Leak Of Confidential Information Research Articles

Foreign Election Interference in Africa’s De-Democratization Culture

The 2016 USA elections appear to have made Russia the “poster-boy” for election interference across the globe, allegedly using tools such as disinformation, misinformation, mal-information, email hacking, leaking of confidential information, and others. All such activities are a threat to national self-determination, democracy, and the autonomy of the people. Since then, elections in developing democracies in Africa are also alleged to have experienced interference by the usual suspect: Russia. In Africa, the actors of election interferences have been expanded beyond Russia to include foreign countries and companies in past elections in Kenya, Madagascar, Mozambique, Nigeria, and Ghana. The next general elections in Ghana are in December 2024. In the previous general elections in Ghana, there were no significant allegations of election interference, although, in 2020, the specter of foreign election interference emerged in the political discourse. The actions of the domestic actors to de-democratize elections were mentioned selectively. It may be simplistic to argue in favor of election non-interference in Ghana’s political business cycle every four years since 1992, but the allegations are not supported by evidence and are merely anecdotal and subjective or based on geopolitical realism. What can be proven is the de-democratization of incumbents and other domestic political actors in domestic elections through open vote-buying by politicians and vote-rigging by incumbent political leaders. In such a political dysmorphic situation, it is difficult to accuse any entity of being the mastermind of election interferences in Africa.

Efektivitas dan Hambatan Yang Timbul dari Penegakan Konvensi Apostille di Indonesia

Research on "EFFECTIVENESS OF ENFORCING ACCESS TO THE APOSTILLE CONVENTION AND OBSTACLES THAT WILL BE FACED IN INDONESIA" is research using normative juridical methods which focuses on the study of positive legal rules which uses an approach to existing legislation and conventions and focuses on reviewing legal studies. The Apostille Convention was originally born and ratified in The Hague, Netherlands on October 5 1961 as an international agreement which aims to eliminate several requirements related to the legalization of diplomatic or foreign public documents. The Apostille Convention came into force on January 21 1965. The effectiveness of Apostille enforcement in Indonesia includes making it easier for the public to legalize a foreign public document, improving a more reliable legal system, simplifying administrative costs and also supporting economic activities. The obstacle to enforcing the Apostille is that it adds challenges and responsibilities for notaries. In the process, the issuance of the apostille certificate creates new problems for the notary and adds responsibility, because the issue of the certificate requires the notary to maintain the confidentiality of the contents of the authentic deed in accordance with the UUJN (Notary Public Law), but in the Apostille, the notary is required to upload data to Kemenkumham website which will then be verified by the authorities. This will then lead to the leak of confidential information and conflict with UUJN.

Ensuring information security in order to preserve the national interests of Russia at the beginning of the 21st century

The purpose of this article is to analyze the main risks of information security in Russia in the new millennium and the effectiveness of information security programs in the Russian Federation. The object of the study is the information security system of the Russian Federation. The article identified the main risks of information security in Russia, such as cybercrime, violations of the rules for processing personal data, leaks of confidential information, and others. The authors analyzed the distribution of the listed types of threats to information security of Rostelecom's client companies for 2022. Attention is focused on the fact that a low culture of information security among military personnel and personnel working at the facilities of the Armed Forces can lead to vulnerabilities and risks of data leakage of important strategic facilities. The programs for ensuring information security of the Russian Federation were considered, including the Federal Target Program "Information Russia", the Federal Law "On the Protection of Personal Data" and others. The authors identified the main goals and indicators of such national programs. An analysis of the effectiveness of the information security system of the Russian Federation is carried out and a forecast of its development is presented. State programs aimed at developing the digital economy, protecting critical information infrastructure, developing mechanisms to combat cyber threats, as well as creating modern technologies for the Russian Armed Forces and cryptography are the key areas of Russia's work in this area. The authors also analyzed the forecast for the development of the Russian cybersecurity market, as well as the global forecast for the development of information security technologies. It is concluded that despite the measures taken by the Russian Federation to ensure information security, the system is still vulnerable to new threats. recommendations were developed to improve the current information security system in the Russian Federation.

