Information Security Strategy Research Articles

Information Security and Privacy Protection Strategies in the Process of Electronic Archiving

In the era of digital transformation, electronic archiving plays a pivotal role in preserving and managing vast amounts of information. However, as organizations increasingly rely on electronic archives, ensuring robust information security and privacy protection becomes paramount. This paper proposes a comprehensive framework for enhancing information security and privacy protection strategies within the electronic archiving process. Drawing upon insights from the fields of cyber security, data privacy, and archival science, our framework addresses key challenges and offers practical solutions to safeguard sensitive information throughout its lifecycle. Through a synthesis of existing literature, case studies, and expert interviews, we identify critical vulnerabilities and propose proactive measures to mitigate risks associated with unauthorized access, data breaches, and privacy violations. Our framework integrates technical controls, policy guidelines, and organizational practices to establish a resilient architecture that fosters trust, integrity, and confidentiality in electronic archiving systems. By adopting our proposed strategies, organizations can strengthen their defiance mechanisms and uphold the principles of information security and privacy in the digital age.

Information security in the Republic of Moldova in the context of the European integration process

In this article, the author analyze the information security phenomenon of the Republic of Moldova in the context of the European integration process of our country, in the conditions of the war started by Russian Federation in Ukraine. It is highlighted that at the present time, the Republic of Moldova does not have sufficient protection of the public sector and the private sector against incidents, risks and threats related to the security of networks and IT systems, therefore in the context of the obligations assumed by the Republic of Moldova with reference to securing information in the context of the European integration process, a legal basis was created. The author mention that the phenomenon of Russian media propaganda represents one of the main challenges for the information space of the Republic of Moldova. In conclusion, the author emphasize that informational threats threaten the stability, national and political security of the state, and informational aggressions in the chain can constitute an informational war, in which the specialized information services froabroad foreign countries. Ensuring information security requires a joint effort between intelligence services, academic environments and non-governmental organizations. The purpose of the information security strategy of any state is to legally correlate and systematically integrate the priority areas with responsibilities and powers to ensure information security at the national level, intended to protect the sovereignty, independence, territorial integrity of the state.

To enhance customer (or patient) experience based on IoT analytical study through technology (IT) transformation for E-healthcare

Over the past few decades, there were drastic changes in information technology across all the domains except healthcare. A new era of Information Communication Technology (ICT) has grown to higher potential by implementing eHealth systems to improve healthcare quality and simplify the problems and challenges health professionals and customer/patient have faced. The purpose of this qualitative, multiple case study was to explore information technology transformation for eHealth, which provides a broad scope to pursue research on how Information Technology (IT) strategy and implementation in eHealth using the latest technologies strategies to implement advanced eHealth systems. These strategies and implementation can provide cost-efficient and effective services to customer/patient instantly. E-Health combines medical information, public health, healthcare services, data delivery, and data security strategies through the internet using the latest web/mobile-based and big data technologies by providing simplified and instant access to customer/patient information. Due to the continuous and advanced technology transformation phase, healthcare industries are still migrating their legacy and outdated eHealth systems and applications to provide a better scope of experiences to their customer/patient. In this research, achieving effective and efficient experience is generated through IoT Sensors as it gets generalized into several different areas of classifications specific to the latest information technology trends, such as the role of smart portal technologies, cloud migration, patient data privacy and security, electronic health records (EHR), cloud infrastructures, internet of things (IoT), big data, and deep learning strategies, eHealth usability, and accessibility.

Modern approaches to information security: analysis of intrusion detection, firewalls and auditing in the context of organizational data protection

Today’s business environment presents organizations with growing information security challenges. The threats posed by cyber-attacks and the leakage of sensitive information require effective and innovative approaches to data protection. This paper explores a combination of tools and techniques, including intrusion detection system (IDS), firewalls, and information security auditing, as key elements of organizational data protection. The paper provides a detailed overview of each of these components and discusses their roles in information security. For an intrusion detection system, its ability to detect and respond to different types of attacks in real time is investigated. For firewalls, consider how they restrict access to network resources and regulate traffic. Finally, information security audits act as a means of assessing the effectiveness of security measures and identifying weaknesses. Statistical data and best practices are presented to support our recommendations. This article discusses the integration of these systems in a comprehensive information security strategy and provides tips for maximizing data protection in today’s digital world.

