Systematization of threats and development of a comprehensive model for protecting personal data in social networks

Grigoriy M. Andreev; Petr S. Shevchuk

doi:10.34755/u5240-5467-7149-u

UDC 004.056

SYSTEMATIZATION OF THREATS AND DEVELOPMENT OF A COMPREHENSIVE MODEL FOR PROTECTING PERSONAL DATA IN SOCIAL NETWORKS Systematization of threats and development of a comprehensive model for protecting personal data in social networks

АА Аа

Published in Journal of Applied Research · Issue 7, 2026 · ELocator: 25-32 · Rubric: ECONOMICS. ECONOMIC SCIENCES.

DOI: https://doi.org/10.34755/u5240-5467-7149-u

Received: 03.10.2026 Accepted: 16.10.2026 Published: 16.10.2026

Authors

Grigoriy M. Andreev

Petr S. Shevchuk

Grigoriy M. Andreev

Don State Technical University kafedra informacionnoy bezopastnosti · Rostov-on-Don

Petr S. Shevchuk

Science rang: professor

Don State Technical University Rostov-on-Don

ABSTRACT

The article presents a comprehensive analysis of the current landscape of information security threats in social networks. The author proposes a classification model of threats including four basic categories: social engineering threats, technical threats, information-manipulative threats, and insider threats. A three-level conceptual model for personal data protection has been developed, integrating legal regulation, technological solutions, and measures to improve users’ digital literacy. The analysis of cyberattack implementation mechanisms and their consequences for various categories of subjects has been conducted. Particular attention is paid to new attack vectors associated with the use of artificial intelligence technologies. Practical recommendations for minimizing information security risks have been formulated. It is shown that the highest effectiveness of protection is achieved through the coordinated application of legal, technical, and organizational measures. The research results can be used in developing corporate information security policies and user awareness programs.

KEYWORDS

information security, social networks, personal data, social engineering, phishing, cyber hygiene, multi-level protection, digital literacy

Text

Text (PDF)

Read Download

1. Petrenko S. A., Simonyan M. S. Informacionnaya bezopasnost' v cifrovuyu epohu. M.: DMK Press, 2021. 412 s.

2. Potienko D.A., Chmyhalo D.S. Aktual'nye tendencii na rynke informacionnoy bezopasnosti. V sbornike: Innovacionnye nauchnye issledovaniya: teoriya, metodologiya, tendencii razvitiya. Sbornik nauchnyh statey po materialam XVI Mezhdunarodnoy nauchno-prakticheskoy konferencii. Ufa, 2025. S. 13-19.

3. Federal'nyy zakon ot 27.07.2006 № 152-FZ «O personal'nyh dannyh» (red. ot 14.07.2024) // SPS «Konsul'tantPlyus». URL: http://www.consultant.ru (data obrascheniya: 15.04.2026).

4. Group-IB. Threat Landscape Report 2024. M., 2024. 156 s. URL: https://group-ib.ru/reports (data obrascheniya: 15.04.2026).

5. ENISA. Social Media Threat Landscape. Heraklion: European Union Agency for Cybersecurity, 2023. 98 p. URL: https://www.enisa.europa.eu /publications/social-media-threat-landscape (data obrascheniya: 10.04.2026).

6. Hadnagy C. Social Engineering: The Science of Human Hacking. 2nd ed. Indianapolis: Wiley, 2018. 322 p.

7. An D. S., Zufarova A. S. Simulyaciya fishingovyh atak kak metod povysheniya kibergramotnosti i podgotovki k reagirovaniyu na ugrozy // Upravlenie obrazovaniem: teoriya i praktika. 2025. T. 15. № 6-1. S. 127-139. DOI:https://doi.org/10.25726/b2476-6563-8129-i.

8. Verizon. Data Breach Investigations Report 2024. Arlington, 2024. URL: https://www.verizon.com/business/resources/reports/dbir/ (data obrascheniya: 20.10.2024).

9. Agal'cov V. P., Ivanov S. A. Identifikaciya i autentifikaciya v raspredelennyh sistemah. SPb.: Lan', 2020. 284 s.

10. Babash A. V. Raspredelenie vredonosnogo PO cherez social'nye platformy // Vestnik MGTU im. Baumana. 2022. № 6. S. 112–125. DOI:https://doi.org/10.18698/1812-3368-2022-6-112-125.

11. NIST. Digital Identity Guidelines: Authentication and Lifecycle Management (SP 800-63B). Gaithersburg: National Institute of Standards and Technology, 2023. URL: https://csrc.nist.gov/pubs/sp/800/63/b/upd3/final (data obrascheniya: 12.10.2024).

12. Acquisti A., Brandimarte L., Loewenstein G. Privacy and human behavior in the age of information // Science. 2015. Vol. 347, No. 6221. P. 509–514. DOI:https://doi.org/10.1126/science.aaa1148.

13. Roskomnadzor. Metodicheskie rekomendacii po nastroyke parametrov privatnosti v social'nyh setyah. M., 2023. URL: https://rkn.gov.ru/news/rsoc/news83212.htm (data obrascheniya: 18.04.2026).

