Principles Of Information Security Research Articles

Information Security and Privacy Protection Strategies in the Process of Electronic Archiving

In the era of digital transformation, electronic archiving plays a pivotal role in preserving and managing vast amounts of information. However, as organizations increasingly rely on electronic archives, ensuring robust information security and privacy protection becomes paramount. This paper proposes a comprehensive framework for enhancing information security and privacy protection strategies within the electronic archiving process. Drawing upon insights from the fields of cyber security, data privacy, and archival science, our framework addresses key challenges and offers practical solutions to safeguard sensitive information throughout its lifecycle. Through a synthesis of existing literature, case studies, and expert interviews, we identify critical vulnerabilities and propose proactive measures to mitigate risks associated with unauthorized access, data breaches, and privacy violations. Our framework integrates technical controls, policy guidelines, and organizational practices to establish a resilient architecture that fosters trust, integrity, and confidentiality in electronic archiving systems. By adopting our proposed strategies, organizations can strengthen their defiance mechanisms and uphold the principles of information security and privacy in the digital age.

RIGHT TO PRIVACY IN THE DIGITAL AGE: ADDRESSING CHALLENGES IN THE ERA OF TECHNOLOGICAL ADVANCEMENTS

The term "digital age" refers to a grouping of various technological innovations such as virtual environments, digital services, intelligent applications, machine learning, knowledge-based systems, etc. that determine the particular features of the modern world, such as globalization, e-communications, information sharing, virtualization, etc. However, uncontrolled access to information and personal data kept in many global network nodes presents a chance for the technologies of the digital age to breach certain fundamental principles of information security and privacy. The rapid progress of technology has prompted both private and governmental organizations to gather personal data from individuals, often inadvertently left behind while browsing the internet. This collected information, obtained without explicit consent, is subsequently utilized to influence the behavior and decisions of citizens through persuasive technology. This practice infringes upon the liberty guaranteed to every Indian citizen by the Constitution.

Organizational and legal principles of information security of enterprises in the conditions of martial law in Ukraine

Purpose. To investigate the peculiarities of organizational and legal provision of information security (IS) in the conditions of martial law (ML). To propose changes to legislative provisions to improve legal regulation in this area. To develop systematic measures to balance the rights and obligations of individuals and legal entities in the field of IS in the conditions of ML. Methodology. The general scientific and special legal methods of cognition are used: hermeneutic method allowed us to substantiate expansion of IS field; content analysis – to determine organizational principles of IS of enterprises in conditions of ML; structural and legal – to propose indicator conditions for legal norms; special-legal – to propose system of local regulatory acts for the legal provision of IS; comparative legal – to propose special legal regime for IS of enterprises. Findings. It is indicated that during the state of war, the IS field of enterprise expands significantly and becomes an element of the national security system. The peculiarities of organizational and legal support and the basic organizational principles of IS of enterprises in the conditions of ML are determined. It is proposed to introduce a special legal regime for implementation of IS of enterprises in conditions of ML and use of the state’s capabilities in this area under specified legal regime. Amendments to the articles of Special Part of Code of Ukraine on administrative offenses are proposed for effective regulatory support of the special legal regime for implementation of IS of enterprises Originality. A legal tool is proposed to limit dissemination of information about a company’s activities – the introduction of local law documents to classify information about the company’s activities during ML into category “with limited access”. Indicator conditions and additions to legislative norms are proposed. Practical value. The developed proposals, indicator conditions and additions to legislative norms will contribute to strengthening the IS of enterprises.

Information security for criminological ethnographers

Information security refers to ‘the practice of defending information from unauthorised access’. Information security practices include everyday activities such as protecting your bank details, or keeping your workplace logins secure. Despite increasingly restrictive approaches to research ethics, academia continues to lag behind journalism when it comes to best practice with regards to information security. This article discusses information security as it pertains to qualitative and especially ethnographic research into crime and deviance. In doing so, the article addresses a gap in the methodological literature by drawing on lessons and real-world examples from journalism, academia and activism, in order to offer guidance for researchers seeking to maintain information security in a digital, networked social world. The article proceeds in three parts. First, the article considers what information researchers might want to protect, who they might want to protect it from and what the consequences might be if they failed to do so (an exercise known as ‘threat modelling’). The different powers, resources and capacities of, and threats posed by, state actors such as the police and intelligence agencies, as well as an array of non-state actors, are considered. Second, the article outlines some general principles of information security and how they might apply to ethnographic research into crime and deviance. Third, the article discusses a range of practical considerations when it comes to using mobile phones (cell phones), social media, passwords and encryption in the course of researching crime and deviance.

