Search

Privacy concerns may influence many choices consumers make. However, their expressed concerns are sometimes inconsistent with their information-sharing and privacy-protecting behaviors. Many theories have been proposed to explain the paradoxical gap between privacy attitudes and behaviors. Part of the privacy paradox may be explained with two measures that have received limited consideration: impulsiveness and social desirability bias (SDB). Surveys of US adults in 2015 and 2022 included questions to measure several types of privacy concerns along with impulsive tendencies and SDB (N = 2729). Age, education, gender, race, income, and impulsive tendencies were linked with some privacy concerns. If people with above-average concerns also disclose personal information on impulse, it might explain part of the paradox. Large coefficients on the SDB measure suggest that individuals who adjust their responses to be consistent with social norms may also overstate specific privacy concerns. For these individuals, their high expressed concerns may be inconsistent with their privacy behaviors. When researchers try to explain consumer attitudes or actions that involve privacy, multiple privacy concern dimensions should be considered and demographics, impulsive tendencies, and SDB should be included in the models. [ABSTRACT FROM AUTHOR]

The article examines the legal basis for protecting information about personal and family life in the complex conditions of martial law, which provide for a number of specific restrictions and prohibitions defined by regulatory legal acts. It has been clarified that under martial law, the legal regulation of social relations objectively has certain peculiarities. In particular, it is possible to temporarily, for the period of the legal regime of martial law, restrict the constitutional rights and freedoms of a person and citizen, including those provided for in Article 32 of the Constitution of Ukraine, within the limits and scope necessary to ensure the possibility of introducing and implementing measures of the legal regime of martial law, which are provided for by the Law of Ukraine “On the Legal Regime of Martial Law”. Article 32 of the Constitution of Ukraine is considered in the context of guaranteeing a person’s right to non-interference in their personal and family life in order to determine the peculiarities of legal regulation of protecting information about personal and family life when introducing the legal regime of martial law. The peculiarities of legal regulation of social relations under martial law are studied. The state’s obligation to protect information about personal and family life is emphasized. Such protection involves creating a set of legal, administrative, organizational, technical, and other measures that ensure the preservation, integrity of information, as well as the proper order of access to information about personal and family life. In the context of this guarantee, three components have been identified that required concretization of content within the framework of the presented scientific study: information; personal life; family life of a person. During the study, the concept of “information” according to the Law of Ukraine No. 2657-XII “On Information” was taken as a basis. The content of the concept “personal life of a person”, a person’s right to personal life, a person’s right to the secrecy of personal life, a person’s rights to respect for their family life are considered. In the process of conducting the research, attention is focused on the fact that the legal regime of martial law cannot be used as an excuse for unreasonable restriction of personal rights. [ABSTRACT FROM AUTHOR]

Based on the analysis of current legislation, available scientific, journalistic and methodological sources, the article clarifies the content of the system of subjects of administrative and legal support of information security in Ukraine. It is proposed that the system of subjects of administrative and legal support of information security should be understood as a set of legislative, executive and judicial authorities, state, public and other organizations and associations, and citizens who may participate in administrative and legal support of information security in accordance with the legislation regulating relations in the field of information security. It is established that the system of subjects of administrative and legal support of information security includes a wide range of structures of both state and non-state affiliation. The first group (state entities) is represented by the State represented by the President of Ukraine, legislative, executive and judicial bodies, which, having different competencies in the field of administrative and legal support of information security, perform key tasks and functions in it. The second group (non-state actors) can be divided into two subgroups. The first one includes society represented by legal entities, namely, commercial companies and non-governmental organizations (educational institutions, research institutes, research and analytical centers, etc.) The second group includes individuals (citizens) who may be directly involved in ensuring information security, represented by specialists, experts, information security consultants, etc. It is proposed to: include all non-state actors in the mechanism for implementing the goals and objectives of the Information Security Strategy; make the widest possible use of the capabilities of non-state actors in this area, and therefore intensify the involvement of citizens, public associations, organizations, etc. in solving the problem of information security; create an Interagency Commission on Information Security within the structure of the National Security and Defense Council of Ukraine. [ABSTRACT FROM AUTHOR]

Copyright of IDP: Revista de Internet, Derecho y Politica is the property of Universitat Oberta de Catalunya and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

A personal daily communication is connected with giving and receiving a large amount of information. A common visit to a website can provide its owner with information about its users (cookies). A registration will provide the owner with a confidential information. In this view, it became necessary to protect a person and to regulate a separate subtype of such information called "personal data". The concept of "personal data" is not new for Ukraine. The Law "On Protection of Personal Data" was adopted in 2010, however, the practice of its realization shows that the subjects of relations related to personal data interpret it quite superficially. Thus, the owners and managers of personal data formally, without specifying the purpose and method of processing, notify the subject of personal data that his personal data will be processed. And the subjects of personal data give such consent without reading the procedure for personal data processing or the privacy policy. The probability that the personal database will be deleted after the termination of the legal relationship by the owner or manager is quite small. Due to inappropriate protection and control personal database are constant objects of leaks and thefts, which turn to other crimes, especially on the Internet. The article pays special attention to the research about the collection of personal data on the websites of Ukrainian political parties, because such personal data are sensitive and their processing should be carried out especially carefully. The leakage of personal data supporters of a certain political force may pose a physical danger to them in martial law conditions. The author concludes it is necessary to bring the national legislation on protection of personal data to the requirements of the General Data Protection Regulation and to strengthen the control over its compliance by increasing responsibility for violations of the legislation on the protection of personal data. [ABSTRACT FROM AUTHOR]