COUNTERING RUSSIAN DISINFORMATION AND PROPAGANDA IN THE UKRAINIAN INFORMATION SPACE (ON THE EXAMPLE OF THE ELECTRONIC RESOURCE OF THE CENTRE FOR COUNTERING DISINFORMATION AT THE NSDC OF UKRAINE)

The Russian disinformation in the information space of Ukraine is analyzed in the article. Using the example of the electronic resource of the Centre for Countering Disinformation at the National Security and Defense Council of Ukraine, the author examines the legislative principles and practical tools for implementing the Information Security Strategy of Ukraine. Three areas of work of the CCD in the field of detection, analysis and disproval of disinformation and propaganda messages that pose a direct threat to the national security of Ukraine are highlighted. The information aspect of the CCD’s activity was studied It informs about events such as seminars and trainings. Particular attention is paid to the analytical direction of work, which consisted of researching various processes, phenomena and theses of Russian propaganda. The third area of work is defined as educational with explanatory and reference materials. It was concluded that the materials can`t be used to prove the existence of a comprehensive and integrated measure to combat propaganda. There are attempts to systematize and summaries anti-Ukrainian propaganda, and to spread public understanding of information risks and impacts. A strong feature of the approach taken by the CCD is a successful attempt to analyze the content of propaganda messages, develop methods for refuting them, and work to prevent disinformation. The significance of the subject and unresolved problems give an opportunity for further studies and has prospects for the future.

An Investigation of the Factors That Influence Information Security Culture in Government Organizations in Bhutan

ABSTRACT Organizations make large investments to secure data and networks, but information security breaches as a result of insiders continue to rise. One possible contributor to this is poor information security culture. This study investigated the key factors that contribute to effective information security culture in government organizations in Bhutan and how information security culture influences employee security behavior. A research model was developed for the study based on an analysis of the information security literature. Data was collected using an online survey of 181 government employees. Senior management support, information security policy, training and awareness campaigns, interpersonal trust, and job- versus employee-oriented organizational culture were all found to influence information security culture, and information security culture contributed to information security behavior. The study extends understanding of the roles of trust and different dimensions of organizational culture in improving information security culture and behavior. The findings should help government policy makers and information security practitioners when developing information security strategies and programs.

Analysis of Financial Data Risk and Network Information Security by Blockchain Technology and Edge Computing

To solve the problem of computer network security, this study creatively establishes a new information security (IS) strategy recommendation system and a cooperative intrusion detection system (CIDS) based on blockchain (BC) and edge computing (EC) technologies. The innovation lies in the proposal of the real-time CIDS method. First, the related technologies and theories of the Bayesian network, deep learning (DL), and neural network (NN) are analyzed. Second, a real-time IS strategy recommendation system is constructed using NNs and expert systems, and CIDS is built on BC and DL networks. Finally, experiments compare recurrent NN and long-short term memory (LSTM). The research results reveal that the accuracy of LSTM can reach about 93%. The comparison between the single intrusion detection system (SIDS) and CIDS denotes that CIDS is better than SIDS in detection accuracy, and the specific performance is 97.54% > 91%. The proposed model based on business continuity management can help enterprises better protect financial data and establish a complete protection system of network information security (NIS). In this study, a CIDS with good performance is obtained, which lays a foundation for the further development of the NIS.

Analysis of computer network information security and protection strategy

Analysis of computer network information security and protection strategy

Information security communications strategy as a prerequisite to counteracting hybrid warfare: world experience

The need for innovative tools to counter hybrid threats makes this study relevant. Professional cybersecurity can be proactive and prevent security threats; moreover, its combination with a professional communications strategy can serve as a countermeasure to hybrid warfare and enemy attacks. The article aims to provide a comprehensive comparative analysis of the information security strategies of Ukraine, Kazakhstan, and the European Union, determine the availability of communication strategies for cybersecurity in these countries, and suggest recommendations for developing or improving information security communications strategy. The study examines the current state of information security in the Republic of Kazakhstan, Ukraine, and the European Union. As a part of the study, the authors applied such methods as analysis, systematization, and comparison. The result of the study is the recommendations for the development of information security communications strategies.

