Information Protection System Research Articles

Transformation of the science of Information Law and information legislation: a new stage in the conditions of scientific and technological development of Russia

The authors of the article analyze the current trends in the development of the doctrine of Information Law and information legislation in the context of updated tasks for the scientific and technological development of the Russian Federation. It is noted that in the context of the development of an information society based on the digital economy and the data economy, the transformation of law is taking place, which is largely facilitated by the active evolution of Information Law, the expansion of its subject due to the rapid formation of digital law as a basic institution (an emerging sub-sector) responsible for the features of legal provision of information processes and phenomena in digital form. It is within the framework of this industry that legal support for the digitalization of society takes place both at the expense of basic information and legal norms governing the basic provisions (principles of regulation of digital relations, the regime of digital data and other objects of the digital environment, the legal status of subjects of the digital environment, as well as other legal aspects that reflect the essence of the digital form, the application of which is universal and can be applied in law in general), as well as through industry-specific digital norms developed and adopted within a particular branch of law, reflecting the specifics of the implementation of digital processes in relation to a specific area of public relations, regulated by the relevant branch of law. The main directions of scientific and technological development and the tasks of Information Law are also studied. The authors note that the scientific and technological development of Russia today is based on a number of principles that are important to take into account in the development of information legislation and the science of Information Law. Modern information processes and technologies directly permeate and ensure the functioning of all priority areas of scientific and technological development and are part of or ensure the application of all the most important high-tech technologies. In this regard, it is important to work out and consolidate at the theoretical level in information legislation mechanisms that contribute to the effective implementation of the accelerated development and introduction of these important knowledge-intensive technologies into the economy, including within the framework of national projects to ensure technological leadership. As a result of the analysis of critical and end-to-end technologies, it was revealed that the main emphasis in the development of information legislation and the doctrine of Information Law should be placed on the formation of models for regulating the use of artificial intelligence technologies in economic sectors, the social sphere (including the sphere of public safety) and in public authorities, including the development of regulation of robotics, as well as microelectronics technologies and photonics for information storage, processing, transmission and protection systems, technologies of secure quantum data transmission systems. The authors draw a number of conclusions about the development of the principles of regulation of artificial intelligence, as well as the prospects for the development of legal regulation of the field of robotics. The analysis is given of the discussed problems of Information Law at the Seventh Bachilov Readings, held in 2024 at the Institute of State and Law of the Russian Academy of Sciences.

Justification Models of Organizational and Technical Support of Measures to Create Information Protection System of Informatization Objects

The relevance of the article is due to the need to protect information at all stages of creating an information system in the absence of appropriate organizational and technical support. To justify this kind of provision, mathematical models are needed that take into account the conditions and the random nature of the implementation of heterogeneous information processing processes in time at each stage, threats to its security and protection from these threats. The article discusses approaches to the development of such models based on the apparatus of flow theory and the theory of composite Petri ‒Markov networks, the possibilities of which for modeling the processes under study have not been previously considered. The purpose of the article. To reveal the content of issues related to the justification of organizational and technical support for information protection at the stages of creating an information system, to show the need and ways to quantify threats to its security and protection from these threats. For this purpose, the methods of functional and structural analysis, probability theory and flow theory were applied. In the course of solving the scientific problem, the relevance of substantiating the organizational and technical support of information protection at the stages of creating information systems is shown, descriptive models of its processing processes are developed, time diagrams of threat scenarios are given in the absence of protection measures and in the conditions of using preventive organizational and technical measures, indicators and analytical ratios for their calculation are proposed. The scientific novelty of the article consists in the fact that for the first time it examines the issues of organizational and technical support for information protection at the stages of creating an information system, examines the theoretical aspects of quantifying threats to its security and protection from these threats based on flow theory and prospects for applying the theory of composite Petri-Markov networks. Significance (theoretical). The conditions for the implementation of the studied processes and the possibility of applying the theory of flows and the apparatus of composite Petri–Markov networks for their modeling are established. Significance (practical). The results obtained in the work can be used to justify the organizational and technical provision of information protection at the stages of creating information systems of various organizations (both state and non-state), for which the implementation of threats at these stages may lead to damage to their activities.