14. Hinduja S., Patchin J. W. Cyberbullying and adolescent mental health // Journal of Adolescent Health. 2023. Vol. 72, No. 4. P. 512–519. DOI:https://doi.org/10.1016/j.jadohealth.2022.11.015.

15. Gruppa kompaniy «Rostelekom-Solar». Otchet ob insayderskih ugrozah v korporativnom sektore RF. M., 2024. 74 s. URL: https://www.rtsolar.ru/analytics (data obrascheniya: 14.04.2026).

16. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR). URL: https://eur-lex.europa.eu/eli/reg/2016/679/oj (data obrascheniya: 16.04.2026).

17. California Consumer Privacy Act (CCPA), Cal. Civ. Code § 1798.100 et seq. (2018, amended 2023). URL: https://oag.ca.gov/privacy/ccpa (data obrascheniya: 16.04.2026).

18. Schneier B. Applied Cryptography: Protocols, Algorithms, and Source Code in C. 3rd ed. Hoboken : Wiley, 2022. 800 p.

19. Microsoft Security. Password Manager Adoption and 2FA Effectiveness. Redmond: Microsoft Corporation, 2024. URL: https://www.microsoft.com/en-us/security/business/security-101/what-is-two-factor-authentication-2fa (data obrascheniya: 18.04.2026).

20. Shevchuk P.S., Zverev A.P., Pazin M.S. Obespechenie informacionnoy i kiberbezopasnosti voennosluzhaschih v cifrovuyu epohu pri provedenii special'noy voennoy operacii. Inzhenernyy vestnik Dona. 2025. № 11 (131). S. 934-945.

21. ISO/IEC 27001:2022. Information security, cybersecurity and privacy protection — Information security management systems — Requirements. Geneva: International Organization for Standardization, 2022.

22. Vasil'ev A.E., Shevchuk P.S., Gazizov A.R. Social'naya inzheneriya v cifrovuyu epohu: osobennosti, tendencii i podhody k zaschite. V sbornike: Novye idei. trudy Regional'noy nauchno-prakticheskoy konferencii. Rostov-na-Donu, 2025. S. 48-51. (data obrascheniya: 19.04.2026).

23. Goodfellow I. J., et al. Deep learning and adversarial attacks in cybersecurity // IEEE Transactions on Information Forensics and Security. 2023. Vol. 18. P. 1120–1135. DOI:https://doi.org/10.1109/TIFS.2023.3241567.

24. Shevchuk P.S., Vasil'ev A.E., Pazin M.S. Chetyrehurovnevaya model' zaschity ot atak social'noy inzhenerii. V sbornike: Novye idei. trudy Regional'noy nauchno-prakticheskoy konferencii. Rostov-na-Donu, 2025. S. 13-17. (data obrascheniya: 11.04.2026).

25. European Commission. Guidelines on disinformation and digital platform regulation. Brussels: EC Directorate-General for Communications Networks, Content and Technology, 2023. 42 p. URL: https://digital-strategy.ec.europa.eu/en/policies/online-disinformation (data obrascheniya: 17.04.2026).

PDF JATS XML

Deputy Editor-in-Chief

Ol'ga Shatalova

Chief Editor

Raiganat Babaeva

downloads

GOST

Andreev G. M., Shevchuk P. S. Systematization of threats and development of a comprehensive model for protecting personal data in social networks // Journal of Applied Research. 2026. no. 7. 25-32. DOI: https://doi.org/10.34755/u5240-5467-7149-u. (Date of access 18.10.2026).

MLA

Grigoriy M. Andreev, Shevchuk P. S.. "Systematization of threats and development of a comprehensive model for protecting personal data in social networks." Journal of Applied Research.7 (2026): 25-32. DOI: https://doi.org/10.34755/u5240-5467-7149-u.

APA

Andreev G. M., Shevchuk P. S. (2026). Systematization of threats and development of a comprehensive model for protecting personal data in social networks. Journal of Applied Research(7), 25-32. https://doi.org/10.34755/u5240-5467-7149-u

Chicago

Grigoriy M. Andreev, Shevchuk P. S.. "Systematization of threats and development of a comprehensive model for protecting personal data in social networks." Journal of Applied Research, no. 7 (2026): 25-32. https://doi.org/10.34755/u5240-5467-7149-u.

WIKI

{{cite journal | author = Andreev G. M., Shevchuk P. S. | title = Systematization of threats and development of a comprehensive model for protecting personal data in social networks | journal = Journal of Applied Research | year = 2026 | issue = 7 | pages = 25-32 | doi = 10.34755/u5240-5467-7149-u }}

Copy

Export: BibTeX EndNote RefMan RusMARC

SYSTEMATIZATION OF THREATS AND DEVELOPMENT OF A COMPREHENSIVE MODEL FOR PROTECTING PERSONAL DATA IN SOCIAL NETWORKS Systematization of threats and development of a comprehensive model for protecting personal data in social networks

Confirmation