dtЦифровая трансформацияDigital Transformation2522-96132524-2822Educational Establishment “Belarusian State University of Informatics and Radioelectronics”10.35596/2522-9613-2022-28-3-60-64dt-701Research ArticleТЕХНИЧЕСКИЕ НАУКИTECHNICAL SCIENCESResearch on Safety Risks of Speech InformationResearch on Safety Risks of Speech InformationDavydauH. V.DavydauH. V.

Сand. Of Sci., Researcher at SRL 5.3 of R&D Department

Сand. Of Sci., Researcher at SRL 5.3 of R&D Department

PapouV. A.PapouV. A.

Researcher at SRL 5.3 of R&D Department

Researcher at SRL 5.3 of R&D Department

PatapovichA. V.PatapovichA. V.

Researcher at SRL 5.3 of R&D Department

Researcher at SRL 5.3 of R&D Department

nil53@bsuir.edu.byLiYeLiYe

Deputy Director

Researcher

WuXiaomingWuXiaoming

Researcher

Researcher

WangFuqiangWangFuqiang

Researcher

Researcher

ZhangPengZhangPeng

Researcher

Researcher

BiXiaoyanBiXiaoyan

Researcher

Researcher

Belarusian State University of Informatics and RadioelectronicsBelarusian State University of Informatics and RadioelectronicsJinan National Supercomputer CenterJinan National Supercomputer Center2022211120222836064Copyright © Davydau H.V., Papou V.A., Patapovich A.V., Li Y., Wu X., Wang F., Zhang P., Bi X., 20222022Davydau H.V., Papou V.A., Patapovich A.V., Li Y., Wu X., Wang F., Zhang P., Bi X.Davydau H.V., Papou V.A., Patapovich A.V., Li Y., Wu X., Wang F., Zhang P., Bi X.Данная работа распространяется под лицензией Creative Commons Attribution 4.0.This work is licensed under a Creative Commons Attribution 4.0 License.https://dt.bsuir.by/jour/article/view/701

The paper presents the results of research on the assessment of the security risks of speech information. It is shown that for speech information circulating in an acoustic form in a room, the main indicator of security is confidentiality. Confidentiality is determined by an indicator equal to 1, when complete confidentiality of speech information is provided, and an indicator equal to 0, when information has lost confidentiality, there are no intermediate values of this indicator. It is shown that the loss of confidentiality of speech information can occur due to the implementation of at least one of the possible threats. Methods for assessing the security risks of speech information are considered. For speech information, security risks consist of the risks of leakage through acoustic channels outside the security area of the room and the risks associated with the human factor, since the carrier of speech information is also a person. The risks associated with the leakage of speech information through acoustic channels are considered in details. The mechanism for ensuring zero risk of leakage of speech information through the acoustic channel is considered and specific recommendations for its implementation are given.

The paper presents the results of research on the assessment of the security risks of speech information. It is shown that for speech information circulating in an acoustic form in a room, the main indicator of security is confidentiality. Confidentiality is determined by an indicator equal to 1, when complete confidentiality of speech information is provided, and an indicator equal to 0, when information has lost confidentiality, there are no intermediate values of this indicator. It is shown that the loss of confidentiality of speech information can occur due to the implementation of at least one of the possible threats. Methods for assessing the security risks of speech information are considered. For speech information, security risks consist of the risks of leakage through acoustic channels outside the security area of the room and the risks associated with the human factor, since the carrier of speech information is also a person. The risks associated with the leakage of speech information through acoustic channels are considered in details. The mechanism for ensuring zero risk of leakage of speech information through the acoustic channel is considered and specific recommendations for its implementation are given.

