Wednesday, 08 February 2012
Home arrow Security information arrow Bases of the guarantee of safety of the information
Security software
Anti spam tools
Anti spyware tools
Antivirus
Backup
Encryption
Firewall
Free software
Passwords managers
Popup ad blockers
Other
Other
Submit software
Security news
Security information
Contact us


RSS
Security software
Security software


Sell software online
Affiliate Programs
Hand guns



Bases of the guarantee of safety of the information
Friday, 23 September 2005
The problems of the guarantee of safety considerably are complicated during the organization of machine information processing under the conditions VTS of the collective use, the information of different designation and belonging is processed and is accumulated. Among the problems of the guarantee of safety of information it is possible to isolate questions of theory, organization and engineering solutions, which require specific approach already at the stage of the preliminary design of SODAS.

However, the first attempts at the solution of the problems of the guarantee of safety touched on questions of right, organization of the access in VTS and to the resources OF SODAS. Resolution of these questions in the implementation of guaranteeing the safety of information in the data bases is especially complicated. The limit of the degree of the safety of data in any system (human or machine) is determined, first of all, by the factors, connected with the participation in their work of man. It is natural that there does not exist any reasons, on which in the systems of machine data processing, which are been based on the contemporary means of computer technology, it was not possible to ensure the high degree of the safety of data, than in the usual systems of collection, accumulation and information processing. System must protect its users from each other both from the random and goal-directed threats of the disturbance of the safety of information. Furthermore, the mechanisms of the guarantee of safety accepted must give the user of means for the protection of its programs and data from it very. It is annual yet it was not realized on the boundary 50-60- X, that THE COMPUTERS can cause the most varied unintentional errors and be the object of diverse abuses. Subsequently the high concentration of the massifs of information, the absence of elementary control of its safety and the relatively low level of the reliability of technical equipment began to cause in foreign specialists anxiety in the guarantee of safety of information. With the advent of COMPUTER(S), which work in the regime of time sharing, and the computational networks, which unite such COMPUTERS, grew considerably the number of those, who have access to the computational means. These are not only users and the service personnel VTS, but also administrative and auxiliary personnel. The perfection of the technology of information processing led to the creation of the information bases of data, that contain the large volumes of diverse information, which also imposes additional requirements on the guarantee of safety of information. Contemporary information systems ensure simultaneous access to the computational resources for many users from the territorially remote terminals. In connection with this arose new problem to ensure the safety of programs and data of user from the no automated action from the side of other users of information system during the transmission of information along the communication channels. Last decade in the foreign press is given considerable attention to questions of providing data security in the information systems. More frequent in the exaggerated form began to be given information about the abuses in the use BY COMPUTER(S), experienced industrial espionage, fires in the computer centers and the "receptivity" OF COMPUTER(S) to the reports of sabotage. From one side, this caused the specific disinformation of users, while with another - it constrained to expend significant means on the realization of shielding measures. On the market appeared the developments, which cover different aspects of the guarantee of safety of information, and also the special batches of the programs, which realize the procedures of protection and control of access to the data. The content and the task of the protection of information by foreign specialists are interpreted by the following of the process of operating the systems the accumulated and processed information it is sufficiently vulnerable, subjected to both the destruction and to unsanctioned use, i.e., to the leakage of the information of the limited use. They consider the embezzlement of the data carriers and of the documents the basic leakage paths of the information of the limited use, obtained as a result of the work of information systems; copying information on THE COMPUTER(S); the unsanctioned connection to equipment and lines of communications; the interception of electromagnetic radiations in the data reduction process. In the foreign literature a large quantity of examples, which make it possible to judge seriousness and importance of the problem of providing safety of information in the information systems, is given. Special methods and means of protection of information are developed on the basis of the analysis of the possible leakage paths of information. Let us refine a number of the definitions, utilized in the foreign l- Re with the study of the problems of the protection of the information: "security", "protection". Term "possession" is determined the socially caused right of face or organization to establish conditions, addressees and time, with whom can be transmitted the information to others or organizations. Which in SODAS connects this term with the term “safety” is implied the totality of the methods, which make it possible to determine the right of user to the turning to system and by those storing in it by data. In some foreign works this term is used only in connection with the information of the limited use. For other applications is used the term "possession". In the systems of collective use, which have the developed network of terminals, the basic complexity of providing safety lies in the fact that the potential disturber is the full-fledged subscriber of system. Therefore by term "protection" is implied the method of providing safety in SODAS. The protection of information usually is reduced to the selection of the means of control of the execution of the programs, which have access to information in SODAS. Sometimes by term "protection" are implied the means, which limit the consequences of unpremeditated errors in software or rules of its use. Actually, such chances must be excluded; however, this it has practically little that is general with the task of protection from the intentional disturbances of safety of information. Thus, in the narrower sense protection is the totality of methods and means, which make it possible to govern the access of the carried out programs to the stored information in SODAS.

 
< Prev   Next >
© 2004-2007 Daita.org