МІЖНАРОДНО-ПРАВОВЕ РЕГУЛЮВАННЯ ЗАБЕЗПЕЧЕННЯ ІНФОРМАЦІЙНОЇ БЕЗПЕКИ В РАМКАХ ООН

As a result of the active implementation of digital technologies in all spheres of social life, both international and national legal mechanisms aiming at ensuring the support for the security of the information space stand out in the foreground. The existing legal mechanisms provide for the improvement and harmonization of the legal framework in the field of information security at the national and international levels. In this context, the idea of digital sovereignty determines the use of legal mechanisms that ensure the protection of information security. Due to this faction, a comprehensive study of the general patterns of functioning and development of international legal mechanisms for ensuring information security within the framework of the UN is particularly appropriate, relevant and requires a detailed analysis. The article addresses the analysis and study of UN legal mechanisms in the field of ensuring information security. The purpose of the scientific work is a comprehensive study of the general patterns of functioning and development of international legal mechanisms for ensuring information security within the framework of the UN and the development of scientifically based proposals and recommendations regarding the effective operation of these mechanisms in international and national legal orders (legal systems). The methodological basis of scientific research is general scientific and special legal methods. In particular, a systematic approach, a generalization method, and a systematic analysis were used in the process of scientific research. In the course of the study, there were analyzed: the peculiarities of the functioning of the institutional and legal mechanism of information protection within the framework of UN coordination in the context of the multi-vector system of international security and legal regulation of international cooperation. The article substantiates the expediency of developing an integrated, coordinated information policy of international organizations and institutions with the aim of unifying approaches to ensuring information security. Also, the work summarizes the main problems arising in the international legal regulation of the fight in the field of ensuring information security, and the main threats to international peace and security in the information space, and suggests as well ways to solve them. In this context, the work summarizes the principles of international information security, highlights the main trends in the development of cyber threats in the modern information space and measures necessary for their neutralization. The article analyzes the peculiarities of the functioning of the institutional and legal mechanism of cyber protection in the context of the legislative regulation of international cooperation between international organizations and institutions. In particular, an analysis of the main mechanisms of legal support for cyber protection of the information space was carried out with the aim of their integration into a unified international system of the legal information field. As a result of the study, recommendations were formed. In the field of ensuring information security at the national and international levels, it is necessary to continue and expand activities to create conditions for the formation of an international information security system based on generally recognized principles and norms of international law. In particular, at the UN level, it is necessary to prepare and adopt international legal acts regulating the application of the principles and norms of international law in the field of the use of information and communication technologies. Since there is no single global act that regulates the procedure for combating information threats, in this context, the task of developing the UN Convention on International Information Security is very important. The document should: identify the main threats to international peace and security in the information space; determine the main principles of ensuring international information security; prescribe in detail the principles of international cooperation in the fight against crimes in the information sphere; determine effective and efficient mechanisms of legal responsibility in the information space up to the creation of a special international body for the investigation of crimes in the information sphere.

ИНФОРМАЦИОННАЯ БЕЗОПАСНОСТЬ И ЗАЩИТА ИНФОРМАЦИИ В СОВРЕМЕННОМ ОБЩЕСТВЕ

This article looks at the principles of information security, and the ways in which information can be protected. Examines the problems of protecting information, unauthorised access to it. Demonstrates the types of viruses that exist on the Internet. Offers software to help the user protect themselves from them

Privacy Leaks Protection in Music Streaming Services Using an Intelligent Permissions Management System

A security violation is referred to as a personal data breach when it leads to unintentional and unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data that has been communicated, stored, or otherwise processed in some other manner. Based on the principles of information security, we can define a breach of confidentiality as the unauthorized or accidental disclosure or access to personal data, a breach of integrity as the unauthorized or accidental alteration of personal data, and a breach of availability as the unauthorized or accidental loss of access to or destruction of personal data. This paper suggests designing an intelligent consensus policy management system based on the Markov chain approach. It is a novel system that would analyze the present status of the consensus elements for future development and anticipates the possibility of possible breaches of sensitive personal data. The evaluation of the proposed strategy is based on a policy scenario that involves a hypothetical consensus and a data breach of sensitive information to music streaming services.

