State Information Resources Research Articles

ГОСУДАРСТВЕННЫЕ ИНФОРМАЦИОННЫЕ РЕСУРСЫ РОССИЙСКОЙ ФЕДЕРАЦИИ НА СОВРЕМЕННОМ ЭТАПЕ: ПРОБЛЕ-МЫ И ПЕРСПЕКТИВЫ РАЗВИТИЯ

The article is devoted to the regulatory support and budget provision of the state information resources of Russian Federation. The authors analyze the implementation and results of the Federal target programs “Electronic Russia” and “Information society”. Special attention is paid to the analysis of the problems impeding the development of highly effi cient integrated system of state information resources. Also some suggestions for improving the system of state information resources are formulated.

The system of terms and determinations in security methodology of state information resources

A system of terms and determinations of methodology of defence of state informative resources in comparison that in leading documents on the questions of defence of informative resources and that introduced by the authors in previous researches is presented in the article. To such terms and determinations the authors apply the following ones: state informative resources, threat to the state informative resources, national informative resources, national electronic informative resources, system of national informative resources, system of state informative resources, state electronic informative resources, register of electronic state informative resources, depositary of electronic state informative resources, attack on state informative resources, method of double three of defence, threat of normatively-legal aspiration, threat of organizational aspiration, threat of technical aspiration, object identifier, objects of threats to the state informative resources, source of threats to the state informative resources, vulnerability of state informative resource, risk realization threat state informative resource, aim source threat state informative resource, source information about state informative resource, method illegal capture state informative resource (methods of access are to the state informative resources), direction defence state informative resource, method defence state informative resource, facility defence state informative resource, complex system defence state informative resource. These terms and determinations are offered to be put in the basis of forming of a normative document in the matter of defence of state informative resources.

FEATURES OF ADMINISTRATION AND MANAGEMENT IN PUBLIC CONTROL OF THE STATE INFORMATIVE RESOURCES

In the article a goal, a subject, an object, direction and tasks of research of features of administration and management in the public control of state informative resources are defined for the first time. Determination of the concept of state informative resources and their classification are specified; determination of the concept of the public informative system is given. A model of security of the management system by means of public state informative resources on the basis of the method of «double three of security» is worked out. Thus, a common scientific task is formed in relation to determination of normatively-legal and organizational decisions, including technical ones directed to the creation of the common system of public control of state informative resources. The scientifically-applied direction of research is defined. It consists in organization of the system of public management of organs of state administration on the platform of modern methods and models of construction and the rise of effectiveness of the system of administration and public management of the state informative resources.

Analyzing of eligibility of complex risks of information security by analytical geometry methods

Requirement for the protection state information resources is determined by the law Ukraine. Complex systems of information protection or information security management system is rooted for this. It is necessary to determine eligibility of criteria risk levels and set their limit values during development of such systems. This task is assigned to the owner or manager of information asset. Determination of limit values of risk levels allows to draw the line between acceptable and unacceptable risk. Presence of such limits provides an opportunity to make informed decisions about necessary risks processing and attracting the necessary resources. Therefore, the main purpose is presenting the approach to analyzing the levels acceptability of complex information security risks using mathematical tools of analytical geometry and assumptions concerning the analogy between the additive model of complex risk with equation of line. This line is reflected in the area and defines the boundary, predefined risk levels. The analogy equation of the line with the equation of finding two risk values of threats to security informative asset for a given level of total risk shows as an example. The location of “boundary line” is defined and proven, also considered various options for its intersection with other direct. Depending on their relative position became possible the formation of approaches to the definition and classification of officials recommendations who are developing a complex information protection system or the system of information security management. It is allowed to simplify and justify determination of quantitative characteristics of complex risks and contributed to the formulation of further research in n -dimensional area by using the analytical and geometric models.

Technology of construction and defence of the ukrainian segment of the identifiers’ tree of state informative resources on the basis of risk management

У статті вперше представлена технологія побудови та захисту українського сегмента дерева ідентифікаторів державних інформаційних ресурсів на основі ризик-менеджменту. Дана технологія базується на дослідженнях, які були проведені авторами раніше і пов’язана з вперше розробленою методологією побудови класифікатора загроз державним інформаційним ресурсам; проведеним аналізом світового дерева ідентифікаторів інформаційних ресурсів та місцем в ньому українського сегмента ідентифікаторів об’єктів; розробленою авторами структурно-логічною моделлю організації ієрархічної гілки кодів-вузлів українського сегмента ідентифікаторів об’єктів державних органів; розробленими моделями та принципами інформаційної безпеки, методами та моделями реалізації системи управління інформаційною безпекою державних інформаційних ресурсів; розробленими теоретичними основами та методологією аналізу ризиків дерева ідентифікаторів державних інформаційних ресурсів, іншими працями, що пов’язані єдиною метою – розробкою методології побудови та захисту українського сегмента дерева ідентифікаторів державних інформаційних ресурсів. Впровадження даної технології повинно стати об’єднуючим фактором для узагальнення досвіду побудови захисту державних інформаційних ресурсів в країні на основі ризик-менеджменту та підходів, які не суперечать міжнародним стандартам.