The rapid development of the Internet of Things (IoT) lacks a universal security mechanism for devices due to their diversity and hardware limitations. However, employing distributed networks, additional encryption, limiting unused data transmission channels, implementing collective device certification, using digital signatures, and filtering data packets can secure devices against classical attack scenarios. The paper examines the challenges and potential attacks on the security of IoT devices. For optimal security control in traditional networks, the use of software-controlled networks is recommended. Usage of fog computing reduces the risks associated with a central node, but other security risks remain. More comprehensive solution involves integrating blockchain with IoT devices. The paper reviews several existing systems that offer more comprehensive security but still have certain shortcomings, which the authors attempt to address in the proposed model. The proposed IoT network model using blockchain consists of multiple layers - a sensor and low-power device layer and a local blockchain network layer, which are combined into a cluster. Communication between layers is ensured by symmetric and asymmetric encryption, and the network operation rules can be regulated by smart contracts. Additionally, there is interaction between clusters, making the system scalable, decentralized, and secure. [ABSTRACT FROM AUTHOR]

The article argues for the need to enhance Ukraine's state modern information policy, identifying potential avenues for improvement of its effectiveness by drawing upon the experience of the United States. It is important to understand that the information policy of the state should be aimed at the formation of the state information space, at expanding and refining the legal framework for regulating social relations based on specific circumstances, dissemination and utilization of information, deepening of the political stability, and ensuring societal information security. Information policy ensures that information resources receive coordinated technological support, offers unrestricted access to them, and provides users with tools for effective information search, use, and transfer. It is essential that the effectiveness of information policy can only be achieved through consensus, involving all interested parties. It is crucial to understand that information policy in times of war entails a set of measures implemented by the state in collaboration with civil society institutions, aimed at regulating information processes and fostering the development of an information society where defense goals take priority. Consequently, a significant challenge arises from the absence of a legislative framework regulating information protection and counteracting new threats in the information sphere, and implements measures regarding responsibility for actions or organized activities that harm the information security of the Armed Forces of Ukraine. The state and civil society are provided with practical recommendations for creating conditions conducive to the development of an optimal model of state information policy, adaptable to various situations, including those under martial law.

In 1997, the US National Science Foundation recognized the need to unite research communities together to solve mutual problems, overcome challenges, future development and practical applications of cryptography and error correction coding. Recent works in this area are connected with turbo codes, which have a special ability to provide error correction characteristics of the information transmission close to theoretically obtained values. Besides, they are used for television (DVB-RCS, DVB-RCT), wireless local networks (WiMAX), software-defined radio systems, mobile (3G, 4G, Inmarsat) and space (CCSDS) communications etc. In this article is presented the crypto coding system based on turbo codes with secret keys used by interleavers. All calculations are performed during data encoding, which reduces the computational complexity of data pre-encryption. The necessary mathematical apparatus was presented, the security level of the communication system was estimated, a simulation of the error correction characteristics was performed, and multimedia information was processed. The working characteristics of the classical and proposed turbo codecs do not differ statistically. The results can be used in communication systems for various functional purposes.

Attention is drawn to the priority value of information among the objects of the national security policy of Ukraine. It is argued that information freedom requires careful state control and inclusion of information in the list of objects of national security policy. Information threats to state security are considered as a combination of conditions and factors that pose a danger to the vital interests of the state, society, and individuals through negative informational influence on the consciousness and behavior of citizens, as well as destructive impact on information resources and informationtechnical infrastructure. Two types of information attacks are distinguished based on the object of influence: 1) purely technical information attacks aimed at the functioning of the technical equipment of information systems; 2) influencing people's consciousness through the transmission of targeted information. Three main goals of information warfare are outlined: control of the information space and ensuring the protection of one's information from enemy actions; using control over the information space to conduct information attacks on the opponent; increasing the overall effectiveness of armed information functions. It is argued that in order to prevent the above-mentioned negative consequences, the following measures should be taken at the State level: 1) development of a system of continuous monitoring and analysis of information flows for timely detection of potential threats and response to them; 2) introduction of information literacy programmes among citizens to reduce vulnerability to manipulative information and fake news; 3) cooperation with international partners and exchange of experience in the field of information security to increase the effectiveness of measures and improve strategies to counter threats. These steps can ensure a high level of information security that will contribute to stability, security and protection of national interests. [ABSTRACT FROM AUTHOR]

The work deals with the problem of ensuring the security of information storage in various registers, including state ones. First of all, we focused on security against attacks aimed at changing information in the registry, which is a constant and real threat today. The method proposed by us to prevent such attacks on changing information in the registry is based on the use of results from a relatively new direction in the field of information technology – blockchain technology. We propose building a so-called cascade structure of registers on blockchains using one of the newest consensus protocols called Proof-of-Proof. Such a cascade structure of registers, with the correct parameters of its construction and use, provides all the properties of correct information storage, such as non-failure, immutability, sequence of placement in the register, and others. After formulating the basic idea of building a cascade registry, we present a list of problems that need to be solved so that the probability of success of a substitution information attack is negligibly small. [ABSTRACT FROM AUTHOR]

