Information Security Problems Research Articles

ІНФОРМАЦІЙНО-ПСИХОЛОГІЧНА БЕЗПЕКА ОСОБИСТОСТІ В УМОВАХ ГІБРИДНОЇ ВІЙНИ

The article reveals the actualization of the problem of information and psychological security of the individual in a hybrid war. The normative and legal bases of information security as an important component of state security are given. The concepts of security, national security, information security, information-psychological, psychological security are analyzed. The basic criteria of psychological security of the person taking into account information influence are opened. External and internal factors of psychological mechanisms of informational influence on the individual, society, the state as a whole are considered. The main subjects and objects of information and psychological influence are identified. The issue of transformation of psychological security of the individual as a consequence of long-term information and psychological influence is actualized. The structural and functional model of information and psychological security of the individual is given. Theoretical and applied aspects of work with servicemen in the conditions of destructive information influences are summarized and considered. The directions of information and psychological attacks against Ukraine are singled out and the classification of information and psychological threats is given. The negative consequences of information-psychological influence on the psyche are determined and effective ways of counteracting the negative influence of information flows are given. It is emphasized that the control of the information environment, teaching the population the basics of media literacy, taking measures to protect the information environment from external negative influences, etc. contribute to improving the information and psychological security of the individual.

Digital Watermarking Technology Based on LDPC Code and Chaotic Sequence

The number of ways to obtain information has increased by 5th Generation Mobile Communication Technology commercial. But easier access to information also means more security issues. Digital watermarking is an effective method to solve the security problem of information. Aiming at the problems of one-dimensional single chaotic image encryption algorithm, such as simple structure, small key space, and the invisibility and robustness of traditional information hiding technology cannot be well reconciled. The improved encryption algorithm based on Low Density Parity Check Code and double Logistic chaotic system is proposed, which can expand the key space, reduce the bit error rate, and enhance the security and anti-interference ability of the system. The feasibility, reliability and practicability of the algorithm are verified by MATLAB simulation.

Building information security skills among young transport professionals

Today the world is faced with the problem of information security of young transport professionals’ safety in the information space because it is not possible to track the social impact on young people, and it is not even ethical. We are faced with the task of developing young transport professionals’ information security skills in the information space. In order to prevent the impact of adverse incidents or threats in developed countries, information protection is implemented at all levels of education, where teachers do the largest part, though, this is an issue of national security and requires the protection and control of the state. It is necessary to instill the skills of information security culture in the family, starting from preschool age, but often parents are not experts in modern technologies and are not informed about the existing threat or find out about the consequences quite late. According to the authors, the issue of information security of young transport professionals in the information space should acquire a national scale; otherwise, society will get incorrect informational behavior of young transport professionals and young people in general, examples of which are aggressive dialogues in social networks, increased interest in immoral, immoral sites, ignorance of security rules in the network, inability to protect themselves from virtual criminals.

Информационная безопасность на пространстве "больших данных"

The purpose of this work is to develop the foundations of a new approach to the problem of information security in the context of "Big Data" technologies. The purpose of obtaining and processing information about the subject area is their subsequent use for the formation of targeted impacts on the control object. At the same time, observation and awareness of what is happening with the object was previously carried out through a certain system of informatization of the subject's activity, i.e. indirectly, and the implementation of the decision was carried out within the framework of the control object, i.e. directly. Under the conditions of Digital Transformation, the impact on the control object is carried out not directly, but on its "Digital Twin" with subsequent reduction, if necessary, of this impact on the physical control object. Thus, a system of digitalization of the subject's activity appears. When implementing such systems, one of the main principles is the principle of system security (ensuring information security). However, its implementation is hampered by the fact that "Big Data" technologies are associated not so much with their large volumes, but also with the need to process a variety of consolidated data that have a different structure, classification and indexing schemes. In this regard, it is proposed to analyze the DIKW-model and analyze the essence of the concepts included in it, which will make it possible to proceed to DIKW processing using "Big Data" technologies. At the same time, it becomes necessary to solve two problems: assessing the impact of the degree of consolidation of data, information and knowledge on the increase in their importance in ensuring the information security of the subject of the "Big Data" space and assessing the critical mass of data, information and knowledge available in the "Big Data" space, with from the point of view of their complex joint processing and obtaining more important information on their basis. To establish the necessary balance between the need for information exchange and the permissible restrictions on the dissemination of data, information and knowledge, a new virtual concept is introduced - "Information Boundary" and the issue of ensuring information security is reduced to the task of pragmatically justified access restriction for all levels of the DIKW-model and the concept of "DIKW - security. An intensional approach is proposed for controlling "Information Boundaries" in the process of using "Big Data" technologies, which ensures the transition from static solutions to the issues of ensuring the subject's information security to the implementation of dynamic procedures for such control using elements of Artificial Intelligence, monitoring this space and predicting one's "place" in the "Big Data" space.