The Evolution of Information Security Strategies: A Comprehensive Investigation of INFOSEC Risk Assessment in the Contemporary Information Era

In the contemporary era marked by the extensive utilization of data, information systems have been extensively embraced by global organizations and also hold a pivotal position in national defense and various other domains. The growing interconnectedness between individuals and diverse information systems has resulted in an intensified emphasis on the evaluation of potential risks. The mitigation of these dangers extends beyond simple technological solutions and includes established standards, legal structures, and policies, adopting a complete approach based on safety engineering concepts. This study aims to develop a robust framework for the harmonization of Information Technology Security Standards. It will explore prevalent techniques for conducting risk assessments and differentiate between quantitative and qualitative approaches to evaluation. Moreover, this study illustrates the combination of quantitative and qualitative evaluation methodologies, providing a comprehensive framework for the analysis and design of risk assessment. In addition, this study advances our understanding of INFOSEC risk assessment and contributes to the advancement of more efficient information security strategies by sharing global perspectives, addressing challenges in classification, clarifying the incorporation of Information Security Management Systems (ISMS), and highlighting the significance of Artificial Intelligence in the domain of Information Security (INFOSEC).

The Role of Library as a Social Institution in the Development of Information Security

The purpose of the article is to determine the functions of the libraries of Ukraine in the direction of the formation of information security of the state. The research methodology consists in the application of general scientific and special research methods: analysis, synthesis, generalisation, systematisation of materials, induction, and deduction. Scientific novelty. The views on the content of the concept of "information security" of foreign and domestic specialists were analysed. It was determined that "fakes" are only one of the types of information threats. The types of information threats have been established and the role and functions of library specialists have been determined in accordance with each of them in terms of preventing the occurrence and spread of inaccurate information. The main aspects regarding the formation of information security strategies by libraries of higher education institutions of Ukraine are considered. Conclusions. Information security is an important component of library activity. The entire set of measures is important for ensuring the security of information in the library and increasing users' trust in the library as a reliable source of information. To do this, the following practices should be used: protection of the network and library databases (containing not only metadata, but also full-text documents) from unauthorised access: installation of firewalls, anti-virus software, regular software and operating system updates; protection of confidential information: encryption of data, control of access to information, regular updating of passwords and verification of the security of third-party services; data backup: providing regular data backup to restore information in case of data loss or damage; employee training: training employees in the rules of information security, setting out the security policy, organising trainings and seminars. Keywords: library, information security, information threats, "fakes", unreliable information, information protection, social networks, messengers, information gatekeeper, blockchain, sentimental analysis.

Multi-server web platforms: information security strategies

Exploring information security strategies specifically tailored for multi-server web platforms, this topic delves into the critical realm of safeguarding sensitive data and ensuring uninterrupted service availability. Multi-server web platforms often involve complex infrastructures, distributed systems, and diverse components, presenting unique challenges for security.

Cooperative governance mechanisms for personal information security: an evolutionary game approach

PurposeThis paper aims to investigate the cooperative governance mechanisms for personal information security, which can help enrich digital governance research and provide a reference for the formulation of protection policies for personal information security.Design/methodology/approachThis paper constructs an evolutionary game model consisting of regulators, digital enterprises and consumers, which is combined with the simulation method to examine the influence of different factors on personal information protection and governance.FindingsThe results reveal seven stable equilibrium strategies for personal information security within the cooperative governance game system. The non-compliant processing of personal information by digital enterprises can damage the rights and interests of consumers. However, the combination of regulatory measures implemented by supervisory authorities and the rights protection measures enacted by consumers can effectively promote the self-regulation of digital enterprises. The reputation mechanism exerts a restricting effect on the opportunistic behaviour of the participants.Research limitations/implicationsThe authors focus on the regulation of digital enterprises and do not consider the involvement of malicious actors such as hackers, and the authors will continue to focus on the game when assessing the governance of malicious actors in subsequent research.Practical implicationsThis study's results enhance digital governance research and offer a reference for developing policies that protect personal information security.Originality/valueThis paper builds an analytical framework for cooperative governance for personal information security, which helps to understand the decision-making behaviour and motivation of different subjects and to better address issues in the governance for personal information security.