An Artificial Neural Network Technique of Modern Cryptography

An enormous volume of data transmitted through the internet in every second nowadays, so data protection is still a big challenge as communication channels are mostly public. Several approaches are there for protection of data when transmitted through the network channel, cryptography is one of them. Cryptography is a technique to hide original and confidential information from intruder. Considering information security principles i.e. confidentiality, integrity, and availability (CIA-triad) an efficient, portable, dynamic, and simple, artificial neural network (ANN) based cryptography algorithm have been presented in this paper. A multi-substitution tree parity machine (TPM) approach is used here to generate dynamic single digit secret key. The secret key created by the tree parity machine will be different in each phase of execution. This single digit dynamic secret key is used in the proposed encryption and decryption techniques. The complexity and execution time taken by the proposed algorithm is improved comparing to the existing algorithms. The proposed algorithm provides higher reliability and robustness in terms of security because of it dynamic nature.

Evaluation of Basic Principles of Information Security at University Using COBIT 5

Information security issues commonly arise in a company and institution, including those in University. Some of the threats and attacks are unauthorized access, system user accountability, and logical and physical issues. This study reveals the obedience rate of the information security principle in Universitas Amikom Purwokerto and provides a recovery strategy. The domains being used were APO13, DSS5, and MEA3. The researcher employed a descriptive quantitative method by having documentation, interview, and administering a questionnaire to the respondents. The respondents were 83 employees who got selected by using the purposive sampling technique. The result shows that the capability level is in level 3, known as the established process. It means that the employees have applied the current procedure, even though they have not applied information security management. The proposed refinement strategy emphasizes the security policy, classification and asset management, physics and environment security, and business continuity management. The gap can be fixed by implementing the proposed refinement strategy. Future researchers may evaluate obedience based on the identified variables by keeping the standard in mind.

Strategic principles for ensuring information security in modern conditions

The hybrid information threats and challenges distributed by the Russian Federation are considered. The main provisions of the modern Information Security Strategy of Ukraine are outlined. The content, purpose and tasks of the Information Security Strategy are revealed. The conceptual principles of the state information policy in modern conditions are detailed. Typical types of threats of external information influence are highlighted. Emphasis is placed on the peculiarities of conducting special information operations against Ukraine. The strategic principles of information security are generalized. The tasks and achievements of the domestic special service in the field of information security are summarized. It is proposed to clarify the competence of the domestic special service to preserve the function of information security in terms of its reform. The directions of the further activity of the Security Service of Ukraine in the framework of the implementation of counterintelligence and operational-investigative measures aimed at preventing and localizing Russian destructive activities to the detriment of state interests in the information sphere have been identified.

Human Errors: A Cybersecurity Concern and the Weakest Link to Small Businesses

Cybersecurity is essential for all organizations, especially during this menacing Covid-19 global pandemic. The sudden transition of leaving the offices to work from home – the 'new normal' – has introduced information security-related risks associated with human factors. For example, both criminals and employees use the same platform for information exchange but with starkly different intentions. But both their actions compromise information and computer security. Criminals intentionally exploit systems to gain unauthorized access for their benefit, while employees make careless mistakes, leaving systems exposed and vulnerable. The present study examines human errors influenced by actions, attitudes, and behaviors that affect overall information security. Purposive sampling within the qualitative approach was used to select thirty (30) small business managers. Data was collected using a qualitative online survey as a Google Form. The study used thematic analysis. The results revealed that repeated human mistakes compromise information security principles and render employees the weakest link. The study explained the risks caused by employees due to ignorance or poor decision making, technical-related errors, and skills- and policy-based errors. Even though small businesses do not require a 'one-size-fits-all' security approach, recommendations to reduce human mistakes were made.

