National Information Security Research Articles

INFORMATION AND CULTURAL UKRAINE SECURITY IN TERMS OF «HYBRID WARFARE»

Studied the essential characteristics of information and cultural Ukraine security. It is alleged that the higher the level of information culture of society that opposes aggression, the less chance the enemy to win the «hybrid warfare». This ratio is because the aggressor is trying to influence the cultural, legal, political and value foundations of society and the individual, his aim is to distort a person’s world with the help of the media. There are very important characteristics during the «hybrid warfare» such as information culture capacity for critical thinking, skills comparison and selection of information, search for sources of information and so on. Determined the main threats for the information and cultural security of our country. It is noted that the main threat to national security information – a threat to the impact on the other side of the country information infrastructure, information resources, society, consciousness, subconscious personality to impose the desired state (for another side) of values, attitudes, interests and decisions in vital areas of public and state activities, manage their behavior and development in the desired direction for another party. Shown the correlativity of information culture and establishment of information security Ukraine in a «hybrid warfare». Proved that the Ukraine information and cultural opposition during the «hybrid warfare» has a value-civilizational nature when the values of «western» and «eastern» worlds factually collide. In the course of this struggle objectively transformed the nature and character of information culture, it becomes more militant, politicized, critical media and its increasingly entering the public debate, participate in civic events and so on. It is concluded that the level of information culture during the «hybrid warfare» causes social activity of man, its civic and political position. It is alleged that need in improving protection system information and cultural space of our country, especially its cultural value component due to the fact that the methods of «hybrid warfare» primarily aimed at the ideological orientation of the individual, its world view. So, to search channels impact on public consciousness aggressor uses a set of «scene lines» that are designed for different social groups, ethnic-national and religious communities etc. «Hybrid warfare» combines the techniques of information, psychological, economic wars and cultural expansion. If in the classic wars struggle was wagged for resources and territory, then in the non-classical «hybrid warfare» enemy seeks to conquer the public consciousness of a country, encode values and cultural guidance, distort its historical memory. For implementation the above objectives in «hybrid warfare» actively used information weapons. Overviewed basic approaches to understanding information weapons and especially its use against our country in the modern world. It is noted that the information weapon is particularly effectively acts against the country, which is in crisis in the public mind which dominates ambivalence of values, socio-political uncertainty. The use of information weapon is particularly effective when there is a state of confrontation between the political forces, crisis of moral and legal consciousness, weak patriotic elite, domination by low information culture among citizens.

Controlling Discourse, Foreclosing Recourse: The Creep of the Glomar Response

The Glomar response to Freedom of Information Act requests – “we can neither confirm nor deny the existence or nonexistence of records responsive to your request” – was the product of extraordinary circumstances, to be applied sparingly by the federal government in withholding national security information. Since 2013, instances of state and local use of the Glomar response have signaled a potentially problematic expansion. Establishment of non-federal agency use of the Glomar response poses the threat of an exponential increase in the practice, making oversight difficult. This article considers the recent use of the Glomar response in four cases in which state or local agencies utilized the reply to withhold law enforcement records. The origin and case law of the Glomar response, methods for compelling disclosure after a Glomar response are considered, before a discussion of potential threats of expansion and productive paths forward.

A Study on E-Taiwan Promotion Information Security Governance Programs with E-government Implementation of Information Security Management Standardization

The promotion of Information Security Governance (ISG) has become an important factor in the implementation of e-government and information security management within the \National Information and Communications Technology Security Development Program (2009~2012)＂ in continuing the \Plan for Establishment of Information and Communication Technology Infrastructure Security Mechanism (2001~2008)＂ in Taiwan; in July 2013, the working outline of the project was adjusted. And, it was asked all departments of Executive Yuan and local government to process aggressively by regulation on December 25, 2013. This study examines information security development program, and strategies for meeting e-government and information security management requirements within the implementation of information security development programs through information security management systems (ISMS). Moreover, an action program for improved ISMS performance, using an approach combining ISG and ISMS, is proposed. Based on this, this research employs history analysis and in-depth interview methodologies to develop insights into e-Taiwan information security management. Furthermore, the research objective is to examine the relevance between the execution of e-government and information security management framework and ISMS implementation by using the ISG project approach.

