A Multi-Source Data Fusion Model for Real-Time Information Security Incident Analysis and Processing

The article is dedicated to definition of the range of problems which arise due to the development of the Internet of things and to the analysis of the ways of their solution. It is noted that the most important issues in this sphere are: problems of personal data protection and holding of the principle of non-interference into private life, problems of information security, a problem of user’s identification, responsibility of participants of these relations, problems of collecting proofs and so forth. Among them the problem of personal data protection and information security is primary. Special attention is paid to these problems, ways of prevention of violations in this sphere are defined. It is noted that recently adopted in European Union General Data Protection Regulation addressed the problem of personal data protection in the sphere of the Internet of things. In this legal act so-called friendly rules for innovations were enshrined, according to which data protection guarantees concerning products and services have to be provided at early stages of development, that is at a design stage (Privacy by Design or Data Protection by Design). To the basic principles of Privacy by Design refer, particularly: 1) preventive measures, that is orientation on prevention of violations, but not just elimination of consequences; 2) confidentiality, maximum protection of personal information; 3) simultaneous safety of a system and protection of personal information; 4) protection of personal information throughout the whole cycle of its collecting, processing, storage and so on; 5) availability and openness of components of a system. The problem of information security is suggested to be resolved, particularly, by self-regulation in the sphere of the Internet of things. It is also offered to enter standardization and obligatory certification of objects which are part of the system of the Internet of things. In Europe for the purpose of safety there is considered to be enforced obligatory certification of all devices which are connected to ІоТ. The member countries of the EU consider the possibility of development of a complex of the actions aimed at ensuring of cyber security of the Internet of things. Such approach is advisable, though gives in to criticism as excessive regulation can interfere with development of technologies in the ІоТ.

With increasing dependence on information technology and information system, enterprises are confronting with a more and more complicated information security environment. Thus, information security has become an intractable problem for many enterprises. Generally speaking, there are two methods to improve enterprises’ information security level, that is, technology and management means. Technology means mainly settle software and hardware security of computers and networks, while management means mainly regulate and restrain the entire enterprise system including software, hardware, and employees. At present, a lot of enterprises mostly employ the technology means to solve information security problems. However, the lack or imperfection of information security institutions leads to bad enterprise information security situation. Therefore, technology and management means to solve information security are complementary to each other. As such, it is urgent and necessary to establish and improve information security institutions for many enterprises. In fact, enterprise information security is a complicated activity which needs different sectors to get involved in. More specifically, the information security departments play the very critical role in the implementation of information security institutions, and all employees should comply with the information security policy. Therefore, only the top management teams have the ability to coordinate the relationship between different departments, determine the introduction of information technology, and deploy the information systems. In response, top management support has an important impact on the construct of information security institutions and the effectiveness of information security management. So far, few studies have investigated the mechanism that how top management support affects information security legitimation, and legitimation information security management. Therefore, it has great theoretical and practical significance to the exploration of whether the legitimation supported by top management can improve the effectiveness of information security management. The objective of the current study is to explore whether legitimation prompted by top management team can improve the effectiveness of enterprise information security management. By doing so, the data was collected from the enterprises which have passed the certification of information security management system, and analyzed by using PLS-SEM. The results indicate that information security awareness can improve top management support（including top management belief and top management participation）and the effectiveness of information security management respectively. In addition, top management belief can improve implementation（the first stage of legitimation）and internalization（the second stage of legitimation）. Moreover, implementation can improve the effectiveness of information security management. This paper analyzes the way to enhance effectiveness of information security management, which has a reality-oriented meaning for prompting information security management of enterprises from the standpoint of institution.

Smart grids is the next big evolutionary step for the power industry. It is a modernization of power distribution systems, and the introduction of information and communication technologies (ICT) is one of the means. Consequences include larger integration and larger connectivity, which lead to the power automation systems facing a whole new set of information security threats than before. It will be impossible to prevent all possible incidents from occurring. Therefore, the ability to appropriately prepare for, detect, and respond to, information security incidents, is of great importance. As a critical infrastructure the power industry is an attractive target for hackers. The threats are ever-changing, hence the industry needs to be prepared for the unexpected. Resilience engineering concerns adaptation to changes and disturbances and offers valuable principles and practices to the power industry in managing the unexpected. This paper investigates to which degree the power industry aligns with the principles of resilience engineering and suggests future steps to be taken in order to improve resilience towards information security incidents. It is based on a case study where several large distribution system operators have been interviewed regarding their information security incident management process.