Обеспечение экономической безопасности при утечке конфиденциальной информации

The relevance of countering the leakage of confidential information in connection with the active digitalization of management processes, the digital economy, and the expansion of remote work has been identified. The emergence and expansion of a new type of rent - confidential information is indicated. Tendencies in the field of leakage of confidential information have been established. The concept of information leakage is given and leakage schemes are modeled. The change in the structure of the impact on information resources is analyzed. The factors of intentional leaks of confidential information are systematized. The classification of losses from leaks of confidential information is carried out. The Dark web forum for selling confidential information is described. The branches and divisions of confidential information leakage are analyzed. A chronological analysis of state structures exposed to the leakage of confidential information was carried out. The international experience in countering the leakage of confidential information is presented. A comparative analysis of the leakage of confidential information in Russia and in the countries of the world by industry, size of organizations, and the nature of information has been carried out.

SSDeN: Framework for Screen-Shooting Resilient Watermarking via Deep Networks in the Frequency Domain

Mobile devices have been increasingly used to take pictures without leaving a trace. However, the application system can lead to confidential information leaks. A framework for screen-shooting-resilient watermarking via deep networks (SSDeN) in the frequency domain is put forward in this study to solve this problem. The proposed framework can extract the watermark from the leaked photo for copyright protection. SSDeN is an end-to-end process that combines convolutional neural network (CNN) with residual block to embed and extract watermarks in the DCT domain. We simulate some screen-shooting attacks to ensure the networks embed the watermark robustly. Our framework achieves the state-of-the-art performance on existing learning architectures for screen-shooting-resilient watermarking.

The possibilities of ensuring the security of the software product in the conditions of unauthorized access

Ensuring the security of a software product in the conditions of large companies, taking into account confidential financial and corporate data, is quite an urgent topic in 2021-2023. Over the past year, the number of leaks of confidential information reached a historic peak, together with cyber attacks, and amounts to 114 identified cases. In modern conditions, software security testing is aimed at identifying security errors and design flaws at all stages of the software development lifecycle. At the same time, at the design stage, this type of work should be provided in order to facilitate the implementation of these characteristics in the final version of the security-related system. Research has shown that there is a wide range of opportunities for developing and using security testing software. These options may differ in implementation technologies, cost and other tactical and technical indicators, characteristics of individual elements, and so on. The main task of developing a software security testing method is to develop, improve and select models, methods and tools that belong to a subset and provide maximum software security indicators. Our approach allows us to prevent any penetration into the information system, while maintaining 100% security of confidential files and the system as a whole. The threat prevention model works with the help of proactive technology, and if you calculate the economic effect of these measures, it can be different, depending on the value of the enterprise’s information itself, and can also be calculated in millions of US dollars. The reliability of the results of mathematical modelling of technologies for creating and implementing «penetration testing» tools is evaluated. The experimental results showed that for all the studied data types, the confidence probability that the value of the statistical value «does not deviate» from the mathematical expectation by more than 1 is 0.94.

Урядові комунікації в період пандемії коронавірусу на прикладі подій у Нових Санжарах

The main objective of the article is to analyze an example of implementation of government communications in connection with the mass protest of residents from Novi Sanzhary, the urban-type settlement in Poltava region caused by evacuation of the Ukrainian citizens from Wuhan (PRC) on February 20, 2020. Through the comprehensive retrospective analysis of the government’s communication policy as well as the analysis of statements of government officials and local authorities in the media it was identified that the government communication policy became a major factor of mass protest in a pandemic. The government’s uncertainty in choosing the final medical facility to quarantine the evacuees and a lack of awareness among the government officials about socio-economic and demographic characteristics of Novi Sanzhary’s residents led to a deliberately ineffective communication strategy: 1) the residents of Novi Sanzhary were not properly informed about the specifics of means of coronavirus’ spread and lethality – it resulted in the government’s inability to predict the behavior and reaction of the locals to evacuation; 2) there was a lack of communication and coordination between the government’s officials and local authorities of Novi Sanzhary – this resulted in the opposition of local authorities to evacuation combined with their spreading of false rumors among the locals and their support of the protest; 3) the officials spread the false messages related to the protesters, that questioned their subjectivity and simultaneously politicized the protest. In addition, the government was unable to counter the leaks of confidential information in the social and mass media on the eve of evacuation, which minimized unexpectedness of the operation. Altogether, these factors led to the mass protest of Novy Sanzhary’s residents against evacuation of the Ukrainian citizens on February 20, 2020. The consequences of the protests impacted negatively on the international image of Ukraine. As a result, the article offers the certain recommendations aimed to improve the government communications in the terms of coronavirus pandemic in Ukraine.

