List Of Threats Research Articles

Анализ информационных угроз промышленной безопасности

Information security of an enterprise (IS of an enterprise) is the state of security of data, objects of informatization of an enterprise and its interests. IS of an enterprise is achieved only when such properties of the basic properties of IS as confidentiality, integrity, availability of information and the technical component of an enterprise involved in technological processes are met. Ensuring IS of an enterprise is effective only with a systematic and comprehensive approach to protection. The information security system should take into account all current information threats and vulnerabilities. Information security threats are analyzed to determine the full set of requirements for the developed security system. A threat is considered relevant if it can be implemented in the information system of the enterprise and poses a threat to information with limited access. It is shown that the list of threats to information security of an industrial enterprise is very wide and is limited not only to those considered in this article. It is very important to maintain a high level of enterprise information security, especially at critical information infrastructure facilities.

Social Safety of Society for Developing Countries to Meet Sustainable Development Standards: Indicators, Level, Strategic Benchmarks (with Calculations Based on the Case Study of Ukraine)

The paper is devoted to identifying the level of social safety of society, taking into account the indicators of shadow economy, and developing its strategic scenarios as a component of sustainable development of Ukraine by 2030. The authors used the modern methods of normalisation, threshold vector determination, and dynamic weight coefficients in order to identify the level of social safety of society. The authors developed the structure and a list of indicators considering three components of social safety: The standard of living, the demographic component, and the quality of life. This method allows determining the list and severity of threats, comparing the dynamics of integral indices with integral thresholds in one scale, identifying the state of security, and defining strategic goals and strategies. The suggested approach is universal and can be used by any country, region, economic activity, or business to develop evidence-based medium-to-long-term sustainable development scenarios.

Phishing Website Detection Using Machine Learning Classifiers Optimized by Feature Selection

Security is one of the most actual topics in the online world. Lists of security threats are constantly updated. One of those threats are phishing websites. In this work, we address the problem of phishing websites classification. Three classifiers were used: K-Nearest Neighbor, Decision Tree and Random Forest with the feature selection methods from Weka. Achieved accuracy was 100% and number of features was decreased to seven. Moreover, when we decreased the number of features, we decreased time to build models too. Time for Random Forest was decreased from the initial 2.88s and 3.05s for percentage split and 10-fold cross validation to 0.02s and 0.16s respectively.

Безпекові виклики у геополітичному стані сучасного світу як наслідок пандемії COVID-19

According to the geopolitical dimension, the concept of security is ambiguous. Security usually involves protection from external military threats or risks to a state by another state, as well as protection from internal military threats from non-state entities. In recent decades, the traditional concept of security has been completed by other concepts that have expanded the nature of possible threats, joining to the military threats the threat of terrorism, organized crime and diseases, combined with economic, political, social, environmental and biological risks. Accordingly, the list of threats has been revised, in particular for security at the global, national and individual levels.Today, we observe the world’s leading countries struggling to overcome the financial and economic challenges caused by the COVID-19 pandemic. At the end of the twentieth century and in the first twenty years of the twenty-first century the ecological and biological threats and the insidious danger they bring became especially acute. The means of mass destruction include toxic and bacteriological (biological) weapons. The action of the latter is based on the use of pathogenic properties of biological warfare agents – microorganisms that can reproduce in humans, animals and plants and cause mass diseases. The use of infectious agents for base purposes can have not only military but also terrorist and criminal purposes. Therefore, in recent years, the international community has made significant efforts to analyze the effectiveness of compliance with national laws, codes of conduct and ethics, disease surveillance and response, bioprotection and biosecurity. Together with the developed mechanisms of counteraction and security, the development of microbiological and medical technologies, the real challenge of the scale of civilization at the end of 2019 was the spread of the COVID-19 virus.

