Information Security Problems Research Articles

Malware detection based on TF-(IDF&ICF) method

As the level of information technology continues to increase, information security problems caused by malware are becoming more and more serious. An important method to detect malware is to analyze software behavior information, such as permissions, API call sequences and system calls. In this paper, API call sequences are used as the research object for malware detection, and the traditional feature extraction methods are not ideal for API call sequences. In this paper, a TF-(IDF&ICF) feature extraction method is proposed by mathematical analysis, which combines document and category level features. Experiments show that using the feature extractor proposed in this paper, followed by training, the performance is improved in four different machine learning models, and the F1 can reach 0.979, while the system response time is significantly reduced, which has good practical value.

STUDY OF INFORMATION SECURITY OF THE INFORMATION SERVICES MARKET

The article is devoted to the study of information security of the information services market. The subject of the research is information security, and the goal of the paper is to study the information security of the information services market. Information security is considered a socio-economic challenge that can be addressed through the confident actions of the state. Data analysis confirmed the problem of information security at different levels. Information security is aimed at protecting information from unauthorized access. The development and transformation of the information services market depend on the quality metrics of the Internet. This paper deals with the issue of maintaining a sufficient level of information transparency, which is related to and interdependent on information security. The main risks and threats caused by the active introduction of information technologies and the advancement of the information services market are specified. The study found that in the day-to-day operations of each company, many risks can affect the information system due to information security breaches. Social engineering involves the use of psychological techniques to mislead users by providing information or access for attackers. In order for the company to cope with external risks in the information services market, it is necessary to build a strong risk management information system. The process of risk management is ongoing and iterative in nature, it must be repeated indefinitely as new threats and vulnerabilities emerge, especially external ones. The choice of countermeasures or controls used must strike a balance between productivity, cost, effectiveness, and the information value of the asset being protected. Conclusions: the research identified the basic principles of information security, namely confidentiality, integrity, and availability. Moreover, to increase the information security of the companies which are participants in the information services market, the author proposes implementing a range of measures within the company. Information security in the information services market is a marker of the crucial difference between the information society and the industrial society. The main hallmark of the information society is its openness. This means a significant reduction and thus a general lack of confidential information for society. The study established that the digitalization of the economy is modifying the information services market. The research findings may prove useful to businesses and governments to boost information security of the information services market. The research is based on the methods of theoretical generalization and comparison to define the concept of “information security” and its interrelations with other definitions of the relevant terminological framework. Analysis, synthesis, and scientific abstraction were used to identify factors affecting the risks and threats to information security of the information services market. There were used methods of analysis, comparison and generalization when summarizing research findings.

Internet-technologies as tool for personal protection during large-scale virus infections

The article describes how internet-technologies can contribute to the protection of the individual during the spread of viral diseases or natural disasters. Remote work is largely implemented by modern internet-technologies that provide joint data processing and effective communication between members of different communities. At the same time, the communication must remain protected from leaks of personal information. Artificial intelligence actively uses in searching medicines. In this time all of this increase degree of using informational technologies and we have sharpened the range of information security problems.

Security analysis of the message queuing telemetry transport protocol

The Internet of Things aims to assign computational processing and connection to simple objects on a network tocollect data and then perform analysis. Due to its easy use, simplified implementation has several informationsecurity problems. This article presents attack procedures in an IoT environment using the Message QueueTelemetry Transport protocol. For attack procedures, we use the Low Orbit Ion Cannon and Wireshark programs,compromising the integrity, confidentiality, and availability of data and network connection. After carrying outthe attack procedures, we implemented security methods on the network, such as data encryption and firewall toprotect data integrity and prevent network connection attacks

Physical layer security transmission scheme based on artificial noise in cooperative SWIPT NOMA system

