<?xml version="1.0" encoding="UTF-8"?><xml><records><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">de Kok, Lisa C.</style></author><author><style face="normal" font="default" size="100%">Deborah Oosting</style></author><author><style face="normal" font="default" size="100%">Marcel Spruit</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">The Influence of Knowledge and Attitude on Intention to Adopt Cybersecure Behaviour</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">cybersecurity attitude</style></keyword><keyword><style  face="normal" font="default" size="100%">cybersecurity awareness</style></keyword><keyword><style  face="normal" font="default" size="100%">cybersecurity behaviour</style></keyword><keyword><style  face="normal" font="default" size="100%">cybersecurity knowledge</style></keyword><keyword><style  face="normal" font="default" size="100%">cybersecurity questionnaire</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2020</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2020</style></date></pub-dates></dates><volume><style face="normal" font="default" size="100%">46</style></volume><pages><style face="normal" font="default" size="100%">251-266</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">In general, people are poorly protected against cyberthreats, with the main reason being user behaviour. For the study described in this paper, a questionnaire was developed in order to understand how people’s knowledge of and attitude towards both cyberthreats and cyber security controls affect intention to adopt cybersecure behaviour. The study divides attitude into a cognitive and an affective component. Although only the cognitive component of attitude is usually studied, the results from a questionnaire of 300 respondents show that both the affective and cognitive components of attitude have a clearly positive, albeit varying, influence on behavioural intention, with the affective component having an even greater effect on attitude than the cognitive aspect. No correlation was found between knowledge and behavioural intention. The results indicate that attitude is an important factor to include when developing behavioural interventions, but also that different kinds of attitude should be addressed differently in interventions.</style></abstract><issue><style face="normal" font="default" size="100%">3</style></issue><section><style face="normal" font="default" size="100%">251</style></section></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Svitlana Zapara</style></author><author><style face="normal" font="default" size="100%">Yaroslav Melnyk</style></author><author><style face="normal" font="default" size="100%">Mariya Melnyk</style></author><author><style face="normal" font="default" size="100%">Maryna Kuznetsova</style></author><author><style face="normal" font="default" size="100%">Natalia Bondar</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Labour Relations and the Information Security of the State during the Covid-19 Pandemics</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">atypical employment</style></keyword><keyword><style  face="normal" font="default" size="100%">COVID-19</style></keyword><keyword><style  face="normal" font="default" size="100%">global crisis</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">reform</style></keyword><keyword><style  face="normal" font="default" size="100%">social and labour relations</style></keyword><keyword><style  face="normal" font="default" size="100%">technological change</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2020</style></year></dates><volume><style face="normal" font="default" size="100%">45</style></volume><pages><style face="normal" font="default" size="100%">77-88</style></pages><abstract><style face="normal" font="default" size="100%">&lt;p style=&quot;margin-left:20.15pt;&quot;&gt;The technological changes directly influence human values, way of life, communication, education, new digital competencies, economic productivity, social rights, privacy, access to information, and more. Understanding and describing these effects is key for understanding the new digital social reality and determining possibilities, challenges, and threats of the fourth industrial revolution. The prerequisites of this study are the objective monitoring of the state of social and labour relations in Ukraine and other countries, the analysis of urgent issues of alternative employment, the global crisis and crisis of the human rights mechanism of social and labour relations, changes in the legal status and powers of trade union organizations. These institutions are intended to protect the interests of employees, to facilitate the &amp;lsquo;individualization&amp;rsquo; of labour relations, and new forms to protect employees&amp;rsquo; rights and interests.&lt;/p&gt;</style></abstract><section><style face="normal" font="default" size="100%">77</style></section></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Ivelina Vardeva</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Generalized Net Model of an Automated System for Monitoring, Analysing and Managing Events Related to Information Security</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">security information and event management</style></keyword><keyword><style  face="normal" font="default" size="100%">security services</style></keyword><keyword><style  face="normal" font="default" size="100%">security tools</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2019</style></year></dates><volume><style face="normal" font="default" size="100%">43</style></volume><pages><style face="normal" font="default" size="100%">257-263</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">With the increase of information flows transmitted between different information systems, organizations using these systems are increasingly dependent on ensuring the continuity and accuracy of ongoing processes in these systems. It is necessary to have tools for analyzing the large number of real-time events in order to respond adequately to security threats emerging in information systems. The field of application of SIEM systems is primarily for detecting and preventing network intrusion, but it can also be used to analyze traffic whether it is useful or malicious.