time, three chaotic systems were combined, and multiple XOR operations were introduced to effectively scramble the spatial and pixel levels of the color image. Through numerous simulation experiments and security analyses, the results demonstrate that the solution exhibits efficient encryption performance, excellent resistance to attacks, and outstanding privacy protection capabilities.

Features of systems implementing data intensive domains as objects for ensuring information security using the example of automated control systems for agrotechnological processes

The current stage of development of Russian society is characterized by digital transformation of all its spheres, including economics, science, healthcare, education, culture, etc. One of the areas of such transformation is the widespread use of systems that implement data intensive domain (DID), as well as artificial intelligence technologies and systems. The increasing use of these systems and their operation as part of global networks entails information security risks that can negatively impact individuals, groups, organizations, economic sectors and society as a whole. Methods for ensuring information security require development, considering the specifics of these systems and technologies. Features of ensuring information security are considered using the example of an automated control system for agrotechnological processes in agriculture as a system that implements IID. Features of DID systems as objects of ensuring information security and factors influencing the provision of their information security and the creation of means of ensuring information security for DID are determined on the basis of the country's current regulatory and technical framework in the field of information security and taking into account the specifics of the organization of data processing and storage and application of DID systems. The identified features can be used in the development of systems that implement intensive use of data, as well as in the educational process.

Dynamic modeling in the functioning of security systems in the field of information security

Objective. The purpose of the study is the functionality of designing, building and implementing protection systems taking into account the time factor. Method. The analysis of the functional interaction of the construction of three sequentially interconnected dynamic models and data transfer between them is carried out. Result. A general model of the system of protection and forecasting of possible threats in ensuring the security of information and infrastructure, taking into account the time factor, has been developed and proposed for implementation. Conclusion. The field of information security considered in the article is a necessary component of ensuring the protection of information resources and related systems from various threats. The application of the basics of dynamic modeling of data, processes and structures in terms of time, allows you to assess risks and threats, identify certain significant shortcomings and eliminate them, thereby optimizing costs, increasing the efficiency of ensuring security

Organization of response to information security incidents

Objective. Development of practical recommendations for creating an effective information security incident response system. Method. The article includes an analysis of existing methods and tools for detecting and analyzing information security incidents, as well as a study of the consequences of such incidents and their impact on the work of a company or organization. Result. Development of a set of practical recommendations aimed at creating an effective information security incident response system. During the analysis of existing methods and tools for the detection and analysis of information security incidents, the most effective and adapted approaches were identified. These methods include both technical means of detection and rapid incident response processes. The recommendations were created taking into account the characteristics of companies and organizations of various industries and are also intended for use by persons who do not have deep knowledge in the field of information security. The recommendations include clear step-by-step instructions, resources and tips that will allow companies to easily implement the proposed measures in their practice. Conclusion. The development of an effective information security incident response system is critically important for companies and organizations, as they face an increasing number of cyber-attacks and threats to information security. Creating an effective information security incident response system is an integral part of a successful business strategy. The developed practical recommendations have the potential to significantly reduce the risks and damage associated with information security, even for companies and organizations without prior experience in this field. These recommendations focus not only on technical aspects, but also on organizational measures to ensure timely detection, analysis and response to incidents.

Informational and legal characteristics of the main components of the state security sector

The article is devoted to the study of the informational and legal characteristics of the main components of the national security sector of the state. It is noted that the category “national security” reflects the qualitative state of the regulation of social relations in the state and emphasizes the fact that the security of the state consists in ensuring national identification. It has been established that the provision of state security is structured through the differentiation of national security by sector-specific (includes: military security, public security, state security, cyber security, foreign policy security, environmental security, information security) and subject characteristics (includes the activities of authorized subjects). The concept of “state security sector” is defined as a set of legal relations, the content of which is the activity of authorized subjects to ensure national security as a whole, and in certain differentiated directions. Amendments to the Law of Ukraine “On National Security” are proposed.
 Attention is focused on the fact that the information and legal characteristics of the state security sector are an integral component of the national security of the state as a whole and its individual components. The importance of eliminating information threats has institutionalized a separate area of state security - information security. It was established that cyber security is an independent component of state security derived from information security, which emerged as a result of the development of digital technologies and the spread of the use of information and telecommunication systems for the purposes of information dissemination.
 The institutional system of ensuring information security is singled out, which is formed from a set of authorized subjects, which are grouped depending on their legal status and available powers in the field of information security as follows: 1) state bodies authorized to ensure national security; 2) bodies of executive power, which are empowered in the specified sphere of public relations; 3) law enforcement agencies; 4) auxiliary entities that can carry out separate activities aimed at ensuring information security.