INSIDERS AND INSIDER INFORMATION: ESSENCE, THREATS, ACTIVITIES AND LEGAL RESPONSIBILITY

The constant development of information technologies, the growing role at the present stage of human potential create new internal threats to the information security of enterprises. The article investigates and analyzes the problems of information security associated with internal violators of companies and their insider activity. Economic reports and analytical materials allowed to determine the relevance and importance of this work. Based on scientific literature, a review of various approaches to the definition of "insider" and "insider information" was carried out. The main key indicators of the insider and signs of insider information are described. The classification of data sources for the study of insider threats is presented, among which real data of the system journal and data from social networks are allocated; analytical information with synthetic anomalies; simulated data due to the formation of stochastic models; theoretical and gaming approach. Insider threat detection algorithms are described depending on intentions, behavior, capabilities of insiders, how resources are used, as well as models involving several algorithms. The normative issues of protection of insider information from unauthorized disclosure and legal responsibility for illegal use of insider information in Ukrainian legislation are covered.

МЕТОДОЛОГІЧНІ АСПЕКТИ АНАЛІЗУ ЗАГРОЗ ІНФОРМАЦІЙНІЙ БЕЗПЕЦІ ЕНЕРГЕТИЧНОЇ ІНФРАСТРУКТУРИ УКРАЇНИ

The article is devoted to the problems of developing methodological aspects for analyzing problem areas and ways to strengthen information security in the energy infrastructure of Ukraine in war and post- war times. It was found out that the main problem of information security in the energy sector is both in processing and analyzing a large amount of data in real time from the so-called corporate nodes of the local network, including data from intelligent sensors that are used to find out cyber threats and monitor their risks, as well as providing an expert specialist with a large amount of analytical information. By summarizing scientific sources, the conceptual and categorical apparatus for the research direction was clarified, namely, the author's definitions of the following concepts were given: "critical infrastructure", "energy security", "cyber information subsystem", "cybernetic security". The hierarchy and interrelation of critical infrastructures of Ukraine is systematized. A general scheme of cyber security for energy infrastructure facilities is constructed and it is proved that the processes of identification, quantification, analysis and assessment of risks, as well as their processing, should be integral components of the overall management decision-making process for the sustainable functioning of the country's energy infrastructure. - Technological ways to overcome the problem areas of cyber security in the energy sector of Ukraine are proposed. The results obtained allow us to state that when solving the problem of strengthening energy security, there are two interrelated areas – technological infrastructure and information and communication infrastructure. A general conclusion is made that the success of creating a sustainable secure system largely depends on the successful application of modern information and communication technologies.

МАТЕМАТИЧНИЙ ОПИС ОПЕРАЦІЇ НЕРІВНОЗНАЧНОСТІ В ЛОГІКО-ЧАСОВОМУ СЕРЕДОВИЩІ

Currently, there is an urgent problem of information security, which is related to the preservation of the confidentiality of information processed and stored in computer systems. The integrity and confidentiality of information is of great importance for the competitiveness and reputation of an organization or enterprise. Analytical processing of digital signals in a graphical or purely digital representation is somewhat limited and does not take into account the dynamics of signals and messages. To facilitate the preprocessing of dynamic digital variables and signals, the logic-time function of multivalued logic can be used. The article notes that computational mathematical modeling is becoming the main tool for studying complex dynamic processes and systems. The classical apparatus of logic is insufficient to describe the dynamics of system behavior over time. Therefore, it is important to develop models of so-called Boolean differential calculus, as this approach is based on the general concept of changing the logical variable, which will lead to a universal, in terms of dynamics, system of concepts and operations. It is shown that for the logic-time function of binary logic, this operation coincides with the sum modulo two. You can use the logic-time function of multivalued logic to facilitate the pre-processing of dynamic digital variables and signals. The paper considers one of the important operations - the operation of inequality and some of its properties. Inequality will allow, in the future, to introduce more complex operations on multivalued logical-temporal functions, such as derivative and initial, and to perform encoding, encryption of information in the logical-temporal environment. The possibility of using inequality when constructing indicator operations and variable differential is demonstrated. The implementation scheme of the inequality operation is modeled.