Aiming at high energy consumption and information security problem in the simultaneous wireless information and power transfer (SWIPT) multi-user wiretap network, we propose a user-aided cooperative non-orthogonal multiple access (NOMA) physical layer security transmission scheme to minimize base station (BS) transmitted power in this paper. In this scheme, the user near from BS is adopted as a friendly relay to improve performance of user far from BS. An energy harvesting (EH) technology-based SWIPT is employed at the near user to collect energy which can be used at cooperative stage. Since eavesdropper in the downlink of NOMA system may use successive interference cancellation (SIC) technology to obtain the secrecy information of receiver, to tackle this problem, artificial noise (AN) is used at the BS to enhance security performance of secrecy information. Moreover, semidefinite relaxation (SDR) method and successive convex approximation (SCA) technique are combined to solve the above non-convex problem. Simulation results show that in comparison with other methods, our method can effectively reduce the transmitted power of the BS on the constraints of a certain level of the secrecy rates of two users.

An algorithm for detecting leaks of insider information of financial markets in investment consulting

The paper focuses on revealing insider information leaks of financial markets during investment consulting. An original dataset was created, containing the records of the conversations between consultants and clients, presented in the formof dialogs in text format. The applicability of machine learning methods for automating the detection of leaks arising in a conversation between a consultant and a client has been studied. The authors examined the applicability of the following supervised machine learning methods for constructing and training a classifier: probabilistic (Naïve Bayes classifier), metric (k-nearest neighbors algorithm), logical (random forest), linear (support vector machine), and methods based on artificial neural networks. The paper considers various approaches to the construction of a natural language text model, such as tokenization (bag of words, word n-grams: bigrams and trigrams) and vectorization (one-hot encoding). The proposed algorithm for detecting financial markets insider information leaks is based on the use of support vector machine (SVM) and tokenization by bigrams. The obtained results demonstrate that SVM and bigram tokenization provide the highest leakage detection accuracy. The research results can be used in cybersecurity tools development, as well as for the further elaboration of natural language processing methods dealing with information security problems.

Ontology-based semantic similarity to metadata analysis in the information security domain

It is becoming clear with growing complication of cybersecurity threats, that one of the most important resources to combat cyberattacks is the processing of large amounts of data in the cyber environment. In order to process a huge amount of data and to make decisions, there is a need to automate the tasks of searching, selecting and interpreting Big Data to solve operational information security problems. Big data analytics is complemented by semantic technology, can improve cybersecurity, and allows you to process and interpret large amounts of information in the cyber environment. Using of semantic modeling methods in Big Data analytics is necessary for the selection and combination of heterogeneous Big Data sources, recognition of the patterns of network attacks and other cyber threats, which must occur quickly to implement countermeasures. Therefore to analyze Big Data metadata, the authors propose pre-processing of metadata at the semantic level. As analysis tools, it is proposed to create a thesaurus of the problem based on the domain ontology, which should provide a terminological basis for the integration of ontologies of different levels. To build a thesaurus of the problem, it is proposed to use the standards of open information resources, dictionaries, encyclopedias. The development of an ontology hierarchy formalizes the relationships between data elements that will be used in future for machine learning and artificial intelligence algorithms to adapt to changes in the environment, which in turn will increase the efficiency of big data analytics for the cybersecurity domain.

İNFORMASİYA TƏHLÜKƏSİZLİYİNİN TƏMİNİ PROBLEMLƏRİ

The present stage of development is characterized by strong scientific and technical development, which includes high-tech industries. Thus, information and communication technologies (ICT) are one of the main factors influencing the formation of 21st century society. Their revolutionary influence is constantly growing on the security of people's livelihoods, their work and education, and the interaction between the state and civil society. ICT is becoming more and more important stimulus for world community development. However, more precisely, ET development is always accompanied by negative social impacts, including various types of crimes. The rapid development of computer technology, in particular, has led to the expansion of crimes related to electronic processing of information, including crime-related types of terrorism. The article explores the problems of Information Security at the Airports, and cyber security caused by information security. Particular attention is paid to the illegal acquisition of information, the methods used to protect information, the use of illegally obtained information for personal gain, and the interference in the operation of life support facilities. Key words: information, information security, cyberterrorizm