THE ACCOUNTING SYSTEM AS THE BASIS FOR ORGANISING ENTERPRISE CYBERSECURITY

Abstract. The increasing number of cyberattacks as part of the hybrid influence on social and economic processes and the threat of confidential information leaks dictate the need to ensure cybersecurity for enterprises, sectors and branches of the economy. Since most economic information is produced by the accounting system, its cybersecurity is a priority. The review of literature on enterprise cybersecurity has indicated that the researchers increasingly define the accounting system as the target of cybersecurity measures. This approach is scientifically limited, as it does not consider that the accounting system may be the subject ensuring the cybersecurity of enterprises in the conditions of rapid development of latest computer and communication technologies. The aim of the article is to investigate the prospects of organising accounting when it is acting as the subject in a platform for ensuring the cybersecurity of enterprises. It is substantiated that accounting should be used as the basis for ensuring cybersecurity, given that accounting is the main producer of economic information, much of the accounting information is confidential, modern accounting specialists are qualified in multiple different areas of expertise, numerous cyberattacks are perpetrated via accounting software, and the regulatory nature of accounting standards pertaining to information processes. The prospects of reorganising the accounting department of enterprises and transforming the operational responsibilities of accounting specialists to focus on ensuring the cybersecurity of enterprises are explored. It is proposed to use the accounting policy of the enterprise and the internal regulations linked to it as the basis for the development of cybersecurity regulations. The necessity of introducing permanent security audit to accounting and control activities of the enterprise is proved. It proposed that internal controllers (accountants) or external specialists from audit firms monitor and test the cybersecurity system of enterprises that will facilitate efficient prevention, avoidance and elimination of information barriers and threats to the effective operation of economic entities. Keywords: accounting, cybersecurity, security audit, information security, information risks and barriers, accounting policy. Formulas: 0; fig.: 3; tabl.: 1; bibl.: 19.

ASSESSMENT OF COMPLIANCE OF INFORMATION SECURITY MEANS ON SIGNIFICANT OBJECTS OF CRITICAL INFORMATION INFRASTRUCTURES OF THE RUSSIAN FEDERATION

The need to assess the compliance of information security means depends on the importance of the information, processed at the enterprise. The lack of specific requirements and criteria for conducting an assessment will cause the protection tools to function incorrectly this, in turn, will lead to unpredictable consequences, as well as to the disruption of the functioning of significant objects. Even with the changes made to the legislation of the Russian Federation, there is no specific algorithm for assessment the compliance of certain classes of security tools, such as DLP systems. This article describes the changes made to the legislation and how they will affect the compliance assessment process. The selected security profile, along with GOST 15408-2012, reveals such concepts as functional requirements of trust and security functions. Taking these regulations into account, it is possible to develop a method for conducting compliance assessment for DLP systems, which are an extremely important means of protecting against leaks of confidential information on significant objects of critical information infrastructures.

Video Capture Systems as a Means of Investigating Information Security Incidents at the Enterprise

Today’s trend is the growth of information security incidents. Confirmation of this is the data of the company InfoWatch, according to which the number of leaks of confidential information in the first half of 2017 has increased by 10% as compared to the same period of 2016, and equals to 925 cases. However, 53% out of these 925 cases of diversion were sold by company employees, and 1.7% – by potential insiders. In the modern world, an insider is a very common concept. It is applicable in different spheres of economic activity. In a general sense, an insider is a natural or legal person who, due to his or her position, has access to valuable (mainly, of course, from an economic point of view) information. Valuable information is also called insider information. The article is devoted to the consideration of video capture systems that can help prevent leakage of information from personal computers in the enterprise. The proposed scheme of expert evaluation of video capture allows you to determine the system based on the selected criteria and specified weight coefficients, and lets the user make the best choice in the decision-making process of a specific problem.

