Захист даних в інформаційній моделі модуля "Кафедра" автоматизованої інформаційної системи університету

[15] Ю. С. Рамський, “Формування інформаційної культури особи - пріоритетне завдання сучасної освітньої діяльності”, Науковий часопис НПУ імені М. П. Драгоманова.Комп'ютерно -орієнтовані системи навчання, т.2, № 8 (1), с. 19-42, 2004 .

[16] D. Orozova, K. Kaloyanova, and M. Todorova, “Introducing Information Security Concepts and Standards in Higher Education”. TEM Journal, vol.8, no.3, pp. 1017 - 1024, 2019. doi: https://doi.org/ 10.18421/TEM83 -46.

[17] R. Zheng, H. Ma, Q. Wang, J. Fu, and Z. Jiang, “Assessing the security of campus networks: the case of seven universities”, Sensors (Basel), vol. 21, no. 1 , pp. 301 - 312, Jan. 2021. doi: https://doi.org/10.3390/s21010306.

[18] J. Merchan-Lima, F. Astudillo-Salinas, L. Tello-Oquendo, F. Sanchez, G. Lopez-Fonseca, and D. Quiroz, “Information security management frameworks and strategies in higher education institutions: a systematic review”, Annals of Telecommunications, vol. 76, no. 3, pp. 255-270. doi: https://doi.org/10.1007/s12243- 020-00783-2.

[19] J. B. Ofosu, and R. K. Bemile, Lecturer Academic Record Management System (A Case of MethodistUniversity College Ghana). Open Science Repository Computer and Information Sciences, 2013. [Електронний ресурс]. Доступно:https://s3.amazonaws.com/opensciencerepository/Papers/23050476/Open-Science-Repository- 23050476.pdf. doi: https://doi.org/10.7392/openaccess.23050476. Дата звернення: Sep 19, 2023.

[20] М. Стурчак, та Л. Гальчинський, “Система захисту цифрових даних в рамках інформаційної підсистеми “Кафедра” вищого навчального закладу” на I Міжн. наук. конф. Актуальні питання розвитку галузей науки, Чернігів, 2023, с.140-145.

[21] D. Ferraiolo, and R. Kuhn, “Role-Based Access Controls”, Conference 15th National Computer Security Conference (NCSC), Baltimore, Maryland, 1992 , pp.554 - 563.

[22] E. Utami, and S. Raharjo, “Database Security Model in the Academic Information System”, International journal of security and its applications, vol.8, no 3, pp.163 - 174. 2014, doi:10.14257/ijsia.2014.8.3.18.

[23] R. S Sandhu, “Role-based access control”, in Advances in Computers, vol. 46, Academic Press, 1998, pp. 237-286.

[24] Sascha Kern, Thomas Baumer, Sebastian Groll, Ludwig Fuchs, Gunther Pernul: “Optimization of Access Control Policies”, J. Inf. Secur, vol. 70, November 2022, 103301. doi: https://doi.or g/10.1007/978-3-031- 37586-6_14.

[25] H. F. Atlam, M. A. Azad, M.O. Alassafi, A. A. Alshdadi, and A. Alenezi, “Risk-Based Access Control Model: A Systematic Literature Review. Future Internet ”. International Journal of Web Information Systems Issue(s) , vol.12, iss.103, pp. 156-180, 2020. doi: https://doi.org/ 10.1108/IJWIS-04-2022-0077.

Abstract

Data protection in the information model of the "department" module of the university's automated information system

Leonid Galchynskyi

PhD in Technical Sciences, Associate Professor at the Department of Information Security National Technical University of Ukraine “Igor Sikorsky Kyiv Polytechnic Institute”, Kyiv, Ukraine

Maxim Sturchak

Higher Education applicant from the Institute of Physics and Technology

National Technical University of Ukraine “Igor Sikorsky Kyiv Polytechnic Institute”, Kyiv, Ukraine