The article deals with the design problems of secure information networks. The process of introducing new information technologies into all spheres of social life is unthinkable without solving the issues of information security, which is structured in completely different but interconnected aspects. Modern progress in the field of global networks and multimedia tools has led to the development of numerous methods designed to ensure the safe transmission of information through telecommunications channels and their use for undeclared purposes, methods of synthesis of various information objects and the development of their new mathematical models. The mathematical apparatus used in the field of information security has so far remained rather limited. Until now, there is no single mathematical approach to the analysis and processing of data about information objects, information transmission networks and their design methods. Due to the lack of a single mathematical apparatus, until now there were no methods for conducting an a priori analysis of the properties of these objects, comparing different technologies of the functioning of communication systems, which in general deprived the possibility of a reasonable choice of the technology of the functioning of the communication network or the method of its design. Therefore, it is extremely relevant to ensure the possibility of automated analysis of the state and functioning of protected communication networks, including the analysis of the functioning of the information system as a whole, taking into account the possibility of the emergence of both natural and artificial channels of information leakage and various types of influences, automatic processing of the results of such leakage and influences, choosing the way to restore the network after an attack, as well as to solve the issues of synthesis and design of protection systems of communication information networks with the involvement of modern mathematical apparatus is the creation of a unified mathematical approach to the problem of assessing the state of communication information networks, which would avoid their heterogeneous and poor formalizability by means of a computationally simple analysis of only a certain group of mathematical parameters describing the functioning of protected communication networks. This work is dedicated to solving this urgent problem. [ABSTRACT FROM AUTHOR]

The object of the study is the process of ensuring security during data transmission through information channels. To ensure high-quality indicators of information transmission channels protection, it is necessary to periodically monitor and, when detected, close possible data leakage channels. The effectiveness of measures to protect transmission channels depends on the quality of checking the presence of possible, valid or hidden, data leakage channels. A significant number of signs of information leakage complicates the control process and leads to additional economic costs for the use of control equipment. Therefore, it is necessary to develop a method of synthesis of an information-analytical system for assessing the level of transmission channels protection. It is proposed to develop such a method on the basis of determining the dependence between control signs of the presence of information leakage channels. The proposed method allows to ensure the necessary level of security. The basis of the method for synthesis of the information-analytical system for assessing the level of information transmission channels protection is the equation of the associative connection between the control features. The presence of a connection between control signs indicates the presence of information leakage channels. This is due to the loss of characteristics (for example, voltage or signal strength) of the useful information flow due to the redistribution of data during transmission. The benefit from the application of the obtained results depends on the number of discovered and, accordingly, closed channels of information leakage. Implementation of the proposed method allows to automate the process of finding a data leak in transmission channels. The given research results can be useful in the development of software for expert decision-making systems based on the formation of knowledge bases about the relationship between control features. Implementation of the obtained results will increase the reliability and security of information transmission channels. [ABSTRACT FROM AUTHOR]

The article discusses information security in the system of an industrial enterprise. Attention is focused on the need to implement a continuous information security process to protect all information assets from leaks, theft and unauthorized disclosure, the main provisions of information security management standards are analyzed. Objective: To optimize the methods of software protection of modern industrial enterprises, as well as to reduce threats and vulnerabilities related to information security at enterprises. Method or methodology of the work: In the process of investigating the problem, analytical methods of analysis were used. Results: The need to use ISO/IEC 27001 standards and the PDCA (Plan-Do-Check-Act) model at industrial enterprises of high-tech sectors of the economy in order to reduce threats and losses of information security, identify critical factors that negatively affect business processes and the enterprises themselves. Practical implications: The results obtained can be used as a theoretical basis for existing assessments of information security tools and automated security systems at high-tech industrial enterprises in modern economic conditions.

Objective. In this paper, the main aspects of the operating conditions of the AS are considered, as well as the issues of standardization of the stages of the life cycle of the AS (creation, commissioning, maintenance, etc.) at the state level. In this subject area, the technological features of building an AS based on various technical architectures are briefly considered, since both foreign processors based on x86-64 architectures and processors of domestic development based on the Advanced RISC Machine architecture are currently applicable. The use of various components of the AS requires additional study in terms of ordering the composition and configuration of specific SPI. Since each processor has a multi-level architecture, this fact objectively complicates the possibilities for full security testing and detection of all vulnerabilities. Method. In the course of the work, the threats and vulnerabilities of individual components of the AS from the point of view of intentional and unintentional threats are considered. The information on the main state standards applied to ensure the protection of information in the AS at the present time is summarized. Result. The main features of the operating conditions of the AS are considered and it is determined that the vulnerabilities of the components are due to the imperfection of the procedures for developing and covering testing of hardware and software. It is determined that in order to protect information in the AS, it is necessary to build a multi-level protection system with state accreditation. Conclusion. Proposals are presented for the application of state standardization for the protection of information in the AS, taking into account the current and prospective threat landscape, including taking into account the design features (undeclared capabilities) of the components. Overcoming threats is possible with the creation of a multi-level information protection system with state accreditation.

