The subject area of information security theory
The theory of information security is a relatively young science. It received its development in connection with the rapid development of information technologies, radio electronics and communications and the need to preserve information resources.
Like any other science, information security has its own conceptual apparatus, which is able to most accurately characterize all aspects of information security. Many concepts correspond to their foreign counterparts in their content. At the same time, some terms are not well-established and do not always accurately and fully characterize any process, property or object.
The subject area of information security is:
information and its properties;
threats to the security of information and its owners;
security policy and security models;
methods, methods and means of information protection;
classification of protection systems;
requirements for the security of information systems;
methodology for assessing the security of information systems and designing protection;
specific information protection systems used in various management bodies, institutions and enterprises of various forms of ownership.
The first document establishing the basic terms and definitions in the field of information protection in Russia was published in 1992 by the State Technical Commission of the Russian Federation under the title "Terms and definitions in the field of protection against access to information. The guiding document of the State Technical Commission of Russia". In 1996, the main terms and definitions were standardized by the State Standard. GOST R 50922-96 Information protection has been released. Basic terms and definitions.
