Author Email: begishev@mail.ru
Abstract
The article substantiates the need for introducing into the international scientific circulation the author’s definition of the legal and psychological phenomenon of “safe computer attack”, which is proposed to understand the state of the subjects of information legal relations that are aware of the danger of violation and the importance of ensuring the security of information infrastructure, but that do not ensure it for various reasons, including when carrying out computer attacks against it. The study determined that it is typical for such entities to reduce or completely ignore the established requirements for the protection of information and information security policy for various reasons, in addition to understanding the mechanisms for ensuring the security of information infrastructure in the context of existence of different threats to their cyber security. Such causes of the phenomenon include: 1) Neglect and negligence; 2) Increased financial costs for ensuring cyber security of the information infrastructure; 3) Mismatch of the information security systems of computer systems and networks to the level of threats to their cyber security; 4) Low level of cyber security culture; 5) Lack of qualified information security specialists, including a specially-oriented profile. In addition, it was found that the loss of information due, for example, to unauthorized access to it or the operation of malicious computer program, is largely predetermined by the lack of knowledge of the basic principles for ensuring cyber security among the employees of organizations.
Introduction
Modern digital technologies have significantly changed the processes of storage, processing and transmission of information. The process of “digitalization” of society has embraced all spheres of activity of the state and human. This largely predetermined the further development of information legal relations and their legal regulation. In connection with the digital development of the world community, knowledge of ways to qualitatively protect the information technologies in everyday practice is becoming increasingly relevant. Illustrative examples, illustrating the need to protect information and ensure cyber security, are the increasing reports of computer “hacks” of enterprises, the growth of computer piracy, the spread of computer viruses, both in Russia and in the world.
Conclusion
The study determined that it is typical for such entities to reduce or completely ignore the established requirements for the protection of information and information security policy for various reasons, in addition to understanding the mechanisms for ensuring the security of information infrastructure in the context of existence of different threats to their cyber security. These reasons of the phenomenon under consideration include: 1) Neglect and negligence (some employees consider the cyber security threats of the information infrastructure farfetched, not relevant to the realities of the time; some owners of the information infrastructure are not interested in ensuring their security in view of the absence of a positive economic effect from this); 2) Increased financial costs for ensuring cyber security of the information infrastructure (high cost of information protection systems, disinterest in the development of the organization’s cyber security systems due to the lack of financial benefits, etc.); 3) Mismatch of the information security systems of computer systems and networks to the level of threats to their cyber security (mismatch of information security tools to real and potential threats to the information security of the organization, lack of cyber security audit system, increase in the number of attacks on computer systems and networks, complexity of operating the information security tools, etc.); 4) Low level of cyber security culture (low awareness of the leaders and specialists of organizations in matters of ensuring cyber security, ignoring the requirements of the organization’s cyber security policy by the employees, noncompliance by the employees with the requirements of federal legislation in the field of information protection, etc.); 5) Lack of qualified information security specialists, including a specially-oriented profile (specialists in organizing and implementing security control, specialists in operational monitoring, detection of intrusion and network attacks, specialists in providing protection against the effects of malware, etc.). In addition, it was found that the loss of information due, for example, to unauthorized access to it or the operation of malicious computer program, is largely predetermined by the lack of knowledge of the basic principles for ensuring cyber security among the employees of organizations.
1,085 total views, no views today