Privacy and personal data risk governance for generative artificial intelligence: A Chinese perspective

The rapid development of generative artificial intelligence (AI) has attracted global attention and posed challenges to existing data governance frameworks. The increased technical complexity and expanded scale of data usage not only make it more difficult to regulate AI but also present challenges for the current legal system. This article, which takes ChatGPT's training data and working principles as a starting point, examines specific privacy risks, data leakage risks, and personal data risks posed by generative AI. It also analyzes the latest practices in privacy and personal data protection in China. This article finds that while China's governance on privacy and personal data protection takes a macro-micro integration approach and a private-and-public law integration approach, there are shortcomings in the legal system. Given that the current personal data protection system centered on individual control is unsuitable for the modes of data processing by generative AI, and that private law is insufficient in safeguarding data privacy, urgent institutional innovation is needed to achieve the objective of “trustworthy AI.”

Context-Aware Adaptive Encryption: Integrating Sensitive Data Detection and Network intrusion detection for Dynamic Data Security and Encryption

In today's digital landscape, ensuring the security of sensitive data and protecting against network intrusions are critical challenges. This research project develops and evaluates a novel context-aware adaptive encryption system that integrates sensitive data detection, network intrusion detection, and dynamic encryption techniques to enhance data security. The proposed system employs deep learning models to identify sensitive information and machine learning algorithms to monitor network activity for potential intrusions. Upon detecting sensitive data or a security threat, the system automatically applies encryption with adjustable strength based on the context, increasing protection in high-risk situations. This approach minimizes unnecessary overhead in low-risk scenarios while maintaining robust security measures. Through simulations using real-world data, the system's effectiveness in accurately detecting sensitive information and network intrusions, as well as its capability to adapt encryption dynamically, is evaluated. The results demonstrate the potential of combining machine learning with adaptive security measures to create a responsive and efficient data protection system.

REFORMS IN THE NATIONAL SECURITY SECTOR: CHALLENGES AND PROSPECTS FOR UKRAINE IN THE TIME OF WAR

The article examines the problem of preserving the information sovereignty of the state as a necessary condition for ensuring its national security. The concept of the apparatus of the research area is considered, the scientific interpretation of the terms "information security", "information war", "destructive propaganda", "information struggle" and others is given. It is noted that the protection of the information field of the country from external harmful influence is a fundamental task of the state, which belongs to the sphere of its national interests. And reforms in the national security sector are vitally necessary in the conditions of war with the Russian Federation. They conducted a retrospective analysis of the use of various strategies for optimizing national security. It is noted that the protection of the country’s information field from external harmful influence is a fundamental task of the state, which belongs to the sphere of its national interests. In Ukraine, certain experience has been accumulated in ensuring information security, legislative, organizational and institutional foundations of this process have been created. However, the activities of authorized structures are more focused on the protection of information systems and networks of strategic importance, while the issue of countering Russia’s ideological expansion remains on the periphery of their attention. The country’s authorities do not always conduct comprehensive, coordinated work to combat fakes and destructive propaganda, which poses a real danger to national interests. The article analyzes specific cases of the promotion of Russian propaganda narratives in the Ukrainian media segment. The vulnerability of Ukraine’s information security system is reflected and practical recommendations for their elimination are provided, which include the creation of an early warning system of information attacks, cyber sabotage, manipulative actions from the outside with a built-in mechanism for prompt response and purchase of similar threats; improvement of the relevant legislative framework and adoption of a holistic concept of information security of Ukraine; strengthening the potential of domestic mass media to counteract destructive propaganda.

