Ponomareva Olga Alexeevna, Associate Professor, Candidate of Sciences (Engineering), Educational and Research Center “Information Security”, Ural Federal University named after the first President of Russia B.N. Yeltsin
Gribov Mikhail Andreevich, Master’s Student, Educational and Research Center “Information Security”, Ural Federal University named after the first President of Russia B.N. Yeltsin
Chistyakov Maxim Vladimirovich, Master’s Student, Educational and Research Center “Information Security”, Ural Federal University named after the first President of Russia B.N. Yeltsin
Barybin Dmitry Alexandrovich, Master’s Student, Educational and Research Center “Information Security”, Ural Federal University named after the first President of Russia B.N. Yeltsin
Abstract
The aim of the study is to assess information security threats at warehouse storage enterprises and develop measures to address them. The work involved an analysis of regulatory documents, publications in specialized journals, and expert opinions in the fields of logistics and information security, as well as an examination of incidents related to data leaks in logistics companies. The study also explored the specifics of information flow in warehouses and vulnerabilities arising from the implementation of new technological solutions. The article proposes a model of the information exchange and processing system in a warehouse, based on the IDEF0 functional modeling standard. Key information security threats, such as malware, phishing, DDoS attacks, web application vulnerabilities, and social engineering, were identified. For each threat, countermeasures were proposed, including the use of modern encryption protocols, two-factor authentication, regular software updates, and employee training. Recommendations were provided to minimize risks associated with the use of RFID tags, barcodes, and QR codes, as well as to ensure the security of wireless data transmission channels. The study emphasizes the need for a comprehensive approach to ensuring information security in warehouses, encompassing technical, organizational, and educational measures. The results of the research can be used to develop methodological recommendations for data protection at warehouse storage enterprises.
KEYWORDS: information protection, warehouse storage enterprises, vulnerabilities, warehouse management systems, social engineering.
Download article INFORMATION FLOWS OF A CONSUMER GOODS WAREHOUSE ENTERPRISE AS AN OBJECT OF INFORMATION PROTECTION