This paper presents the results of a study on the creation of an information model of the "Department" module of an automated information system in a higher education institution, which makes it possible to ensure the proper quality of the educational process in a higher education institution. The revolution in personal computing and the spread of the Internet have brought the solution to the problem of automating information processes at the departmental level much closer, but it takes a long time to improve and disseminate technologies that would support the digitalisation of the entire educational process of the department, meeting the requirements and needs of all its participants. At present, due to the technological capabilities and a significant increase in the methodological level of building information systems for higher education institutions, the conditions have already been created to meet these needs within the automated information system of higher education institutions. However, there are still a number of problems to be solved, such as the development of an information model of the "Department" module. The article presents an information model of the module "Department", which reflects the information processes that support the educational process, shows the possibilities of using this model in the information environment of a higher education institution. In the presented model, special attention is paid to the problem of data protection, which has become more acute in recent years and is a general educational issue. According to Ukrainian and foreign researchers, the educational sector is one of the first in terms of information threats. It is noted that data protection should be taken into account through RBAC (Role Base Access Control) roles, whose policy is more flexible. In addition, the "Department" module can be implemented as a web application "Operational Management Unit", which will not only attract the attention of users but also help them to quickly and easily find the necessary information and perform the necessary actions. The presented example clearly demonstrates the effectiveness of the presented model for the tasks of managing the educational process at the level of a department of a higher education institution.

Keywords: higher education institution; information system; information scheme of the department; role-based access control; server for web applications.

References (translated and transliterated)

[1] M. S. L'vov, "Development trends of educational information and communication technologies", Journal of Information Technologies in Education (ITE), no. 1, pp. 107-114, 2008 https://doi.org/10.14308/ite000014(in Ukrainian).

[2] Y. M. Petrovych, and Yu. M. Rymar, "Information systems for managing the educational process in universities: a comparative analysis", Visnyk Lviv Polytechnic.Logistics, v. 735, pp. 167 - 175, 2012 (in Ukrainian).

[3] Y. V. Tryus, H. O. Zaspa, O. S. Kozhemiakin, and A. V. Ashyrova, “Information and analytical system for educational activities support of structural divisions of higher education institutions”, Bulletin of Cherkasy State Technological University, no.4, pp. 27 - 38, 2020. doi: https://doi.org/ 10.24025/23064412.4.2020.219482 (in Ukrainian).

[4] O. V. Spivakovsky, "Features of automated management systems of higher educational institutions", Bulletin of the Kharkiv National University. Mathematical modeling. Information technologies. Automated control systems, Issue 3, No. 629, pp. 86 - 99, 2004, (in Ukrainian).

[5] N. Topuzov, “Designing of educational environment of educational institutions in modern society”, Ukrainian pedagogical journal, no. 1, pp. 26 - 36. 2017. [Online]. Available:https://uej.undip.org.ua/index.php/journal/article/view/514/444 (in Ukrainian).

[6] V. G. Hrytsenko, “Theoretical and methodical bases of designing and implementation of information - analytical system of university management”, Ph. D. dissertation, 13.00.10 Information and Communication Technologies in Education» (01 «Education / Pedagogics»). 2019. [Online]. Available:https://lib.iitta.gov.ua/716524/2/dyser_Hrytsenko.pdf (in Ukrainian).

[7] V. Yu. Bykov., A. M. Gurzhii, and M. P. Shishkina. "Conceptual foundations of the formation and development of a cloud-oriented educational and scientific environment of a higher pedagogical education institution", Modern information technologies and innovative teaching methods in the training of specialists: methodology, theory, experience, problems, Issue 50. c. 21 - 26, 2018 (in Ukrainian).

[8] S. L. Londar, “International experience in the development of modern educational information systems” Educational Analytics of Ukraine, vol.1, no. 5, pp. 5 - 19, 2019. doi: https://doi.org/10.32987Z2 617-85322019-1-5-19 (in Ukrainian

[9] K. S. Musti, “Management Information Systems for Higher Education Institutions: Challenges and Opportunities” in Quality Management Implementation in Higher Education, M. Sony, K. Karingada, and N. Baporikar (Eds.), 2020, pp. 110 - 131.

[10] M. N. Habib, U. Khalil, Z. Khan, and M. Zahid, “Sustainability in higher education: What is happening in Pakistan?” Int. J. Sustain. High. Educ. vol. 22, no. 1, pp. 681 - 706, Jan. 2021, doi:10.1108/IJSHE -062020-0207.

[11] J. Khalid, B. R. Ram, M. Soliman, A. J. Ali, M. Khaleel, and M. S. Islam, “Promising digital university: A pivotal need for higher education transformation”, International Journal of Management in Education .vol. 12, no.3, pp. 264 - 275, 2018. doi: https://doi.org/10.1504/ijmie.2018.092868.