THEORETICAL BASES OF ANALYSIS OF RISKS OF TREE OF IDENTIFIERS STATE INFORMATIVE RESOURCES

In the article the theoretical bases of analysis of risks of tree of identifiers of state informative resources are expounded. The authors show the absence of effective mechanism of realization of risk process of management in Ukraine on the state level. According to the previous researches a concept of the cube of Yudina-Buchyka is entered, on the basis of it the authors built the actually methodology of construction of classifier of threats to the state informative resources (the authors enter a concept «methodology of double three of security»). In continuation of subjects of security of state informative resources the authors certain the methodology of estimation of risks of safety of the information-telecommunications systems and networks in the context of international standards. Raising of task of determination of level of risk of state informative resources taking into account basic descriptions, that characterize him, is carried out: assets (state informative resources behave to that), threats, to vulnerability, counter-measures, from that a decision is determined in relation to security of certain state informative resource in case of possible realization on him of attack, list of attacks that can be realization on assets.

STATE INFORMATION RESOURCES IN THE FIELD OF AIR TRANSPORT SYSTEM OF UKRAINE: TERMS AND DEFINITIONS

Modernization of air transport infrastructure in line with international requirements is an important part of the development strategy of our state at the world market. According to statements of the World Economic Forum; one of the bases for the state development at this market is usage of information technologies in key areas of its life activity; especially in aviation. So; today protection of state information resources (SIR) in the field of air transport system of Ukraine is one of the main priorities of our state in the area of ​​its national safety provision. However; conducted analysis of existing literature in the field of SIR of air transport system of Ukraine shows the absence of the given resources classification for air transport. In addition; a legal document about definition of air transport system SIR and its composite parts hasn’t been developed yet; as well as the place of the Ukrainian segment of the given electronic resources in the global space of objects identifiers hasn’t been determined. That’s why; on the basis of conducted researches the question of SIR definition in the field of air transport has been considered for the first time in the article. The actuality of further development of this question in Ukraine for its national safety is shown. The structure of the air transport system of Ukraine is presented. It was conducted the legal analysis; on the basis of which the definition of state information resources of air transport system of Ukraine has been formulated.

The methodology of analysis of risks of tree that identifiers the state informative resources

In the article the methodology of analysis of risks of tree of identifiers of state informative resources is shown. The actually place of analysis of risks of the informative safety at the state level is not certain, that stipulates the actuality of the realization of researches after this subject. This methodology is built on the basis of the first offered by the author two methods : the method of determination of level of risk of application of certain countermeasures in relation to certain resources, which will realize the methodology of “double three of defence” presented by the author before; the method of clusterization of risks on the basis of the transition shorting of binary relation of assets, which allows by division after corresponding α- by levels to get the clusters of state informative resources, which are grouped after the levels of risk. After that there is a possibility to trace the order of association in the clusters of state informative resources for their further analysis that can be conducted by the further receipt of optimal α- level, below which a risk is possible. The second method is logical addition of the first, thus at the evaluation of risks of informative safety a sufficient condition is the use only of the first method.

Information resources: national and state, content, concepts

The article deals with the notion of information resources, state information resources, national information resources. The author also considers the security of the national information resources and information technologies that is one of the most important factors of the state national interests ensuring.

Web site accessibility, usability and security: a survey of government web sites in Kyrgyz Republic

The information in government web sites, which are widely adopted in many countries, must be accessible for all people, easy to use, accurate and secure. The main objective of this study is to investigate the usability, accessibility and security aspects of e-government web sites in Kyrgyz Republic. The analysis of web government pages covered 55 sites listed in the State Information Resources of the Kyrgyz Republic and five government web sites which were not included in the list. Analysis was conducted using several automatic evaluation tools. Results suggested that government web sites in Kyrgyz Republic have a usability error rate of 46.3 % and accessibility error rate of 69.38 %. The study also revealed security vulnerabilities in these web sites. Although the "Concept of Creation and Development of Information Network of the Kyrgyz Republic" was launched at September 23, 1994, government web sites in the Kyrgyz Republic have not been reviewed and still need great efforts to improve accessibility, usability and security.