</style></abstract><issue><style face="normal" font="default" size="100%">2</style></issue><section><style face="normal" font="default" size="100%">257</style></section></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Sergiy Dotsenko</style></author><author><style face="normal" font="default" size="100%">Oleg Illiashenko</style></author><author><style face="normal" font="default" size="100%">Sergii Kamenskyi</style></author><author><style face="normal" font="default" size="100%">Vyacheslav Kharchenko</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Integrated Model of Knowledge Management for Security of Information Technologies: Standards ISO/IEC 15408 and ISO/IEC 18045</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">information technologies</style></keyword><keyword><style  face="normal" font="default" size="100%">IT security</style></keyword><keyword><style  face="normal" font="default" size="100%">knowledge management</style></keyword><keyword><style  face="normal" font="default" size="100%">security standards</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2019</style></year></dates><volume><style face="normal" font="default" size="100%">43</style></volume><pages><style face="normal" font="default" size="100%">305-317</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">The paper presents analysis of existing knowledge management models and justification for introducing an integrated model of knowledge management for both industry and academia. It is proposed to build such a model using well-known standards of IT security – common criteria and methodology for IT security evaluation. The model of knowledge management is elaborated by analysing the content of the relevant elements of standards and establishing the knowledge content that determines the forms of relations between them. The authors propose the application of an architecture of four-factor models towards the formation of knowledge management models in the organization of the information security management system in accordance with the standards of the series ISO/ IEC 27000.</style></abstract><issue><style face="normal" font="default" size="100%">3</style></issue><section><style face="normal" font="default" size="100%">305</style></section></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>10</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Todor Tagarev</style></author><author><style face="normal" font="default" size="100%">Dimitrina Polimirova</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Main considerations in elaborating organizational information security policies</style></title><secondary-title><style face="normal" font="default" size="100%">20th International Conference on Computer Systems and Technologies, CompSysTech 2019</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">Cybersecurity</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">information security management</style></keyword><keyword><style  face="normal" font="default" size="100%">policy</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2019</style></year><pub-dates><date><style  face="normal" font="default" size="100%">21 June 2019</style></date></pub-dates></dates><publisher><style face="normal" font="default" size="100%">University of RuseRuse</style></publisher><pub-location><style face="normal" font="default" size="100%">Bulgaria</style></pub-location><volume><style face="normal" font="default" size="100%">ACM International Conference Proceeding Series</style></volume><pages><style face="normal" font="default" size="100%">68-73</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">&lt;p&gt;With the increasing reliance on information technologies, cloud services and internet as communications media, businesses, public and societal organizations face growing threats from cyberspace and, respectively, demands to protect sensitive data and information they collect, use, and disseminate. This paper elaborates on the key considerations organisations with more limited resources, such as schools, universities, research institutes and public organizations need to take into account in designing and implementing a respective information security policy. We start with a description of context and definition of the scope of information security policy, in particular delineating &amp;#39;information&amp;#39; and &amp;#39;cyber&amp;#39; security, and provide an overview of the most prominent frameworks and standards. On that basis we elaborate and structure the main areas of an information security policy, the main implementation challenges, and the need to review and amend the policy in a continuous cycle and comprehensive risk management framework. Depending of the specifics of their work, any school, university, institute and municipality may use this elaboration as a starting point in devising its own information security policy.&lt;/p&gt;</style></abstract></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Vasil Rizov</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Information Sharing for Cyber Threats</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">cyber security</style></keyword><keyword><style  face="normal" font="default" size="100%">cyber threat</style></keyword><keyword><style  face="normal" font="default" size="100%">cyber threat information sharing</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">information sharing</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2018</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2018</style></date></pub-dates></dates><volume><style face="normal" font="default" size="100%">39</style></volume><pages><style face="normal" font="default" size="100%">43-50</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">&lt;p&gt;An organization that has faced an attack acquires valuable information on cyber threats that may be shared with others. This information can help an organization to identify, assess, monitor, and respond to cyber threats. Organizations that share cyber threat information can improve their own security postures as well as those of other organizations. Information sharing among private and public entities is a powerful mechanism to better understand a constantly changing environment and learn in a holistic way about serious risks, vulnerabilities and threats, as well as solutions. This article provides a review of the benefits and challenges of coordinating and sharing cyber threat information, the strengths and weaknesses of different information sharing models, and the importance of building trust between actors and handling sensitive or classified information. Organizations have to establish information sharing goals and scope of information sharing activities, identify cyber threat information sources, develop rules that control the distribution of threat information, and make effective use of threat information in support of their overall cyber security practices.