ОРГАНІЗАЦІЙНО-ЕКОНОМІЧНІ НАПРЯМИ ЗАБЕЗПЕЧЕННЯ ФІНАНСОВОГО РОЗВИТКУ ПІДПРИЄМСТВ БУДІВЕЛЬНОЇ СФЕРИ

Introduction. On the one hand, the financial development of industrial enterprises is conditioned by a number of traditional measures, which include: reduction of production costs; improving the quality of products; expanding the product line and increasing the level of service in order to maximize compliance with consumer demand. However, on the other hand, due to the specifics of the construction sector, the issue of financial development of such enterprises requires a comprehensive approach, not limited to the field of internal management, but also to consider this issue from the standpoint of institutional and organizational and economic impact. The purpose. The purpose of the article is to highlight the quantitative features of the financial development of enterprises in the construction industry and a description of promising organizational and economic measures of influence. Results. The article substantiates the features of the study of activities in the field of construction according to the project approach. The peculiarities of the institutional structure of the investment and construction complex of the economy are specified. Based on the theory of stakeholders, a comprehensive system of criteria for financial development of construction companies in terms of stakeholder groups has been formed. Conclusions. The organizational measures to ensure stable financial development of domestic construction companies have been identified. These include: implementation of integration processes with suppliers of raw materials; use of innovative knowledge-intensive technologies of construction and production of construction materials; creation of joint ventures with foreign companies. For each of the organizational measures, a list of probable risks and threats is identified, as well as the tools for their management are substantiated.

Threat models for asymmetric cryptotransformations of the promising electronic signature

The paper considers the concept of a threat model, presents the results of substantiation and development of proposals for building a threat model for asymmetric cryptotransformations such as a promising electronic signature (ES), which can be used in the post-quantum period. The generalized models of threats concerning perspective ES are stated in detail and their estimation is given. Threat models for promising ES using classical and quantum cryptanalysis methods and tools, threat models for synthesis and application of ES in general, as well as threat models for synthesis and application of ES in the post-quantum period are proposed. A list of threats is identified based on the results of the analysis of the methods of synthesis and application of known and promising ES. Proposals are formulated for a list of threats for which protection should be provided. The list of threats is determined using the IT-Grundschutz Catalogues of the German database, and based on this a threat model is formed. It is determined that the threats to the use of classical cryptanalysis in the synthesis and application of EP must be identified in detail unconditionally. The main threats (methods) of classical cryptanalysis that must be taken into account are identified. Possible variants of side channel attacks are considered. The main threats (attacks) using quantum mathematical methods that can be implemented on a quantum computer (of course, if it is built). A comparative analysis of the complexity of factorization for classical and quantum algorithms, as well as a comparative analysis of the complexity of the algorithm of discrete logarithm in a finite field based on the sieve of a numerical field and the Shore algorithm are given. Threats (attacks) are considered on the example of the problem of stability of cryptotransformations based on learning with errors (LWE). In general, attacks on LWE can be divided into 2 major classes – attacks based on bust and attacks based on lattice reduce. Preliminary analysis allows us to conclude that modern versions of LWE mechanisms are based on polynomial rings.

Basic statements on the security model for asymmetric transformations of the ES type taking into account the requirements and threats of the post-quantum period

The paper presents the results of substantiation and development of proposals for building a threat model for asymmetric cryptotransformations such as a promising electronic signature (ES), which can be used in the post-quantum period. The generalized models of threats concerning perspective ES are stated in detail and their estimation is given. Threat models for promising ES using classical and quantum cryptanalysis methods and tools, threat models for synthesis and application of ES in general, as well as threat models for synthesis and application of ES in the post-quantum period are proposed. Proposals are formulated for a list of threats for which protection should be provided. The list of possible security threats to existing and future ES is formed from the number of threats available in IT-Grundschutz Catalogs, taking into account hardware, software and hardware-software resources, data processing technologies and cryptographic protection mechanisms in the use of ES, including requirements and conditions of synthesis of promising ES and application of ES in the post-quantum period. The concepts of EUF-CMA and SUF-CMA security are considered. Algorithms of work of each of these schemes are given. The concept of a comprehensive security model is introduced and its components are presented. The model of the violator and its essence are considered. The main threats (attacks) are given using quantum mathematical methods that can be implemented on a quantum computer (of course, if it is built and available for use). Attacks (threats) against a promising ES are presented and considered. The analysis of signature schemes for compliance with the required security models is performed. The terms "forward secrecy" and "perfect forward secrecy" are introduced and used. An analysis of signature schemes that are EUF-CMA and SUF-CMA secure is performed. Signature schemes, that are key-dependent, with evolving keys, are considered in terms of compliance with the EUF-CMA or SUF-CMA security model. The stateless signature algorithm is also considered. Algorithms of operation of such signature schemes are given.