CLASSIFICATION OF THREATS TO STATE INFORMATIVE RESOURCES OF TECHNICAL DIRECTION. METHODOLOGY OF CONSTRUCTION OF CLASSIFIER

In the article the continued subjects of construction of classifier of threats to the state informative resources, methodology of construction of which by authors was offered before. Some modern theoretical and practical approaches to the decision of normatively-legal, organizational and technical tasks for realization of the process of defence of the state informative resources are the objects of research in the previous works . The conducted analysis of publications on the subjects of the article shows that the considerable attention was always paid for research of technical direction of defence of informative resources, but in the classifier of threats offered by authors the technical aspiration was not distinguished in the separate phenomenon. Certain threats of technical aspiration and an example of their classification is made. The result of the further improvement and expansion of methodology of construction of classifier of threats of the state informative resources is the development of classifier of next wide class of threats – threats of technical aspiration. Completion of creation of classifier of threats is carried out to the state informative resources, which on the whole contains the threats of normatively-legal, organizational and technical aspiration.

CLASSIFICATION OF THREATS TO STATE INFORMATIVE RESOURCES OF NORMATIVELY-LEGAL ASPIRATION. METHODOLOGY OF CONSTRUCTION OF CLASSIFIER

In the article the analysis of their last researches and publicationson the subjects of construction of methodologyof classifier of threats of state informative resources generalizedby the authors is conducted. It is indicated thatthe method of «double three of security» offered by authorsis the fundamental for forming of «Classifier ofthreats of state informative resources» which is formed onthe basis of the two platforms of security. The first platformof informative safety consists of elements which aresubject to security (properties of information): confidentiality;integrity; availability. The second platform of informativesafety consists of components which realize thesystem of security (methods and facilities): normativelylegal;organizational; technical. The place of threats ofstate informative resources of normatively-legal aspirationin the general system of classifier is shown. Clarificationof semantics of classifier taking into account division ofthreats into strategic and tactical is carried out. Strategicthreats concern the questions of national security, absenceor non-fulfillment of the special purpose programs ordoctrines, weakening of branch intercommunications oforgans of state and legislative power and others like that.Tactical threats directed to the informative systems oftreatment, storage and transmission of state informativeresources. Certain threats of normatively-legal aspirationwith taken into account experience of the authors, existentnormatively-legal base and other information sourcesare defined. For the realization of further codificationevery threat is attributed to the certain parameters: accordingthe source of threat; in relation to informationholding object; by the nature of threats; by the structureof influence; by the level of influence. The ways of furtherresearches which must be aimed at determination ofthreats of organizational and technical character are set.Directions of further researches are set, the necessity offurther perfection of normative base with the purpose ofsecurity of state informative resources is indicated on.

PRINCIPLES OF COMPLEX SYSTEMS OF PROTECTION PUBLIC INFORMATION RESOURCES

The concept of the complex system of protection of state informative resources is entered in the articles. On the basis of principles of informative safety, general principles of construction of the systems of protection of information and taking into account basic principles the constructions of automatics system, generalized and the formed basic principles of construction of the complex system of protection of state informative resources. Offer is generalized flow diagram of protection of state informative resources.

(Identification and Classification of Objects of Accounting and Attributes of Objects of Accounting in the State Information Resources)

Russian Abstract: Данная работа – результат исследования по определению подходов к упорядочению деятельности государства по ведению государственных информационных ресурсов.В рамках работы:Исследованы существующие подходы к понятию и рассмотрено значение государственных информационных ресурсов;Исследованы виды и порядок функционирования государственных информационных ресурсов;Рассмотрены существующие подходы к понятию и определению видов объектов учета государственных информационных ресурсов;Исследовано понятие объектов первично-правового учета государственных информационных ресурсов как особого вида объектов учета государственных информационных ресурсов;Исследовано понятие и возможные виды атрибутов объектов учета государственных информационных ресурсов;Сформулированы предложения по внесению изменений в действующее законодательство Российской Федерации с целью оптимизации функционирования государственных информационных ресурсов.English Abstract: This work - the result of a study to identify approaches to regulating the activities of the state to conduct public information resources.As part of the work:We studied the existing approaches to the concept and discussed the value of the state information resources;Studied species and the functioning of the state information resources;The existing approaches to the concept and certain accounting items of state information resources;Researched the notion of objects of primary legal registration of state information resources as a special type of accounting items of state information resources;We studied the concept and possible types of attributes of objects of accounting for government information resources;We made proposals for amendments to the current legislation of the Russian Federation in order to optimize the functioning of the state information resources.

