INFORMATION WARFARE AND CYBERCRIME: SLOVENIAN PERSPECTIVE

Varnost postaja najpomembnejša dobrina oziroma potreba ljudi. Pri tem je varnost pred kriminaliteto eden izmed glavnih temeljev zagotavljanja splošne varnosti. Ker je vsakodnevno življenje in poslovanje postalo povsem odvisno od informacijsko-komunikacijskih tehnologij, je varnost v kibernetskem prostoru prav tako pomembna. Posamezni uporabniki, organizacije in države so stalno podvržene različnim oblikam groženj, vendar določene z vidika posledic predstavljajo večje tveganje. Informacijsko bojevanje, ki ga lahko ob pregledu različnih teoretičnih opredelitev, razumemo kot organizirano kibernetsko kriminaliteto, vsekakor predstavlja močan faktor tveganja za informacijsko varnost vseh uporabnikov sodobne tehnologije. Ugotavljamo, da boj za informacijsko moč poteka na različnih družbenih ravneh, zato se udejanja tudi v različnih pojavnih oblikah. Le-tem je skupen način delovanja, saj v kibernetskem prostoru prihaja do poenotenja tehnik kriminalitete. Informacijsko bojevanje se od klasičnih oblik deviantnosti razlikuje po motivaciji oziroma namenih storilcev. Tovrstna grožnja predstavlja širšo družbeno problematiko, saj zajema državno, gospodarsko, teroristično in aktivistično kriminaliteto. Iz različnih vzrokov, pa mednarodna, predvsem pa politična kibernetska kriminaliteta, ostaja nekaznovana in neregulirana. To potrjujejo tudi slovenske organizacije, ki so v raziskavi »Informacijsko bojevanje v Sloveniji« izrazile nezadovoljstvo s trenutno zakonodajo in stanjem splošne informacijske varnosti v Sloveniji. Analiza zbranih podatkov je potrdila domneve o ogroženosti Slovenije pred najnevarnejšimi tehnikami kibernetske kriminalitete, ki po ugotovitvah primarno izvirajo iz notranjega okolja organizacije. Poleg zaposlenih, faktor tveganja predstavljajo tudi velikost organizacije, zaščita (tehnična in uporabniška) informacijskih sistemov in usposobljenost zaposlenih ravnati s tehnologijo. Nepripravljenost slovenskih organizacij soočiti se z organiziranimi in sofisticiranimi kibernetskimi grožnjami, kaže na potrebo po izboljšanju trenutnega stanja. Le-to je mogoče doseči zgolj s kombinacijo ustrezne politične, zakonodajne in tehnične podlage ob ustrezni ravni ozaveščenosti uporabnikov tehnologije in njihovega nadzora oziroma odgovornosti.Safety is becoming the most essential human need. One of the mainstays for ensuring public safety is protection against crime. As the daily life and business have become completely dependent on information and communication technologies, the security in cyberspace plays an important role as well. Individual users, organizations and countries are constantly subjected to various forms of cyber threatshowever, some forms of threats pose higher risks due to the consequences they may bring. Information warfare, which could be defined as organized cybercrime on the basis of various theoretical definitions, certainly represents strong risk factor for the information security of all users of modern technology. The warfare for information power takes place at different levels of societytherefore, it can occur in different forms. These forms have the same mode of operation due to the standardization of crime techniques in cyberspace. Information warfare differs from the traditional deviation forms in the intentions of the perpetrators. Such threat includes national, economic, terrorist and activist crime, and it therefore represents a broad social issue. However, the international and above all the political cybercrime go for various reasons unpunished and unregulated. This fact was confirmed by the Slovenian organizations as well. In the research »Information Warfare in Slovenia«, they expressed dissatisfaction with current legislation and the general situation of information security in Slovenia. Analysis of the data gathered has confirmed that Slovenia is threatened by the most dangerous cybercrime techniques which according to the findings arise primarily from the internal environment of the organization. There are many risk factors: apart from employees, also the size of the organization, protection of information systems (technical as well as user protection) and qualification of staff for dealing with technology. Due to the inability of the Slovenian organizations to meet with the organized and sophisticated cyber threats, it is necessary to improve the current situation. This improvement can only be achieved by adequate political, legislative and technical basis, followed by the appropriate level of user awareness as well as user control and responsibility