Information Security Problems Research Articles

Research and Design of Encryption Standards Based on IoT Network Layer Information Security of Data

INTRODUCTION: With the rapid development of the economy, more and more devices and sensors are connected to the Internet, and a large amount of data is transmitted in the network. However, this large-scale data transmission involves the problem of information security, especially in the transport layer. Therefore, there is an urgent need to study and design an information security data enhancement security strategy for the transport layer of ubiquitous networks (i.e., IoT). OBJECTIVES: This thesis aims to research and create a data enhancement security strategy for the transport layer of the Ubiquitous Web to ensure the confidentiality and integrity of data transmitted in the Ubiquitous Web. Specific objectives include evaluating the advantages and disadvantages of current ubiquitous network transport layer lifting security techniques, proposing a new lifting security strategy applicable to the transport layer of ubiquitous networks, and verifying the feasibility and security of the proposed standard.METHODS: First, a detailed study and evaluation of the current Ubiquitous Network Transport Layer Elevated Security Techniques is conducted, including analyzing and comparing the existing elevated security algorithms and protocols. Then, based on the obtained research results, a new lifting security strategy applicable to the transport layer of ubiquitous networks is proposed. The design process takes into account the characteristics and requirements of ubiquitous networks, such as resource constraints, dynamics of network topology, and cooperative communication of multiple devices. Subsequently, the feasibility and security of the proposed standard are verified through simulations and experiments. In the experiments, real ubiquitous network devices and network environments are used to evaluate the performance and attack resistance of the enhanced security algorithms.RESULTS: Through the research and analysis of ubiquitous network transport layer lifting security techniques, some limitations of the existing lifting security algorithms are identified, such as high resource consumption, insufficient security, and limited ability to adapt to the characteristics of ubiquitous networks. Therefore, this thesis proposes a new lifting security strategy applicable to the transport layer of ubiquitous networks. The experimental results show that the standard can guarantee data confidentiality and integrity while possessing high efficiency and attack resistance. In addition, the proposed standard meets the needs of resource-constrained devices in ubiquitous networks and can operate properly under multiple network topologies and cooperative device communications.CONCLUSION: This thesis proposes a new elevated security strategy applicable to ubiquitous networks through the study and design of transport layer elevated security techniques for ubiquitous networks. This standard can effectively protect the confidentiality and integrity of data transmitted in ubiquitous networks with high efficiency and attack resistance. The proposed standard is expected to provide a feasible solution for the information security of ubiquitous networks and a more reliable guarantee for developing and applying ubiquitous networks. Future work can further improve and optimize this enhanced security strategy and validate and apply it in a wider range of ubiquitous network environments.

Research on College Network Information Security Protection in the Digital Economy Era

In the era of the digital economy, the informatization degree of various industries is getting deeper and deeper, and network information security has also come into people’s eyes. Colleges and universities are in the position of training applied talents, because of the needs of teaching and education, as well as the requirements of teaching reform, the information construction of colleges and universities has been gradually improved, but the problem of network information security is also worth causing people to ponder. The low security of the network environment will cause college network information security leaks, and even hackers will attack the official website of the university and leak the personal information of teachers and students. To solve such problems, this paper studies the protection of college network information security against the background of the digital economy era. This paper first analyzes the significance of network information security protection, then points out the current and moral problems, and finally puts forward specific countermeasures, hoping to create a safe learning environment for teachers and students for reference.

Accelerate the Promotion and Application of Commercial Cryptography Technology in The Automotive Industry

With the acceleration of the intelligent and networked process of the automobile industry, the problem of information security has become increasingly prominent. As the core guarantee means of information security, the promotion and application of commercial cryptography technology in the automobile industry is particularly important. In this paper, the application status and challenges of commercial cryptography technology in automobile industry are comprehensively analyzed, and the relevant strategies for promotion and application are put forward. By strengthening policy guidance, improving technological innovation capacity, promoting standardization construction and strengthening industry cooperation and exchanges, the aim is to accelerate the popularization and application of commercial cryptography technology in the automotive industry and improve the security protection capability of automotive information systems. The research of this paper is of great significance for promoting the construction of information security in automobile industry and promoting the rapid development of commercial cryptography technology.