&lt;/p&gt;</style></abstract><issue><style face="normal" font="default" size="100%">1</style></issue><section><style face="normal" font="default" size="100%">43</style></section></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Matthew N.O. Sadiku</style></author><author><style face="normal" font="default" size="100%">Shumon Alam</style></author><author><style face="normal" font="default" size="100%">Sarhan M. Musa</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Information Assurance Benefits and Challenges: An Introduction</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">computer security</style></keyword><keyword><style  face="normal" font="default" size="100%">information assurance</style></keyword><keyword><style  face="normal" font="default" size="100%">information goods</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">information services</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2017</style></year></dates><volume><style face="normal" font="default" size="100%">36</style></volume><abstract><style face="normal" font="default" size="100%">&lt;p&gt;Information assurance (IA) is the practice of protecting and defending information systems by ensuring their availability, confidentiality, integrity, authentication, and nonrepudiation. As a discipline, IA grew from the practice of information security. It plays a crucial role in a networked infrastructure of e-commerce, e-business, and e-Government. For this reason, IA is a serious worldwide concern of organizations, industry, governments, and academia. This paper provides a brief introduction on information assurance, the benefits it brings, and the challenges in the implementation of the concept.&lt;/p&gt;</style></abstract></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Oleksandr V. Potii</style></author><author><style face="normal" font="default" size="100%">Roman V. Oliynykov</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Ukrainian Educational System in the Field of Cybersecurity</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">Cybersecurity</style></keyword><keyword><style  face="normal" font="default" size="100%">educational system</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2016</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2016</style></date></pub-dates></dates><volume><style face="normal" font="default" size="100%">35</style></volume><pages><style face="normal" font="default" size="100%">11-27</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">Main threats and challenges to cybersecurity are considered in this article from an educational perspective. The authors analyse the system of higher educa¬tion in the field of information and cybersecurity, present the standards of education in the field of information security, outline the system of universities in Ukraine, as well as analysis of a number of practical cases.</style></abstract><issue><style face="normal" font="default" size="100%">1</style></issue><section><style face="normal" font="default" size="100%">11</style></section></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Volodymyr Bik</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Protecting the National Interests in the Domain of Information Security as a Functional Task of the SBU</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">cyber threats</style></keyword><keyword><style  face="normal" font="default" size="100%">Cybersecurity</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">intelligence</style></keyword><keyword><style  face="normal" font="default" size="100%">international cooperation</style></keyword><keyword><style  face="normal" font="default" size="100%">SBU</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2014</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2014</style></date></pub-dates></dates><volume><style face="normal" font="default" size="100%">31</style></volume><pages><style face="normal" font="default" size="100%">69-72</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">The development of modern information technologies and innovations in all areas of life resulted in new threats to national and international security. Over the past decade, such threats as transnational cybercrime, cyber terrorism, the use of cyber weapons transformed from potential and hypothetical into real ones. Combating those threats has become a priority of the national security and defence sector. The article focuses on how the profound changes in the global security system, in combination with the evolution of the cyber threats, influenced the activities of the Security Service of Ukraine (SBU), turning the Service in a key element of the future national cyberse¬curity system. The author reasons for enhanced international cooperation and systematises practical examples of effective international efforts to counter cyber threats.</style></abstract><section><style face="normal" font="default" size="100%">69</style></section></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Hesham Arafat Ali</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">A New Technique for Enhancing the Properties of Transmitted Data</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">Data Hiding</style></keyword><keyword><style  face="normal" font="default" size="100%">Image statistical analysis</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">LSB</style></keyword><keyword><style  face="normal" font="default" size="100%">Steganographic</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2013</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2013</style></date></pub-dates></dates><volume><style face="normal" font="default" size="100%">26</style></volume><pages><style face="normal" font="default" size="100%">58-78</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">Information hiding is an ancient art of embedding private messages in seemingly innocuous messages in such a way that prevents the detection of the secret messages by a third parity. Whereas the goal of a secure cryptographic method is to prevent an interceptor from gaining any information about the plaintext encrypted, the goal of a secure steganographic method is to prevent an observant from even obtaining knowledge of the presence of the secret data. So, if we combine encryption with steganography we achieve even more security. This work presents a new method for embedding grayscale image in the spatial domain. The main objective of the proposed embedding module is to correct the statistical properties of the stego-image as well as improving its visual properties. This paper presents the “Improving Visual and Statistical Properties (IVSP)” technique, which improves the visual properties of the stego-image by considering two components, namely Minimum Error Replacement (MER) which minimises the embedding induced error, and Improved Grayscale Compensation (IGSC) that eliminates the false contours. It improves the statistical properties of the stegoimage by restoring the correlation of the zero and the ones in the images. Also, it eliminates the quantisation error introduced by JPEG image format. Moreover, one of the cryptographic and compression protocols can be involved in the proposed method to enhance security.