Управління мотивацією працівників: безпекові аспекти

Анотація. В поточних умовах ведення фінансово-господарської діяльності працівники виконують роль як найбільш цінного ресурсу, так і основного джерела загроз для підприємства. Вирішення проблеми удосконалення управління мотивацією покликано не лише забезпечити зростання продуктивності праці, але й зменшити ймовірність виникнення ризиків і загроз, які пов’язані із діями чи бездіяльністю працівників підприємства. Метою дослідження стало визначення ризиків та загроз у взаємодії між підприємством та персоналом із подальшим формуванням методичних засад удосконалення управління мотивацією працівників.
 Для формування методичних засад удосконалення управління мотивацією працівників із врахуванням безпекових аспектів застосовано методи: індукції та дедукції, порівняння і систематизації – при дослідженні сутнісних характеристик терміну «мотивація»; синтезу і аналізу – для формування переліку можливих ризиків і загроз, які виникають на етапі «мотивація» у взаємодії підприємства та працівника; морфологічного аналізу – при розгляді мотивації як процесу, для обґрунтування змін в систему мотивації шляхом перерозподілу часток складових матеріальної мотивації та більш активного використання нематеріального стимулювання; абстрактно-логічний – для теоретичних узагальнень і висновків дослідження.
 Обґрунтовано, що недоліки в управлінні мотивацією можуть спричинити виникнення ряду ризиків (нездатність задовольнити свої фізіологічні та психологічні потреби; втрата інтересу до продуктивної і творчої праці; невідповідність винагороди результатам діяльності; отримання працівником вищої винагороди за аналогічних умов на іншому підприємстві; недієвість нематеріального стимулювання), негативним результатом реалізації яких є виникнення загроз (незадоволення працівників рівнем заробітної плати, що штовхає частину з них до зміни місця трудової діяльності; погіршення лояльності персоналу; зниження продуктивності праці та якісних показників виконання службових обов’язків; виникнення конфліктів в трудовому колективі, а також у взаємовідносинах між персоналом та менеджментом; поява мотивів до отримання додаткового доходу за рахунок вчинення крадіжок майна підприємства, використання службового положення, продажі елементів комерційної інформації конкурентам і т.д.; спричинення втрат через використання майна підприємства із порушеннями технічних умов). Обґрунтовано, що реалізація перелічених загроз, окрім гальмування темпів розвитку, спричиняє виникнення збитків із подальшим суттєвим погіршенням рівня економічної безпеки підприємства.
 Доведено, що, в наслідок існування ефекту звикання персоналу до певних методів стимулювання та циклічності трудової активності працівників, система мотивації працівників повинна бути динамічною і гнучкою.
 Запропоновано внести зміни в систему мотивації шляхом перерозподілу часток складових матеріальної мотивації та більш активного використання нематеріального стимулювання.
 Ключові слова: управління, мотивація, працівник, безпека, ризик, загроза.

Визначення допустимої інтенсивності зниження рівня захищеності об’єкта критичної інфраструктури ранжуванням загроз

The rapid introduction of information technology in all spheres of public activity creates many risks associated with different types of threats to information security. At the same time, special attention should be paid to ensuring protection from potential threats of critical infrastructure facilities (CI), which provide vital services to the population, society and the state. Given the importance of this issue, a study was conducted to determine the l-characteristics of threats in relation to the allowable intensity of the reduction of the level of protection of the object of CI. Since this problem has a high degree of uncertainty and is subjective, the method of ranking threats based on the theory of fuzzy relations is used to solve it. To achieve this goal, a set of threats to the CI object was identified and the criteria in violation of which the corresponding threats are expressed. In addition, the degree of influence of these threats on certain criteria is established. This information was formalized in the form of a fuzzy relation of influence, which turns into a fuzzy relation of similarity and its transitive closure. As a result, the set of threats of the CI object was divided into classes that do not intersect and contain elements similar in degree of influence. A decomposition tree is constructed, which at each a-level the number of classes and the list of threats belonging to this class at each level. In proportion to the ranks, the l-characteristics of the threats of the object of CI in relation to the allowable intensity of the reduction of its level of protection are determined. The results of this study provide an opportunity to form requirements for the protection of the CI object in the probable implementation of threats with certain characteristics, which, in turn, will contribute to the implementation of necessary mechanisms to protect the studied objects with sufficient infrastructure capacity and resources threats to quickly recover lost features. Tabl.: 3. Fig.: 1. Refs: 10 titles.