Authentication based on electrocardiography signals and machine learning

Among the information security problems involved in Telemedicine Information Systems (TMIS), the authentication area of the various entities involved has been extensively discussed in recent years and shown a wide range of possibilities. The problems caused by the application of inadequate authentication processes may lead to the death of patients who depend on Mobile Healthcare (M-Health) services. User authentication can be based on several physiological traits (e.g., iris, retina, and fingerprint) for biometric recognition, including electrocardiography (ECG) signals. Some ECG patterns are relatively robust to daily changes associated with normal heart rate variability. In fact, the relative lengths of PQ, QR, and RS intervals, as well as Q, R, and S relative amplitudes constitute individual traits. A few studies have succeeded in using ECG signals as an accurate authentication input and offered some advantages in comparison to biometrics traditional approaches. ECG-based user authentication can be built on Machine Learning (ML) models, used for classification purposes and reductions in distortions caused by misinterpretation of ECG data. Among the ML models adopted for ECG signals classification, ensembles have shown a good research opportunity. Random Under-Sampling Boosting (RUSBoost), a boosting algorithm not yet explored (to the best of our knowledge) for such a problem, can achieve comparatively high performance after a supervised training stage, even from relatively few training examples. This manuscript reports on a comparison of RUSBoost with Nearest Neighbour Search (NNS) regarding the classification of ECG signals for biometric authentication applications. The two ML techniques were compared by a random subsampling technique that considers four analysis metrics, namely accuracy, precision, sensitivity, and F1-score. The experimental results showed the better performance of RUSBoost regarding accuracy (97.4%), sensitivity (96.1%) and F1-score (97.4%). On the other hand, NNS provided better precision (99.5%).

INDICATORS FOR ASSESSING THE ORGANIZATION'S CONTROL OF LICENSE REQUIREMENTS AND CONDITIONS IN TERMS OF MONITORING ACTIVITIES

The article uses the works of domestic and foreign scientists in the field of information security, information system security, legislative acts and regulatory documents of the Russian Federation. The purpose of the study is to develop indicators for assessing the organization 's control of license requirements and conditions in terms of monitoring activities. As the importance of information increases, so does the number of problems with her protection. Methods of information theft are being improved, and there are more and more new ways of obtaining it without authorization. Therefore, the problem of information security has become particularly relevant. The methods of protection must meet the requirements, have a license and certificates of the relevant authorities. When performing the work, the literature on the topic was studied: "Regulatory framework". The methods of analysis, generalization, comparison, and classification were used in the work. Development of indicators for evaluating the organization for monitoring license requirements in terms of monitoring activities.

Contemporary Conditions of Information Security

Abstract In the age of the information society, determined by the evolution of digital technology, information has become an essential element of the functioning of every human being. Its acquisition, processing and distribution serves to satisfy the key areas of society’s life and constitutes a necessary component of every decision-making process. These days became dominated by the increasing demand for information. The problem of its protection against unwanted obtaining (disclosure) has become a challenge for many scientific communities. This state of affairs has forced us to take a number of steps to ensure the security of useful information, characterized by accuracy, unambiguity, completeness and authenticity. The problem of information security is inseparably linked to the threats present in the cyberspace environment. They are commonly identified with the so-called computer crime, resulting in factors like: infiltration, obtaining passwords and other data used for logging in, identity theft, damage (blocking) of systems and their software. Information manipulation is a completely different and underestimated threat to rational decision-making process. Wherefore, useful information that is characterized by the expected properties, is exposed not only to destruction or unauthorized acquisition, but also to distortion. Rising anxiety about the credibility of the information received in the virtual space and the sources of its transmission forced the need to distinguish the real form from the one that was modified. The presented conditions prompted the author to propose solutions with regard to information security, determined by the difficulty of obtaining it and manipulating it.