METHOD OF CRITICALITY LEVEL ASSESSMENT FOR CRISIS MANAGEMENT SYSTEMS

Crisis influence on the security level of state informationresources, different organizations and whole state is veryserious. Crisis can stop system development that comesunder its influence and also it can crush the system in thebud. To prevent this influence the adequate (to threatslevel) measures and security means must be taken and itdefines the importance of current situation criticality assessment.There is no generally accepted universal criteriaand integrated parameter for criticality level assessment ofcrisis. That’s why defining of criticality level assessmentfor incident is actual and important scientific task. In thepaper the set of parameters for criticality level assessmentof crisis was introduced and also method for defining thecriticality level of crisis with expert approach and fuzzysets theory was proposed. These don’t require the statisticaldata gathering and processing. Besides the defazificationprocedure for parameters was described and on itsbase indicator of criticality level was built.

Development of state information resources as a means of minimizing the risks of inefficient use of agricultural land fund

Development of state information resources as a means of minimizing the risks of inefficient use of agricultural land fund

Government information resources threat: terms and determinations

The analysis of the existent normatively-legal and Legislativeproviding, domestic and international standards ofindustry is conducted “Information security”. Directionswhich regulate the question of concept threat are consideredin detail, threat to informative safety, threat of information.An analytically-legal analysis on the basis ofwhich more complete concept over of threats is broughtto the state informative resources and attack on stateinformative resources is conducted. Defects are certainand absence is set in general lines approach (methodologiesof construction) of the systems to forming of modelof violator and model of threats to the state informativeresources on the base of domestic and international requirementsand standards.

METHODOLOGY OF CONSTRUCTION OF CLASSIFIER OF THREATS TO STATE INFORMATIVE RESOURCES

On the base of the conducted analysis and research of the existent normatively-legal and Legislative providing, domestic and international standards of industry "Informative security" the question of approach of the systems is considered and the methodology of construction of general "Classifier of threats to the State informative resources" is presented. Authors are offer methodological approach, in relation to forming of classifier of threats to the state informative resources on the base of the offered method of so-called : the "Double three of defense". The informatively-analytical model of method of "double three of defense" is offered, as basis of forming of methodology taking into account the constituents of process of defense of informative resources. It is based on a modern domestic and international normatively-legal base and own scientifically-professional experience, principal conceptual items or component realization of process of "Informative security. Basic conceptual approaches of classification of threats of state informative resources (after character, type, aspiration, methods of code of threats, and others like that) are presented, the types of threats to the state informative resources of normatively-legal aspiration are exposed more in detail. Examples of classification and methods of code of threats to the state informative resources of normatively-legal aspiration are made.

Legal aspects of the state information resources system formation

In the paper analysis of the existing regulatory and legislative support, domestic and international informatization industry standards of society and the state has been conducted, are considered in the following article. The article considers the main questions of regulating the contents and definition of information resources, national and state information resources. The comparative analysis of informative filling and the state information resources organization technology is carried out, and also the developed system and the most widespread classifications of information resources of the state enterprises, organizations and establishments are regarded. Based on these conducted researches provided an expanded definition of state information resources, their roster, the depositary (including electronic) and the general system of the state which unites them.

MODEL SECURITY THREATS VIDEO INFORMATION RESOURCES SYSTEMS OF VIDEOCONFERENCING

This article is devoted to assessing the security video information resource videoconferencing specialized control systems. The video data used to control processes and decision-making in the operation of public authorities; acquires the status of state informative resources. To analyze the security of this information resource are encouraged to apply security features model CIA (confidentiality; integrity and availability). To assess the formation and approaches to ensure information security video information resource videoconferencing requires to analyze possible violations of video sources with mandatory identification of security threats; the factors contributing to their manifestation and vulnerabilities. The basis of the analysis of information security threats is the development of threat models. The purpose of this paper is the formation of a model of security threats video information resource with video conferencing for core government. It is shown that the modeling of security breach is advantageously carried out by analyzing the interaction of a logical chain "threat - a threat - the method of implementation - vulnerability - consequences"; followed by classification; analysis and evaluation of sources of threats; vulnerabilities (factors) for each category of information security. Formed a generalized threat model video information resource videoconferencing. All security threats classified into three main groups according to their origin: threats of actions subject access; threats of technical means; threats resulting from natural sources. The developed model of video information resource security threats videoconferencing enables analysis of vulnerabilities and security threats in the implementation of relevant control systems under various conditions and modes of operation of video conferencing for a specific category of information security - confidentiality; integrity; availability; followed by identifying the most significant (actual) threats.