Влияние эволюции цифровых отпечатков устройств на достоверность идентификации анонимных пользователей

Purpose of work – is to evaluate the effectiveness of software identification of anonymous users in the context of the evolution of digital fingerprints on their devices. Research method. Artificial intelligence technologies, including NLP (Natural Language Processing), methods of LSA (Latent semantic analysis), as well as methods of clustering and machine learning. Objects of study are theoretical and practical issues of solving and visualizing information security problems. Results of the study. To study the impact of the evolution of digital fingerprints of analyzed devices, by alternately changing the analyzed parameters of the original fingerprint (a digital fingerprint of a browser or digital device), a database of modified fingerprints was created. A calculation technique is proposed and numerical results are presented for estimating the probability of correct and false user identifications during the evolution of the attributes of digital fingerprints. The dependence of the effectiveness of user deanonymization depending on the characteristics and properties of the variable attributes of digital fingerprints of his devices is shown. Practical relevance relevance. To improve the efficiency of anonymous user identification systems based on the analysis of device digital fingerprints. The proposed article will be useful both to specialists developing information security systems and to students studying “Information Security” course.

Discussion paper: forecasting the possibilities of non-euclidan geometry in information security

The article is devoted to the general ensuring information security problem. For this, it is proposed to introduce innovative approaches, one of which is the non-Euclidean geometry use. A review of Russian and foreign scientific publications is made, in which various options for the application of such non-classical geometry are given. The paucity of such studies is emphasized. The application areas of published solutions are medicine, logistics, economics, geography, practical physics, visualization, image recognition and cosmology. The solutions themselves may be in demand in the following areas of information technology: optimization, identification of analytical dependencies, regression, visualization, classification, topology. The acquired knowledge systematization suggests that most of the solutions will be able to increase the information security effectiveness, which allows us to speak about the success of the study. This article is debatable, and, therefore, it should be logically followed by the «Proof of Concept» stage, i.e. confirmation of the efficiency of the proposed innovative approach.

Research on cyber security risk of telematics box in intelligent connected vehicle

With the rapid development of the automotive industry and the wide application of 5G network technology, there are more and more Telematics Box (T-Box) equipped with intelligent operating systems in vehicles and they are becoming more and more complex. Because it is connected to the on-board CAN bus internally and interconnects with mobile phone /PC through the cloud platform externally, the security of T-Box must be fully guaranteed, to make the automotive more secure. T-Box can realize remote control function, so the T-Box information security problem has been paid more and more attention. In this paper, the T-Box were tested from multiple dimensions by using various methods, and the results were statistically analyzed, and the corresponding protection strategies were proposed for the corresponding security risks.

Probe into Computer Network Information Security and Protection Strategy in the Age of Big Data

With the progress of computer network technology, the arrival of big data era has brought great changes to various fields in China, and people's lives have been inseparable from the application of information technology. In the era of big data, data information is shared and transferred quickly in the cloud through the network. Network technology has played a very important role in all aspects of the country's politics, economy and people's livelihood, bringing convenience to people's lives and work. But at the same time, computer network information security problems have also emerged frequently, giving people an alarm about how to protect data information, It is an urgent problem to avoid the hidden danger in property, reputation and even security brought by data leakage to the country or individuals. This paper conducts research and analysis on this, discusses how to improve the security level of computer network information in the era of big data, and gives specific protection strategies.

Study on the Evolutionary Game of Information Security Supervision in Smart Cities under Different Reward and Punishment Mechanisms

At present, the information security problems of smart city show a high incidence, and it is necessary to strengthen the information security supervision of smart city. In the process of supervision, there is a game relationship between local government and smart city enterprises. This paper firstly constructs the game matrices of local government and enterprises under the static and three dynamic reward and punishment mechanisms, then conducts numerical simulation with the help of MATLAB to arrive at the optimal reward and punishment mechanism through comparison, and finally explores the influence of the change of the upper limit value of each key variable on the directionality and sensitivity of the decision‐making behavior of game subjects under the optimal mechanism. The result shows that initial value is one of the decisive factors influencing the choice of management strategy by enterprise. Dynamic reward and dynamic punishment mechanism is the best reward and punishment mechanism for information security supervision in smart cities. In case the upper limit value of key parameters is increased, a larger punishment has a strong influence on the positive strategy choice of the enterprise, and a reasonable adjustment of the reward policy can likewise mobilize the probability that the enterprise actively chooses to strengthen information security management. Based on the simulation results, we propose a feasible strategy.