COUNTERING DISINFORMATION POLICY: CHALLENGES FOR UKRAINE’S NATIONAL SECURITY

he article examines the problems of combating disinformation in the conditions of a modern full-scale war and overcoming the challenges facing the national security of Ukraine. The concept of disinformation, its impact on public consciousness and the key mechanisms of the spread of false information are outlined. The main directions of the policy of combating disinformation aimed at ensuring information security and resistance to information attacks have been studied. The importance of the development of media literacy among the population as one of the main tools for countering disinformation campaigns through educational programs and social interaction is revealed. The experience of combating disinformation in the developed countries of the world, the USA and the countries of the European Union, is analyzed. The role of state and international initiatives, the cooperation of governments with technology companies, as well as the implementation of legislative mechanisms are highlighted. The main tools aimed at regulating the spread of false information in the information space are revealed. The study emphasizes the importance of active cooperation with international partners to ensure an effective fight against disinformation at the global level. Special attention is paid to the role of international organizations in the formation of a unified strategy for countering disinformation attacks. Prospects for attracting international support for the development of national information protection systems and Ukraine's participation in global information security initiatives are being considered. Proposed means of an effective policy of combating disinformation, which combine legislative, technical and educational measures. The methods of ensuring resistance to external information threats are characterized. Particular attention is paid to media literacy programs, which have become important elements of national strategies in the fight against fakes and disinformation attacks. The article considers the possibilities of implementing international experience in Ukraine with the aim of strengthening national information security. The expediency of developing complex programs, including the strengthening of modern means of monitoring the information space and raising the level of critical thinking among the population, is analyzed. Emphasis is placed on the need to create a national security strategy for combating disinformation, which will allow effective response to new threats and ensure information security in the conditions of modern warfare.

Ochrona informacyjna konsumenta w umowach ubezpieczenia

The article discusses issues related to consumer information protection in insurance contracts. The consumer’s right to information is explained and the legal nature of the insurer’s information obligation is presented. As a result of analyzing the information obligations constituting the basic instrument of consumer protection, appropriate conclusions were made regarding the implementation of these obligations. According to the author, the consumer information protection system is only partially implemented because the practice has shown shortcomings in its implementation. However, it must be agreed that the idea of protection through information is an appropriate assumption. Undoubtedly, the right direction is to increase the level of consumer information protection by clarifying regulations and such educational and information activities as recommendations issued by designated bodies.

Retrospective analysis of the problem of training information security specialists

It is advisable to analyze scientific research in any field in retrospect of the issue under consideration, to correlate modern problems with its historical prerequisites and on the basis of this to trace possible trends in its development. Retrospective analysis is one of the main scientific methods for conducting historiographical analysis. The article examines the chronology of events in the field of training specialists in information protection, which allowed us to identify six stages of the formation and development of this problem in pedagogical science and practice, to determine the features and main directions of training future specialists in the field of information protection in Russia and abroad, identifying correspondences in the development of the national information protection system and the content of modern training of specialists. Based on the conducted retrospective analysis, it was revealed that the change in the requirements for ensuring information security is due to the level of development of information technologies, and the stages of training specialists are related to the real situation of their demand in the process of ensuring information security.

Oral diseases and systemic conditions: correlation analyses from the Colombian national health records between 2016 and 2023.

Prevalence of oral, metabolic, circulatory, and nutritional diseases has tended to increase globally. As these diseases have common contributing factors, such as unhealthy diets, evaluating their epidemiological trends and the relation between them is relevant. In Colombia, the Ministry of Health records the frequency of consultation for these diseases through the Integrated Social Protection Information System. It facilitates the evaluation of their epidemiological behavior at the population level. To analyze and correlate the burden of oral diseases (caries and periodontitis) with respect to nutritional, circulatory and metabolic pathologies, as well as their relationships with socioeconomic indices in Colombian regions from 2016 to 2023. This study analyzes retrospective data collected between 2016 and 2023 by the National Health Registry in Colombia (SISPRO) according to the ICD-10. Sociodemographic data and the number of disease consultations were extracted. The number of consultations for oral diseases was correlated with systemic pathologies, socioeconomic indices through the Spearman test. Associations were explored via multiple linear regressions. A Principal Component Analyses (PCA) was conducted to identify patterns between socioeconomic, oral and systemic disease variables, as well as to reduce the complexity of the analysis by creating clusters that capture the greatest possible variability in the data. The average number of consultations per biennium was 24.550.435 being the highest number for 2018-2019. The highest percentage of consultations was related to extensive caries, followed by chronic gingivitis. Moreover, consultations for oral diseases were found to correlate with systemic pathologies. All socioeconomic indices were associated with caries and/or periodontal diseases. This study is the first in Colombia that uses national data on diagnoses assigned to medical and dental consultations. PCA revealed a clustering pattern of pathologies suggesting that they are highly associated one to each other. Correlations between consultations for oral and systemic diseases stratified by life cycle and socioeconomic indices highlight the importance of conducting epidemiological and public health characterizations and their associations. Identifying these factors is imperative in the prevention and management of both diseases.