Uncovering the strengths and weaknesses of outsourcing core business deliverables: the case of selected state-owned enterprises in South Africa

Background: The outsourcing phenomenon is one of the extensive areas of business in the world. It is a practice among both private and public organisations and an important element in business strategy. Consequently, the execution of maintenance and repairs of equipment are core business deliverables of the power plant maintenance (PPM) department of the selected state-owned enterprise (SOE). Whilst internal employees normally perform such functions, the PPM department outsources them to external service providers. Objective: This study explored the contributing factors influencing outsourcing of core business deliverables. Method: The study was conducted in the PPM department of the selected SOE. Of the 152 individuals located across eight of the provinces in South Africa, identified for participation in the study, 135 participated. It was cross-sectional in nature and included participants from the management of the PPM department as well as its technical officials. Descriptive, correlation and regression analysis were used to test the three objectives, namely to assess the contributing factors influencing outsourcing of core business deliverables, to establish the effect of outsourcing core business deliverables on business performance and to examine the risks of outsourcing core business deliverables. Results: Outsourcing core business deliverables provide flexibility to the PPM department by enabling it to meet unexpected demands. However, it results in the leaking of confidential information to external service providers. Conclusion: Organisations that decide to outsource, must consider the benefits and risks carefully and take measures to mitigate the related risks.

A Review on Enhancing the Security of Database using SQL Injection

In one way or other we all are connected with internet. All web applications are dependent on the internet. Now a day’s web applications play a vital role in everybody’s life. Exponential growth could be observed in many user friendly web applications. Thousands of transactions are done daily through these applications, 80% out of which are vulnerable to malicious attacks according to the survey by the Open Web Application Security Projects (OWSAP) .SQL injections is the highest security threat for web applications .SQL injection is a mechanism for inserting a malicious code in user code. Results in adding or modifying data, leak of confidential information, bypass authentication, performing denial of service, network hacking , table structure, and deleting the database .In this paper we have discussed the various aspects of SQL injection.

Inkjet-Printable Hydrochromic Paper for Encrypting Information and Anticounterfeiting.

Developing rewritable papers has gathered immense interest in recent times in view of developing sustainability in print media without exhausting environmental resources. We herein present a rapid and facile procedure for the fabrication of a communication medium by treating the surface of a paper with synthetic organic molecules, after which plain water could be used as an ink to print and reprint numerous times on the treated paper before disposal. Interestingly, as the paper comes in contact with water, the molecules are driven to reorganize in a slip-stacked arrangement. This alters their ground and excited state properties by hydrogen-bond-assisted nonradiative decay, in which the associated changes are visible to the naked eye. The changes evolved are sensitive to the solubility parameter of the solvent and thermally reversible, thus linking the hydrochromic property to the paper. Against a background of concerns over a rise in counterfeiting and leaks of confidential information, prospects for encrypted communications and anticounterfeiting is herein demonstrated.

Synthesis and Characterization of Microwave Absorber SiO2 by Sol-Gel Methode

In recent years, information technology is growing rapidly, such as communication devices. However, there are still many shortcomings, for example, confidential information leaks caused by the leakage of electromagnetic waves used. A coating of electromagnetic materials or formation composite of electromagnetic material with other materials such as SiO2 is needed to overcome these problems. For such needs, it is necessary to study the manufacture of SiO2 which is simple, cheap, and effective. In this research, manufacture of SiO2 by sol-gel method used a solution of sodium silicate (Na2SiO3) as precursors and H2SO4 as a catalyst. The parameters tested in this experiment is the effect of sintering temperature on the properties of the resulting SiO2. The purpose of this study was to obtain an amorphous SiO2 powder, which is in nano-sized and has a high surface area. The characterization of prepared samples were performed by using an X-ray Diffraction (XRD), Fourier Transmission Infra Red (FTIR), Scanning electron microscopy-energy dispersive spectrometer (SEM-EDS), Transmission Electron Microscopy (TEM), and Surface Area Analyzer (SAA). Based on the experimental results, the SiO2 amorphous structure was obtained with a particle size of 15-20 nm, the surface area of 298 m2/g, and sintering temperature of 100 °C.

DLP-системы и тайна личных переписок

according to the authors, every day a number of threats to information security increases, and this requires an increase in resources (systems) of information protection of organizations and enterprises. There are many information security tools with different functionality, but the main mean of preventing information leakage is the Date Loss Prevention (DLP) system. If you need to establish control over the leak of confidential information there appear a number of questions of conformity of decisions with the legislation and regulations. This article describes the issue of compliance functionality of a DLP system the provisions and requirements of the legislation in the sphere of protection of family and personal secrets, as well as compliance with the Constitutional right of citizens to privacy of correspondence.