Theoretical and Conceptual Approaches to Defining the Concept of Economic Intelligence in the Ukrainian Scientific Practice

This contribution is dedicated to the study of theoretical and conceptual aspects of economic intelligence. The goal of the research is to theoretically define the notion of economic intelligence and categorize the forms of its implementation with regard to the wide range of tools used to obtain, process and analyze information. Since economic intelligence is a separate analytical phenomenon, the author focuses on a series of relevant research tasks that disclose the theoretical essence of such notions as “economic intelligence”, “competitive intelligence” and “industrial espionage” as well as elaborate on their distinctive features in the context of data management process. Moreover, the author singles out the principles of information security within the context of intelligence activities and scientifically substantiates the forms of economic intelligence implementation with respect to the use of data acquisition methods. In the course of the research on economic intelligence, the author emphasizes the existence of various methods to acquire information necessary for the effective functioning of a state, organization or enterprise, which facilitates the successful solving of strategic and operational issues in the policy-making process. Furthermore, the economic intelligence data helps to identify new market opportunities as well as potential risks, and, subsequently, modify economic activities and plans on the development of an enterprise environment. Having studied theoretical aspects and forms of economic intelligence, the author reaches conclusions regarding the notion of economic intelligence as well as its forms – competitive intelligence and industrial espionage. It is determined that economic intelligence represents a system of covert search, gathering, compilation, analysis and goal-oriented use of strategic intelligence. The author notes that economic intelligence can be studied within the contexts of its separate forms, namely the competitive intelligence (as a lawful method to acquire data) and industrial espionage (as an unlawful method of acquiring data). The comparative analysis reveals that the notions of economic and business intelligence can be considered synonyms, although business intelligence in less associated with the illegal gathering of information. The author states that business intelligence is not synonymous with industrial espionage. Even being forms of economic intelligence, the notions of competitive intelligence and industrial espionage cannot be interpreted as one phenomenon, for they differ in the characteristic methods of data acquisition.

Digital Transformation as One of the Instruments for Overcoming the Public Health Crisis: The Role and Use of Ehealth Solutions during the Covid-19 Pandemic in Slovenia

The comprehensive digital transformation of the Slovenian healthcare system and the use of national eHealth solutions would enable the citizens and healthcare professionals to access data and information relevant to highquality healthcare services, and healthcare managers to take evidence-based decisions and measures. This paper analyses the role and use of selected eHealth solutions during the Covid-19 pandemic in Slovenia. The pandemic has led to significant growth in interest in digital transformation processes and the use of eHealth solutions. It also breaks down the normative framework of eHealth and the compliance of eHealth solutions with the fundamental principles of information security and the General Data Protection Regulation. The study proceeded from a review of the literature, followed by discussions with experts engaged in managing eHealth solutions and an examination of current statistical data on the use of these solutions from administrator modules. The results of the study show that the Covid-19 pandemic could constitute a turning point in our understanding of digital transformation, which is becoming not only a key public health management instrument, but also an indispensable driver to further develop the healthcare system, and empower patients at times of national and international public health crises.

INFORMATION SECURITY OF LABOR LAW SUBJECTS

Introduction. The processes of digitalization of business, the introduction of new forms of organization of production and labor are much ahead of the settlement of such innovations in the legal environment. Formulation of the problem. The archaic nature of labor legislation in comparison with the trends of the digital economy gives rise to grounds for reducing the level of information security of the subjects of labor relations. The relevance is due to the imperfection of the normative regulation of the basic principles of information security, the obsolescence of labor legislation, the low level of digital culture of the population of Ukraine, resulting in an urgent need to study the information security of labor law. Goal. The study of ways to modernize the mechanisms of information security of employers and employees, caused by the tendency to combine labor relations with information technology. Methods. Theoretical and general scientific (analysis, synthesis, systematization), empirical method (method of comparison). The main results of the study. International legal regulation is significantly ahead of the development of national legislation on information security. The Ukrainian legislator sees this process as illusory, bypassing the scale of technological development and possible "digital" problems. Increasingly, the work process is moving into cyberspace. This trend has created the conditions for the successful development of digital work platforms. Participants in labor relations in Ukraine need to update the mechanisms of protection against information threats related to the digitalization of activities, as well as the modernization of protection of labor rights of employees. In order to create appropriate working conditions, employers must control the work of workers, but in ways that do not violate their fundamental rights and freedoms. Conclusions. The obligation to ensure privacy must be exercised through a single national regulatory framework. Public authorities are authorized to ensure non-interference in the private life of subjects of labor law. It is necessary to establish mechanisms to protect labor relations participants from information threats at the level of a single mandatory legal act and regulate the status of digital labor platforms to protect intellectual property rights, guarantee payment for work performed, prevent the spread of shadow employment.