Analysis of the architecture and functions of protected automated systems installed at internal affairs facilities

Aim . One of the key objectives of the theory and practice of information security is to analyse the functioning of protected automated systems, particularly those operated at computerized facilities of internal affairs bodies. In order to identify potential threats to resources of confidential information, to assess the risk of threat implementation, as well as to form a list of potential threats to automated systems installed at computerized facilities of internal affairs bodies, it is necessary to analyse the composition and architecture of automated systems, identify the features of their protected functioning and determine the vulnerability of software and hardware systems. Methods . A comprehensive analysis of the functioning of protected automated systems during their operation at computerized facilities of internal affairs bodies was conducted. Results . Following an analysis of normative documentation and research publications in the field of protecting information in automated systems, departmental records of the Ministry of Internal Affairs of the Russian Federation, regulations for the protection of information at computerized facilities of internal affairs bodies, the structure and architecture of a protected automated system were defined. Potential threats to the functioning of such a system, including cyber attacks, were identified. On the basis of a survey among experts in the field of information security, the vulnerability (in term of cyber attacks) of the software components of an automated system installed at computerized facilities of internal affairs bodies was analysed. Conclusion . The results can be used in the process of designing and operating information security tools and systems installed at computerized facilities of internal affairs bodies for the purpose of improving their security.

A computational tool for weak signals classification – Detecting threats and opportunities on politics in the cases of the United States and Brazilian presidential elections

The literature on weak signals (WS) has been fruitful in recent years and this specific type of information has attracted the attention of several disciplines, notably the futures studies. However, most of these studies still focus on conceptual discussions, terminology, or the proposal for frameworks that do not take advantage of the evolution of information and communication technologies. In this paper, authors discussed the lack of tools to computationally support WS handling. In response to this lack, a computational tool was developed considering a previously published method for WS classification based on conceptual systems. This tool was applied and evaluated in experimental cases about surprising events that occurred in politics in recent years, considering traditional metrics of information retrieval. Experiments illustrate that organizations can create several conceptual systems to represent different scenarios and types of knowledge; after all, results showed that the tool can operate according to different artifacts of knowledge representation. This capacity is useful to mitigate the effects of the surveillance filter though the evidence does not directly confirm its usefulness for the monitoring activities. Furthermore, the tool provides a list of threats, opportunities and unlabeled WS that can trigger other steps of sensemaking about these signals.

Vulnerabilities of Connectionist AI Applications: Evaluation and Defense.

This article deals with the IT security of connectionist artificial intelligence (AI) applications, focusing on threats to integrity, one of the three IT security goals. Such threats are for instance most relevant in prominent AI computer vision applications. In order to present a holistic view on the IT security goal integrity, many additional aspects, such as interpretability, robustness and documentation are taken into account. A comprehensive list of threats and possible mitigations is presented by reviewing the state-of-the-art literature. AI-specific vulnerabilities, such as adversarial attacks and poisoning attacks are discussed in detail, together with key factors underlying them. Additionally and in contrast to former reviews, the whole AI life cycle is analyzed with respect to vulnerabilities, including the planning, data acquisition, training, evaluation and operation phases. The discussion of mitigations is likewise not restricted to the level of the AI system itself but rather advocates viewing AI systems in the context of their life cycles and their embeddings in larger IT infrastructures and hardware devices. Based on this and the observation that adaptive attackers may circumvent any single published AI-specific defense to date, the article concludes that single protective measures are not sufficient but rather multiple measures on different levels have to be combined to achieve a minimum level of IT security for AI applications.

Factors Affecting Compulsory Purchase of Land for Public Needs in Ukraine

At the current stage of adapting the goals of the Sustainable Development Concept, compulsory purchase of land to meet public needs may be an effective tool. Public needs may require privately owned land, but it is sometimes only possible to negotiate with the owners through the land compulsory purchase mechanism. When implementing such projects it is necessary to take into account certain factors that have an impact on this process at each stage of the execution of works. To determine these factors is necessary to make some analysis that will identify primary and secondary factors determine their importance and divide them into certain groups. To determine the main groups of factors should be used PEST analysis technique that is often used to assess key market trends. The results of PEST analysis can be used to determine the list of threats and opportunities for the implementation of projects for the construction of linear objects of transport infrastructure, it is advisable to supplement the basic elements of PEST analysis, such as Politic (P), Economic (E), Social (S) and Technical (T), with the following indicators: P (Planning) Е (Environmental), L (Legal). Through PEST analysis is necessary to determine each factor and not just describe the current status, and predict its change over the next 3-5 years. The most important and the most difficult are to determine the balance between the factors and to account for their interaction.