State information security strategies in conditions of hybrid threats

Hybrid information threats under the conditions of modern development of digital technologies are currently becoming one of the major issues for a modern democracy. The amount of damage that hybrid threats bring to the world economy contributes to the establishment of effective legal mechanisms to combat them. The purpose of the study was to single out the information security strategies under conditions of hybrid threats, including the spread of disinformation and fake news. The application of the comparative analysis method mad it possible to identify the gaps in information security strategies for countering hybrid threats. The strategy of information security in the conditions of hybrid threats is a coordinated action plan aimed at countering and fighting hybrid threats to safeguard cyberspace and preserve a democracy. Information security against hybrid threats is based on such cornerstones as: availability, confidentiality, integrity of information data, and safety. Enhancement of information security under the conditions of hybrid threats should be carried out at the expense of digital transformation, increasing the level of digital literacy of society and establishing a fair responsibility measure for a purposeful spreading of disinformation. The perspective of further research is addressing information security strategies as well as elaborating practical guidelines for the formation of a secure information space.

Colour image steganography through channel transformation approach

The interest in information security strategies is expanding due the quick expansion in the use of media content and transmission over the web employments. Accordingly, there is a need of special embedding procedure for steganography. The creator presents an original reversible data hiding (RDH) algorithm for colour pictures that further develops the inserting execution by applying a channel transformation function and a versatile expectation blunder extension prediction error expansion structure. The proposed calculation will bring the first colour picture with no information misfortune from the inserted picture (which is unique in addition to target picture). The evaluation is done here at the zero for the given base place for the histogram that marginally changes the pixel esteems for inserting the information. It can insert more information when contrasted with the majority of the current data hiding calculations. A hypothetical confirmation and various examinations state that the embedding capability of the proposed model which consistently is further noteworthy in comparison with other reversible data hiding techniques. The calculation has been applied to a wide scope of various colour pictures effectively. Some exploratory outcomes are introduced to show the legitimacy of the calculation.

Information security of the domestic and global community

The article examines the state of information security in Ukraine in the conditions of Russian military aggression. The possibilities of realizing the goals specified in Ukraine's Information Security Strategy under martial law conditions are analyzed. It is shown that Ukraine's national interests require favorable conditions for the country's political development. Thus, the interests of the individual consist in the actual provision of political rights and freedoms of citizens, society needs to strengthen democracy, and the interests of the state are expressed in the need to effectively protect the constitutional system of sovereignty and territorial integrity of the country, establish, and maintain political stability, including the strength of state power and its institutions. Based on Ukraine's national interests, strategic and current tasks of the state policy on ensuring information security are formed in the information sphere. Practical information activities have been proven to improve the state's efforts to resolve crises peacefully significantly. Conversely, ignoring informational factors and often deliberately altered information can provoke the most radical attitudes and outbursts of hostility, leading to catastrophic consequences. It is argued that the use of information technologies by the military has opened new opportunities for ensuring the state's defense. Possession of information resources and their protection in the military sphere has become the same indispensable attribute as weapons, ammunition, transport, etc. Ukraine's victory in the information conflict during the war with russia will contribute to achieving its strategic goals. It is substantiated that Ukraine's Information Security Strategy reflects the state's interests, which are expressed in the need to effectively protect the constitutional system of sovereignty and territorial integrity of the country and establish and maintain political stability, including the strength of state power and its institutions. The analysis of the implementation of the Strategy's goals showed that this process continues despite all the difficulties of martial law. Keywords: information security, Information Security Strategy of Ukraine, national interests of the state, information technologies, information struggle.

