DOI 10.17586/0021-3454-2015-58-3-157-166
UDC 004.056.53
NEW APPROACH TO DATA SECURING IN INFORMATION SYSTEM
ITMO University, Saint Petersburg, 197101, Russian Federation; OOO «Scientific Production Enterprise «Information technologies in business»; postgraduate; development manager
A. Y. Shcheglov
ITMO University, Saint Petersburg, 197101, Russian Federation; OOO «Scientific Production Enterprise «Information technologies in business»; Professor; General Director
Read the full article
Abstract. A new method of securing data processed in information system is considered. The approach is based on realization of control of access to newly created object (file, clipboard) in order to exclude the object from the access policy due to automatic marking on newly created objects. Practical realization of the method is illustrated by an example of patented, implemented, and approved technical solution. Application of the proposed approach is shown to change all requirements to other security mechanisms designed to solve problems other than access rights control and restriction and therefore generates a new information system data securing technology.
Keywords: information system, data security, unauthorized access, access rights control and restriction, access policy, newly created object.