Information protection and cyber security in the public and financial sectors

The public sector faces increasing challenges in the field of cyber security and information protection, stimulated by the rapid development of digital technologies. A significant increase in the need for reliable protection of state data and information systems requires state institutions to implement complex information protection measures. The purpose of the study is to analyze modern approaches and technologies in the field of cyber security and the use of encryption, cryptography, and the use of cloud technologies that can be used in the public sector for effective information protection. The research methodology involves consideration of strategies that allow to increase the level of security and ensure the protection of critical infrastructure. The results of the study emphasize the need to adapt to the rapidly changing digital environment and involve modern technological solutions to create a reliable information network system in the public sector. The findings of the study draw attention to the importance of global cooperation and increased investment in the field of countering digital attacks, demonstrating examples of effective international cooperation and support in this direction. The need for the integration of international standards and practices in order to create a global digital space has been revealed. A promising area of research is the analysis of the impact of the latest technologies on data storage strategies, which contributes to the identification of ways for further innovations in the industry and the creation of flexible information network systems capable of effectively responding to changing conditions and challenges of modern cyberspace.

How Many Autistic Children are there in Colombia? A Nationwide Examination of Autism Through Health System Data.

Accurate healthcare data is indispensable for monitoring the epidemiology of autism spectrum disorders (ASD) and improving the quality of care for individuals on the spectrum. In Colombia, the Ministry of Health has developed the social protection information system (SISPRO) as a comprehensive registry, drawing data from the healthcare system with close to universal coverage (approximately 95%). This study utilizes data gathered by SISPRO to estimate the prevalence and specific characteristics of autistic children registered between January 2020 and December 2022. A descriptive epidemiological approach was employed, using the International Statistical Classification of Diseases as search terms for ASD within the SISPRO dataset. The study revealed a prevalence of 13.788 cases per 10,000 children in 2022 among aged 4 to 14. Regarding healthcare coverage types in 2022, the majority of autistic children served were under the contributory regime (68.28%), followed by the subsidized regime (25.36%). Geographic analysis indicated a non-uniform distribution of ASD prevalence in Colombia. The regions with the highest GDP, such as Antioquia, Atlántico, Bogotá, Cundinamarca, and Valle del Cauca, exhibited the highest prevalence (M = 17.90; SD = 14.3). In contrast, areas with the lowest GDP, including Amazonas, Guainía, Vaupés, Vichada, and Guaviare, showed the lowest prevalence among children (M = 2.6; SD = 2.5). The estimation of ASD prevalence in Colombia represents an ongoing initiative to inform public policy actions. During the COVID-19 pandemic, there was a decrease in the number of autistic children served by the healthcare sector; however, the prevalence of ASD changed to higher levels in 2022. These findings contribute to strategies aimed at improving the quality of life for autistic individuals and mitigating the economic burden on their families.

Sequential-dependent synthesis of gold-chromium nanocomposites for multimode colorimetric sensing, advanced logic computing, and tri-layer information protection

Binary materials combine the properties and advantages of their components, but their fabrication paradigm needs updating to fully exploit their characteristics and broaden their application. Here, multifunctional bimetallic gold-chromium nanocomposites (Au–Cr NCs) were synthesized facilely in a sequential-dependent manner, and applied from multi-channel sensing to molecular informatization (including advanced logic computing and tri-layer information protection). By sequentially mixing Cr6+, Au3+, and NaBH4 (reducing agent), Au–Cr NCs with Au nanoparticles attached to Cr nanobelts can be prepared easily and quickly. The resulting Au–Cr NCs exhibited multi-signal sensing capability for hypochlorite, with significantly improved selectivity (about 5 times) and sensitivity (about 1650 times) when analyzing multiple signals. The synthesis process can be used to implement parallel molecular logic gates and customizable keypad lock operations. Moreover, by digitizing logical relationships and multimodal selective responses based on Au–Cr NCs, specific information (wise sayings and literary works sentence) can be encoded, encrypted and hidden to realize nano-cryptography and steganography. When combined with molecular keypad lock, a tri-layer information protection system can be constructed to enhance anti-cracking ability. This study promotes controllable preparation and multi-purpose applications of advanced multifunctional nanocomposites, but also opens up a new direction for nano-based sensing and digitization in multi-dimension.