ВЫЯВЛЕНИЕ ПРОБЛЕМ ИНФОРМАЦИОННОЙ БЕЗОПАСНОСТИ МЕТОДОМ СИСТЕМАТИЧЕСКОГО ОБЗОРА ЛИТЕРАТУРЫ

The field of information security covers a wide range of technical, organizational and social aspects, requiring information security specialists to take a unique and comprehensive approach to the development, support, operation, evaluation and improvement of information security management systems. An important element of successful information protection is the accurate identification and assessment of risks and vulnerabilities that may become a source of threats. In existing publications, as a rule, it is assumed that specialists have the necessary experience and knowledge to conduct risk analysis. However, in the dynamic world of information technology and threats, an information security specialist faces a huge amount of information and potential risks that are constantly evolving. Because of this, it is an impossible task to keep in mind all kinds of threats to information security. 
 The purpose is to identify actual problems of information security, potentially acting as sources of information security risk, based on the method of systematic review of the literature. Results: 73 actual problems of information security have been identified, which an information security specialist should take into account in his activities. Understanding these issues makes it possible to develop more effective protection strategies, as well as to make informed and informed decisions when developing and applying security measures.

New possibilities of artificial intelligence in medicine: a narrative review

The purpose of the narrative review is to provide a descriptive analysis of the emerging capabilities of artificial intelligence (AI) to improve the diagnosis, prevention and treatment of various diseases. The article discusses which modern AI tools can be used in clinical practice, healthcare organization and medical education. The paper considers various aspects of medical AI systems, which are mainly computer support systems for medical decision-making in the process of clinical work. Much attention is paid to the possibilities of generative AI in medicine. Potential applications of AI in clinical practice have been investigated, highlighting promising prospects for both practitioners and their patients. The limitations associated with the use of AI in various fields of medicine are described, and possible ways of solving them are suggested. The problems of information security and ethical constraints associated with the introduction of AI are outlined. The broad integration of AI into public health will enhance clinical and management decision support, speed up disease diagnosis, and improve the overall quality and accessibility of healthcare services.

Обзор основных компонентов, особенностей и решений безопасности автоматизированных систем управления технологическими процессами

The structure, main components and tasks of typical automated process control systems (ACS) are described. The main distinctive features of automated systems and their impact on the design of an information security system (ISMS) are determined. A brief overview of the problems of information security of automated process control systems is given. The basic principles that must be taken into account when creating.

Формирование принципов научной этики у студентов при изучении иностранного языка

The paper is aimed at analyzing the scientific information security problems when learning a foreign language. It clarifies the definition of personal security, in general, and information security, in particular, in scientific ethics context. The paper considers the communicatively conditioned approaches to mastering the scientific ethics principles by the researchers from the viewpoint of using linguistic means for different citation types and special learning process organization with moral, cognitive and linguistic aspects having been taken to the account. The research emphasizes the information component importance in the process of mastering linguistic disciplines. It describes the scientific ethics development levels with the foreign language means being used in researchers. The paper compares the outcomes of developing the skills in the field of scientific ethics compliance for experimental and controlling students` groups in foreign language classes.

Информационная безопасность студентов в условиях информационно-образовательной среды

e article considers the main aspects of the influence of the electronic educational environment on the development of personality, as well as its positive and negative sides. Nowadays, the issue of information security of students is acute in connection with the global digitalization and computerization of education. This work is devoted to the analysis of the problem of information security of students based on the results of a sociological survey, which was attended by 128 students of the Omsk branch of the Financial University of various fields of training. About 66% of respondents considered it necessary to use information technologies in education. Thus, the results of the study allow us to conclude that it is necessary to introduce an educational module on information security, the purpose of which is to increase literacy in the era of computerization and digitalization of education.