National interests of the state and the possibility of restricting the right to freedom of speech: the question of correlation

The article examines the possibility of restricting the right to freedom of speech in order to protect the national interests of the state. An analysis of normative legal acts prohibiting the dissemination of destructive information, such as calls for a violent change in the constitutional order of Ukraine, the outbreak of aggressive war, incitement to national, racial or religious hatred, etc. The right to freedom of expression is not absolute and may be limited. The article substantiates the criteria for state intervention in the information sphere, which allow limiting the dissemination of destructive information and preserving democratic values. Such criteria include the legality of the procedure, the legality of the purpose and the minimum amount of intervention. The article considers the existing mechanisms in Ukraine to respond to harmful informational influences. The law provides for liability for disseminating false information at several levels: civil, administrative and criminal. At the same time, these mechanisms are insufficient, as the concepts of «misinformation», «fake», etc. are not normatively defined. The article describes the state policy to combat destructive information influence. The bases of activity of state bodies created for the purpose of counteraction to dissemination of misinformation and propaganda are considered, namely the Center of counteraction of misinformation at Council of National Security and Defense of Ukraine and the Center of Strategic Communications and Information Security at the Ministry of Culture and Information Policy. The strategies of the state on counteraction to harmful information influence are analyzed. The Doctrine of Information Security of Ukraine is considered, which clarifies the basics of the state information policy in the direction of counteracting the destructive information influence of the Russian Federation in the conditions of the hybrid war unleashed by it. The main provisions of the Information Security Strategy, which defines the general principles of information security, are also considered. The strategies of the state on counteraction to harmful information influence are analyzed. The Doctrine of Information Security of Ukraine is considered, which clarifies the basics of the state information policy in the direction of counteracting the destructive information influence of the Russian Federation in the conditions of the hybrid war unleashed by it. The main provisions of the Information Security Strategy, which defines the general principles of information security, are also considered.

Detection of Different DDoS Attacks Using Machine Learning Classification Algorithms

Cyber attacks are one of the world's most serious challenges nowadays. A Distributed Denial of Service (DDoS) attack is one of the most common cyberattacks that has affected availability, which is one of the most important principles of information security. It leads to so many negative consequences in terms of business, production, reputation, data theft, etc. It shows the importance of effective DDoS detection mechanisms to reduce losses. In order to detect DDoS attacks, statistical and data mining methods have not been given good accuracy values. Researchers get good accuracy values while detecting DDoS attacks by using classification algorithms. But researchers, use individual classification algorithms on generalized DDoS attacks. This study used six machine learning classification algorithms to detect eleven different DDoS attacks on different DDoS attack datasets. We used the CICDDoS2019 dataset which is collected from the Canadian Institute of Cyber security in this study. It contains eleven different DDoS attack datasets in CSV file format. On each DDoS attack, we evaluated the effectiveness of the classification methods Logistic regression, Decision tree, Random Forest, Ada boost, KNN, and Naive Bayes, and determined the best classification algorithms for detection.

STUDY OF INFORMATION SECURITY OF THE INFORMATION SERVICES MARKET

The article is devoted to the study of information security of the information services market. The subject of the research is information security, and the goal of the paper is to study the information security of the information services market. Information security is considered a socio-economic challenge that can be addressed through the confident actions of the state. Data analysis confirmed the problem of information security at different levels. Information security is aimed at protecting information from unauthorized access. The development and transformation of the information services market depend on the quality metrics of the Internet. This paper deals with the issue of maintaining a sufficient level of information transparency, which is related to and interdependent on information security. The main risks and threats caused by the active introduction of information technologies and the advancement of the information services market are specified. The study found that in the day-to-day operations of each company, many risks can affect the information system due to information security breaches. Social engineering involves the use of psychological techniques to mislead users by providing information or access for attackers. In order for the company to cope with external risks in the information services market, it is necessary to build a strong risk management information system. The process of risk management is ongoing and iterative in nature, it must be repeated indefinitely as new threats and vulnerabilities emerge, especially external ones. The choice of countermeasures or controls used must strike a balance between productivity, cost, effectiveness, and the information value of the asset being protected. Conclusions: the research identified the basic principles of information security, namely confidentiality, integrity, and availability. Moreover, to increase the information security of the companies which are participants in the information services market, the author proposes implementing a range of measures within the company. Information security in the information services market is a marker of the crucial difference between the information society and the industrial society. The main hallmark of the information society is its openness. This means a significant reduction and thus a general lack of confidential information for society. The study established that the digitalization of the economy is modifying the information services market. The research findings may prove useful to businesses and governments to boost information security of the information services market. The research is based on the methods of theoretical generalization and comparison to define the concept of “information security” and its interrelations with other definitions of the relevant terminological framework. Analysis, synthesis, and scientific abstraction were used to identify factors affecting the risks and threats to information security of the information services market. There were used methods of analysis, comparison and generalization when summarizing research findings.

