INFORMATION OUTPUT CHANNELS – RESEARCH AND MODELING

Abstract

Automated systems accumulate huge amounts of data, including confidential data, which makes the issue of their security particularly relevant. Globalization has also led to the emergence of new challenges related to information protection. The characteristic features of the modern use of computer technology are the growth of the role of automated processes, increased responsibility for decisions made on their basis, the integration of information resources into large-scale databases, ensuring remote access for a large number of users, and the complication of the modes of operation of technical means. Identification, analysis, and modeling of information leakage channels, as well as the assessment of potential risks to users' information security are an important task. Therefore, the subject of research is information leakage channels that arise in the process of functioning of information and communication systems and computer equipment, in particular computer networks, web browsers, and multimedia files. Any violation of confidentiality, integrity or availability of information can cause serious consequences - from financial losses and reduced efficiency of enterprises to undermining reputation or even creating threats to national security. That is why the issues of classification of information resources, as well as the identification and analysis of possible data leakage channels are becoming particularly relevant. The purpose of the work is to analyze the methods and mechanisms of implementing information leakage channels, in particular network protocols (HTTP, DNS, TCP/UDP), automatic data transmission by browsers (cookies, referer, user-agent, session tokens), electromagnetic and acoustic channels of side radiation, as well as steganographic methods of covert transmission of messages in graphic files. The study allowed us to comprehensively investigate some information leakage channels, familiarize ourselves with the methods of their detection and assess the risks to user security.