Travel Plan Sharing and Regulation for Managing Traffic Bottleneck Based on Blockchain Technology

To alleviate traffic congestion, it is necessary to effectively manage traffic bottlenecks. In existing research, travel demand prediction for traffic bottlenecks is based on travel behavior assumptions, and prediction accuracy is low in practice. Thus, the effect of traffic bottleneck management strategies cannot be guaranteed. Management strategies are often mandatory, leading to problems such as unfairness and low social acceptance. To address such issues, this paper proposes managing traffic bottlenecks based on shared travel plans. To solve the information security and privacy problems caused by travel plan sharing and achieve information transparency, travel plans are shared and regulated by blockchain technology. To optimize the operation level of traffic bottlenecks, travel plan regulation models under scenarios where all/some travelers share travel plans are proposed and formulated as linear programming models, and these models are integrated into the blockchain with smart contract technology. Furthermore, travel plan regulation models are tested and verified using traffic flow data from the Su-Tong Yangtze River Highway Bridge, China. The results indicate that the proposed travel plan regulation models are effective for alleviating traffic congestion. The vehicle transfer rate and total delay rate increase as the degree of total demand increases; the vehicle transfer rate increases as the length of the time interval decreases; and the vehicle transfer rate and total delay rate increase as the number of vehicles not sharing their travel plans increases. By using the model and method proposed in this paper, the sustainability of urban economy, society, and environment can be promoted. However, there are many practical situations that have not been considered in this paper, such as multiple entry and exit bottlenecks, multiple travel modes, and other control strategies. In addition, this paper considers only one bottleneck rather than road networks because of the throughput limitations of blockchain technology.

Denoising low SNR electromagnetic conducted emissions using an improved DnCNN based mode

Conducted electromagnetic emissions from interconnecting cables in computer systems can lead to internal information leakage and cause information security problems. However, unintentionally leaked EM signals are characterized by low signal-to-noise ratio and random noise, making it difficult to recover the original signal. In this paper, we propose a denoising model (S-DnCNN) based on an improved DnCNN to better recover the original signal. The network structure consists of three parts: feature mapping generation, low-dimensional feature extraction, and original reconstruction. To improve the noise extraction capability, we use Leaky ReLU as the activation function of the CNN, and introduce a residual structure and a convolutional attention module. The residual structure uses residual hopping to implicitly remove potentially clean images by hidden layer operations, thus training noisy data to recover clean data. We construct a one-dimensional selective convolution kernel (SKConv1d) and fuse it with local paths to form a feature extraction network, which improves the performance of the network. The experimental results show that our proposed method can preserve the details in the effective signal during denoising and shows good generalization to complex SNR data.

Research on Information Security Protection in The Context of Post-epidemic Tourism Revival

After the epidemic, the tourism industry is experiencing an unprecedented revival, and the problem of information security has gradually become an important factor restricting the development of tourism. Through in-depth analysis of the background of tourism revival, the challenges faced and domestic and foreign laws and regulations and other issues, this paper puts forward a series of targeted solutions, including investment in technical construction, provide infrastructure and other technical means, as well as improve the relevant laws and regulations, establish and improve the enterprise management mechanism and strengthen supervision and other non-technical strategies. These measures help to ensure the data security of the tourism industry in the process of digital transformation, and promote the healthy and sustainable development of the tourism industry.

ИНФОРМАЦИОННАЯ БЕЗОПАСНОСТЬ ПРЕДПРИЯТИЙ АВТОСЕРВИСНОЙ ОТРАСЛИ

The problem of information security in the functioning of car service enterprises is considered. The relevance of this problem is shown and the purpose of the study is formulated. The issues of organization and management at the enterprise are considered as a basis. The features and the procedure for compiling the information threat model are shown.