An information classification model for public sector organizations in Sweden: a case study of a Swedish municipality

PurposeThe purpose of this study is to create an information classification model that is tailored to suit the specific needs of public sector organizations in Sweden.Design/methodology/approachTo address the purpose of this research, a case study in a Swedish municipality was conducted. Data was collected through a mixture of techniques such as literature, document and website review. Empirical data was collected through interviews with 11 employees working within 7 different sections of the municipality.FindingsThis study resulted in an information classification model that is tailored to the specific needs of Swedish municipalities. In addition, a set of steps for tailoring an information classification model to suit a specific public organization are recommended. The findings also indicate that for a successful information classification it is necessary to educate the employees about the basics of information security and classification and create an understandable and unified information security language.Practical implicationsThis study also highlights that to have a tailored information classification model, it is imperative to understand the value of information and what kind of consequences a violation of established information security principles could have through the perspectives of the employees.Originality/valueIt is the first of its kind in tailoring an information classification model to the specific needs of a Swedish municipality. The model provided by this study can be used as a tool to facilitate a common ground for classifying information within all Swedish municipalities, thereby contributing the first step toward a Swedish municipal model for information classification.

A taxonomy of attack mechanisms in the automotive domain

In the last decade, the automotive industry incorporated multiple electronic components into vehicles introducing various capabilities for adversaries to generate diverse types of attacks. In comparison to older types of vehicles, where the biggest concern was physical security, modern vehicles might be targeted remotely. As a result, multiple attack vectors aiming to disrupt different vehicle components emerged. Research and practice lack a comprehensive attack taxonomy for the automotive domain. In this regard, we conduct a systematic literature study, wherein 48 different attacks were identified and classified according to the proposed taxonomy of attack mechanisms. The taxonomy can be utilized by penetration testers in the automotive domain as well as to develop more sophisticated attacks by chaining multiple attack vectors together. In addition, we classify the identified attack vectors based on the following five dimensions: (1) AUTOSAR layers, (2) attack domains, (3) information security principles, (4) attack surfaces, and (5) attacker profile. The results indicate that the most applied attack vectors identified in literature are GPS spoofing, message injection, node impersonation, sybil, and wormhole attack, which are mostly applied to application and services layers of the AUTOSAR architecture.

Meningkatkan Keamanan Webserver Aplikasi Pelaporan Pajak Daerah Menggunakan Metode Penetration Testing Execution Standar

Regional Tax Reporting Application Webserver is one of the public services for taxpayers to report their sales transactions. This application can be accessed on the domain http://sptpd.payakumbuhkota.go.id. This application is public, so the principles of information security must be applied to prevent cyber attacks. The principles of information security include confidentiality, integrity, and availability. To apply this information security principle, it is necessary to conduct vulnerability assesment of the application webserver. This study aims to improve the security of the application webserver so that the data and information in it is secure. The method used in this study is the Penetration Testing Execution Standard which is one of the methods developed by the Pentest Organization to become a standard in analyzing or auditing security systems. The results of vulnerability testing using software Acunetix, Nikto, BurpSuite and Owasp, there are seven types of vulnerabilities, namely: X-Frame Header Options is Missing, CSRF Attack, Cookie Without Only Flash, DNS Vulnerability, Ddos Attack, Bruteforce Page Login and Open Port. The vulnerability can be exploited, where the level of application vulnerability is in the medium category. The recommendations for fixing vulnerabilities can be applied by the developer, so that after repairs are made, the vulnerability level of the application webserver is in the low category and there is only one type of vulnerability, namely Brute Force Page Login.