Adopsi Generator Kunci Euler Number dan Pembangkit Kunci Blum Blum Shub untuk Meningkatkan Confidentiality Level pada Extended Vigenere

The Vigenere algorithm is an encryption model that is still being developed in the field of information security today. One aspect that is considered important in the field of information security is confidentiality. The problem of achieving high message or information thresholds is very important in the field of information security. Extended Vigenere is known as an evolution of Vigenere that implements more character sets. One of Vigenere's development algorithms is to modify the key generator used. This experiment aims to test the effect of information confidentiality on the use of the Blum Blum Shub (BBS) key generator and the Euler number applied to Extended Vigenere. The BBS key generation method and Euler number are used sequentially. As a sample, short astronomical observation conversations sent via telegram with a file size of 1 KB were used. Experiments were carried out using different key lengths, namely 32-bit keys and 64-bit keys. As a measurement metric, the entropy calculation of the Extended Vigenere output is used. The results obtained are a significant increase in information confidentiality with an entropy achievement value of more than 79% of the optimum entropy

Кибератаки: иммерсионная образовательная среда и ее формирование

The article discusses the features of the formation of an immersion educational environment using a controlled simulator of computer attacks. The use of a controlled simulator of computer attacks as a method of teaching students disciplines related to information security is considered. This tool allows you to simulate various types of attacks on an information system and conduct training to improve its protection skills. Immersion educational environment in the field of information security – allows you to implement the principle of interactive learning with a nonlinear learning scenario and involvement in the process of the teacher and the student using information technology. The use of controlled simulators makes it possible to check the stability of computer networks and other systems to advanced cyber attacks and develop effective methods to combat them. To organize such an immersive educational environment, it is advisable to involve software manufacturers on the principles of strategic partnership.

Large-capacity information hiding method based on a chunking matrix

Information hiding is a crucial technology in the field of information security. Embedding capacity and stego-image quality are two key performance metrics in information hiding. In recent years, many information-hiding methods have been proposed to enhance embedding capacity and stego-image quality. However, through the study of these methods, we found that there is still room for improvement in terms of performance. This paper proposes a high-capacity information-hiding method based on a chunking matrix (CM). CM divides a 256×256 matrix into blocks, where each block contains k×k corresponding secret numbers. A pair of pixels is extracted from the original image and used as the coordinates for the matrix. In the search domain at that coordinate position, the corresponding secret number is found, and the matrix coordinates of the secret information are used as the pixel value for the stego-image. This paper evaluates the security and effectiveness of CM through measures such as embedding capacity, peak signal-to-noise ratio (PSNR), and bit-plane analysis. CM achieves a maximum embedding capacity of 4.806 bits per pixel (bpp) and maintains a PSNR value of more than 30 dB. Furthermore, the bit-plane analysis fails to detect the presence of the information hidden using CM method.

A novel variable-order fractional chaotic map and its dynamics

In recent years, fractional-order chaotic maps have been paid more attention in publications because of the memory effect. This paper presents a novel variable-order fractional sine map (VFSM) based on the discrete fractional calculus. Specially, the order is defined as an iterative function that incorporates the current state of the system. By analyzing phase diagrams, time sequences, bifurcations, Lyapunov exponents and fuzzy entropy complexity, the dynamics of the proposed map are investigated comparing with the constant-order fractional sine map. The results reveal that the variable order has a good effect on improving the chaotic performance, and it enlarges the range of available parameter values as well as reduces non-chaotic windows. Multiple coexisting attractors also enrich the dynamics of VFSM and prove its sensitivity to initial values. Moreover, the sequence generated by the proposed map passes the statistical test for pseudorandom number and shows strong robustness to parameter estimation, which proves the potential applications in the field of information security.