АНАЛІЗ СВІТОВОГО ДОСВІДУ ФОРМУВАННЯ СИСТЕМИ ІНФОРМАЦІЙНОЇ БЕЗПЕКИ В КОНТЕКСТІ ПУБЛІЧНОГО УПРАВЛІННЯ

The article is devoted to the issues of ensuring the functions of public information security management in the context of modern challenges. Informatization processes have covered all spheres of human life, which has led to the emergence of new threats. In today’s world, where electronic technologies are becoming a necessity to ensure the effectiveness of public administration functions, the issue of information security is a key and urgent one. The problems of information security are currently being actualized by a significant increase in the role of accumulation, processing and dissemination of information, in particular, in making strategic, military, political and economic decisions. In this regard, the question of how well the modern public administration system is able to respond to the challenges posed by global digitalization is becoming relevant. The purpose of the paper is to study the peculiarities of ensuring information security in public administration, to analyze current threats and the experience of other countries in overcoming them. In analyzing certain aspects of information security, the paper uses methods of description and classification, as well as methods of studying causal relationships, in particular, the combination of similarities and differences. The article examines the trends in the development of public information security management as a key mechanism for ensuring the security of the State. The author identifies the issue of information security as an element of the State defense policy, which is of particular relevance in the context of full-scale military aggression. The concept of public management of information security can be defined as the process of managing measures aimed at protecting confidential information from unauthorized access, use, disclosure and destruction at the level of the State, organizations or citizens. This process may include the creation of appropriate legislation, the establishment of appropriate control and supervisory bodies, the conduct of information security education and training, and the installation of appropriate security technologies and systems to protect confidential information. The place and role of the system of regulation of information support of management processes at the state level are clarified. Sufficient attention is paid to the peculiarities of ensuring information security in public administration through the analysis of modern information threats. Considering the world experience, the author identifies the key success factors and the problems faced by public administration in overcoming them. We consider it expedient to create national analysis and response centers that will monitor, analyze and respond promptly to cyber threats and improve cybersecurity measures for critical facilities.

An improved method of detecting false information

Under the conditions of the rapid development of the global information society, the widespread use of information and communication technologies in all spheres of life, the problem of information security acquires special importance. Technology, a double-edged sword in this battle, also has the potential to solve the problem. Fact-checking algorithms, while imperfect, can act as sentinels by flagging suspicious content. Transparency and collaboration between platforms, researchers and independent fact-checkers are critical to improving these tools and ensuring responsible use. However, technology alone cannot win this war. The battlefield goes beyond algorithms and code, reaching into the very fabric of our societies. Current methods of detecting false information take into account only the content of the data source, that is, the data itself, without paying attention to the context of the data. Taking into account that data is becoming more complex, it is becoming more and more, it becomes important to develop and improve algorithms and methods for detecting false information, taking into account the modern features of information dissemination. Therefore, the purpose of the work is to develop an improved method of detecting false information based on the synergy of the proposed additional methods. The improvement of the method consists in the synergy of the five components. Each of which has the ability to detect false information with some probability. It is the synergy and combinatorics of these methods that improve the overall method and detect false information with greater efficiency than existing methods.

Selection of efficiency criterion on information security management system creation proccess in point if data processing networks

This article is directed to discuss one of the urgent information security problems in communications systems, computer systems and networkingfields. After what it suggests the most objective way of evaluating the criteria of information security management creation process in point of communication technologies which could be used regarding to any branch of the national economy. The variety of main facilities of information security is also reviewed.

LEGAL PROVISION OF INFORMATION SECURITY OF CHILDREN IN THE REPUBLIC OF KAZAKHSTAN

The rapid development of social resources of Internet technologies has led to a sharp increase in the number of users of all ages, among them children, who are consumers of various, including destructive information. Today, modern global trends signal the emergence of new formats of threats and online risks. Children are active users of the global Internet, and most of them are unaware of the danger that information in the virtual space may contain. To be more precise, it is the propaganda of the consumption of alcohol, drugs, violence and cruelty, aggressive and suicidal behavior, etc. The author identified and gave characteristics of information threats, such as cyberbullying, considered the problems of child suicides that are committed through «death groups» in social networks. We have presented action plans on the part of the state, and also highlighted preventive measures to ensure the information security of the child in the global information space. The article provides examples of solving the problem of information security in the Republic of Kazakhstan based on a review of publications on this issue, as well as regulatory legal acts of the Republic of Kazakhstan. We have revealed the issues of the need for further study of the problem and the development of preventive measures aimed at preventing the occurrence of information threats and online risks. In order to prevent such offenses, conclusions are drawn about the expediency of developing measures of both social and legal orientation. The results of the study were possible measures proposed by the authors regarding the improvement of the system of legal provision of information security of children in the Republic of Kazakhstan.