A Study on the Integration of Computer Network Information Security Prevention and Web Data Mining Technology

The rapid development of the information age is accompanied by the insecurity of information, and the convenience of data brings the problem of information security to us. In general, network security refers to information security and control security. ISO defines information security as “integrity, availability, confidentiality and reliability of information ”; control security refers to identity authentication, nonrepudiation, authorization and access control. In view of the current situation of computer network information security, we must take effective measures to prevent trouble [1]. From the source of thought, we should attach importance to the self-protection of information security. Computer network users should have a keen sense of protection, strengthen the study of network information security knowledge, and fully understand the importance and significance of computer network security. Among them Web mining technology is no lack of a good choice.

Problems of Information Security in Cloud Computing

Problems of Information Security in Cloud Computing

RETRACTED ARTICLE: Research on athlete recognition based on image feature extraction and artificial intelligence classification

With the continuous development of modern technology, the continuous update and evolution of information collection, storage and information processing technology and equipment, and the problems of information security, the development of electronic identity verification related technologies has continuously attracted widespread social attention. Athlete’s personal identification authentication refers to the effective information identification and automatic authentication of mobilized personal identity. Among them, the athlete’s personal identification function is used to help judge who he is. In the context of the current unstable international military, political, economic and social situation in the country and the still severe domestic anti-terrorism situation, in order to effectively protect the personal property, life and personal property of a country and its people, improve the grassroots level of our people the basic living standards of the masses, the development of convenient, efficient, and humanized national athlete personal identification information identification system technology has developed into urgent problems. In order to accurately simulate human machine images and accurately recognize facial features of human images, artificial intelligence has been widely used in the field of image recognition technology in recent years. Related scientific research staffs have proposed many recognition methods and calculation models. Through the training of the model training cluster, the corresponding input recognition target model is obtained. After the accuracy of the input target recognition image and the input model target are compared, the model input can be judged in the future whether the accuracy of the target image is the same as the model target input image. In summary, the main key point of image recognition is still to extract image features.

Computer Network Information Security and Protection Measures under the Background of Big Data

With the rapid development of computer network era, there are computer networks in various industries. In the process of computer network application, there will inevitably be various network information security risks. The emergence of various problems leads to many illegal malicious thefts of network users’ private information, causing great losses to the user’s property security. The development of big data is important in computer network information security. Therefore, this paper studies protection measures. Using the demand of big data period, this paper analyzes the problems of computer network information security. Repeated testing to develop effective protection measures to continuously improve the security of computer network. To provide a more stable network environment for the general public, to avoid the problem of large-scale private information disclosure.

Remote Sensing Image Zero-Watermark Algorithm Based on Bemd

In order to solve the problem of information security when acquiring and disseminating images and improve the performance of digital watermarking, this paper proposes a remote sensing image zero-watermarking algorithm based on Bidimensional Empirical Mode Decomposition (BEMD). Initially, to perform this algorithm the DCT transform is used to extract the characteristic image of the host image. In the next step, BEMD decomposition on the grayscaled image need to be performed. The number of watermarks embedding layers is determined according to the NC value of the original image without the i-th IMF layer and the original image. The information matrix of the watermark embedding layer is XORed with the characteristic image to obtain the image embedded with the watermark. The extraction of the watermark image is the XOR result of the first XOR and the attacked image. After the watermark is embedded, the image is processed with noise, enhanced processing attacks, etc., and the NC value of the extracted watermark and embedded watermark is mostly above 0.9. The experimental results show that the watermarking algorithm proposed in this paper has better anti-attack performance, stronger invisibility and robustness.