Aim . Coverage of the problem of ensuring economic security in conditions of insufficient financing of information protection measures both from the state, which establishes requirements for the protection of restricted access information of various types, ranging from state secrets to personal data of citizens, and from organizations that implement these requirements.Tasks. Formation of proposals to overcome difficulties in the implementation of financial measures to ensure the protection of information in organizations in order to implement measures to ensure economic security.Methods. In this paper, using the methods of factor, statistical and quantitative analysis, statistical information in the field of financing information protection measures is considered, the parameters of financing some measures are estimated based on open data presented in the Unified Information System in the field of procurement, as well as the provisions of legal acts of the Russian Federation in the field of information security and public-private partnership and an attempt has been made to prove the existence of problems in the financing of information protection measures.Results . It is proved that ensuring the economic security of nuclear power plants (on the example of the Russian Federation) on the basis of financial support for information protection measures is one of the most pressing problems in the modern digital world. Every year, threats to the security of information systems are becoming more complex and sophisticated, requiring organizations and companies to make additional efforts and resources to effectively counter. Practical ways of solving the problem of financing information protection measures in order to ensure economic security are proposed, using both the possibility of expanding public-private partnership in this area and other measures that organizations can directly use.Conclusions . Despite the need to ensure economic security, many organizations face financial difficulties in implementing information security measures. Limited budget funds, improper allocation of resources, inefficient financing strategy, difficulties in finding and purchasing effective Russian software and technical means of information protection in the conditions of sanctions impact on the Russian Federation – all these are obstacles to the successful provision of economic security.

Information security in the automated production control system at PAO Koks is discussed. Organizational and engineering aspects of security required to ensure accessibility, integrity, and confidentiality of data in the critical information infrastructure are noted. [ABSTRACT FROM AUTHOR]

Due to the high affinity with water molecules, amide compounds are easily contaminated by moisture; therefore, the water interference effect cannot be totally excluded from the amide‐involved reactions. Thus, the perfect solution is to use the interference effect but not shield it in a real application. In this work, we introduced different contents of sodium acrylate (AAS) to scavenge water from the monomers of N‐isopropylacrylamide (NIPAm) when copolymerized with TPA‐Vinyl‐4CN. Herein, water molecules play a role as nucleophilic reagents to attack highly active functional groups as –C=C–CN from TPA‐Vinyl‐4CN, leading to a blue emissive TPA‐Vinyl‐2CHO. From this study, we made a deep awareness of the interactions between three reaction partners of AAS and NIPAm as well as TPA‐Vinyl‐4CN. Our results clearly demonstrated the fact that water can be perfectly used and controlled by the water absorbent of AAS, developing a new approach to synthesizing multiple emission‐coloured polymers by using only one luminogen of TPA‐Vinyl‐4CN. [ABSTRACT FROM AUTHOR]

Purpose: Improving the security of cloud technologies. Analysis of information protection mechanisms in cloud environments and pointing out of their peculiarities. Searching for the most effective mechanism for protecting information, which is stored in cloud environments. Improving the security of cloud technologies will allow more people and organizations, for whom security is very important, to use such technologies. Due to the increase in the number of companies and institutions using cloud environments for the storage and exchange of internal data, there is a need for improved levels of security of this system. Methodology: The article examines the peculiarities of data protection mechanisms in cloud environments. The analysis is conducted and the main properties and functions are pointed out. These mechanisms are considered and the most effective one is chosen. Findings: The main mechanisms of protection, such as encryption, data protection during transmission, authentication and isolation of users, are researched. The peculiarities of these mechanisms are pointed out. Each of these mechanisms has strengths and certain risks of information loss. To better understand the principles of data protection mechanisms against dangers the system of demonstration the effectiveness of threats to certain types of data and mechanisms for counteracting dangers is presented. The protection mechanisms demonstrate the need to create a reliable system of security and protection of information in cloud environments. The use of cloud technologies for information storage must be accompanied by regular improvement of the security system, as well as the use of the most reliable mechanism. Scientific novelty: The presented mechanisms of protection can be the basis for the development of new ways to protect information in the cloud environment. It will allow more people to use cloud technologies without the risk of data loss. Practical value: According to the results of the analysis, the existing mechanisms for protecting data in the cloud environment are defined; the mechanisms for providing security to cloud technologies, building a scheme for user interaction, key management servers and a cloud server are compared. [ABSTRACT FROM AUTHOR]

In today's information world, the use of VoIP has become an attractive option for user communication. With the downward trend in paying for basic broadband services and the rapid increase in internet speeds, the use of VoIP should only continue to grow in popularity. However, as the use of VoIP increases, so do the potential threats to ordinary users. This article examines the peculiarities of organizing corporate VoIP telephony systems, highlights the main problems in information protection systems in VoIP telephony, and outlines ways to solve them. The development of methods for speech analysis and corresponding processing of natural language, which allows for creating more accurate and effective systems for detecting anomalous traffic and potentially dangerous communications, is especially relevant. With the continuous development of artificial intelligence technologies, the direction of using intelligent means for content analysis in the VoIP system is becoming interesting. A method for detecting anomalies in IP-telephony traffic, based on grouping VoIP messages through context-frequency analysis, is proposed. Additionally, a method for automated filling of the ontology of thematic messages in corporate IP-telephony systems is proposed, based on the formalized presentation of messages using tree-like structures and the description of interaction operations through tuple algebra. Furthermore, a software implementation for converting voice messages into text representations using the SpeechRecognition library for voice-to-text conversion in the Python programming language was created. Experimental studies of the proposed approaches were conducted, and a software subsystem for detecting anomalous messages based on the ontological approach was implemented in the current corporate IP-telephony system. [ABSTRACT FROM AUTHOR]

