Analysis of Information Security Threats in Automated Systems of Internal Affairs Agencies Implemented through Phishing Att

Abstract

Objective . To enhance the actual security of automated police systems, it is necessary to identify, systematize, and comprehensively analyze typical phishing-related information security threats aimed at compromising the components of these systems and misleading operators and users. Method . The solution method is a comprehensive analysis of typical information security threats in automated police systems, implemented using fake websites through phishing attacks. Result . Based on an analysis of the information security threat database developed by the Federal Service for Technical and Export Control of Russia, as well as the operational characteristics of modern automated police systems, information on the nature of phishing attacks and their technical characteristics, and the results of a survey of information security specialists in departmental automated police systems, typical information security threats implemented through phishing attacks were identified. An analysis of the identified information security threats was conducted, taking into account their sources, targets, exploited vulnerabilities of automated police system components, and the potential consequences of their implementation. Conclusion . The results are planned to be used in further research for a quantitative assessment of the risks of implementing information security threats using fake websites, taking into account the time factor and the extent of information damage, in order to identify priority scenarios for their implementation and justify the choice of information security measures in the AS OVD.