6. Permanent Court of Arbitration (PCA)

At the end of 2016, the PCA was acting as registry in seven inter-state arbitrations. Out of these, in the Arbitration between the Republic of Croatia and the public of Slovenia relating to territorial and maritime issues, a partial award was granted and in the South China Sea Arbitration (Republic of Philippines v People’s Republic of China), the arbitral tribunal rendered a final award. The arbitral tribunal resumed the hearing on 17 March. Croatia refused to make any representation as a result of its view that the PCA no longer had jurisdiction as it had terminated the 2009 Arbitration Agreement between the government of the Republic of Croatia and the government of the Republic of Slovenia (Arbitration Agreement) agreement because of the alleged material breach by Slovenia of Arbitration Agreement. The material breach related to a leak of confidential information regarding the arbitration tribunal deliberations. Slovenia, while acknowledging the situation, was of the view that the actions taken by the PCA and Slovenia to rectify the problem meant that Croatia was not entitled terminate the agreement. Slovenia appeared before the tribunal and argued that the tribunal has competence to determine the legal ramification of unilateral termination of the Arbitration Agreement and that it should complete its mandate by rendering an award.

Nihil silentio utilius: confidentiality in mediation and its legal safeguards in the EU Member States

While mediation is all about communication, its boundaries—in many respects—need to be established. Confidentiality is at the heart of the mediation process. It encourages parties to mediation to speak freely and openly. It is essential for the success of mediation both in individual cases and as an institution—a popular dispute resolution method alternative to litigation. This article adopts a particular focus on the confidentiality-related regulations and problems in the EU law and its Member States. While the vast majority of European countries have complied with the 2008 EU Mediation Directive, its requirements may be viewed as insufficient. Article 7 of the Directive provides for a minimum degree of compatibility and very basic standards only. While the current regulations in the Member States differ vastly, so do the consequences of a breach of the duty and a leak of confidential information. This leads to uncertainty and accidental results in cross-border mediations within the EU. Such a situation is unsatisfactory and is even made worse by the fact that the Directive allows member states to decide freely on the qualifications, requirements and other regulations applicable to mediators. Therefore the article calls for further harmonization to establish higher standards and greater clarity.

A Study on the Virtualization Security Management in the Cloud Computing Environment

Service providers provide virtualized IT resources by using Internet technologies in their services. Users use the provided IT resources as much as they want and pay the corresponding fee. In such cloud computing environments, issues of malicious codes, hacking and leak of confidential information are the biggest concerns of the people involved. In this paper, we study the virtualization security management, which is important for the proper management of collection of virtualization resources information and security events, monitoring and analysis of cloud security situations, and cloud security policies. Specifically, we propose the structuring of the virtualization security management system and the management method to reduce the complexity of administering the virtual machines installed in the cloud data centers caused by the inherent properties of virtual machines characterized by dynamic changes in the form of image files. Therefore, we studied the tracing method for history of infected virtual machines following an analysis of the VM lifecycle status and VM running states.

Symbolic quantitative information flow

Quantitative Information Flow (QIF) is a powerful approach to quantify leaks of confidential information in a software system. Here we present a novel method that precisely quanties information leaks. In order to mitigate the state-space explosion problem, we propose a symbolic representation of data, and a general SMT-based framework to explore systematically the state space. Symbolic Execution fits well with our framework, so we implement a method of QIF analysis employing Symbolic Execution. We develop our method as a prototype tool that can perform QIF analysis for a software system developed in Java. The tool is built on top of Java Pathfinder, an open source model checking platform, and it is the first tool in the field to support information-theoretic QIF analysis.

Paedophiles in the community: Inter-agency conflict, news leaks and the local press

This article explores the leaking of confidential information about secret Home Office plans to house convicted paedophiles within a local community (albeit inside a prison). It argues that a politics of paedophilia has emerged in which inter-agency consensus on the issue of ‘what to do’ with high-profile sex offenders has broken down. Accordingly, the article situates newspaper ‘outing’ of paedophiles in the community in relation to vigilante journalism and leaked information from official agencies. The article then presents research findings from a case study of news events set in train following a whistle-blowing reaction by Prison Officers’ Association officials to Home Office plans. Drawing from a corpus of 10 interviews with journalists and key protagonists in the story, the article discusses both the dynamics of whistle blowing about paedophiles and also what happens after the whistle has blown.