Due to the increasing cybersecurity threats, especially to a state's critical infrastructure, there is a growing need for the development and implementation of effective methods for assessing the level of cybersecurity. The critical infrastructure of a state (such as energy, transportation, medical facilities, etc.) is becoming increasingly dependent on information technologies. Security breaches in these technologies can have serious consequences for citizens' lives and health, as well as economic losses. Many countries are imposing various regulatory requirements regarding cybersecurity, such as GDPR in the European Union or NIST in the United States. This compels organizations managing critical infrastructure to actively seek and implement effective methods for assessing cybersecurity levels. The rapid technological progress leads to the emergence of new attack methods, necessitating the allocation of various resources (financial, human, time, etc.) to develop new, more effective means of enhancing cybersecurity. Assessing the level of cybersecurity enhancement will subsequently allow for evaluating the effectiveness of resources invested in security. The developed method for assessing the enhancement of cybersecurity levels of critical infrastructure objects of the state is based on a model of a characteristic system aimed at assessing the state of cybersecurity in Ukraine. It involves procedures for forming linguistic variables, interval fuzzification, building benchmarks, forming sets of inspection object characteristics, the primary measurement process, forming basic pairs and associative rules, and visualization of results. These are formalized into respective stages, enabling the implementation of the process of assessing the cybersecurity state of critical infrastructure inspection objects. The described method can become an effective tool for analyzing and evaluating the level of cybersecurity of the state's critical infrastructure with the aim of ensuring national security and protection against cyber threats. Further development should focus on building a system that allows for automating the process of assessing the enhancement of cybersecurity levels at inspection objects. [ABSTRACT FROM AUTHOR]

Copyright of Al-Ma'mun: Jurnal Kajian Kepustakawanan dan lnfonnasi is the property of UIN Saizu Purwokerto and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

In today's digital environment, where databases play a critical role in storing and processing important information for various spheres of human activity, protection against cyber threats becomes an extremely urgent task. This accordingly places new demands and responsibilities on organizations. Modern technologies not only facilitate access to data, but also threaten its confidentiality and integrity. The rapid and ever-growing challenges of cyber secu)rity require the development of effective strategies and innovative approaches to database protection that ensure the reliability and resilience of databases in the face of ever-increasing cyber-attacks and security breaches. The work deals in detail with the organization of effective protection of information stored in databases. The main methods of infor)mation protection in databases are analyzed, in particular data encryption, mechanisms of authentication, access con)trol and monitoring of user activity. Their advantages and disadvantages are defined, as well as the possible conse)quences for data in case of non-compliance with these protection methods. The article highlights the importance of constant monitoring and analysis of user activity for timely detection and response to possible data security threats in the database system. The importance of a comprehensive approach to protection, which takes into account the specifics of a specific organization and allows to ensure an effective level of data security, is emphasized. [ABSTRACT FROM AUTHOR]

The BYOD concept involves the use of personal electronic devices (laptops, tablets, smartphones) by employees of the organization for official purposes. The idea of such a concept appeared in the mid-2000s, but only recently it gained popularity. The reason for this is the growing dependence of business processes on services located on the Internet, advances in mobile device production, expanding devices' capabilities and increasing productivity, as well as the development of network technologies and cloud storage. Like any concept, BYOD has its advantages and disadvantages. The positive aspects of this approach to the organization of the work process include, in particular, convenience for the user and the possibility of remote work, which allows organizations to use the working time of employees more efficiently, increase the efficiency of solving various tasks and thus achieve an increase in labor productivity. The main problem associated with the implementation of the BYOD concept is ensuring the security of the organization's information system. The more freedom employees using personal devices have to interact with an organization's network, the more potential damage they can cause to it. The article examines information security threats associated with the use of BYOD and gives recommendations on reducing their negative impact on the organization. In particular, it is suggested to use NAC to manage network access; install MDM to manage the security of mobile devices; implement DLP to protect against information leaks; use reliable passwords with regular updates to prevent unauthorized access; install organization-approved anti-virus software on employee-owned devices; perform data encryption; set restrictions on downloading and installing programs; implement a comprehensive IT policy. [ABSTRACT FROM AUTHOR]

In the modern digital world, where a significant portion of our daily activities takes place online, cybersecurity becomes an integral component of national security for every state. Particularly crucial is the protection of critical infrastructure, which ensures the functioning of the economy, communications, and society as a whole. Consequently, the development and implementation of a system for assessing the improvement of cybersecurity posture for critical infrastructure inspection objects become an extremely pressing task for governments and organizations. The proposed structural model of the system for assessing the enhancement of cybersecurity posture for critical infrastructure inspection objects of a state, which utilizes a database of cybersecurity measures, rules and standards, as well as modules for generating current values, phase formation, and formation of LV, formation of inspection characteristics, and proximity parameters, will enable the evaluation of the improvement in the level of cybersecurity posture of critical infrastructure objects in a loosely formalized fuzzy environment. In this context, its implementation becomes a critically important step in ensuring the security of the state's critical infrastructure in the face of constantly increasing cyber threats. It contributes to enhancing readiness and resilience to potential cyber-attacks, which is an indispensable component of national security strategy. [ABSTRACT FROM AUTHOR]

This article presents issues that determine the protection of the security of the Republic of Poland against the threats posed by computer crime. In particular, it discusses cybercrime under Art. 268 of the Penal Code. The crime of obstructing the reading of information, regulated by Art. 268 § 2, provides for criminal liability of persons whose conduct prevents or significantly impedes the access of an authorized person to important information stored on an IT data carrier. In Art. 268 § 3 of the Penal Code, however, an aggravated type of crime is provided for, which involves causing significant property damage.