METHODOLOGY FOR MODELING AND ENSURING INFORMATION SECURITY IN RESOURCE MANAGEMENT

The subject of research is an information security in resource management based on the mapping of technological processes of transformation and movement of resources into the phase space. The aim of the research is to develop a methodology, as a set of methods and tools united by a common ideology for information security. The methodology is formed by a set of the following methods and means: method and means of structural modeling, information security analysis and construction of production and technological models, in the form of executable block diagrams, based on predefined block elements of production and technological processes; method and tools of integrating an adversary into the production and technological process model, as a structural part of the executable block diagram of the production and technological model; a method for analyzing and selecting the trajectory of resource movement in the production and technological space based on structural modeling using optimization methods based on the risk minimization criterion for given values of acceptable and acceptable ranges (min,max) of resource transformation and changes in the state of production processes. The set of developed methods is united by the following ideology: methods and tools of forming an information security policy for objects of all levels of the hierarchy of the traffic management system and resource transformation. The result of the research is the formalization of the methodology and the methods and tools that form it to the level of readiness of application to solve practical problems. The scope of application of the proposed methodology and its methods and tools: solving problems of information security at enterprises and in industries by modeling, monitoring and analyzing the trajectories of the movement of resources and the state of production and technological processes.

EMERGING IN THE PROCESS OF DIGITALIZATION OF HIGHER EDUCATION

This article provides an overview of the risks that arise in the process of digitalization of higher education. Despite all the achievements and positive aspects of the process of digitalization of society as a whole and, in particular, in higher education, a large number of different risks arise. These include the emergence of psychological problems, pedagogical-the possible loss of pedagogical ideas that do not obey the processes of digitalization, methodological – when changing various platforms and teaching methods, technical and technological – there are problems of copyright protection and information security, difficulties in mastering technology, especially for older teachers, which can lead to discrimination against teachers and other undesirable changes in the economy and society, including in the higher education system. The article shows the possibilities of digital technologies, their impact on the emergence of risks in the economy and disappointing changes in the education system.

ЗАСТОСУВАННЯ ІНФОРМАЦІЙНО-КОМУНІКАЦІЙНИХ ТЕХНОЛОГІЙ У ЗАБЕЗПЕЧЕННІ ЕКОНОМІЧНОЇ БЕЗПЕКИ ДЕРЖАВИ

Економічна та інформаційна глобалізація світових відносин супроводжується створенням ефектив- них механізмів і засобів для інформаційного та фінансового впливу на партнерів і конкурентів у локальному, регіональному і глобальному масштабах. Метою таких дій, як правило, є зміна розподілу вироблених реальних благ на користь тих, хто розробляє, має і застосовує відповідні технології. Ситуація, що склалася, вимагає підвищення уваги до захисту державних інтересів від нових реальних і потенційних загроз, забезпечення інформаційної та економічної безпеки. Пережитий світом черговий етап технологічної революції в інформаційній сфері тягне серйозні зміни в суспільстві у цілому. Змінюється спосіб життя мільйонів людей. Процеси глобалізації зачіпають усе нові й нові сфери діяльності. Це стає актуальним й у сфері забезпечення національної безпеки, де чітко виділяється специфіка забезпечення інформаційної безпеки. Загрози економічній та інформаційній безпеці дуже різноманітні, не завжди їх можна класифікувати й систематизувати, оскільки динаміка розвитку суспільства та економіки постійно змінюють існуючі і ство- рюють нові загрози. До таких загроз можна віднести міжнародний кібертероризм, інформаційно-фінансові атаки та ін. Тяжкість наслідків реалізації економічних загроз залежить не тільки від сили джерела загроз, які прагнуть змінити стан держави, а й від непідготовленості державних систем до відбиття цих загроз. У сучасних нестійких турбулентних умовах, у світлі загострення проблеми взаємозв’язку інформаційної та економічної безпеки дуже важливо своєчасно виявляти й оцінювати виникаючі загрози економічній та інформаційній безпеці і на цій основі вживати необхідні заходи щодо запобігання загрозам, захисту інформаційних і економічних інтересів від потенційних джерел небезпеки.

Information Security Problems and Countermeasures in the Process of "Remote Audit"

Information Security Problems and Countermeasures in the Process of "Remote Audit"