PRACTICAL APPROACHES TO ORGANIZING SECURE DATA TRANSFER VIA TLS PROTOCOL USING OPENSSL MEANS
Anna Ilyenko, Sergii Ilyenko, Olena Prokopenko, Iryna Kravchuk · Cybersecurity Education Science Technique · 2023
Information protection during message transmission is one of the most important tasks in the modern world. The workstations of a particular organization can be well protected using different software and hardware means, but when information is transferred to an open unprotected space, there is a high probability of data leakage, interception, and substitution. In most cases, the use of insufficiently effective security measures causes the loss of personal data of citizens, data of an enterprise or organization that is a commercial secret, information with limited access or even state secrets of the critical infrastructure sector. In this case, it is considered appropriate to use modern cryptographic methods to organize secure data transmission. Considering the ever-growing statistics of cyberattacks on information and telecommunication networks, after in-depth analysis and development of this issue, the authors of the article highlighted the current directions of protection of information and telecommunication networks and security solutions in information and telecommunication networks. The authors have comprehensively covered and investigated the basic principles of the modern state of data transmission security and the organization of information protection during its transmission using the TLS protocol, which made it possible to determine the directions for solving or modernizing existing information security means. Also, attention is paid to the development of a software implementation of the module for secure data transmission in the information and telecommunications network using the improved TLS protocol by means of OpenSSL, which made it possible to establish connections using digital signature algorithms. The authors are planning a series of scientific and technical solutions for the development and implementation of effective cryptographic methods to ensure the security of information and telecommunications networks