Application of game theory for modeling information security problems

There is a continuous development of information technologies in terms of diversity and level of their complexity, which is accompanied by an increase in requirements for information protection. With the development of scientific progress, attackers also improve their skills and knowledge causing more damage. Constant communication and increased availability of computing resources for attackers help them to carry out complex and distributed attacks at any moment of time. Since the beginning of the Internet, researchers have been studying the problem of cyber security. However, the problem is far from completely solved. Re-cently, game theory concepts have been applied to all levels of security, including cyberspace, often referred to as security games. Games involve the actions of two or more rational players who have a certain strategy and compete for a certain reward. Game theory secures escrow using quantitative security measures rather than the qualitative measures provided by cryptographic security. In addition, game-theoretic approaches can be extended to design mechanisms that allow system designers to shift balances and predict outcomes in favor of defenders using complex play designs. Qualitative ways of overcoming traditional approaches to cyber security and privacy with game theory methods were described. In addition, in relation to cyber privacy, game theory has applications in information sharing, anonymity, privacy, and cryptography. This article examines research on game theory and differential game theory in network security at the applied level. It has been observed that most research works applying game theory concepts are not network specific due to the complexity of cyberspace. So, we present the best research methods that can be used to achieve better results in the defense of cyberspace using game theory.

ПРОГНОЗИРОВАНИЕ ПРОФИЛЯ ФУНКЦИОНИРОВАНИЯ КОМПЬЮТЕРНОЙ СИСТЕМЫ НА ОСНОВЕ МНОГОЗНАЧНЫХ ЗАКОНОМЕРНОСТЕЙ

Purpose of work is to create a new algorithm for predicting anomalous states of computer systems (CS) using the mathematical apparatus of multivalued dependencies (Multivalued Dependencies Prognosus Algorithm, MDPA), which are categorical concepts. The research method is the analysis of historical data using the mathematical apparatus of multivalued dependencies. Objects of study are theoretical and practical issues of solving and visualizing information security problems. Results of the study. A methodology and algorithm for predicting the state of CS have been developed. The boundaries of the input parameters of the algorithm are derived and justified. The boundaries of the input parameters need to be pre-configured for the correct generation of the prognosis. A software implementation of the proposed prediction algorithm has been developed. The efficiency of the algorithm has been tested on real experimental data. A spatial analysis of the prediction results was carried out. The main disadvantage of the proposed algorithm is the need to fine-tune the input parameters for each set of “historical data”. Scientific significance. The scope of application of multivalued dependencies has been expanded; a new algorithm for predicting anomalous states of CS, which are categorical concepts, has been proposed. The developed prediction algorithm can be generalized to any subject area containing historical data of any type

Perception of Information Security in the Process of Distance Learning During the COVID-19 Pandemic on the Example of University Teachers’ Experiences

The COVID-19 pandemic has greatly affected every area of our lives. One of them was education, which had to undergo a huge transformation in a very short time. Overnight, the computer replaced the blackboard and became the only tool of communication between a student and a teacher. Teachers had to completely change the tools used in the teaching process and enter a completely new and, for many of them completely unknown, working environment. Online learning has replaced traditional teaching. A computer with Internet access has become a basic work tool for people who have so far used it mainly for recreational purposes. Teachers were thrown in at the deep end, for most of themit was the first time they had encountered platforms for remote communication.As the workspace has changed, learners and teachers have begun to move much more frequently into the world of the Internet, which harbors many dangers of which quite a few people were previously unaware. For this reason, the authors decided to investigate the problem of information security in e-learning. This paper attempts to collect the experiences and assess the awareness of university teachers about information security threats while teaching during the COVID-19 pandemic. The research results presented in this paper showed that the level of awareness of the risks, that may affect academic teachers in the distance learning process, is very low. Additionally, no appropriate procedures for safe distance learning have been developed. The communication security area was practically completely overlooked during the COVID-19 educational revolution.

Editorial of ARIS2 - Advanced Research on Information Systems Security, an International Journal

Securing information, actors, and their systems have become a paramount challenge in recent years.
 In the first regular issue of 2021 of the ARIS2 - Advanced Research on Information Systems Security, an International Journal, in four of the five articles, problems of information security are addressed with a practical and theoretical view, with origin in academic centers and research from masters and doctoral students.

UNIVERSITY INFORMATION SECURITY AUDIT

The paper presents the results of a search for information security vulnerabilities as a result of penetration testing carried out in the corporate networks of some higher education institut. Subject of study. The subject of the research is the information resources of various education organizations. Method. Methodology and requirements for conducting audits in accordance with the developed algorithm, as well as ISO27000, ISO017799, ISO15408 standards. Main results. Report on the specific vulnerabilities found typical for universities, as well as recommendations for their elimination. Practical significance. The results of the work can be used for modeling and assessing the security of networks and information systems of universities to solve information security problems.

