scholarly journals Issues of Security of Remote Banking Systems

2018 ◽  
pp. 6-10
Author(s):  
Aleksandra Vlasenko ◽  
Irina Korkh

The banking system of the Russian Federation is based on Federal legislation, as well as industry and inter-industry standards developed by the International community and the Central Bank of the Russian Federation. The introduction and development of remote banking services is the most popular direction in the modern banking system. The term ‘remote banking service’ refers to the technology of providing services for the remote transmission of orders by credit institutions (without clients’ presence in bank office), using different communication channels. Information security in bank-client systems is carried out by several types of protection. Client authentication is confirmed by the use of an electronic signature. The data channel and the data itself are encrypted. In order to implement the above-described functions of the bank-client system in any software, the client must first generate and register cryptographic keys with the bank and obtain electronic digital certificates. In addition to the protection of the transferred data, personal data that have entered the system of remote banking services also need protection. The research purpose is to analyze the system of remote banking services, to identify regulatory and methodological documents regulating information security issues, options for meeting the requirements of regulators. Confirmation or refutation of the issue’s urgency should be considered as research results.

Author(s):  
A. D. Bartsits

The article considers the financial market as an object of antitrust regulation and control, the banking services market. The importance of conducting antimonopoly control in the banking sector is given. The state of the banking system, as well as competition in the banking services market is analyzed. The interaction of two control bodies — the FAS of the Russian Federation and the Bank of Russia is given.


Author(s):  
M. G. Alizade

The article provides a comparative analysis of the legislation on administrative offenses of the Russian Federation and the Republic of Azerbaijan in the provision of public services. It is noted that the Code of Administrative Offenses of the Russian Federation provides for only one article 5.63 "Violation of the legislation on the organization of the provision of state and municipal services." The article provides a detailed analysis of all its parts. The ways of improving the disposition of the article are proposed. The Code of Administrative Offenses of the Republic of Azerbaijan contains Article 380, which establishes administrative responsibility for violation of the legislation on electronic signature and electronic document. There are Rules for the provision of electronic services in the Republic of Azerbaijan, article 13 of which establishes not administrative responsibility, but the obligation of electronic service providers to ensure the protection of personal data and other information that was obtained in the course of the provision of electronic services. At the end of the article, conclusions are made about the possibility of applying the positive experience of both countries in their legislation.


Author(s):  
Sergey Valerevich Belov ◽  
Irina Mikhalovna Kosmacheva ◽  
Irina Vyacheslavovna Sibikina

To solve the problem of information security management the method was proposed that allows determining the degree of importance of confidential documents of the organization. The urgency of the proposed algorithm was substantiated taking into account the requirements of the legislation of the Russian Federation in the sphere of information security. The stages prior to the formation of the list of confidential documents of the organization were described. A review of the main documents of the legal and regulatory framework was carried out including documents relating to the state regulation of relations in the sphere of information security. The classes of protected information for the accessing categories were considered. The criteria changes of the value of information in the process of time were represented. The algorithm of formation of the list of confidential documents of the organization based on the properties of information was offered. The algorithm is based on an expert method of pair comparison of alternatives. The result of the use of this method is a number of confidential documents, ranked in descending order of importance. For each document the weighting factor of importance can be calculated. The verification stage of the degree of expert consistency was included in the methodology to eliminate the use of erroneous expert data. The application of the methodology is illustrated by a calculated example.


Author(s):  
Yanis Arturovich Sekste ◽  
Anna Sergeevna Markevich

The subject of this research is the problems emerging in the process of establishment and development of the Institution of personal data protection in the Russian Federation. Special attention is turned to the comparison of Soviet and Western models of protection of private life and personal data. The authors used interdisciplinary approach, as comprehensive and coherent understanding of socio-legal institution of personal data protection in the Russian Federation is only possible in inseparable connection with examination of peculiarities of the key historical stages in legal regulation of private life of the citizen. After dissolution of the Soviet political and legal system, the primary task of Russian law consisted in development and legal formalization of the institution of protection of human and civil rights and freedoms, first and foremost by means of restricting invasion of privacy by the state and enjoyment of personal freedom. It is concluded that the peculiarities of development of the new Russian political and legal model significantly impacted the formation of the institution of personal data protection in the Russian Federation. The authors believe that the Russian legislator and competent government branches are not always capable to manage the entire information flow of personal data; therefore, one of the priority tasks in modern Russian society is the permanent analysis and constant monitoring of the development of information technologies.


