Kravchenko S.I. The Security of Socio-Technical Systems

THE SECURITY OF SOCIO-TECHNICAL SYSTEMS

Sergey I. Kravchenko

Senior Lecturer, Department of Information Security,

South-Russian State Polytechnic University named after M.I. Platov

This email address is being protected from spambots. You need JavaScript enabled to view it.

Prosveshcheniya St., 132, 346428 Novocherkassk, Russian Federation

Abstract. The paper deals with the problem of information security of socio-technical systems when developing online applications. The structure of the socio-technical system, its subsystems and the stages of protection the information of such a system are described. The application of the socio-technical approach, its advantages and disadvantages are also studied. The material presented in the paper reveals the approach aimed at improving the efficiency in the development of online applications through the use of social engineering method. The positive factor is the use of feedback by users able to significantly improve existing systems, to reduce the risk of failure of the user from the operation of the remote systems associated with the lack of ease of use and unreliable protection of their personal data. To achieve this goal, we should identify the factors that affect the user’s behavior, as well as prevent users from performing unwanted actions. The creation of an information security system in online applications should help to neutralize the factors that encourage users to use tools to bypass or ignore information security mechanisms. Therefore, the use of social engineering approach in the development of information security systems will contribute to the goal of creating safe and usable applications.

Key words: information security, socio-technical system, security policy, damage assessment.

This work is licensed under a Creative Commons Attribution 4.0 International License.