Цифровизация политического процесса современной России: опыт проблемного анализа

The research goal of the article is to problem the digital transformation of the political process in modern Russia. The existing problems, threats and risks of digitalization of the political process are considered. The author distinguishes between problems and threats of digitalization, justifying the thesis that threats are the result of synergistic action of unresolved problems. The conclusion provides an indicative list of threats posed by the digital transformation of the political process.

Imperatives of the Economic Integration of the Eurasian Economic Union Countries

The development of integration of the Eurasian Economic Union (EAEU) countries is limited by the system of imperatives that includes challenges and threats to the interests and existence of the integration block and its members. The article identifies challenges to the development of the EAEU: liberal globalization, transition to the sixth technological order, global digital transformation, challenges associated with the emergence of new development centers and a new system of international redistribution of economic growth factors. It was established that external and internal challenges that do not receive well-timed and adequate answers are transformed into a system of threats. The paper provides a list of external threats to the Eurasian integration: threats, coming from western “partners” aimed at deterring and preventing integration processes in the EAEU, threats of a military nature, as well as threats of forming alternative integration projects. The author presents the analysis of internal threats: ethnic conflicts, changing foreign policies of the participating countries, conflicts of economic and political interests, problems of the financial and payment systems, limited mutual trade and investment relations, insufficient development of the transport infrastructure, the threat of “erosion” of a single economic and transit space of EAEU if the Unit is constructed on terms of “continental” integration. It is concluded that it is necessary to counteract the listed threats with measures of an economic, military-political or other nature.

Computer network threat modelling

The paper discusses methods for constructing threat models of information systems and computer networks. The disadvantages of existing approaches are highlighted. The authors propose an approach to building a computer network model, as well as describing threats to information and the system. The proposed approach takes into account the identified shortcomings of existing solutions and is aimed at reducing the impact of the subjective opinion of an expert when compiling lists of threats.

Risk Evaluation Using Nominal Group Technique for Cloud Computing Risk Assessment in Healthcare

Emerging of cloud computing with flexibility, improve accessing data, and cost-saving makes this technology accessible and growing fast. As a result of the emergence of cloud computing bring interest to industries to used cloud computing. Although cloud computing brings so many benefits to customers, the previous study reveals that cloud computing penetration in the Healthcare area is still low. With effective cloud risk assessment methodology will gain the confidence to cloud users in this technology. Study in cloud risk assessment methodology still infant and the complexity in identifying security risk still debating. This paper explores the risk assessment process by highlighting the method in the risk evaluation process. Risk evaluation is an essential phase in the risk assessment process. It compares the result from the risk analysis process and determines whether to accept or tolerate the risk criteria to decide on the risk analysis. In this study, the Nominal Group Technique (NGT) is introduced to compare risk analysis results in the earlier phase. Since risk evaluation based on organizational objectives, external and internal context and stakeholders' views, NGT is promising for effective results. This study not only contributing to the prioritizing list of risks and threats in a systematical manner but indirectly NGT process makes stakeholders aware of the current cloud security risk situation in the organization. Equal opportunity expressing views in this focus group discussion is hope can generate a brilliant solution in risk assessment results.

Research of compromising USB interface electromagnetic emanations in the infocommunication networks control system

One of the key directions in the development of modern society is the formation of an integrated information space based on the latest information technologies. The widespread use of information technologies and infocommunication networks for the transmission, reception, processing and storage of information in various fields of activity, on the one hand, contributes to an increase in the efficiency of this activity, and on the other hand, it causes the emergence of threats of information leakage through technical channels, which are understood as the uncontrolled dissemination of information signal from its source through the physical environment to a technical means that intercepts information. In the list of threats, an important place is occupied by threats of information leakage through channels of compromising electromagnetic emanations, as well as a result of interference of information signals in power lines of technical means of information processing, connecting lines of auxiliary technical means and systems, ground circuits and extraneous conductors. To protect information from its leakage due to compromising electromagnetic emanations through communications connecting the system blocks of computing facilities with peripheral devices, it is important to analyze the formation of these signals and emissions. The article presents the results of the study of compromising electromagnetic emanations of the USB 2.0 interface, carried out to solve the problems of assessing the security of information at the objects of information activity. The processes of formation of technical channels of information leakage by compromising electromagnetic emanations at use of the USB-interface in structure of control system of information and communication networks are considered. The images of the signal levels of the compromising electromagnetic emanations of the USB 2.0 interface obtained with the spectrum analyzer ROHDE & SCHWARZ FSW 13 (Signal & Spectrum Analyzer) using the R & S Active Dipole Antenna HE527 are shown. As a result of the analysis of the form and spectrum of signals in the USB cable (test mode is off, test mode is on) it is established that in the USB interface there is a constant transmission of service packets to support the interface. When the test mode is turned on, additional pulse sequences appear on the spectrogram. The frequency of the first harmonic for the USB 2.0 interface is in the region of 240 MHz.