With the rapid development of Internet technology, computer network technology has been applied in all walks of life, which is closely related to people's work and life. In the information environment, people's daily life and production methods have also changed accordingly. The application of information technology in people's daily life further enriches people's lifestyle and promotes the rapid development of social economy. While the Internet provides convenience for users, it also brings certain information security risks to users. Therefore, in the application process of computer network information technology, it is necessary to increase information security precautions. Only in-depth implementation of computer network information security protection work, can effectively avoid the occurrence of information security problems. Therefore, it is necessary to ensure the security, effectiveness and integrity of network information through the implementation of relevant protection strategies. This paper analyzes the information security problems of computer network, and proposes corresponding protection strategies based on deep learning algorithm.

With the rapid development of social informatization process, the demands of government, enterprise, and individuals for spatial information becomes larger. In addition, the combination of wireless network technology and spatial information technology promotes the generation and development of mobile technologies. In today’s rapidly developed information technology field, network technology and mobile communication have become the two pillar industries by leaps and bounds. They almost absorbed and adopted all the latest information, communication, computer, electronics and so on new technologies. Concomitantly, the network coverage is more and more big, the transmission rate is faster and faster, the volume of user’s terminal is smaller and smaller. What’s more, from LAN to WAN, from wired network to wireless network, from wired access to mobile wireless access, people’s demand for communication technology is increasingly higher. As a result, mobile communication technology is facing unprecedented challenges as well as unprecedented opportunities. When combined with the existing mobile communication network, it led to the development of leaps and bounds. However, due to the inherent dependence of the system on the existing computer communication network, information security problems cannot be ignored. Today’s information security has penetrated into all aspects of life. Information system is a complex computer system, and it’s physical, operational and management vulnerabilities constitute the security vulnerability of the system. Firstly, this paper analyzes the composition of mobile enterprise network and information security threat. Secondly, this paper puts forward the security planning and measures, and constructs the information security structure.

This study aims to explore the application value of big data technology (BDT) in enterprise information security (EIS). Its goal is to develop a risk prediction model based on big data analysis to enhance the information security protection capability of enterprises. A big data analysis system that can monitor and intelligently identify potential security risks in real-time is constructed by designing complex network analysis algorithms and machine learning models. For different types of security threats, the system uses feature engineering and model training processes to extract key risk indicators and optimize model prediction performance. The experimental results show that the constructed risk prediction model has excellent performance on the test set, and its Area Under the Curve reaches 0.95, indicating that the model has good differentiation ability and high prediction accuracy. In addition, in the multi-class risk identification task, the model achieves an average precision of 0.87. Compared with the traditional method, it has remarkably improved the early warning accuracy and response speed of enterprises to various information security incidents. Therefore, this study confirms the effectiveness and feasibility of applying BDT to EIS risk management, and the successfully constructed prediction model provides strong technical support for EIS protection.

With the continuous development of social development process and the open sharing characteristics of data presentation, it provides more efficient network information services for the majority of audiences, and also brings the security of computer network information. Therefore, based on the background of big data, this paper analyzes the problem of computer network information security, and proposes targeted security processing technology countermeasures, aiming to provide help for the security of computer network information technology.

Obtaining trustworthy estimates for the reliability and security of corporate information systems is an urgent problem. It is not enough just to have estimations for security of software and hardware components. Constant monitoring of a user’s actions and a comprehensive analysis of his (her) behavior in the system are necessary. The novelty of the proposed approach consists in application of psychological profiling methods, models of neuro-fuzzy inference and mechanisms of multidimensional data analysis. Vulnerabilities of computer information systems are determined on the basis of a retrospective analysis of information security incidents. The user’s profile is based on the analysis of his (her) behavior. The patterns of this behavior in a particular computer information system are determined. The work studies the influence of intentional and unintentional user behavior on the probability of information security threats and identifies the threshold values of the number and frequency of the events indicating an information security incident. Such data helped to build a model to search for an intruder during an information security incident. The proposed method was tested in the MatLab software package. The experimental calculations of potential vulnerabilities were performed in the “1C: Enterprise 8.3” system of programs. As the initial data for the calculation, we used the log entries of the actions of more than 100 users with different roles for a period of one year. It is noted that the risk management policy should include a continuous analysis of user actions, as well as the consequences of these actions, in order to identify the goals of such behavior and prevent information security incidents. It is shown that when implementing the proposed methodology, it is necessary to constantly identify users who should not have access to sensitive information from the inside, assuming that a current violator is located within the boundaries of a computer information network. The application of the proposed methodology allows us to increase the level of information security with a constant change in the “working environment” of the information system. It will help to significantly simplify the process of making an objective and reasonable management decision about the most likely implementation of information security incidents. This allows one to take appropriate preventive measures in advance.