What are we measuring? Comparison of household food security indicators in the Eastern Cape Province, South Africa

ASTRACTThe development of national food security information systems is constrained by a lack of guidance on which indicators to use. This paper compares food security indicators across two seasons (summer and winter) in one of the most deprived areas of the Eastern Cape province of South Africa. The results show that only anthropometric indicators are sensitive enough to differentiate levels of food insecurity. The lack of consistent classification across indicators means that surveys must use a combination of food consumption and experience of hunger measures backed up by anthropometric measures. Targeting interventions is difficult if the measures cannot be relied on. Further investigation is needed to identify a suite of appropriate indicators for a national information and surveillance system.

Disclosure of Sensitive National Security Information during Civil Litigation in Poland and in the United States

The purpose of the article is to compare the American evidentiary rule of “state secrets privilege” with the Polish regulation of Article 248 § 1 of the Code of Civil Procedure. This issue, in particular, gains importance in the light of legal changes that occurred in the USA and most developed countries in the aftermath of the 11th September 2001 attacks and the so-called “war against terrorism”. The author presents the genesis and evolution of the privilege, the history of its application, as well as doubts which it has aroused in terms of civil rights. The American solutions make up a point of reference for the Polish regulations of the Code of Civil Procedure. A dogmatic analysis of Article 248 § 1 of the Code offers a broad platform for discussions about its compliance with the Constitution of the Republic of Poland, as well as, noted legal loopholes in the law of civil procedure, in connection with the protection of classified information. The author underlines the fact that, after the regime transformation in Poland, the right to information gained the status of a public subjective right, but it had a very little impact on the shape of the civil process. He points to the implications of the fact that Polish legislators departed from the principle of objective truth in the process, for the sake of the principle of formal truth, commonly accepted in Western legal culture.

Information Security Law and Strategy in Hungary

Information security has an emerging importance, even in people’s daily life, even in country-level policymaking, but these two are inseparable. National information security strategy, applied legal regulation and the actual awareness of citizens are interconnected. The article shows the legal regulation of the last decades in Hungary, the relevant laws and their impact on information security, based on the legal aspects of cybersecurity and cyberterrorism. The focal points in the legisla- tion are the Act on Electronic Public Service of 2009 and the Information Security Act of 2013. The paper points to the advancing interest on the cybersecurity by the side of the government and therefore the more and more detailed legal regulation implied by that.

Education in the Field of National Information Security in the Russian Federation and Abroad

In the present article author conducts research of current issues of training and education in the field of national information security in the Russian Federation and abroad in the context of globalization. Author analyzes current legal framework, analyzes opinions of scientists and specialists. Author marks out the place and role of new scientific and educational specialty-Information Law, given an opinion on the relevance of its occurrence. Author notes that each year, with the introduction of new technologies, increased levels of Informatization and computerization, there are now more issues of state (national) and collective information security. Solving these issues is impossible without ensuring an adequate level of training of new professionals, as well as timely retraining of skills of already working employees. This requires further comprehensive work on organization and implementation of specialized educational programs of the new generation. During the research author analyzes opinions of scientists from different countries, representing different scientific schools.

Ukraine’s Security Th reats in Information Space

Th e article analyzes the situation in the information space of Ukraine and indicates problems in the protection of national information security. First of all, it concerns the asymmetry of information flow: a large part of national information space is fi lled with the non-Ukrainian information products and the adequate information fl ows from Ukraine to the foreign community are absent.