The subject matter of this article is the processes of increasing information security in communication systems to solve applied problems that are critical in the transmission of confidential data. The goal is to develop a multi-stage method for protecting information from unauthorized access, based on probabilistic encryption integration, error-correcting code, and error decorrelation. The tasks to be solved are as follows: to develop a probabilistic encryption algorithm that considers the entropy of the characters’ appearance in a message; to implement iterative coding with variable parameters of the information bits matrix; and to implement error decorrelation based on the generated matrix by interleaving information and check bits according to a given algorithm. Methodology: theory of signal communication and signal processing, theory of cryptography, theory of noise-resistant codes, probability theory, statistical analysis. The following results were obtained: a multi-stage method for protecting information from unauthorized access was proposed, in which at each step of data conversion, information secrecy is increased; probabilistic encryption was implemented, which considers the entropy of a discrete source of information when forming a space of random combinations; based on an iterative code with specified matrix parameters, an additional increase in the space of random combinations was implemented; error decorrelation reduces the multiplicity of errors in codewords and ensures mixing of bits according to a predetermined law. Conclusions. The scientific novelty of the results obtained is as follows: 1) an improved method of information protection from unauthorized access is proposed, based on probabilistic encryption integration, interference-resistant coding, and error decorrelation; 2) increasing information concealment is realized by eliminating the main shortcomings of probabilistic encryption, which did not take into account the entropy of the symbols of the open message; 3) it is proposed to form the space of random combinations taking into account the average probability of the appearance of a symbol in open texts, which will allow the output of a probabilistic cipher to form a stream of random combinations, which, according to its statistical properties, is close to the uniform distribution law; 4) further development of information protection methods based on interference-resistant coding and error decorrelation with encryption functions is received; 5) a further development of the statistical encryption method is the use of all redundant elements for both probabilistic encryption and interference-resistant coding.

Objectives. As the scope of personal data transmitted online continues to grow, national legislatures are increasingly regulating the storage and processing of digital information. This paper raises the problem of protecting personal data and other confidential information such as bank secrecy or medical confidentiality of individuals. One approach to the protection of confidential data is to depersonalize it, i.e., to transform it so that it becomes impossible to identify the specific subject to whom the data belongs. The aim of the work is to develop a method for the rapid and safe automation of the depersonalization process using machine learning technologies.Methods. The authors propose the use of artificial intelligence models to implement a system for the automatic depersonalization of personal data without the use of human labor to preclude the possibility of recognizing confidential information even in unstructured data with sufficient accuracy. Rule-based algorithms for improving the precision of the depersonalization system are described.Results. In order to solve this problem, a model of named entity recognition is trained on confidential data provided by the authors. In conjunction with rule-based algorithms, an F1 score greater than 0.9 is achieved. For solving specific depersonalization problems, a choice between several implemented anonymization algorithm variants can be made.Conclusions. The developed system solves the problem of automatic anonymization of confidential data. This opens an opportunity to ensure the secure processing and transmission of confidential information in many areas, such as banking, government administration, and advertising campaigns. The automation of the depersonalization process makes it possible to transfer confidential information in cases where it is necessary, but not currently possible due to legal restrictions. The distinctive feature of the developed solution is that both structured data and unstructured data are depersonalized, including the preservation of context.

Objective. Automated systems are widely used in production, and an important criterion for their reliability is information security. The aim of the study is to provide a balance between possible losses as a result of the implementation of threats and the cost of protection tools that reduce risks using neuro-fuzzy logic.Method. The developed model is based on the use of fuzzy logic.Result. A model of integrated information security risk assessment has been obtained, which can be practically applied for a comprehensive analysis of the effectiveness of organizing a protection system for automated systems operating in various fields of activity. The risk indicators of information security of an automated system, described with the help of linguistic variables, are revealed. Based on these indicators, information security risk assessments were obtained from the state of: software; technical support; information support; organizational and methodological support; the level of training and motivation of employees. The fuzzy production rules of the model are formulated to determine the integrated assessment of the information security of an automated system, providing a full account of all factors that have a significant impact on the level of security of an automated system.Conclusions. A feature of the proposed approach is the formalization of the assessment process, reducing the level of subjectivity in the formation of risk assessments.

