Aeroflot began to build an end-to-end system of information security

Aeroflot decided to create the end-to-end system of information security (ETESIS) which will help it to protect personal data, network interconnection, web applications, servers, the automated workplace and mobile devices, to prevent date leak, to adjust information security risk management.

During the second half 2016 and all 2017 the carrier plans using the contractor (see tender conditions^[1]) to be engaged in development and deployment of a prototype of a system in pilot zones. Aeroflot is ready to spend 102.6 million rubles for it.

Mobile phones of staff of Aeroflot will be controlled using an end-to-end system of information security

At the end of July, 2016 it became known that "The research institute of communication systems and management" (NIISSU) became the winner of the tender. The agreement with the winner will be signed with cost and on the terms of the commercial offer which details are not disclosed.

The St. Petersburg institute of information science and automation of the Russian Academy of Sciences got the second place, the third place was taken by the request of Federal State Unitary Enterprise ProtectionInfoTrans of the Ministry of Transport of the Russian Federation.

Requests of participants were estimated on such indicators as the bid price, qualification of personnel / the scientific and technical state, terms of execution of works, experience and reputation of the participant, quality of the submitted technical proposal.

Aeroflot using the created system, in addition, expects to prevent leaks via mail servers, web mail, job search services, social networks, services of instant messages, to control USB drives, smart cards, connections to WiFi-networks, CD/DVD drives, printing on local and network printers, network connections.

A system will have to execute shadow copying of the documents printed and copied on removable mediums and also to analyze and control all messages during the work of employees with corporate mail via mobile devices running iOS and Android, to intercept, write and distinguish voice traffic of Skype, the IP telephony, Microsoft Lync, to recognize graphics and to analyze contents.

The subsystem of protection of mobile devices will have to control access for employees to the corporate information loaded on mobile devices, define in case of need location of mobile devices, provide a possibility of remote blocking, selective removal of corporate data and settings, to control the installed applications.

The subsystem of the analysis of security in the mode of detection of incidents (Forensic), in particular, will have to provide identification of attempts of selection of passwords in DBMS Oracle and also in operating systems of families Windows and Linux.

The purpose of works is creation and commissioning of a prototype of the End-to-end system of information security of an information system of PJSC Aeroflot for ensuring protection against relevant security risks to its functioning and also for protection of information circulating in it against illegal access attempts, destruction, modifying, blocking, copying, granting, distribution and other unauthorized actions. KSIB should represent a complex of interconnected organizational and technical measures for ensuring necessary level of security of the IC PJSC Aeroflot and its separate subsystems, said in documents of airline

Notes