ИССЛЕДОВАНИЯ В СФЕРЕ ОБРАЗОВАНИЯ В ОБЛАСТИ КОМПЬЮТЕРНОЙ ИНФОРМАЦИОННОЙ БЕЗОПАСНОСТИ

In the modern era of big data, obtaining information has become more convenient and hidden. Therefore, the information security of networks is becoming increasingly important in the national security strategy. In the learning process, teachers should pay attention to strengthening the penetration of education in the field of network information security in order to better raise students’ awareness of preventing network information security in order to further form good quality, as well as increase information literacy on the Internet among students of educational institutions. This article first analyzes the importance of penetration of education in the field of network information security, and then analyzes the current state of education in the field of network information security in teaching computer networks, and finally, focuses on the study of specific strategies for penetration of education in the field of network information security, in the hope of contributing to the development of the country’s network. The practice of education in the field of information security provides certain suggestions and ideas.

ТЕКУЩЕЕ СОСТОЯНИЕ И МЕРЫ ПРОТИВОДЕЙСТВИЯ ОБУЧЕНИЮ СЕТЕВОЙ ИНФОРМАЦИОННОЙ БЕЗОПАСНОСТИ СТУДЕНТОВ В УСЛОВИЯХ БОЛЬШИХ ДАННЫХ

With the advent of the era of big data, the Internet is becoming increasingly inseparable from the life, studies and practice of modern students. The Internet is a double–edged sword. By providing students with convenient opportunities to live and study, issues of online education in the field of information security, such as online intimidation, dissemination of false information, continue to attract people’s attention. Education in the field of network information security for students is associated with the healthy growth of students, the stability of the whole country, the economy and the livelihood of the whole society. Based on this, this article analyzes the current situation in the field of network information security of students’ education in the context of big data, and measures are being taken to strengthen the training of students’ network information security in the context of big data.

Information security in the Union State: the universal legal dimension

The subject of the study forms a set of legal norms of normative legal acts of the Russian Federation, the Republic of Belarus and the interstate association of the Union State of the Russian Federation and the Republic of Belarus, international treaties(agreements) regulating public relations in the field of information security, law enforcement practice, foreign experience of legal regulation, as well as provisions theoretical interdisciplinary research in this field. The object of the study is public relations related to the legal provision of information security in the Union State. The Russian Federation and the Republic of Belarus in the context of new challenges and threats, as well as digital transformation and geopolitical changes. The analysis indicates a certain experience of scientific research in this field. At the same time, in the context of significant changes in socio-economic and foreign policy conditions, new challenges and threats, multi-vector scientific research in the information and legal sphere is necessary. The methodological basis of this study is a system of modern general scientific and private law methods. The study of the formation, development, place and role of the legal provision of information security of the Union State of the Russian Federation and the Republic of Belarus was conducted using the following general scientific methods: analysis and synthesis, abstraction and modeling, generalization, description, etc. The main conclusions of this study were the following proposals, it is necessary to develop and approve the conceptual framework for the legal provision of information security for the development of regional interstate cooperation within the framework of the Union State of the Republic of Belarus and the Russian Federation. This is important for solving the tasks of ensuring national and international information security, implementing agreements within the framework of regional interstate associations and further forming a system of universal public law mechanisms for ensuring information security. At the same time, the strategic legal acts of the Union State in the field of information security are dynamic in nature due to changes in social and political relations, including at the international level. There is a growing tendency to perceive the information space not only as an area requiring the use of exclusively protective measures of influence, but also involving active offensive measures to the extent necessary to protect national interests.

ОБУЧЕНИЕ ПЕДАГОГИЧЕСКИХ РАБОТНИКОВ ОБЕСПЕЧЕНИЮ ИНФОРМАЦИОННОЙ БЕЗОПАСНОСТИ ШКОЛЬНИКОВ СРЕДСТВАМИ ИГРОПРАКТИКИ: ОБЗОР РЕСУРСОВ И СПОСОБЫ РЕАЛИЗАЦИИ

In the era of digital transformation of Russian education and society it is important to improve the professional qualifications of teaching staff in the field of ensuring information security for schoolchildren in the context of preventing the impact of information and cyber threats. The article describes a targeted review of scientific and methodological developments, Internet resources and real experience in using gaming resources on this issue in terms of solving problems of information security and preventing addictive behavior of children in the information space from a practical point of view, indicating the advantages and disadvantages of resources. In this context, it is important to introduce into practice the interactive didactic game “This is not a game” developed at the Academy of the Ministry of Education of Russia – an effective means of increasing the professional competence of teachers in the field of information security using the simulation method. The practical significance of the issues described in the article lies in a detailed description of teacher training models using the “This is not a game” didactic kit.