In the process of transmission channels functioning, the results of the work of bodies for detecting and blocking information leakage channels are not sufficiently taken into account. Management of information protection channels is actually the collection and display of data followed by the assignment of influence on each information channel separately and is carried out in manual mode. In decision support systems, the tasks of identifying information leakage channels are not solved. There is a contradiction between the requirements for the automation of the management of information protection channels and the possibility of meeting these requirements at the expense of the available automation tools. Classical theory considers the decision-making process as a choice of one of many alternatives. The development of rational forms and methods of managing information protection channels should prevent threats and challenges. Therefore, the object of research is the process of ensuring security during data transmission through information channels. The main threats and challenges are man-made and natural cataclysms, terrorism, aggression by a number of states or individual groups of people, which are not taken into account in the complex in the decision-making system during the management of information protection channels. A structural diagram of information exchange based on the description of a weakly formalized process under conditions of non-stochastic uncertainty is proposed. It is proposed to use the logical-linguistic production model. For a hierarchically organized structure based on classification features, it is proposed to build a hierarchy tree that takes into account the relationships of partially ordered sets. The formed production rules for determining appropriate strategies for the planned detection of information leakage channels based on predicted values allow to proceed to knowledge processing for the synthesis of an automated decision-making system during the management of protection channels. [ABSTRACT FROM AUTHOR]

It is valuable to develop simple and environmentally friendly methods for converting biowaste into functional nanomaterials with multiple applications. However, there are few reports on the facile preparation of multifunctional carbon–metal nanocomposites based on biowastes and their application from sensing to information technology. Herein, we used fish scale-derived carbon nanoparticles (FSCN) as reducing agents to directly and facilely prepare multifunctional carbon–gold nanocomposites (FSCN-AuNPs) in one step. Our prepared FSCN-AuNPs have multisignal response capabilities and can be used for colorimetric and fluorescence quantitative sensing of Pb2+ and Cu2+ with detection limits of 86.29 nM (for Pb2+) and 53.74 nM (for Cu2+), respectively. Additionally, FSCN-AuNPs can detect Pb2+ in milk and serum, as well as Cu2+ in water and serum. The multisignal selective responses of FSCN-AuNPs can be converted into binary strings by setting thresholds, which were further applied to encrypt and hide two types of information (like text and two-dimensional pattern information). Overall, this research not only promotes the preparation and comprehensive application of multifunctional carbon–metal nanocomposites but also accelerates the cross-integration of molecular science, such as the integration of molecular sensing and molecular information science. [ABSTRACT FROM AUTHOR]

This paper reports a study aimed at determining the features of using information protection systems at financial institutions in order to improve the level of financial security. It has been proven that under the conditions of digitization of the business environment, information provision is the basis of financial security at both the macro and micro levels. Information has become a strategic resource that needs protection due to the spread of cybercrime. The level of efficiency of information provision and the level of financial security of Ukraine was determined, and the relationship between them was confirmed. Attention is focused on the need to improve these indicators. It has been proven that an effective information protection system enables economic entities to resist dangers and threats. It was substantiated that the intensification of the processes of digitalization of economic activity had created prerequisites for the growth of risks and threats to the integral, uninterrupted, protected circulation of information resources of financial institutions, which leads to huge financial losses. This requires improvement of existing information protection systems. A topology of information protection systems has been presented. An algorithm for building effective information protection systems of financial institutions was proposed, which includes system vulnerability assessment, system assessment for compliance with security standards, penetration testing, and application assessment. Its application would allow financial market entities to promptly respond to real and potential threats, increase the level of information security, and ensure financial stability. The results of the study could also be used by state and local authorities to devise the principles of financial security management at the macro level under the conditions of the digital economy. [ABSTRACT FROM AUTHOR]

The subject matter of this article is the processes of increasing information security in communication systems to solve applied problems that are critical in the transmission of confidential data. The goal is to develop a multistage method for protecting information from unauthorized access, based on probabilistic encryption integration, error-correcting code, and error decorrelation. The tasks to be solved are as follows: to develop a probabilistic encryption algorithm that considers the entropy of the characters' appearance in a message; to implement iterative coding with variable parameters of the information bits matrix; and to implement error decorrelation based on the generated matrix by interleaving information and check bits according to a given algorithm. Methodology: theory of signal communication and signal processing, theory of cryptography, theory of noiseresistant codes, probability theory, statistical analysis. The following results were obtained: a multi-stage method for protecting information from unauthorized access was proposed, in which at each step of data conversion, information secrecy is increased; probabilistic encryption was implemented, which considers the entropy of a discrete source of information when forming a space of random combinations; based on an iterative code with specified matrix parameters, an additional increase in the space of random combinations was implemented; error decorrelation reduces the multiplicity of errors in codewords and ensures mixing of bits according to a predetermined law. Conclusions. The scientific novelty of the results obtained is as follows: 1) an improved method of information protection from unauthorized access is proposed, based on probabilistic encryption integration, interference-resistant coding, and error decorrelation; 2) increasing information concealment is realized by eliminating the main shortcomings of probabilistic encryption, which did not take into account the entropy of the symbols of the open message; 3) it is proposed to form the space of random combinations taking into account the average probability of the appearance of a symbol in open texts, which will allow the output of a probabilistic cipher to form a stream of random combinations, which, according to its statistical properties, is close to the uniform distribution law; 4) further development of information protection methods based on interference-resistant coding and error decorrelation with encryption functions is received; 5) a further development of the statistical encryption method is the use of all redundant elements for both probabilistic encryption and interference-resistant coding. [ABSTRACT FROM AUTHOR]

The article investigates the problem of information security of critical information infrastructures. The features of critical objects from the point of view of collecting, processing, storing and transmitting information are analysed. The set of functions performed by the information security system in critical infrastructures and the dependencies between these functions are studied. A model of the security system is proposed and the require ments for this model are defined. At the same time, the set of relations between objects and threats is represented in the form of an object-threat relationship graph, in which an edge connecting the j-th object with the i-th threat exists only when the i-th threat can directly affect the j-th object. To protect objects of critical information infrastructures from possible threats, a set of necessary methods and tools has been introduced into the model of the security system, which converts a two-sided graph into a three-sided one, such as “object – method – threat”. Further in the article, the problem of determining the optimal structure of the security system for critical information infrastructure objects is considered. It is assumed here that each threat can affect several objects, and that any object can be affected by more than one threat. The solution of this problem makes it possible to minimize the material costs to implement the methods and tools for protection and minimize damage from a security breach.