MULTI-CRITERIA ASSESSMENT OF THE CORRECTNESS OF DECISION-MAKING IN INFORMATION SECURITY TASKS

Theoretical optimization models assume the presence of a single criterion. Therefore, the solution of the problem by the method of vecto (multi-criteria) optimization is of particular interest in the problems of cybersecurity and information security. Especially when it is necessary to evaluate the correctness of the made decisions (CMD). In the paper this problem is solved so that it can be asserted that the decision was made correctly in this particular case when solving a problem while ensuring the information security of a particular object.

Improving Firebase BaaS Service Security in Counseling Chat Applications: AES-256 and CBC Approach for End-to-End Encryption

The activities of using the internet and exchanging information and sending messages have used a lot of internet media, one of which is chat message media, but over time data and information security problems in chat messages that are often encountered are active and passive wiretapping. In this research, the author wants to create a counseling chat message security application using the AES (Advanced Encryption Standard) algorithm cryptographic method combined with the CBC (Cipher Block Chaining) technique which is an advanced development of the ECB (Electronic Code Book) technique. AES basically uses a block cipher with a length of 128 bits as the default operation, and the key length size varies from 128, 192 and 256 bits. so AES uses a 4x4 matrix equation with each section having a size of 1 byte. From these problems, research will be conducted to develop an application to accommodate the counseling process using a chat application that has the main focus of securing messages with image types and stored in the Firebase database service (Backend as a Service). As well as using the End-to-End service principle so that users do not need to do the encryption or decryption process directly because the process has been carried out by the system, this will also provide more security aspects in terms of confidentiality of key data and initialization vectors. So that the process of exchanging information using the media chat counseling application is secured and avoids tapping by irresponsible parties.

Improving computer network security evaluation with grey relational analysis and probabilistic simplified neutrosophic sets

The popularity of computer network has provided great convenience for people’s work and life, but it has also brought corresponding information security problems. It is very important to do a good job in computer network security evaluation. Conventional computer network security evaluation can be realized with the help of firewalls, antivirus software, etc., while in the face of complex computer network applications, it is necessary to adopt a security evaluation method with good operability and wider application range. The computer network security evaluation is viewed as multiple attribute decision-making (MADM) issue. In this paper, an extended probabilistic simplified neutrosophic number grey relational analysis (PSNN-GRA) method is established for computer network security evaluation. The PSNN-GRA method integrated with Criteria Importance Though Intercrieria Correlation (CRITIC) method in probabilistic simplified neutrosophic sets (PSNSs) circumstance is applied to rank the optional alternatives and a numerical example for computer network security evaluation is used to proof the newly proposed method’s practicability along with the comparison with other methods. The results display that the approach is uncomplicated, valid and simple to compute.

A method for recovering linear block codes over an arbitrary finite field from sets of distorted code words

The article is devoted to one of the practically important problems of information security and cryptanalysis, which consists in recovering an unknown linear block code over an arbitrary field from a set of distorted code words. This is a hard computational problem, and the known problem-solving methods are proposed only for codes over the field of two elements and are based on the algorithms for searching words of small weight in (undistorted) linear block codes.
 The main result of the article is a method for solving the problem posed, which differs in essence from the known ones and consists in recovering the desired code by solving the LPN (Learning Parity with Noise) problem, namely, recovering the solutions of systems of linear equations with distorted right-hand sides and a random equally probable matrix of coefficients over specified field. The LPN problem is well known from the Theory of Computational Algorithms and Cryptanalysis. It is equivalent to the problem of random linear block code decoding, and the security of many modern post-quantum cryptosystems are based on its hardness.
 The proposed method provides an opportunity to apply a wider class of algorithms for recovering linear block codes in comparison with the previously known methods, in particular, algorithms like BKW and also the low weight words search algorithms in co-sets of linear block codes. Moreover, in contrast to previously known ones, the complexity of the proposed method depends linearly on the length of the required code (and increases with increasing of its dimension according to which algorithm for the LPN problem-solving is applied). Thus, the basic parameter determined the complexity of recovering a linear block code is its dimension (not its length), which, in principle, makes it possible to speed up known algorithms for recovering linear block codes from a set of corrupted code words.