The Judicial Role in Defining National Security and Access to Information in South Africa

This article argues that judicial and other institutions concerned with legal interpretation are playing an increasing role in regulating and defining the concept of national security for South Africa, particularly in the realm of national security information. Part I surveys the post-apartheid evolution of accountability of South Africa’s national security agencies with particular attention to the treatment of national security information. Starting from a low base, intelligence agencies in South Africa have become more accountable, in part through the greater degree of access to national security information. Part II portrays the placement of access to national security information within South Africa’s legislative framework, taking into account the keys laws underpinning both secrecy and disclosure regulation. Here, with no definition of national security on the secrecy side, it is on the disclosure side of South Africa’s legislative framework that the judiciary and other legal actors are crafting an operative definition of national security. Part III covers three recent developments, arguing that they demonstrate the increasingly important regulatory role played by the judiciary and other legal institutions. These include two key Constitutional Court decisions and an ongoing legislative reform effort.

Access to National Security Information under the U.S. Freedom of Information Act

Nations throughout the world permit executive officials to maintain secrecy in matters touching “national security.” And secrecy’s potential for eroding democratic values is growing as conceptions of national security expand. The U.S. Freedom of Information Act (FOIA) offers tools to resist that trend. The present paper, prepared for an International Symposium on “Freedom of Information and Governmental Transparency,” examines FOIA practice in national-security cases. Although U.S. courts do not always pursue their FOIA responsibilities aggressively, they frequently succeed in forcing the release of significant, previously classified material. An active judicial check on national security secrecy therefore is not impractical. The disappointments of judicial oversight result primarily from misplaced reverence for executive expertise, a misconception that legislation can address. Judicial oversight of unjustified secrecy is feasible and legitimate, even in highly sensitive national security matters.

China?s IC Industrial Revolution [China Connection

China is known for its exports, but what is China’s most crucial import? No, it is not crude oil. It is integrated circuits (ICs)! So how important is the IC industry to China? Consider this: during the past ten years, ICs have been number one among all manufactured goods imported by China—more than cars and liquid crystal displays. According to a recent report by PwC.com, in 2013 China consumed US$170 billion worth of ICs, which is equal to 55% of the worldwide semiconductor market. If this economic factor is not sufficient, Edward Snowden’s 2013 revelations, which triggered a worldwide alert on national information security, has further convinced the Chinese government that China’s information technology infrastructure must not continue to rely so heavily on foreign imports.

Touching Torture with a Ten-Foot Pole: The Legality of Canada’s Approach to National Security Information Sharing with Human Rights-Abusing States

Touching Torture with a Ten-Foot Pole: The Legality of Canada’s Approach to National Security Information Sharing with Human Rights-Abusing States

Research on IP Traceback Technology Based on DDoS Attack

DDoS attack threatens the stable development of internet and national information security seriously. IP traceback technology can track the attack packages to the attack source, and is making an important significance in against DDoS attack. For the DDoS attack, the basic theory and advantages and disadvantages of several common IP traceback technologies are analyzed and compared. Some ideas to improve the technologies are proposed by analyzing some current problems of IP traceback and source-finding technologies.