Using the Latin Square Design Model in the Prioritzation of Network Security Threats: A Quantitative Study

Society is becoming increasingly dependent on cyberspace for both business and pleasure. Cyber attackers continue to attack organizational computer networks, as those same computer networks become increasing critical to organizational business process. Strategic planning and managing IT security risks play an important role in the business and government planning process. Deploying defense in depth security measures can ensure that organizations continue to function in times of crisis. This quantitative study explores whether the Latin Square Design (LSD) model can be effectively applied to the prioritization of cybersecurity threats and to the linking of information assurance defense in-depth measures to those threats. The methods used in this study consisted of scanning 10 Cybersecurity Websites such as the Department of Homeland Security US CERT (United States-Computer Emergency Readiness Team [1]) and the SANS Institute (SysAdmin, Audit, Network and Security [2]) using the Likert Scale Model for the Website’s top ten list of cyber threats facing organizations and the network defense in depth measures to fight those threats. A comparison of each cybersecurity threats was then made using LSD to determine whether the Likert scale and the LSD model could be effectively applied to prioritize information assurance measures to protect organizational computing devices. The findings of the research reject the H0 null hypothesis that LSD does not affect the relationship between the ranking of 10 Cybersecurity websites top ten cybersecurity threats dependent variables and the independent variables of defense in depth measures used in protecting organizational devices against cyber-attacks.

Забезпечення економічної безпеки на підприємствах морського транспорту

The article considers the economic security of port enterprises, which is an integral part of the development of these enterprises, the basis for improving the quality and competitiveness of port services. The following main areas were identified, changes in which significantly affect the deve-lopment of maritime transport, and which must be taken into account in the formation and implementation of the national maritime policy of Ukraine and the development strategy of individual enterprises in the maritime sector. Having analyzed all types of functional components of the integrated safety system of maritime transport enterprises, and taking into account significant features in the specifics of indivi-dual facilities (ports, shipping companies and coastal enterprises), the proposed classification of water safety threats in terms of three major water transport facilities separately, exposed to threats and dangers: economic security of coastal facilities and shore personnel, navigable economic security, port economic security. The peculiarities of ensuring maritime safety are the presence of a list of threats associated with the specifics of the operational activities of maritime transport enterprises. Factors in the organization of economic security relate to the functionality of its organizational and institutional support. Most of the existing approaches to solving the issues of economic security of the enterprise allowed to choose the most optimal set of principles of management of the economic security system: the principle of complexity, the principle of confidentiality provides, the principle of coordination and coherence of the enterprise. This study focuses on economic levers that are directly related to tracking and eliminating threats. Economic methods direct the implementation of the mechanism to reduce resource consumption, increase the profile and efficiency. Thus, increasing the profile is due to additional profits, reducing resource intensity − by optimizing resources and reducing costs when moving from a lower level of economic security profile to higher, efficiency increases when reducing resource intensity, as well as by increasing effects. Having analyzed all types of functional components of the integrated security system of maritime transport enterprises, and taking into account significant features in the specifics of individual facilities (ports, shipping companies and coastal enterprises), we propose to consider the classification of water transport security threats in terms of three major water transport facilities separately exposed to threats and dangers: economic security of coastal facilities and shore personnel, navigable economic security, port economic security. Thus, the peculiarities of maritime safety are the presence of a list of threats associated with the specifics of the operational activities of maritime transport enterprises. Factors in the organization of economic security relate to the functionality of its organizational and institutional support. The implementation of economic security requires from the maritime industry such qualities as reliability, flexibility and quality. These enterprises are becoming part of the system, which as a whole is a subject of competition, therefore, to ensure the competitiveness of the whole system, the enterprises of the maritime industry must provide an increasing range of services.