1.5 Technical Channels of Information Leakage
41
Depending on the access category, information is divided into publicly available
information and information with restricted access, whose confidentiality is established by law. Information with restricted access includes information constituting a
state secret, as well as various sensitive data (personal data, information constituting
commercial, official and other secrets, etc.).
In accordance with the requirements of national laws, information with restricted
access is subject to mandatory protection. Legal, organizational, and technical
measures are taken to protect information. They are aimed at preventing information
leakage, undue influence on information (destruction, modification, i.e., distortion
and substitution of information), as well as unlawful denial-of-access to information
[18].
One of the main threats to the security of information with restricted access is
its leakage through technical channels, i.e., an uncontrolled spread of the informative signal from its source through the physical medium to the technical means of
interception [19].
Interception of information is an illegal (unauthorized) means obtaining information using a special equipment that detects, receives, and processes informative
signals.
As a result of such interception, one can illegally study or record information on
a carrier.
Information processing equipment is the source of informative signals, i.e., signals
with the parameters used to define the protected information. The term “information
processing” is general and implies a set of operations for collecting, accumulating,
entering, outputting, receiving, transmitting, recording, storing, filing, destroying,
transforming, and displaying information [20].
The restricted access information processing equipment (IPE) generally includes
[21, 22]: ACS equipment, electronic computers, and their individual components, hereinafter referred to as computer equipment (CE); equipment for making
and copying documents; sound amplification, sound recording, sound reproduction, and simultaneous interpretation equipment; domestic CCTV systems; video
recording and video playing systems; operational command communications
systems; Intercom systems, including connecting lines for the above equipment, etc.
These equipment and systems are in some cases referred to as the main equipment
and systems (MES).
Along with the equipment and systems for processing information with restricted
access, other equipment and systems are generally installed on the same premises, but
they are not directly involved in the processing of information with restricted access.
Additional equipment and systems include city automatic telephone communication
system; equipment for data transmission in the radio communication system; security
and fire alarm systems; warning and alarm systems; control and measuring equipment; air conditioning systems; wired broadcasting systems, radio and television
systems (terminal loudspeakers, broadcasting equipment, TV sets, radio receiving
sets, etc.); electronic office equipment; electric clock systems, etc. They are called
auxiliary equipment and systems (AES) [21, 22].
41
Depending on the access category, information is divided into publicly available
information and information with restricted access, whose confidentiality is established by law. Information with restricted access includes information constituting a
state secret, as well as various sensitive data (personal data, information constituting
commercial, official and other secrets, etc.).
In accordance with the requirements of national laws, information with restricted
access is subject to mandatory protection. Legal, organizational, and technical
measures are taken to protect information. They are aimed at preventing information
leakage, undue influence on information (destruction, modification, i.e., distortion
and substitution of information), as well as unlawful denial-of-access to information
[18].
One of the main threats to the security of information with restricted access is
its leakage through technical channels, i.e., an uncontrolled spread of the informative signal from its source through the physical medium to the technical means of
interception [19].
Interception of information is an illegal (unauthorized) means obtaining information using a special equipment that detects, receives, and processes informative
signals.
As a result of such interception, one can illegally study or record information on
a carrier.
Information processing equipment is the source of informative signals, i.e., signals
with the parameters used to define the protected information. The term “information
processing” is general and implies a set of operations for collecting, accumulating,
entering, outputting, receiving, transmitting, recording, storing, filing, destroying,
transforming, and displaying information [20].
The restricted access information processing equipment (IPE) generally includes
[21, 22]: ACS equipment, electronic computers, and their individual components, hereinafter referred to as computer equipment (CE); equipment for making
and copying documents; sound amplification, sound recording, sound reproduction, and simultaneous interpretation equipment; domestic CCTV systems; video
recording and video playing systems; operational command communications
systems; Intercom systems, including connecting lines for the above equipment, etc.
These equipment and systems are in some cases referred to as the main equipment
and systems (MES).
Along with the equipment and systems for processing information with restricted
access, other equipment and systems are generally installed on the same premises, but
they are not directly involved in the processing of information with restricted access.
Additional equipment and systems include city automatic telephone communication
system; equipment for data transmission in the radio communication system; security
and fire alarm systems; warning and alarm systems; control and measuring equipment; air conditioning systems; wired broadcasting systems, radio and television
systems (terminal loudspeakers, broadcasting equipment, TV sets, radio receiving
sets, etc.); electronic office equipment; electric clock systems, etc. They are called
auxiliary equipment and systems (AES) [21, 22].