The article analyzes the problems of fraud in the modern digital society in the context of social changes caused by both the COVID-19 pandemic and the current geopolitical situation. The authors study in detail the types of financial fraud in this area. They pay special attention to the types of digital fraud: telephone fraud and IP-telephony, SMS fraud, phishing, sniffering (message interception), skimming (theft of card data), which are associated with the emergence of cryptocurrencies. The article presents the data of the authors’ sociological research conducted by the method of an online questionnaire survey (n = 765). The study showed that only 44 % of respondents are sufficiently informed about the types of fraud to protect themselves from modern internet scammers. An analysis of data on certain types of digital fraud showed that 20 % of respondents lost money due to telephone or Internet fraud, 16 % of respondents personally encountered IP telephony, and 40 % have no idea about such a type of fraud as sniffering and existing anti-virus protection against it. The research also showed the vulnerability, first of all, of the male half of the population over 40 years of age in the field of internet fraud. Therefore, public authorities, together with the media, business and other actors of Russian society, need to strengthen the policy in the field of improving the level of financial and digital literacy of the population.

The development of technology at the present time leads to an increase in the use of electronic commerce due to the increase in demand processes, whether selling or buying goods, products, services, or payment requests, and that the transfer of information the merchants is sensitive and important information, and this information or operations may be subject to penetration or attacks. In this research, we designed a protocol that integrates the Fernet algorithm and the ElGamal algorithm, and we use the Data Leakage Detection Technology (DLD) to safeguard e-commerce transaction data. This protocol provid high security for information, and the integration of algorithms provides high security and strong performance for information transactions that are difficult to hack. We incorporate encryption algorithms to achieve a high level of security and performance. The proposed protocol is higher in security and performance than the algorithms of previous studies. [ABSTRACT FROM AUTHOR]

In the contemporary world, there is a frequent concern regarding the preservation and protection of password data. Numerous services and internet resources require specific accesses to enter their systems. When dealing with a multitude of resources and passwords, the question arises as to where and in what form to store them. Typically, software solutions, namely password managers, are employed for this purpose. The objective of this study is to enhance the efficiency of storing restricted-access information by developing an application with encryption capabilities. To achieve this goal, a review and analysis of modern password managers were conducted, revealing that existing solutions fail to meet the requirements of many enterprises, including 'OdesSeo,' a comprehensive internet marketing enterprise located in the city of Odesa. For the secure storage of restricted-access information, SHA3 encryption algorithms were chosen for employee account passwords, while AES-256 was selected for project passwords of service clients. The latter ciphers were translated into Base64 positional numeral system format. A mobile password manager application was developed and successfully implemented in the production environment of 'OdesSeo.' The increase in the efficiency of storing restricted-access information at 'OdesSeo' is measured in monetary terms, with the lower threshold being 50,000 UAH or 1,200 USD, representing the minimum necessary expenses, according to risk managers' estimates, to mitigate the consequences of information leaks or unauthorized access to the enterprise system and client projects. [ABSTRACT FROM AUTHOR]

In today's digital world, information is a key resource, and its protection is an extremely important task in our time. Cyber security is becoming more and more important for organizations, governments and people. Cyber threats are evolving, traditional protection methods may not be sufficient to ensure a high level of security, so it is necessary to develop effective approaches to information protection. The response to challenges is concentrated in a complex protection system, it becomes an important strategy for ensuring the stability and reliability of information resources and networks. The article highlights some of the challenges and opportunities facing modern information security, and also considers the role of a comprehensive defense system in countering cyber threats. Among the challenges, we can highlight the rapid pace of technology development, which requires constant updating of protective strategies. In addition, the increasing number of cyber attacks and their complexity are forcing organizations to rethink their approaches to cyber security. Another challenge is ensuring security in global networks, where information moves through different territories with different rules and laws. On the other hand, complex information protection systems open up new opportunities for effective fight against cyber threats. They combine various protection methods and technologies. This approach reduces the risk of successful cyber attacks. In addition, complex information protection systems can use artificial intelligence and data analysis to automatically detect anomalies and threats in real time. This allows you to quickly react to new threats and attacks, ensuring a high level of security. The importance of implementing comprehensive protection systems that take into account the variety of cyber threats and ensure reliable and sustainable protection of information resources in the future will become more important every day. This approach will help ensure the security of networks, reduce the risk of successful cyber attacks and ensure the security and confidentiality of information in today's digital world. In general, complex information protection systems are becoming an integral part of modern information security. They help organizations ensure reliable protection of their valuable data and information resources, which is critical to their operations and success. However, in order to achieve maximum effectiveness, it is important to constantly update and improve such systems, taking into account new technological discoveries and growing cyber security threats. [ABSTRACT FROM AUTHOR]