Prospects for Legal Regulation of Quantum Communication

The leading countries across the world have entered the race to develop quantum technologies that will enable them to ensure their continued economic prosperity. Among these technologies, a special place is occupied by quantum communication, which is designed to ensure information security in an era where a quantum computer is capable of compromising a number of cryptography algorithms. In this article, this new digital technology includes quantum key distribution and encryption methods that are cryptographically resistant to a quantum computer. The study does not consider the regulation of the quantum communication sub-technology, the so-called “quantum internet,” due to the technical limitations of the existing equipment. The authors note that their predictions about the cryptographic strength of encryption algorithms are based solely on modern knowledge about the capabilities of quantum computing and do not take into account its hidden potential, for example, in terms of cryptanalysis information systems based on a machine learning model generated by a quantum computer. Currently, the only data protection system that is not subject to quantum threats is the technology of quantum key distribution. In today’s information and digital age, information security systems are an important element of critical infrastructure. Given the importance of these technologies, different states use different methods to regulate this field. This article puts forward and substantiates the hypothesis that the implementation of a combination of regulatory legal acts could have a greater positive impact on the development of quantum communication and ensure an acceptable level of information security in the post-quantum era. The analysis showed that a significant number of states and interstate associations are conducting research in this area, relying only on investment growth. This strategy has prevented any country from achieving the competencies of the People’s Republic of China. The authors also analyzed the methods of legal support used by China, Russia, and other countries in the field of quantum communication, which made it possible to identify a model of legal regulation of quantum communication that stimulates this technology’s development.

Colombian ocular diseases epidemiology study (CODES): glaucoma incidence and sociodemographic characterisation 2015–2020

ABSTRACT Clinical relevance Glaucoma encompasses a group of eye diseases that progressively damage the optic nerve, leading to vision loss and blindness. Understanding the incidence and demographic distribution is vital for public health planning and patient care. Background Previous small-scale studies in Colombia have reported the prevalence of glaucoma in individuals over 40 years between 1.1% and 5.29%. These data may not fully capture the true extent of the disease. Furthermore, with the ageing population, the incidence of glaucoma is likely to increase, highlighting the need for up-to-date incidence data to guide healthcare planning. Methods Data were obtained from the Social Protection Information System, the primary health record repository of Colombia, using the International Classification of Disease 10 for glaucoma. Crude incidence rates were calculated and adjusted for sex, age, and gender. The 2020 incidence was compared with estimated rates from previous years to assess the impact of the coronavirus disease 2019 lockdown. A standardised morbidity map was created to show regional variations. Results The average incidence of glaucoma in Colombia was 17.36 per 1,000 inhabitants, increasing from 12.29 in 2015 to 24.22 in 2019. Of the 212,700 reported cases, 60.75% were females. Primary open-angle glaucoma was the most prevalent type, with significant incidence in the elderly over 70 years of age, irrespective of sex. Bogotá, Antioquia, and Valle del Cauca had the highest numbers of new cases. Conclusion The increasing incidence of glaucoma and its demographic and geographical variations necessitate the awareness of ophthalmologists and optometrists. This study emphasises the need for continuous monitoring, effective interventions, and developing healthcare strategies to address the escalating challenge of glaucoma in Colombia.

Big data algorithm for computer network information security in the 5G era

Computers play a very important role in today’s life. A large amount of personal information exists in computers, so it is very important to protect the information security on computer networks. The development of information technology has brought a huge impact on human society, and the information security of its computer network has attracted more and more attention. Aiming at the needs of computer network information management in the age of big data, this paper has developed a special computer network information protection system to deal with various threats and constantly improve the protection system. Based on this, the concept and advantages of the 5G network are first expounded, and the management technology of the 5G network is briefly analyzed. Then the information security problems of computer networks in the 5G era are considered, and effective solutions to the information security problems are proposed. Through research and calculation, the new computer network security system can improve network information security by 13.4%.