Digital Health Information Systems in the Member States of the Commonwealth of Independent States: Status and Prospects

This paper examines the status of the development of national digital health information systems (HIS) in Commonwealth of Independent States (CIS) member states. Data for research were collected using a questionnaire adapted from the questionnaire of the WHO’s Third Global Survey on eHealth. The results showed that the digital transformation of HIS was occurring in all seven CIS member states (participating in the study), which were financed by different resources. Laws and regulations on electronic medical records (EMR) use were present in almost all participating CIS member states. Various international standards and classifications were used to support development and the interoperability of digital health information system (d-HIS), including International Classification of Diseases (ICD), Digital Imaging and Communications in Medicine (DICOM), ISO 18308, Logical Observation Identifiers, Names, and Codes (LOINC), Systematized Nomenclature of Medicine Clinical Terms (SNOMED CT), and ISO TC 215. Several CIS member states had adopted a national information security strategy for the safe processing of both personal data and medical confidential information. The digital transformation of healthcare and the Empowerment through Digital Health initiative are taking place in all CIS member states, which are at different stages of introducing electronic medical and health records.

МУЛЬТИДИСЦИПЛІНАРНЕ ЗАБЕЗПЕЧЕННЯ МЕДІАОСВІТНЬОЇ КОМПЕТЕНТНОСТІ ТА НАВИЧОК МЕДІАГРАМОТНОСТІ

<p><strong><em>The purpose </em></strong><em>of the research<strong> </strong>is to outline a multidisciplinary complex that can effectively provide media education and, accordingly, meet the program results of such competence as media literacy. </em></p><p><strong><em>Research methodology</em></strong><em>. Processing the the background materials for this paper, we applied a set of theoretical and empirical methods, including analytical-synthetic method, which allowed us to systematize scientific, educational, pedagogical and journalistic literature on the subject. Also, using the descriptive method helped structure the necessary material to obtain an effective result, in our opinion. Thus, the inductive generalization of the subject field of media education and media literacy allowed us to develop a comprehensive approach to the formation of critical thinking, adherence to media ecology and relevant functioning for both individuals and society as a whole in the media landscape.</em></p><p><strong><em>Results</em></strong><em>. A structural approach to mastering the information broadcast in both traditional and modern media has been developed. It also has been proved that it is the multidisciplinary approach to media education that allows one to acquire self-reflection skills, critical analysis, and the development of socio-cultural consciousness, which are the basis of the information security strategy, reflected, to some extent, in the Law of Ukraine «On Media».</em></p><p><strong><em>Novelty</em></strong><em>. As a result of the study, the basic provision of media education, in particular through psychology, cultural studies, computer science, etc. is proposed, which allows all segments of the population to acquire media literacy skills, besides psycholinguistics and semiotics being considered as professional approaches to developing media education competence.</em></p><p><strong><em>Practical significance</em></strong><em>. The results of this work may be applied mainly for structuring educational and methodological complexes in higher education institutions providing such a discipline as media literacy, as well as by representatives of the media community for improving their own media competence.</em></p><p><strong><em>Key words</em></strong><em>: media education, media literacy, media culture, psycholinguistics, communication, manipulation, critical thinking.</em></p>

Tunable Afterglow System via Controllable Photoenergy Storage and Release.

Afterglow luminescence has garnered significant attention due to its excellent optical properties. Currently, most afterglow phenomena are produced by persistent luminescence following cessation of the excitation light. However, it remains a challenge to control the afterglow luminescence process due to rapid photophysical or photochemical changes. Here, we develop a new strategy to control the afterglow luminescence process by introducing pyridones as singlet oxygen (1O2) storage reagents (OSRs), where 1O2 can be stored in covalent bonds at relatively low temperatures and released upon heating. The afterglow luminescence properties, including afterglow intensity, decay rate, and decay process, can be tuned flexibly by regulating temperature or OSR structures. Based on the controllable luminescence properties, we devise a new strategy for information security. We believe that such an excellent luminescent system also holds remarkable potential for applications in many other fields.

Computer Network Information Security and Protection Strategy Based on Big Data Environment

This paper proposed a study on computer network information security and protection strategy based on a big data environment. The research purpose was to use big data technology to network information security protection technology and seek more efficient network information protection technology. The algorithm proposed in this article was a time-series network detection algorithm based on big data, which could improve the early warning rate of abnormal network information, reduce the early warning time, and improve the detection accuracy and interception rate of virus information. The results of this study could effectively show that big data technology had excellent performance in computer network information security protection, which also led to an advanced reform path for future network information security protection technology.