Международная научно-техническая конференция «Практическое применение технических и цифровых технологий и их инновационных решений», татуфф, Фергана, 4 мая 2023 г

Новые этапы развития альтернативных источников энергии и телекоммуникационных технологий
Международная научно-техническая конференция «Практическое применение технических и 
цифровых технологий и их инновационных решений», ТАТУФФ, Фергана, 4 мая 2023 г. 
108
phenomena, processes or actions, provoking damage to the Tax Service of 
Uzbekistan.
For objects of informatization of the Tax Service, relevant and basic 
sources of external anthropogenic threats to information security are: 
- technical intelligence of foreign origin, aimed at information containing 
state secrets and on the key information infrastructure system above third level; 
- attackers who deliberately the impact of a destructive nature on 
information resources; 
- criminal and terrorist elements; 
- contractors performing installation and commissioning works technical 
equipment of information systems of the Tax Service; 
- suppliers of software and hardware and services. 
The main sources of internal anthropogenic threats are: 
- employees of the Tax Service acting outside the regulated powers that 
carry the deliberate nature of threats; 
- employees of the Tax Service acting within the framework of regulated 
powers that carry the unintentional nature of threats.
The main man-made sources of threats include adverse man-made events, 
including accidents at means of telecommunication infrastructure, on means 
engineering communications, equipment failures and failures. For FTS objects, 
the actual vulnerabilities are: 
- mistakes made in the process of designing objects informatization of tax 
authorities 
and 
telecommunications 
infrastructure, 
including 
physical 
deterioration of equipment, relatively short period of time hardware and 
software failure; 
- insufficient technical strength and insufficient the level of organization 
of the system of protection of tax authorities, including violations of the 
operation of technical means, such as: life support and energy supply; 

Muqobil energiya manbaalari va telekommunikatsiya texnologiyalarini rivojlantirishing yangi bosqichilari 
Международная научно-техническая конференция «Практическое применение технических и 
цифровых технологий и их инновационных решений», ТАТУФФ, Фергана, 4 мая 2023 г. 
109
- features of employees of the moral and physical plan, which may be 
prerequisites for criminal or terrorism, which include: 
dissatisfaction with position, dissatisfaction with actions leadership, the 
psychological incompatibility of some employees, psychosomatic and physical 
condition; 
- software susceptibility to viruses and malware; 
- the possibility of unauthorized modification of software calls, code, use 
of the programming environment automated information system; 
- vulnerabilities of SIS (information protection systems); 
- inappropriate configuration of the software provision with a regulatory 
legal framework, including means of information protection, their 
uncontrollability changes, undeclared actions of employees when software 
equipment management; 
- incomplete regulation of the responsibility of interaction in contracts 
with contractors; 
- discrepancy between the activity and the current state of the object 
protection, lack of appropriate control over the execution employees of the Tax 
Service of Uzbekistan of the regulations of activities, including installation of 
third-party software, violation regulations in the process of information 
exchange, destruction industrial waste and information carriers. Based on the 
considered sources and vulnerabilities of the Tax Service of Uzbekistan in in a 
broader sense, it is possible to form a more specific list threat. The number of 
such threats for the Tax Service of Uzbekistan is more than 200 units, therefore, 
we will consider the most relevant ones, using the method of identifying threats 
described in the previous section, taking into account the possibility and 
probability of implementation, relevance, level of initial security of the IT 
infrastructure, indicated by the coefficient Y1. degree of initial security is 
defined using seven technical and performance indicators of system 
characteristics, for each of which have several possible values. From these 

Новые этапы развития альтернативных источников энергии и телекоммуникационных технологий
Международная научно-техническая конференция «Практическое применение технических и 
цифровых технологий и их инновационных решений», ТАТУФФ, Фергана, 4 мая 2023 г. 
110
values, with queue, you must choose one that is more suitable for the rest 
operating information system. Selected value equivalent to a certain level of 
security: low, medium or tall. Table 2 presents the threats with the highest-level 
relevance and high level of possible implementation. 

Download 6,64 Mb.