|
The problems of the guarantee of safety
considerably are complicated during the organization of machine
information processing under the conditions VTS of the collective use,
the information of different designation and belonging is processed and is accumulated. Among the problems of the guarantee of safety of information it is possible
to isolate questions of theory, organization and engineering
solutions, which require specific approach already at the stage of the
preliminary design of SODAS.
However, the first attempts at the
solution of the problems of the guarantee of safety touched on
questions of right, organization of the access in VTS and to the
resources OF SODAS. Resolution of these questions in the
implementation of guaranteeing the safety of information in the data
bases is especially complicated. The limit of the degree of the
safety of data in any system (human or machine) is determined, first
of all, by the factors, connected with the participation in their work
of man. It is natural that there does not exist any reasons, on
which in the systems of machine data processing, which are been based
on the contemporary means of computer technology, it was not possible
to ensure the high degree of the safety of data, than in the usual
systems of collection, accumulation and information processing.
System must protect its users from each other both from the
random and goal-directed threats of the disturbance of the safety of
information. Furthermore, the mechanisms of the guarantee of
safety accepted must give the user of means for the protection of its
programs and data from it very. It is annual yet it was not
realized on the boundary 50-60- X, that THE COMPUTERS can cause the
most varied unintentional errors and be the object of diverse abuses.
Subsequently the high concentration of the massifs of
information, the absence of elementary control of its safety and the
relatively low level of the reliability of technical equipment began
to cause in foreign specialists anxiety in the guarantee of safety of
information. With the advent of COMPUTER(S), which work in the
regime of time sharing, and the computational networks, which unite
such COMPUTERS, grew considerably the number of those, who have access
to the computational means. These are not only users and the
service personnel VTS, but also administrative and auxiliary
personnel. The perfection of the technology of information
processing led to the creation of the information bases of data, that
contain the large volumes of diverse information, which also imposes
additional requirements on the guarantee of safety of information.
Contemporary information systems ensure simultaneous access to
the computational resources for many users from the territorially
remote terminals. In connection with this arose new problem to
ensure the safety of programs and data of user from the no automated
action from the side of other users of information system during the
transmission of information along the communication channels.
Last decade in the foreign press is given considerable attention
to questions of providing data security in the information systems.
More frequent in the exaggerated form began to be given
information about the abuses in the use BY COMPUTER(S), experienced
industrial espionage, fires in the computer centers and the
"receptivity" OF COMPUTER(S) to the reports of sabotage. From
one side, this caused the specific disinformation of users, while with
another - it constrained to expend significant means on the
realization of shielding measures. On the market appeared the
developments, which cover different aspects of the guarantee of safety
of information, and also the special batches of the programs, which
realize the procedures of protection and control of access to the
data. The content and the task of the protection of information
by foreign specialists are interpreted by the following of
the process of operating the systems the accumulated and processed
information it is sufficiently vulnerable, subjected to both the
destruction and to unsanctioned use, i.e., to the leakage of the
information of the limited use. They consider the embezzlement
of the data carriers and of the documents the basic leakage paths of
the information of the limited use, obtained as a result of the work
of information systems; copying information on THE COMPUTER(S);
the unsanctioned connection to equipment and lines of
communications; the interception of electromagnetic radiations
in the data reduction process. In the foreign literature a large
quantity of examples, which make it possible to judge seriousness and
importance of the problem of providing safety of information in the
information systems, is given. Special methods and means of
protection of information are developed on the basis of the analysis
of the possible leakage paths of information. Let us refine a
number of the definitions, utilized in the foreign l- Re with the
study of the problems of the protection of the information:
"security", "protection". Term
"possession" is determined the socially caused right of face or
organization to establish conditions, addressees and time, with whom
can be transmitted the information to others or organizations.
Which in SODAS connects this term with the term “safety”
is implied the totality of the methods, which make it possible to
determine the right of user to the turning to system and by those
storing in it by data. In some foreign works this term is used
only in connection with the information of the limited use. For
other applications is used the term "possession". In the systems
of collective use, which have the developed network of terminals, the
basic complexity of providing safety lies in the fact that the
potential disturber is the full-fledged subscriber of system.
Therefore by term "protection" is implied the method of
providing safety in SODAS. The protection of information usually
is reduced to the selection of the means of control of the execution
of the programs, which have access to information in SODAS.
Sometimes by term "protection" are implied the means, which
limit the consequences of unpremeditated errors in software or rules
of its use. Actually, such chances must be excluded; however,
this it has practically little that is general with the task of
protection from the intentional disturbances of safety of information.
Thus, in the narrower sense protection is the totality of
methods and means, which make it possible to govern the access of the
carried out programs to the stored information in SODAS. |