</style></abstract><issue><style face="normal" font="default" size="100%">2</style></issue><section><style face="normal" font="default" size="100%">58</style></section></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>27</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Michael Dimitrov</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Why the Organization Needs Information Security Policy and Programme</style></title><secondary-title><style face="normal" font="default" size="100%">IT4Sec Reports</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">adaptability</style></keyword><keyword><style  face="normal" font="default" size="100%">Information</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">information security policy</style></keyword><keyword><style  face="normal" font="default" size="100%">information security programme</style></keyword><keyword><style  face="normal" font="default" size="100%">Organization</style></keyword><keyword><style  face="normal" font="default" size="100%">resources</style></keyword><keyword><style  face="normal" font="default" size="100%">threat</style></keyword><keyword><style  face="normal" font="default" size="100%">vulnerability</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2013</style></year><pub-dates><date><style  face="normal" font="default" size="100%">December 2013</style></date></pub-dates></dates><number><style face="normal" font="default" size="100%">109</style></number><publisher><style face="normal" font="default" size="100%">Institute of Information and Communication Technologies</style></publisher><pub-location><style face="normal" font="default" size="100%">Sofia</style></pub-location><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">This report outlines the reasons why each organization needs to adopt an information security policy and an information security programme, emphasising the competitive advantages based on improved adaptation capabilities. First, it examines the concept of information security. On that basis, the author represents possible formulation of organizational objectives. The examination of organizational activities in a competitive context allows to formulate specific ways in which information becomes of utmost significance. The report includes examples demonstrating the need to establish an information security policy and an information security programme, including description of threats and vulnerabilities that, unless adequately managed, could decrease the organizational capabilities to achieve their goals.</style></abstract></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Alexandr Potij</style></author><author><style face="normal" font="default" size="100%">Dmitrij Komin</style></author><author><style face="normal" font="default" size="100%">Inna Rebriy</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">A Method of Evaluating Assurance Requirements</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">assurance level.</style></keyword><keyword><style  face="normal" font="default" size="100%">assurance requirements</style></keyword><keyword><style  face="normal" font="default" size="100%">evaluation process</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">ontological modelling</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2012</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2012</style></date></pub-dates></dates><number><style face="normal" font="default" size="100%">9</style></number><volume><style face="normal" font="default" size="100%">28</style></volume><pages><style face="normal" font="default" size="100%">108-120</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">This paper presents ontological modelling results from the security assurance domain. It examines problems associated with the process of evaluating assurance. Towards this purpose we propose a functional-linguistic approach to the evaluation of security assurance level. The approach is grounded in the ontological modelling of assurance requirements which are liable to evaluation, in the functional modelling of the evaluation process in IDEF0 and IDEF3 notations and in the introduction of linguistic variables to represent qualitative properties. We consider performance requirements on the scope, depth and rigour of the evaluation process and the requirements for objectivity, repeatability, reproducibility, impartiality and comparability of evaluation results. Thus, we propose a method of evaluating assurance requirements that incorporates object-oriented assurance ontological modelling, process-oriented assurance ontological modelling, development of decision criteria, and workflow modelling.</style></abstract><issue><style face="normal" font="default" size="100%">1</style></issue></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Eugene Nickolov</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Critical Information Infrastructure Protection</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">Critical Information Infrastructure Protection</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">Malware Attacks</style></keyword><keyword><style  face="normal" font="default" size="100%">National Cybersecurity</style></keyword><keyword><style  face="normal" font="default" size="100%">Vulnerabilities</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2005</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2005</style></date></pub-dates></dates><volume><style face="normal" font="default" size="100%">17</style></volume><pages><style face="normal" font="default" size="100%">105-119</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">The article provides a brief description of critical information infrastructure and analyzes the extent to which organizations depend on the proper functioning of banking and financial services, electricity, fuel and water supply networks, as well as information and telecommunication networks. The consequences of attacks on specific elements of these infrastructures are examined, as well as the initiatives and problems that arise with their protection on national and international level. Special attention is paid to the state of critical infrastructure protection in Bulgaria, with analysis of the reasons for its poor level and recommendations for improvement.