%/^M&4o AH
"IOAH
iJdj\ici m
img e4e uu
vjtt^
MH
%A!)
NGUYEN
Cl/ONG
LINH
Dai hoc Van hoa Ha Noi
1.
Gidi thieu
An toan thdng tin (information
security) la mdi quan tam khdng
ehi eiia
eae cdng ty, td chifc lien quan de'n tai
chfnh,
ngan hang ma nd eung la mdi
quan tam
eiia
cac thu
vien.
Dae biet
trong nhtfng nam
gin
day, nhieu
thuvlen
diu
tu ngay cang manh me vao he thd'ng
tu ddng hda, xay dung ngudn thdng tin

mdt loai virut nao dd chac han
ban da thay dupe sU khd chju khi chiec
may tinh
eiia
minh hoat ddng ngoai y
mudn.
Don gian thi nd eung hoat ddng
cham chap va chap chdn, nang hdn ed
the la mat du lieu ma ban td'n nhieu cdng
sUc
de tao ra. Trong mdt thU vien hien
dai,
sU tdn that cd the cdn nang ne hdn
the ne'u thU vien khdng cd chfnh sach
quan
ly,
sif dung may tfnh va mang may
tinh mdt each hdp
ly.
2.
An toan thong tin la gi?
Cd nhung quan diem cho rang an
toan thdng tin la viee ngan chan cae
eude tan cong nham mue dfeh pha hoai
thdng tin
eiia
cac cd quan, td ehife nhat
djnh.
Tuy nhien, trong ITnh vufc thu
vien,

lieu/thdng
tin dupe
lUu
giif trong dd.
Nhin mdt each tdng quan, dam bao an
toan thdng tin trong thU vien la viee bao
ve thdng tin va he thd'ng thdng tin khdi
eac truy cap, ehinh sifa hoac sif dung
thdng tin trai phep. Viee dam bao an
toan thdng tin trong thu vien la dam bao
3 yeu clu: bf mat, toan ven va san sang
sir dung.
Bf mat: khong dupe truy cap, sir dung
hoac tie't Id khi khdng dupc phep (vf du:
eae thdng tin ca nhan
ciia
ban dpc, cac
thdng tin ve Ijeh sif mUdn - tra tai lieu
eua ban dpc, ).
Toan ven: dam bao suf chi'nh xac,
khdng thay ddi ddi vdi thdng tin gd'c (vf
du:
eae thdng tin thU mue trong ed sd dif
lieu,
thdng tin tren trang web
eiia
thU
vien, ).
Sin
sang: thdng tin d trang thai san

mdt ben la tinh
sin
sang
eiia
thdng
tin va kha nang truy cap tdi chiing".
Ve Cd ban, hai nhdm ehinh sach ma
thu vien
cin
dung hda dUdc md ta nhU
bang dudi day:
Cac chinh sach han che, ngan chan
* Cai dat chUdng trinh phdng va diet
virut
* Khda cdng USB, khda d CD
* Chan mdt sd djeh vu (Vi du: chat -
Yahoo Messenger, truyen tep tin - FTP)
* Khda mdt sd chUe nang
eiia
trinh duyet
Web va eac irng dung khac
* Khdng eho cai dat
phin
mem, khdng
cho truy cap va thay ddi eac tham sd
hoac eau hinh
ciia
he dieu hanh
*
Cac chinh sach

NgUde
lai,
ne'u eae cdng USB dupc md, Internet
dupe ke't ndi va ngudi diing cd the tu do
download,
sao chep, cai dat ehUdng
trinh eung se gay nen nhtfng
riii
ro eho
he thdng thdng tin. Do dd, dieu quan
trpng la eac thu vien phai dam bao can
bang va hdp
ly
eae ehinh sach
tren.
3. Tai sao can chu y den van de an
toan thong tin trong
thuvlen?
Shuman (1999) cho rang cae
thUvien
thudng ed xu hudng tap trung vao cae
van de nhu phdng chd'ng trdm
cip
tai
lieu,
trang thie't bj va eae van de lien
quan den ban dpc ed the gay rdi trong
thu
vien.
Cae van de lien quan de'n an

