Keywords
Abstract
Mazkur maqolada raqamli ta'lim tizimlarida o‘quvchilarga oid shaxsiy ma'lumotlarni himoya qilish muammosi SOFENA axborot platformasi misolida texnik-huquqiy nuqtai nazardan tahlil qilinadi. Zamonaviy ta'lim platformalari foydalanuvchining identifikatsiya ma'lumotlari, o‘quv faoliyati, baholash natijalari, tizimga kirish tarixi va xulq-atvorga oid raqamli izlarni qayta ishlashi mumkin. Ushbu ma'lumotlarning markazlashgan shaklda saqlanishi ta'lim jarayonini individuallashtirish imkoniyatini oshirishi bilan birga, maxfiylik, ruxsatsiz foydalanish va ma'lumotlardan ikkilamchi maqsadlarda foydalanish bilan bog‘liq xavflarni yuzaga keltiradi. Tadqiqotda SOFENA tizimi uchun tahdidlarni modellashtirish, ma'lumotlar hayotiy siklini tahlil qilish va normativ-huquqiy talablarni texnik boshqaruv mexanizmlari bilan muvofiqlashtirish metodologiyasi taklif etildi. STRIDE tahdid modeli, CIA triadasi va privacy by design tamoyillari asosida o‘quvchi ma'lumotlari xavfsizligining konseptual arxitekturasi ishlab chiqildi. Tahlil natijasida shifrlash, rollarga asoslangan kirish nazorati, psevdonimlashtirish, audit jurnallari va ma'lumotlarni minimallashtirish alohida xavfsizlik vositalari emas, balki yagona boshqaruv tizimining o‘zaro bog‘liq komponentlari sifatida qo‘llanilishi lozimligi asoslandi. Maqolada texnik xavfsizlik va huquqiy muvofiqlik o‘rtasidagi farq ko‘rsatilib, ta'lim platformalari uchun riskka asoslangan integratsiyalashgan himoya modeli taklif qilinadi.
References
1. National Institute of Standards and Technology. The NIST Cybersecurity Framework (CSF) 2.0. NIST CSWP 29. Gaithersburg, MD, 2024.
2. Cavoukian, A. Privacy by Design: The 7 Foundational Principles. Information and Privacy Commissioner of Ontario, Canada, 2009.
3. European Parliament and Council of the European Union. Regulation (EU) 2016/679: General Data Protection Regulation. Official Journal of the European Union, 2016.
4. O‘zbekiston Respublikasi. Shaxsga doir ma'lumotlar to‘g‘risida. O‘RQ-547-son Qonun, 2019-yil 2-iyul.
5. UNICEF. Policy Guidance on AI for Children. Version 2.0. United Nations Children's Fund, 2021.
6. National Institute of Standards and Technology. NIST Privacy Framework: A Tool for Improving Privacy through Enterprise Risk Management, Version 1.0. NIST, 2020.
7. OWASP Foundation. OWASP Top 10: The Ten Most Critical Web Application Security Risks. OWASP, 2021.
8. OWASP Foundation. OWASP API Security Top 10. OWASP, 2023.
9. National Institute of Standards and Technology. Digital Identity Guidelines: Authentication and Lifecycle Management. NIST Special Publication 800-63B.
10. Sandhu, R. S., Coyne, E. J., Feinstein, H. L., Youman, C. E. “Role-Based Access Control Models.” IEEE Computer, Vol. 29, No. 2, 1996, pp. 38–47.
11. Hu, V. C., Ferraiolo, D., Kuhn, R. et al. Guide to Attribute Based Access Control (ABAC) Definition and Considerations. NIST Special Publication 800-162, 2014.
12. Biryukov, A., Dinu, D., Khovratovich, D. “Argon2: New Generation of Memory-Hard Functions for Password Hashing and Other Applications.” IEEE European Symposium on Security and Privacy, 2016.