Analyses of issues of information security in Indian context

Purpose – The purpose of this paper is to attempt to fill the need to identify critical information security issues at national level, both technical and social in the Indian context, and create a framework of these issues to provide interesting managerial insights about their hierarchy. Current literature advocates relevance of both technical and social issues in a potential framework to address national and organizational information security concerns. Such a framework can guide users in developing insight for strategy in the maize of important information security issues and their intricate interdependency. Design/methodology/approach – Delphi methodology is used to identify a set of topical issues with help from members of a cyber security group. These issues are further analyzed using Interpretive Structural Modeling (ISM) to impose order and direction to the complex relationships among them. Findings – The analysis using ISM creates a framework of these issues and provides interesting managerial insights about their hierarchy. These insights are used to recommend prioritized action for information security at national and organizational levels. Research limitations/implications – The highlight of this research is ingenious deployment of two idea engineering methods in developing interpretable structural model of 25 information security issues. This model provides valuable insights and can guide the policy formulation. This is the key contribution of this paper. It needs hardly any emphasis on the need for continuous search of all technical and social issues and formulating policies and programs using experts” judgment in a rigorous manner. Subsequent research may scale up to the global level for extension and validation by empanelling Delphi experts from nations belonging to different regions. Time-variant analysis can be attempted with the help of System Dynamics Modeling using causal-loop diagrams to account for the supportive and inhibiting influences of various issues. This approach has the potential to generate more realistic insights that can inform policy formulation. Practical implications – It brings about key information security issues connected with its various facets, viz. national/organizational level initiatives, supportive processes, capabilities and objectives. These issues, identified by Indian experts in the Indian context, offer a method that one could apply in other national contexts and see whether substantial differences occur, and how other experts prioritize these issues. The analysis of social issues along with technical issues using the ISM tool provides us insights that are considered applicable to a larger context than India. The policy and program formulations in other nations can benefit from the insights generated by this research. The fast-paced proliferation of technology and its resultant vulnerabilities have given birth to an underground economy of malware trading by criminals, terrorists and hostile nation states. Secure cyber space for legitimate use by the globalized world can only be achieved by international cooperation. Social implications – A “digital divide” in cyber defense cannot be afforded. As explained earlier, cyber security is a challenge for both developed and developing nations. Prioritization of resources in a sequence suggested by ISM analysis would help face the challenge of cyber security better. The methodology suggested in this paper would ensure adequate response to cyber threats and eliminate knee-jerk reaction. Originality/value – This research emphasizes identification of hierarchical relationship among the identified topical issues of information security rather than using them as a flat checklist. It helps us segregate the end objectives from root issues and highlights the necessity of addressing these root issues to achieve those objectives.

Face Recognition Algorithm Based on Multi-Resolution and Classification

With the development of computer and internet, how to recognize face images rapidly has become the research focus in recent years. Therefore, face recognition technology develops rapidly, and is widely applied to national counterterrorism, information security and access control. But the researchers find that face recognition only can achieve satisfactory effect under the constraint conditions. The paper proposes face recognition algorithm based on multi-resolution analysis and classification. The algorithm firstly uses wavelet transform for multi-scale wavelet decomposition on training sample, and uses the correlation coefficient between wavelet coefficients with the maximum variance as the classification distance to classify the samples and determine the central image of the images. Face recognition algorithm based on multi-resolution analysis and classification extracts some wavelet coefficients of the images, which not only achieves the purpose of dimension reduction and reduces calculated amount, but also effectively improves the speed of face recognition. The simulation experiment proves that the algorithm proposed in the paper is effective.

공간정보산업 활성화를 위한 공간정보 보안관리체계의 개선전략 - 공간정보의 생산·관리·보급 기관을 중심으로 -

개방과 공유에 기초한 정부 3.0이라는 새로운 패러다임이 국정전반에 확산되고 있다. 공간정보산업의 발전이라는 장기적인 관점에서 볼 때 항공사진의 공개해상도 등 공간정보 보안규제는 합리적으로 개선되어야 한다. 그러나 공간정보 보안관리체계가 합리적으로 확립되지 않은 상태에서의 규제 철폐는 자칫 국가안보와 같은 또 다른 문제를 야기할 수도 있다. 본 연구의 목적은 현행 국가 공간정보 보안정책과 공간정보산업 등 시대적 여건 변화를 고려하여, 보안규제의 완화를 위해 필요한 공간정보 보안관체계의 개선방안을 제시하는 것이다. 분석의 관점으로써 법제도적 측면, 운영 관리적인 측면, 기술 시스템 측면을 종합적으로 검토하였으며, 특히 공간정보 보안관리의 통합적 관점을 유지하였다. 공간정보 보안체계의 문제점과 함께 해외 공간정보 보안규제 정책을 검토한 후, 이를 토대로 합리적인 보안관리 개선 방안을 법제도적 측면, 운영 관리적인 측면, 기술 시스템 측면으로 나누어 제시하였으며 장기적인 보안규제의 완화를 위한 3단계 보안관리체계의 개선방안을 제시하였다. In a long-term perspective of development of spatial information industry, security regulation, such as limiting public picture resolution of aerial photographs, needs a rational improvement. However, unplanned deregulation of spatial information could lead problematic results such as national security issues because its present security management system is not established in reasonable manner. The main purpose of this research is to suggest the improvement plan of spatial information security management system to meet the reducing security regulation in accordance with changes of political and economic condition including current national spatial information security polices and spatial information industry. From an analytical standpoint, we examined the overall aspects of legal, operation management, and technical system while we maintained especially integrated perspective of spatial information security management. Followed by investigation of spatial information security issues, as well as its regulation and policies in overseas, rational improvement plan of security management is proposed in the aspects of legal, operation management, and technical system. It is also suggested the three-step improvement plan of reducing regulation of security management system.