cdng tu ben ngoai vao thdng qua mang
Internet). Cd 3 nguyen nhan chfnh la:
- Lpi dung tai nguyen
phin
eifng,
chiem khdng gian dTa eifng,
CPU,
de
luu trif va truyen ba eac van hda pham
ddi truy, cae tai lieu vi pham ban quyen
nham tranh suf kiem soat
eiia
eae ed
quan chire nang.
- Ldi dung may
ehii
hoac eac may
tram khae trong mang de lam ban dap
tan cdng cae he thd'ng thdng tin khae.
- Oanh
elp
thdng tin ve ban dpc, thay
ddi hoac xda bd thdng tin trong cae ed
sd dtf lieu
eiia
thUvien.
Ben canh dd, Breeding (2003) khang
djnh nguyen nhan chfnh khie'n eae he
thd'ng thdng tin nay cd the bj de dpa bdi
vl viee quan trj he thd'ng thdng tin trong

mem miin phi khae. Ne'u eae can bd thu
vien va ngUdi diing khdng thufc
suy
thUe
dupe
tim
quan trpng
ciia
an toan thdng
tin trong thu vien ma sif dung Internet
mdt each tuf do cung la mdt mdi nguy
hiem dd'i vdi suf an toan
eiia
thdng tin
trong
thUvien.
Tap
chf THU VIEN VIET NAM
(19)
33
4. Ai chju trach nhiem van de an
toan thong tin trong
thUvien?
Tat ea can bd thu vien can cd trach
nhiem trong van de an toan thdng tin.
Tuy nhien, mire dp va pham vi phu trach
cua moi ngudi ed the khae nhau. Sd
ngudi phu trach va thdi
lUdng
danh eho

diu
tien true tie'p giai
quye't,
khic
phue khi mdt sU ed de dpa
sU an toan
eiia
thdng tin xay ra, ne'u
khdng
khie
phue dupc thi budc tie'p theo
la lam
gl,
Tat ea danh mue edng viee,
trinh tu giai quye't va nhtfng van de lien
quan
eIn
dupe eu the hda dudi dang
chfnh sach, ndi quy, quy djnh cua thu
vien.
5. Mot
so'
yeu
to can chu y de dam
bao an toan thong tin trong
thUvien
5.1. May ehu
May chu la mdt trong nhtfng thanh
phin
quan trpng nhat

va
eae djch vu thdng tin khae.
Cae thu vien ed quy md vUa phai ed
the sir dung mot may
chii
cho nhieu djch
vu khac
nhau,
dieu nay eung ddng nghTa
vdi
riii
ro eao ne'u may
chD
nay bj tan
edng.
Dd'i vdi eae
thUvien
Idn, td't nhat la
cae djeh vu khae nhau dupc quan
ly
bdi
eae may
ehii
khac nhau. Vf du may
ehii
danh rieng eho he thd'ng OPAC, may
ehu Web va email, may ehu danh rieng
eho cac ngudn tai lieu
sd cuia
thUvien,

vien,
ngan
chan cae truy cap trai phep hoac thdng
tin khdng
phii
hpp.
+ Khdng hoac han che dimg eae
ehUdng trinh gifi email va duyet web tren
may
ehu
chi
cai dat nhtfng
phin
mem
va djch vu thufc suf
eIn
thie't eho mue
dfeh quan
ly
cua may
ehii.
+ Thudng xuyen kiem tra nhat ky truy
cap va sif dung he thd'ng (logs). Cd the
ke't hpp dung cae
phin
mem phan tfch
viee truy cap va sif dung eae tai nguyen
trong mang may tfnh
cuia
thu