Heterogeneous Social Network Location Aware Multi Party Data Protection and Privacy System

Social networks are large online communities that allow users to interact and share information. They can be used to connect with friends, family, or potential romantic partners, build a business, or even find a job. The evolution of social media has led to a trend of posting daily photos on online Social Network Platforms (SNPs). The privacy of online photos is often protected carefully by security mechanisms. However, these mechanisms will lose effectiveness when someone spreads the photos to other platforms. This project proposes a blockchain based secure photo sharing framework that provides powerful dissemination control for heterogeneous social network photo sharing. In contrast to security mechanisms running separately in centralized servers that do not trust each other, this framework achieves consistent consensus on photo dissemination control through carefully designed smart contract-based protocols

Artificial Intelligence in Medicine: from Diagnosis to Treatment

In recent years, medicine has faced the serious challenge of the covid pandemic, due to which representatives of the health care sector had to mobilize forces and resources to jointly overcome these problems. The rapid development of artificial intelligence, its learning capabilities, and in recent years the creation of a neural network opens up wide possibilities for the use of AI in medicine. Aims: To analyze the modern literature on the use of AI for diagnosis and treatment and to analyze what problems may arise with the uncontrolled introduction of artificial intelligence Methodology: When conducting a literature review, an analysis and generalization of data on the research topic from 2019 to 2024 was carried out. The literature search was carried out by keywords using the PubMed search engine. Results: The literature review demonstrated the use of artificial intelligence in medicine, which has grown significantly in recent years and continues its rapid development, which is associated with the improvement of innovative technologies. The use of artificial intelligence in diagnostics is associated with the use of a neural network, which makes it possible to identify digitized images for rapid diagnosis. The use of artificial intelligence in surgery is reflected in the application of da Vinci. Artificial intelligence has been widely used in anesthesiology. Scientific Novelty: The literature search established that the implementation of artificial intelligence in medicine creates certain challenges related to the protection of personal data, and the possibility of error is not excluded when using AI. Conclusion: The use of AI is promising for diagnosis and treatment and helps doctors quickly make a diagnosis and prescribe treatment, but certain challenges created by artificial intelligence must be solved by implementing more reliable personal data protection systems, as well as control over the information reproduced by artificial intelligence.

Privacy model for the development and implementation of regulatory technology (RegTech)

An unprecedented demand for accurate information and action moved the industry toward RegTech where computing, big data, and social and mobile technologies could help achieve the demand. With the introduction and adoption of RegTech, regulatory changes were introduced in some countries. Enhanced regulatory changes to ease the barriers to market entry, data protection, and payment systems were also introduced to ensure a smooth transition into RegTech. However, regulatory changes fell short of comprehensiveness to address all the issues related to RegTech’s operation. This article is an attempt to devise a Privacy Model for RegTech so industries and regulators can protect the interests of various stakeholders. This model comprises four variables, and each variable consists of many items. The four variables are data protection, accountability, transparency, and organizational design. It is expected that the adoption of this Privacy Model will help industries and regulators embrace standards while being innovative in the development and use of RegTech.

IDENTIFICATION OF ASSOCIATIVE RULES IN THE BEHAVIOUR OF AUTOMATED SYSTEMS INFORMATION SECURITY INTRUDERS

An approach based on the use of one of the varieties of affinity analysis – associative rule search, which allows to identify associative rules in the use of various methods of port scanning and operating system characterization by intruders of information security of automated systems is proposed. The mechanism of associative rule search using the scalable apriori algorithm is described. The basic concepts and an example of application of this mechanism with calculation of necessary characteristics such as support, confidence and lift were considered. The obtained associative rules will enable information protection specialists to be better oriented in the nature of actions of information security violators of automated systems and will become the basis for making informed managerial decisions on improving the existing or building a new information protection system, more effective response to information security incidents.

Performance Evaluation Elastic Security as Open Source Endpoint Detection and Response for Advanced Persistent Threat Cyberattack

Detecting APT using conventional information protection systems poses significant challenges. For instance, signature-based detection tools like antivirus primarily rely on predefined signature rules to identify malware. However, in scenarios like zero-day attacks where malware signatures are unknown, detection becomes unreliable. While EDR traditionally hinges on signature-based rules, recent advancements integrate machine learning techniques for enhanced detection capabilities. In this study, we conducted an evaluation of open-source EDR, specifically Elastic Security, for APT detection. APT attack vectors were simulated utilizing the Caldera Platform. The evaluation involved validating each attack vector sent by Caldera against detection alerts generated by Elastic Security. The detection outcomes revealed three categories: detected alerts conforming to predefined rules, undetected alerts despite predefined rules, and undetected alerts due to undefined rules. Some attack vectors lacked rule definitions, potentially resulting in elevated false positives. Additionally, certain attack vectors failed to trigger alerts despite rule definitions.