Protection of information in the network in Fig. 9.1. can be improved through the use of special noise generators, masking incidental electromagnetic radiation and laying, network filters, network devices, noise power, scrambler (encoder phone calls), suppressor of the cellular phones, etc. Crucial decision is to move the compounds on the basis of optical fiber, free from the influence of electromagnetic fields, and permits the detection of unauthorized connections.
In general, a means of ensuring protection of information in the prevention of deliberate action, depending on how the implementation can be divided into groups:
- Technical (hardware) resources. This is a different type of device (mechanical, electromechanical, electronic, etc.), which hardware address the problem of information security. They are either physically impede penetration or, if the penetration is still held, access to information, including through her disguise. The first part of the problem solve locks, grates on the windows, the security alarm system, etc. The second – as mentioned above, noise generators, network filters, scanning radios and many other devices, “off” potential channels of information leakage, or allow them to observe. The advantages of technology related to their reliability, regardless of the subjective factors, a high resistance to modification. Weaknesses – lack of flexibility, a relatively large volume and weight, the high cost.
- The software includes programs to identify users, access control, encryption of information, removal of residual (working) information like temporary files, the test control system, protection, etc. The advantages of software – the universality, flexibility, reliability, ease of installation, the ability to update and development. Disadvantages – limited functionality of the network, the use of resources, file servers and workstations, the high sensitivity to accidental or deliberate change, possibly depending on the type of computers (the hardware).
- Mixed hardware / software implement the same functions as hardware and software separately, and have intermediate properties.
- Institutional funds arise from organizational and technical (training rooms with computers, cable system to meet the requirements for restricting access to it, etc.) and legal (national laws and rules set by the leadership of a particular enterprise). Benefits of institutional funds is that they allow to solve many different problems that are simple to implement, quick to react to unwanted actions on the network have unlimited opportunities modification and development. Disadvantages – high dependence on subjective factors, including the overall organization of work in a particular unit.
Depending on the degree of dissemination and accessibility of available tools, so they continue in more detail (see “Standard methods of encryption and cryptographic systems, and software data protection). Other means are applied when needed to provide an additional level of data protection.
Data encryption is a variety of software and information security is of particular importance in practice as the only reliable protection of information transmitted on a consistent long lines of leakage. Encryption is the last form almost irresistible “line” of protection against unauthorized access. The term “encryption” is often used in connection with the more general notion of cryptography. Cryptography involves the ways and means to ensure the confidentiality of information (including using encryption) and authentication. Confidentiality – protection of information from the dissemination of its contents by persons who do not have access rights to it. In turn, the authentication is an authentication of the various aspects of information networking: a communication session, the parties (ID), content and source (the authorship of c through digital signatures).
The number of encryption programs is limited, some of which are the standard factor. However, even if the encryption algorithm is not a secret, to decrypt (decryption) without knowing the private key is extremely difficult. This property is in modern encryption programs available in the multistep process of transformation of the initial public information (plain text in English literature), using a key (or two keys – one for encryption and decryption). Ultimately, any complex method (algorithm) encryption is a combination of relatively simple methods.