<abstract xmlns="http://www.w3.org/1999/xhtml"><p>The motivation of investigation is explained by the problem of keeping organisations’ information and private ones secure. One reason for this is insufficiency of information protection systems, and another – vulnerability in such kind of systems. The article is devoted to defining and analyzing the types and sources of information security threats for an automated system. It can be useful for developing the model method, having the purpose of detecting and further preventing of hazards. The safeness of Data Leak Prevention (DLP) system itself is also under investigation. The analysis was carried out by an expert method with system analysis. A DLP system was considered, on the one hand, as a way of information protection to prevent information leakage, and on the other hand, as an object of protection which is vulnerable to threats of information security. The presented threat model includes the sources of threats, divided into three large groups: anthropogenic, technogenic and spontaneous; and types of threats: intentional and unintentional.</p></abstract>

The motivation of investigation is explained by the problem of keeping organisations’ information and private ones secure. One reason for this is insufficiency of information protection systems, and another – vulnerability in such kind of systems. The article is devoted to defining and analyzing the types and sources of information security threats for an automated system. It can be useful for developing the model method, having the purpose of detecting and further preventing of hazards. The safeness of Data Leak Prevention (DLP) system itself is also under investigation. The analysis was carried out by an expert method with system analysis. A DLP system was considered, on the one hand, as a way of information protection to prevent information leakage, and on the other hand, as an object of protection which is vulnerable to threats of information security. The presented threat model includes the sources of threats, divided into three large groups: anthropogenic, technogenic and spontaneous; and types of threats: intentional and unintentional.

Analysis of information security threats for developing DLP-systems

Information Technology and Data Protection Department

the Ural State University of Railway Transport

Foreign Languages and Intercultural Communication Department

Ural State University of Railway Transport

Production Engineering Archives

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

{"article-title":"Analysis of information security threats for developing DLP-systems"}

The motivation of investigation is explained by the problem of keeping organisations’ information and private ones secure. One reason for this is insufficiency...

Analysis of information security threats for developing DLP-systems

Publié en ligne: 28 janv. 2020

Pages: 24 - 27

Reçu: 20 juil. 2017

Accepté: 14 déc. 2017

DOI: https://doi.org/10.30657/pea.2017.17.05

Mots clés
Data Leak Prevention (DLP), information security, threat model, automated system

© 2017 Ekaterina Polozova et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Analysis of information security threats for developing DLP-systems

Publié en ligne: 28 janv. 2020

Pages: 24 - 27

Reçu: 20 juil. 2017

Accepté: 14 déc. 2017

DOI: https://doi.org/10.30657/pea.2017.17.05

Mots clésData Leak Prevention (DLP), information security, threat model, automated system

© 2017 Ekaterina Polozova et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Mots clés
Data Leak Prevention (DLP), information security, threat model, automated system