</style></abstract></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Konstantin Arkhipov</style></author><author><style face="normal" font="default" size="100%">Vasiliy Ovodkov</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Information Security of Distance Learning</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">distance learning</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">transactions control</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2004</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2004</style></date></pub-dates></dates><volume><style face="normal" font="default" size="100%">14</style></volume><pages><style face="normal" font="default" size="100%">138-144</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">The problem of information security in distance learning is analyzed based on extended definition of security, which is based on a personal attitude and apprehension. To feel safe, a person needs to be able to obtain necessary information and to control a situation. Thus, security of distance learning includes not only security of maintaining hardware and software (as it is often considered to be), but also the control over basic functions and the process of training. Methods of increasing security and fault-tolerance on information systems are briefly discussed; links between security issues and raising quality of communication are traced.</style></abstract></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Muhammad Nabeel Tahir</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">A Secure Online Medical Information System in Distributed and Heterogeneous Computing Environment</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">Distributed Computing.</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">Medical Information Systems</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2004</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2004</style></date></pub-dates></dates><number><style face="normal" font="default" size="100%">2</style></number><volume><style face="normal" font="default" size="100%">15</style></volume><pages><style face="normal" font="default" size="100%">211-215</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">The objective of this article is to analyze the importance and the role of Information Security in online medical information systems. Healthcare organizations have to protect private information pertaining to the individuals they serve. As more and more healthcare organizations implement computer-based ERPs, telemedicine, EDI, data warehouses and other network-based information systems, information security in healthcare gains importance more than ever before. Possible questions and issues related to information security requirements might be: “How do the healthcare professionals protect the information in their EPR systems?”, “How can network data exchange and transfer over the Internet be accomplished without being tampered by hackers and other unauthorized individuals or groups?” To answer these questions, players in the healthcare chain (providers, physicians) are turning to computerized solutions. As one might recall, turning to computerized medical record systems was the solution for healthcare organizations some years ago. Now we are dealing with the problems that those computerized systems may bring.</style></abstract></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Stoyan Avramov</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Integrating COTS Technologies into a Scalable Mobile  Emergency Command Post</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">C4ISR</style></keyword><keyword><style  face="normal" font="default" size="100%">drill</style></keyword><keyword><style  face="normal" font="default" size="100%">emergency management</style></keyword><keyword><style  face="normal" font="default" size="100%">exercise</style></keyword><keyword><style  face="normal" font="default" size="100%">field command and control</style></keyword><keyword><style  face="normal" font="default" size="100%">information assurance</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">operational</style></keyword><keyword><style  face="normal" font="default" size="100%">system</style></keyword><keyword><style  face="normal" font="default" size="100%">technical architecture</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2003</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2003</style></date></pub-dates></dates><volume><style face="normal" font="default" size="100%">10</style></volume><pages><style face="normal" font="default" size="100%">87-96</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">The article describes an ongoing effort in developing and demonstrating the capabilities of commercial-off-the-shelf technologies, integrated to provide cost-effective on-site command and control of various emergencies. The author briefly presents major operational, system, and technical architecture issues, as well as the approach chosen to deal with the problem of information assurance. The proposed C2 architecture may be easily scaled to better fit requirements of a particular customer. It has been tested in laboratory environment and highly acclaimed at technical exhibitions. The concept will be further tested during an international disaster relief exercise, to be conducted in the summer of 2003 in Bulgaria under the coordination of the State Agency for Civil Protection of the Republic of Bulgaria.</style></abstract></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Tilcho Ivanov</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Transparency of Defence Policy in Progress</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">access to information</style></keyword><keyword><style  face="normal" font="default" size="100%">accountability</style></keyword><keyword><style  face="normal" font="default" size="100%">Bulgaria’s defence reform</style></keyword><keyword><style  face="normal" font="default" size="100%">Civil-military relations</style></keyword><keyword><style  face="normal" font="default" size="100%">Defence resource management</style></keyword><keyword><style  face="normal" font="default" size="100%">Good governance</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">procurement</style></keyword><keyword><style  face="normal" font="default" size="100%">public tenders.