Study of the possibilities to use keyboard handwriting for the tasks of identifying students in e-learning systems

When using distance education systems, the problem of information security of the educational process arises, which, in addition to external ones, also implies internal threats. One of these threats can be a legitimate user who paid a fraudster to take tests and give visibility to educational activities under his own name. The use of traditional identification methods has two significant drawbacks: firstly, the ambiguity of the identified user, because the identification of the user occurs by the entered pair login-password; secondly, the inability to detect the substitution of an identified user in the process of working with the system. These disadvantages are eliminated by using biometric methods of covert and continuous monitoring.
 In the first part of the work the different types of control knowledge tests are analyzed. Taking into account the specifics of the use of covert keyboard monitoring algorithms, the following is proposed: 1) to use tests that do not contain answers; 2) use tests after each learning activities in order to form a user’s biometric vector; 3) use tests with numerical answers in order to minimize the analyzed keystroke digraphs.
 An algorithm for user’s profile formation and its identification is proposed in the second part of the work. Its combine qualitative (distribution of the frequencies of using numeric keys groups, comma-separated keys, “plus” and “minus” keys on the main and additional keyboard units) and quantitative (analysis of statistical properties of keystroke digraphs) approaches. The experimentally obtained estimates of the identification accuracy of the proposed algorithm: FAR=4.64% and FRR=6.25%.

Modern problems of ensuring information security in the educational and pedagogical sphere

The article deals with the problems of information security and its provision in relation to society and its educational environment, processes and relations, subjects and objects. The necessity of forming the corresponding subject-information competence of subjects, personal culture of information security is shown.It is noted that the information security of educational subjects is a specific part of the general security of education as its qualitative development in the developing information society in accordance with its properties and requirements. The concept of information security in the field of education is formulated in the context of a general concept and in the aspect of its specificity in education, its educational and educational processes, as well as in the aspect of personal, psychological, age and other properties of subjects of education. This presupposes the presence of a corresponding purposefulness of general education, which also acquires the quality of informational education, and its expression in the content of education and subject-oriented educational training. In particular, this applies to the general education subject “Informatics” as the main resource of information education, in the process of forming the relevant knowledge, competencies and personal qualities.The necessity of mandatory inclusion of the relevant topics in the content of information education in the context of information security and information protection has been substantiated: the state and problems of information security, personal security; goals and objectives of information security; legal and other aspects of information protection, means of protecting electronic data in the field of education.

Information Threats to the State Security of Ukraine in the Hybrid Warfare

The existence, self-preservation and progressive development of Ukraine as a sovereign state depend on a clear commitment to protection of its national interests and provision of state security. In modern conditions, the geopolitical standing of a state in the international arena, its ability to influence world events depends not only on economic and military strength but also on the information factor which plays increasingly important role nowadays. Rapid IT development at the beginning of the 21st century has led to a new global socio-technological problem, namely the problem of information security of a man, society and the state. The essence of this problem is that the most important interests of a man, society and the state are determined by the information environment. Therefore, deliberate or unintentional, external or internal influences on the information sphere can hinder those interests and pose a threat to the information security of a man, society and the state. Such a threat to national security is posed by external information expansion. The development of the advanced information technologies has led to the transition from the so-called classical war to a new type of warfare, namely information and psychological one. The sophisticated technical equipment and facilities which can affect not only the psyche and consciousness of people but also the information and technical infrastructure of states enable us to consider information weapons as a means of mass destruction capable of exerting large-scale psychological impact on political and business opponents. Similarly, the Russian Federation exerts destructive informational and psychological influence both outside and inside Ukraine using social contradictions, provoking ethnic and religious conflicts, undermining social unity and inciting hostility. The analysis of the ways of applying methods of information and psychological influence by the Russian Federation on the temporarily occupied territories of Donetsk and Luhansk regions and in the Autonomous Republic of Crimea makes it possible to identify major threats to state security in the information sphere which are aimed at discrediting the top military and political leadership of the state, inciting anti-state sentiments in Ukraine and conducting information operations to mold the cultural oneness of the population on the occupied territory of Crimea and the population of Russia. The information aggression against Ukraine nowadays is aimed at weakening and splitting the country from within through engineering and exacerbating existing political, socio-economic, ethnic and other contradictions. Underestimation of the possibilities of information and psychological influence and of measures to counteract influences as well as failure to regulate the specifics of a particular territory can be fatal during the further aggravation of the military-political situation around Ukraine. In view of the above, the task of all state, public, research, expert, and journalistic institutions should be to develop effective measures to neutralize the aggressive information activities of the Russian Federation against Ukraine and to counteract their further conduct.