국가정보보호수준 평가지표 개선 및 지수 산출에 관한 연구

국가정보보호수준 평가지표 개선 및 지수 산출에 관한 연구

A Policymaking Process “Tug-of-War”: National Information Security Policies in Comparative Perspective

ABSTRACT There is tension between the ideal of government transparency and the need to protect vital information. What types of information do governments protect on national security grounds? What arguments do governments use to justify the protection of this information? What will influence an open government information policy as opposed to a closed information policy? Through an examination of more than 250 information security–related policies from around the world, it is clear that (a) all governments limit the flows of information, (b) there are different reasons for this, and (c) the reasons are not always correlated to government type. In other words, sometimes democracies and authoritarian countries limit the same types of information issues. The policies and policy discussions are dependent on a variety of actors and which actor(s) wield the strongest influence at the time, which makes them often get caught up in a policy “tug-of-war” that most often results in incremental policy change and implementation.

Enlightenment from Australian Network Security Plan to Chinese Information Security

With the development of information technology, the network information security is closely linked with national security. In order to resist the harmful information to safeguard national security, Australian government enforces network security plan. Its network of legal norms and such practices as real-name system, national information security have a certain degree of enlightenment to China.

악성코드 DNA 생성을 통한 유사 악성코드 분류기법

2013 국가정보보호백서에 따르면, 2012년 민간분야 침해사고 접수 처리 현황 중 해킹사고는 19,570 건으로 2011년에 비해 67.4%가 증가한 수치이며, 해가 갈수록 증가하고 있다. 이러한 증가의 원인으로는 특히 금전적인 이윤 추구와 감염기법의 다양화 등이 꼽히고 있다. 하지만, 악성코드를 분석 하고 대응하기 위한 전문가 수의 증가 속도보다 악성코드의 발전 속도가 빠르기 때문에, 악성코드로 인한 보안위협에 대응하는데 어려움이 있다. 이에 따라, 악성코드 자동분석 도구에 대한 관심이 높아지고 있다. 본 방법은 악성코드 자동분석의 일환으로 악성코드 DNA 생성을 통한 유사 악성코드 분류방법을 제안한다. 제안하는 기법은 기존 자동 분석도구와는 달리, 악성코드의 특성인자를 추출하여 '악성코드 DNA'를 생성하고, 이를 통한 유사도 계산을 통해 악성코드를 분류한다. 본 기법을 사용함으로써, 전문가의 악성코드 분석 시간 절약 및 정확성을 향상 시켜 줄 수 있고, 신뢰성 있는 사전 지식을 전달할 수 있다. According to the national information security white paper 2013, the number of hacking attempt in 2012 is 17,570 which is increased by 67.4% than in 2011, and it has been increasing year after year. The cause of this increase is considered as pursuit of monetary profit and diversification techniques of infection. However, because the development of malicious code faster than the increase in the number of experts to analyze and respond the malware, it is difficult to respond to security threats due to malicious code. So, the interest on automatic analysis tools is increasing. In this paper, we proposed the method of malware classification by similarity using malware DNA. It helps the experts to reduce the analysis time, to increase the correctness. The proposed method generates 'Malware DNA' from extracted features, and then calculates similarity to classify the malwares.