security riskspeech informationconfidentialityspeech intelligibilityinformation securitysecurity riskspeech informationconfidentialityspeech intelligibilityinformation securityReferencesAnischenko, V. V. Metody otsenki effektivnosti zashchity aktivov na ob’yektakh informatsionnykh tekhnologiy [Methods for Assessing the Effectiveness of Asset Protection in Information Technology Facilities] / V. V. Anischenko, A. M. Krishtofik // Informatics. – 2004. – No. 3. – P. 95–105. (In Russ.)Anischenko, V. V. Metody otsenki effektivnosti zashchity aktivov na ob’yektakh informatsionnykh tekhnologiy [Methods for Assessing the Effectiveness of Asset Protection in Information Technology Facilities] / V. V. Anischenko, A. M. Krishtofik // Informatics. – 2004. – No. 3. – P. 95–105. (In Russ.)Davydau H.V., Kavan D.M. Metody obnaruzheniya i opredeleniya kharakteristik vozmozhnykh kanalov utechki rechevoy informatsii [Methods for Detecting and Determining the Characteristics of Possible Channels of Speech Information Leakage] // Doklady BGUIR. – 2011. – Vol. 5 (59). – P. 19–25. (In Russ.)Davydau H.V., Kavan D.M. Metody obnaruzheniya i opredeleniya kharakteristik vozmozhnykh kanalov utechki rechevoy informatsii [Methods for Detecting and Determining the Characteristics of Possible Channels of Speech Information Leakage] // Doklady BGUIR. – 2011. – Vol. 5 (59). – P. 19–25. (In Russ.)Lynkov L.M., Kavan D.M., Davydau H.V. Osobennosti zashchity rechevoy informatsii ot utechki po akusticheskomu kanalu [Features of Protection of Speech Information from Leakage through an Acoustic Channel] // Security of Information Technologies. – 2012; Vol. 1 (180-181). – P. 19–25. (In Russ.)Lynkov L.M., Kavan D.M., Davydau H.V. Osobennosti zashchity rechevoy informatsii ot utechki po akusticheskomu kanalu [Features of Protection of Speech Information from Leakage through an Acoustic Channel] // Security of Information Technologies. – 2012; Vol. 1 (180-181). – P. 19–25. (In Russ.)Davydau H.V., Kavan D.M., Popou V.A., Patapovich A.V. Zashchita rechevoy informatsii ot utechki po akusticheskim kanalam [Protection of Speech Information from Leakage through Acoustic Channels] // Doklady BGUIR. – 2009. – Vol. 4 (42). – P. 49–54. (In Russ.)Davydau H.V., Kavan D.M., Popou V.A., Patapovich A.V. Zashchita rechevoy informatsii ot utechki po akusticheskim kanalam [Protection of Speech Information from Leakage through Acoustic Channels] // Doklady BGUIR. – 2009. – Vol. 4 (42). – P. 49–54. (In Russ.)Bradley J.S., Cover. B.N. Designing and Assessing the Architectural Speech Security of Meeting Rooms and Offices: IRC Research Report, RR – 187. 2006.Bradley J.S., Cover. B.N. Designing and Assessing the Architectural Speech Security of Meeting Rooms and Offices: IRC Research Report, RR – 187. 2006.Spekers and auditors selection technique in assessing speech information security / Y. N. Seitkulov [et al.] // Journal of Theoretical and Applied Information Technology. – 2019. – Vol. 97 (12). – P. 3306–3316.Spekers and auditors selection technique in assessing speech information security / Y. N. Seitkulov [et al.] // Journal of Theoretical and Applied Information Technology. – 2019. – Vol. 97 (12). – P. 3306–3316.Method for speech intelligibility assessment with combined masking signals / Y. N. Seitkulov [et al.] // Journal of Theoretical and Applied Information Technology. – 2020. – Vol. 98 (8). –P. 1173–1186.Method for speech intelligibility assessment with combined masking signals / Y. N. Seitkulov [et al.] // Journal of Theoretical and Applied Information Technology. – 2020. – Vol. 98 (8). –P. 1173–1186.Algoritym of forming speech base units using the method of dynamic programming / Y. N. Seitkulov [et al.] // Journal of Theoretical and Applied Information Technology. – 2018. – 96 (23). – P. 7928–7941.Algoritym of forming speech base units using the method of dynamic programming / Y. N. Seitkulov [et al.] // Journal of Theoretical and Applied Information Technology. – 2018. – 96 (23). – P. 7928–7941.Seitkulov, Y. N. Requirements for auditors and announcers when assessing the security of speech information / Y. N. Seitkulov, H. V. Davydau, A. V. Patapovich // Abstracts of the XII Belarusian-Russian Scientific and Technical Conference “Technical Means of Information Security. – Minsk, 2014. – P. 11–12.Seitkulov, Y. N. Requirements for auditors and announcers when assessing the security of speech information / Y. N. Seitkulov, H. V. Davydau, A. V. Patapovich // Abstracts of the XII Belarusian-Russian Scientific and Technical Conference “Technical Means of Information Security. – Minsk, 2014. – P. 11–12.Boranbayev, S. N. Spekers and auditors selection technique in assessing speech information security / S. N. Boranbayev, H. V. Davydau, A. V. Patapovich // Journal of Theoretical and Applied Information Technology. – 2019. – Vol. 97(12). – P. 3306–3316.Boranbayev, S. N. Spekers and auditors selection technique in assessing speech information security / S. N. Boranbayev, H. V. Davydau, A. V. Patapovich // Journal of Theoretical and Applied Information Technology. – 2019. – Vol. 97(12). – P. 3306–3316.Gotovko, M. A. Assessment of the security of speech information. Information Technologies and Systems / M. A. Gotovko, A. V. Davydau, Y. N. Seitkulov // Proceedings of the International Scientific Conference, BSUIR, Minsk, Belarus, October 23, 2013 Information Technologies and Systems 2013 (ITS 2013). – Minsk, 24th October 2013. – P. 268–269.Gotovko, M. A. Assessment of the security of speech information. Information Technologies and Systems / M. A. Gotovko, A. V. Davydau, Y. N. Seitkulov // Proceedings of the International Scientific Conference, BSUIR, Minsk, Belarus, October 23, 2013 Information Technologies and Systems 2013 (ITS 2013). – Minsk, 24th October 2013. – P. 268–269.

The authors declare that there are no conflicts of interest present.