Big Data is related to technologies for collecting, processing, analyzing and extracting useful knowledge from very large volumes of structured and unstructured data generated by different sources at high speed. Big Data creates critical information security and privacy problems, at the same time Big Data analytics promises significant opportunities for prevention and detection of advanced cyber-attacks using correlated internal and external security data. We must address several challenges to realize true potential of Big Data for information security. The paper analyzes Big Data applications for information security problems, and defines research directions on Big Data analytics for security intelligence.

Objective: Through the practice discussion and exchange of the integration of big data and pharmaceutical standards, to provide experience reference for the practice of information technology in the management of rational drug use. Methods: The application of data information in the practice of hospital pharmacy management is demonstrated through the introduction of practical cases and data achievements at different levels. Results: The integration of medical big data and pharmaceutical standards effectively improved the hospital's quantitative quality management indicators and the informatization of many pharmaceutical management methods in the hospital is realized. Conclusions: The integration of medical big data and pharmaceutical standards can effectively help improve the management level of rational drug use in hospitals, and there are still many possibilities for future exploration.

This article describes an empirical investigation about the relationship between what is known about information security incidents which occurred within an organisation and the actual perception of information risk. Information security incident awareness takes into account an estimation of the frequency of incidents which occurred in the past as well as the magnitude of information assets impairment caused by them. Information risk perception relies on a subjective assessment of the expected frequency of a specified type of incident having a potentially adverse effect on information resources as well as the expected magnitude of the consequent future loss. Survey instruments were distributed to information security managers of 101 Italian companies and data were collected through telephone interviews. Hypotheses about the influence of two awareness factors (namely, information security incident reporting and existence of an information security policy) on risk perceived by information security managers are formulated and tested through ANOVA techniques.

As organizations’ interest in information resources expands, their investments in information security (IS), such as the introduction of IS policies and new technologies, are also expanding. Nevertheless, IS incidents and threats within the organization have not decreased. This study aims to protect organizations’ information assets by maintaining the level of continuous IS behavior of the organization insiders. Moreover, this study suggests a method to induce continuous security behavior of individuals by confirming the relationship between IS-related voice behavior and IS-related organizational justice, which is an action concept that provides continuous opinions to achieve security goals. This study derives research models and hypotheses through previous studies and tests hypotheses through structural equation modeling. The target subjects are members of the organization who introduced the IS policy. A total of 325 samples were secured through the questionnaire method, and hypotheses were verified. Results reveal that voice behavior related to IS is negatively influenced by work impediment and positively influenced by organizational identification. In addition, procedural and information justice that influence prior actions related to IS affect the cause of personal security behavior (work impediment and organizational identification). Additionally, justice sensitivity adjusted the impact relationship between IS-related organizational justice and the cause of security behavior. The study presents the importance of voice behavior in maintaining the level of IS within the organization continuously. Moreover, it has practical implications in that efforts to improve organizational justice and voice behaviors vary according to the level of individual justice sensitivity.

In order to adapt to rapid development of network information technology, the application of cloud computing technology is increasingly widespread. However, the security problem in the cloud computing environment has not been effectively resolved. Currently, the research on this problem is getting more attention from the industry. In order to further investigate the information security issues of cloud computing environment, this article not only discusses the basic concept, characteristics and service model of cloud computing, but also focuses on the cloud computing security reference model and cloud cube model. In this paper, the information security problems and concrete solutions in the former cloud computing environment are discussed from different aspects.

Progress in the field of information and communication technology is a source of advantage that improves quality of business services; increases productivity levels and brings competitive advantage to enterprises and organisations related to agricultural production. However, the use of information and communication technology (ICT) is connected with information security risks that threaten business continuity and information assets. The ICT in small and medium-sized enterprises (SME) and agricultural enterprises is the source of several advantages as well as the risks resulting from information security violation and security incidents. This paper aims at the current situation of information security in SME and agricultural enterprises. Furthermore, the paper provides results of a survey focusing on identification and evaluation of the effects of internal and external factors affecting existence of risks in information security in Slovak SME and agricultural enterprises. Until now, there had not been a similar survey carried out.

The advent of the era of digital information, vast amounts of data is gradually affect people's way of life, work and study habits, etc., bring convenience to people at the same time, also make people face a lot of information security threats and challenges, so the information security problems faced by big data era is of great significance. This paper first analyzes the current big data era background, on the basis of the key problems of personal information security, analysis of information security risks at the same time, put forward the issue of information security strategy.