[12] V. M. Huzhva, “Universities Digital Transformation”, Eastern Europe: Economics, Business and Management, no. 4(21), pp. 597 - 604, 2019. [Online]. Available: http://www.easterneurope- ebm.in.ua/journal/21_2019/92.pdf (in Ukrainian).

[13] M. M. Kosiyuk, A. Y. Mazarchuk, and K. E. Bilovskyi, “Experience of the automated information systems in management of educational process of the university”, Information Technologies and Learning Tools, vol. 23, no. 3, 2011. doi: https://doi.org/10.33407/itlt.v23i3.456 (in Ukrainian).

[14] S. V. Chernyshenko, and Yu. I. Vorotnytskyi, Methodological foundations of the creation, implementation, and development of an integrated information system of university management. Sumy: Sumy State University. 2015. [Online]. Available: http://inure.nmu.org.ua/pdf/ methodology_ua.pdf (in Ukrainian).

[15] Yu. S. Ramskyi, "Formation of the information culture of the individual - a priority task of modern educational activity", Scientific journal of the M.P. Drahomanova. Computer-oriented learning systems. vol. 2, No. 8 (1), p. 19-42, 2004 (in Ukrainian).

[16] A. Alexei, P. Nistiriuc, A. Alexei, (2021). Analysis of security frameworks implemented in heis”, Inter. Conf, 347-359, https://doi.org/10.51582/interconf.7-8.06.2021.036.

[17] R. Zheng, H. Ma, Q. Wang, J. Fu, and Z. Jiang, “Assessing the security of campus networks: the case of seven universities”, Sensors (Basel), vol. 21, no. 1 , pp. 301 - 312, Jan. 2021. doi: https://doi.org/10.3390/s21010306.

[18] J. Merchan-Lima, F. Astudillo-Salinas, L. Tello-Oquendo, F. Sanchez, G. Lopez-Fonseca, and D. Quiroz, “Information security management frameworks and strategies in higher education institutions: a systematic review”, Annals of Telecommunications, vol. 76, no. 3, pp. 255-270. doi: https://doi.org/10.1007/s12243- 020-00783-2.

[19] J. B. Ofosu, and R. K. Bemile, Lecturer Academic Record Management System (A Case of Methodist University College Ghana). Open Science Repository Computer and Information Sciences, 2013. [Online]. Available: https://s3.amazonaws.com/opensciencerepository/Papers/23050476/Open-Science-Repository- 23050476.pdf. doi: https://doi.org/10.7392/openaccess.23050476. Accessed on: Sep 19, 2023.

[20] M. Sturchak, and L. Galchynskyi, "Digital data protection system within the information subsystem "Department" of a higher educational institution" at the 1st International of science conf. Actual issues of the development of branches of science, Chernihiv, 2023, pp. 140-145. [Online]. Available: https://archive.mcnd.org.ua/index.php/conference-proceeding/article/view/563 (in Ukrainian).

[21] D. Ferraiolo, and R. Kuhn, “Role-Based Access Controls”, Conference 15th National Computer Security Conference (NCSC), Baltimore, Maryland, 1992 , pp.554 - 563.

[22] E. Utami, and S. Raharjo, “Database Security Model in the Academic Information System”, International journal of security and its applications, vol.8, no 3, pp.163-174. 2014, doi:10.14257/ijsia.2014.8.3.18.

[23] R. S. Sandhu, “Role-based access control”, in Advances in Computers, vol. 46, Academic Press, 1998, pp. 237-286.

[24] Sascha Kern, Thomas Baumer, Sebastian Groll, Ludwig Fuchs, Gunther Pernul, “Optimization of Access Control Policies”, J. Inf. Secur, vol. 70, November 2022, 103301. doi: https://doi.org/10.1007/978 -3-031- 37586-6_14.

[25] H. F. Atlam, M. A. Azad, M.O. Alassafi, A. A. Alshdadi, and A. Alenezi, “Risk-Based Access Control Model: A Systematic Literature Review. Future Internet ”. International Journal of Web Information Systems Issue(s) , vol.12, iss.103., pp. 156-180, 2020. doi: https://doi.org/ 10.1108/IJWIS-04-2022-0077.

Размещено на Allbest.ru