Author(s):  
Ilia Pavlovich Mikhnev ◽  
Svetlana Vladimirovna Mikhneva

The article discusses the competences and powers of the state authorities of the Russian Federation within their legal status in the field of ensuring the security of critical information infrastructure. Some functions and authorities in the field of information security have changed in a number of federal executive bodies. In particular, the Federal Security Service, on the basis of a presidential decree, is authorized to create a state system for detecting, preventing and eliminating the consequences of computer attacks on information resources of the Russian Federation. However, not all rights and obligations are enshrined; a number of powers cause the duality of the legal status of certain federal bodies of state power. The clarity and unambiguity of securing the rights and obligations of state bodies authorized in the field of information security are guarantees for effectively ensuring the security of important information infrastructure facilities.


Author(s):  
Юлия Борисовна Арон ◽  
Елена Валерьевна Жегалова

В статье рассматривается актуальная проблема интеграции крипто-валюты в банковскую систему РФ. Авторами предлагается определение криптовалюты, обосновывается востребованность использования цифровой валюты в экономике. Рассматривается специфика современного правового регулирования операций с криптовалютой и перспективы его развития в российской экономике. The article deals with the actual problem of integrating cryptocurrency into the banking system of the Russian Federation. The authors propose a definition of cryptocurrency, substantiate the demand for the use of digital currency in the economy. The article considers the specifics of modern legal regulation of cryptocurrency transactions and the prospects for its development in the Russian economy.


Author(s):  
Anna Aleksandrovna Bakulina

This article explores the vulnerabilities of Russia in the digital environment, as well as such phenomena of modern digital economy as cryptocurrencies, blockchain, big data, artificial intelligence, and robotics. The question is raised on the risks that humanity faces in the digital space, which entail the implementation of the latest technologies in society. The author offers the ways for their minimization. The article covers the project “Digital Economy” developed by the Government of the Russian Federation, which is intended for creation of sustainable and secure information and telecommunications infrastructure for high-speed transmission, processing and storage of data bulk, accessible to all organizations and households. Analysis is conducted on the modern enterprise in the sphere of information and communication technologies and the concept on the protection against personal data theft. The crucial role of the IT specialists in digitalization is highlighted. The conclusion is made that in digital space, the major threat to national security is the hacker attacks aimed at the theft of personal data, intellectual property, etc. The author believes that the minimization of risks detected in the course of research requires providing technology opportunity for the Russian Federation to store the collected data locally, rather than abroad. The all-round government influence on the research and legislative sphere, legislative orientation towards stimulating the development of innovation technologies would ensure safe and effective integration of socioeconomic sphere into the digital space.


Author(s):  
Sergey E. Channov ◽  

Introduction. The article is devoted to the use of digital technologies in the field of public administration using the example of state and municipal information systems. Currently, two types of such systems can be distinguished in the Russian Federation: 1) allowing direct enforcement activities; 2) used to capture certain information. Theoretical analysis. Information systems of the first type acquire the properties of an object of complex legal relations, in which suppliers and consumers of information, government bodies, as well as other persons become participants. This entails the fact that in the implementation of public administration, the source of regulation of public relations to a certain extent becomes the program code of these information systems. Accordingly, any failures and errors in the public information system become facts of legal importance. Empirical analysis. The main risks of using information systems of the second type in public administration relate to the illegal access (or use) of information stored in their databases. The consolidation of databases containing different types of information is a serious threat. In this regard, the creation of the Unified Federal Information Register containing information about the population of the Russian Federation, provided for by the Federal Law No. 168-FZ of 08.06.2020, may lead to a large number of socially negative consequences and comes into obvious conflict with the legislation on personal data. Results. State and municipal information systems themselves can improve public administration, including reducing corruption in the country. At the same time, their reduced discretion in management decisions is not always appropriate. Accordingly, their implementation should be preceded by the analysis of the characteristics of a specific area of management, as well as the proposed use of digital technologies.


Author(s):  
N.M. Kurbatov

The concept of critical information infrastructure is analyzed. The history of its formation and consolidation in the legal space of Russian legislation is considered. The article studies the experience of foreign countries in the field of ensuring information security in general and protecting critical infrastructure in particular. The relevance of the chosen topic is due to the course taken by the Russian Federation for the development of the information society in the country, as well as the need to protect significant information systems and resources of state authorities. The author of the article reveals the terms included in the definition of critical information infrastructure, enshrined in the legislation of the Russian Federation. In conclusion, the main problems of the considered regulatory legal acts are highlighted, recommendations are given on the further development of the information security system of critical infrastructure.


Sign in / Sign up

Export Citation Format

Share Document