</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2003</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2003</style></date></pub-dates></dates><volume><style face="normal" font="default" size="100%">11</style></volume><pages><style face="normal" font="default" size="100%">55-72</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">This article describes general principles and evaluates Bulgaria’s progress in transparency-building in the areas of defence policy and public communication; defence planning, programming, and budgeting; procurement policy; information security policy; and operational defence management. Drawing heavily from organizational communication theory, the author relates the concepts of openness and transparency to recent Bulgarian practice in planning defence strategy, modernising defence management and changing core defence ministerial structures.</style></abstract></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Eugene Nickolov</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Contemporary Trends in the Development of Information Security and Computer Virology</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal </style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">Biometric</style></keyword><keyword><style  face="normal" font="default" size="100%">Computer Virology</style></keyword><keyword><style  face="normal" font="default" size="100%">Dynamic Programming</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword><keyword><style  face="normal" font="default" size="100%">Mobile Communications</style></keyword><keyword><style  face="normal" font="default" size="100%">modeling</style></keyword><keyword><style  face="normal" font="default" size="100%">Satellite Communications</style></keyword><keyword><style  face="normal" font="default" size="100%">simulation</style></keyword><keyword><style  face="normal" font="default" size="100%">Steganometric.</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2000</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2000</style></date></pub-dates></dates><volume><style face="normal" font="default" size="100%">4</style></volume><pages><style face="normal" font="default" size="100%">60-72</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">This article presents an analysis of the latest trends in information security and computer virology. The basic components of the information security are introduced, including data security, computer security, communication security, network security, mobile security, manipulations security, biometric security, and steganometric security. The main factors exerting influence on these components, as well as their relationships are shown. A formal record for the information security as a function of specific arguments is developed. The fundamental procedures of the information security are represented, including Monitoring, Blocking, Removing, Protection and Verification. 
The analysis continues with the computer virology topic. In the beginning, the fundamental work principles of the computer viruses are examined: Reproduction, Transportation, Malicious Thinking and Good-natured Thinking. Then the main steps in the computer viruses investigation are analyzed: Isolation, Decomposition, Formal Description, Modeling, Decision-making and Program Realization. Next, methods for computer viruses detection are examined, such as Signature analysis, Integrity Check, Monitoring and Restriction. After that the basic steps during the computer viruses removal as Localization, Identification, Removing, Deactivation and Verification are shown. 
In the conclusion, the role and the importance of the information security and the computer virology for the development of the contemporary society in conditions of growing communication mobility and globality are pointed out.</style></abstract></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Veselin Tselkov</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Cryptographic Software Solution for Information Protection in a Corporate Intranet</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">cryptographic software</style></keyword><keyword><style  face="normal" font="default" size="100%">cryptography</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2000</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2000</style></date></pub-dates></dates><volume><style face="normal" font="default" size="100%">4</style></volume><pages><style face="normal" font="default" size="100%">97-104</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">This paper presents an original approach to the implementation of cryptographic software in a system for information protection in a corporate Intranet. It describes the architecture, the functional features, and the components of the system. The specific software solution was designed during a projects performed by the Institute for Advanced Defense Research at the &quot;G.S. Rakovski&quot; Defense Academy in Sofia, Bulgaria. The system is based on DBMS ORACLE. DELPHI was used in its design.</style></abstract></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Atanas Nachev</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Electromagnetic Radiation and the Computer Systems Data Security Problem</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">electromagnetic emission.</style></keyword><keyword><style  face="normal" font="default" size="100%">information assurance</style></keyword><keyword><style  face="normal" font="default" size="100%">Information Security</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2000</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2000</style></date></pub-dates></dates><volume><style face="normal" font="default" size="100%">4</style></volume><pages><style face="normal" font="default" size="100%">105-109</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">One set of problems in the area of information security is caused by electromagnetic emissions. This paper covers related risks and threats and describes a basis for solutions for information assurance. Presented are also original methods for solving the problem of electromagnetic emission.</style></abstract></record></records></xml>