Tiiy
thudc
vao muc dfeh
chUe
nang cua mdi thU
vien,
mdi phdng ma thu vien cd the trang
bj eho ban dpc sif dung cac may tfnh ea
nhan - PC (vdi day
dii
cac thie't bj, linh
kien nhu ban man
hinh,
ban phfm, eon
ehudt,
dCD,
edng USB, ) hay
ehi
trang
bj eac tram lam viec - Workstations
(thudng ehi ed man
hinh,
CPU, ban phfm
va con ehudt).
Vdi eae may tfnh danh eho ban dpc,
eac thu vien nen quan tam tdi mdt sd
van de sau:
+ Cai dat eac chUdng trinh phdng
chd'ng virut, dam bao cae chuong trinh
nay ludn dupe cap nhat.

eiia thUvien
va/hoac cac td chifc
chuyen mdn. Vi du ALA (1998).
+ Djnh ky kiem tra cae may tinh nham
phat hien cac chUdng trinh hoac
phin
mem dupc cai dat trai phep, anh hudng
tdi suf van hanh cua may tfnh cung nhu
ngudi sif dung va cd cac bien phap xuf ly
kjp
thdi.
+ Ngoai ra, cd the khda ehife nang cai
dat va
lUu
trtf (khdng cho phep ban dpc
cai dat
phin
mem va
lUu
trif eae tep tin
tren may tfnh) hoac eho phep ban dpc
cai dat chUdng trinh
ehi
trong phien lam
viee va he thd'ng se tuf ddng xda bd tat ea
nhtfng cai dat va thay ddi ma ban dpc da
lam khi khdi ddng lai may
tfnh.
+ Dao tao ban dpc, cung cap cho hp
nhtfng kie'n thife ve an toan thdng tin

thie't bj
phin
eifng cung
nhu
khdng (hoac
ft) bj gidi han trong viee cai dat
phin
mem,
thay ddi eae thiet lap va cai dat
san ed eua he dieu hanh, dugc phep truy
cap nhieu ngudn tin khae nhau (ke ea
cae thdng tin ndi bd). Nhtfng dae diem
nay giup eho can bd thu vien ed the tae
nghiep di dang va thuan tien hdn. Tuy
nhien,
chfnh nhifng dac diem nay cung
ed the gay nen nhtfng
riii
ro eao ddi vdi
van de an toan thdng tin ne'u eac may
tfnh dung eho can bd thu vien khdng
dupe quan
ly
chat che va sir dung mdt
each hpp
ly.
6
eae thu vien Idn, mdt sd can bd lam
edng tae nghiep vu ed the dupe trang bj
2 may

ve van de an toan thdng tin.
Khdng phai ai eung dpc ky eae dieu
khoan thda thuan vdi nha cung cap khi
cai dat mdt phan mem trd chdi hay mdt
chUdng trinh bao ve man hinh nao dd
dugc tai xud'ng tU Internet. Cd nhifng
ehUdng trinh ed dieu khoan thda thuan
dang "cai dat chUdng trinh trd chdi nay
eung ed nghTa la ban ddng y cho ehung
tdi thu thap eae thdng tin ve thdi quen
duyet web, eac trang web ma ban hay
truy cap va eae thdng tin ea nhan
ciia
ban "
nhung
vin
dupe cai dat do ngudi
diing khdng dpc ky cae dieu khoan.
Ngoai ra ehua ke de'n rat nhieu phan
mem miin phf tren Internet ed kem theo
virut va cac ehUdng trinh pha hoai khae
ed the tu ddng tham nhap vao may tfnh
khi dupc cai dat.
Do vay, eae thu vien cd the ehii
y
mdt
sd van de sau dd'i vdi may tfnh danh cho
can bd:
+ Cai dat ehUdng trinh phdng chdng
virut va cae ehUdng trinh gay hai, dam

+ Dao tao can bd thu vien ve cac ky
nang sir dung may tinh can thie't, nang
cao kien thife ve van de an toan thdng
tin.
6. Ke't luan
Cdng nghe thdng tin da va dang gdp
phan tfch cure giup eae thu vien hien dai
hda eae hoat ddng chuyen mdn ddng
thdi nang cao kha nang va chat
lUdng
phue vu ngudi dung tin. Do dd viee trang
bj may tfnh va eae thie't bj edng nghe
thdng tin trong
thu
vien la rat
eIn
thie't.
Van de la eae thU vien
cin
quan
ly
va
sijf
dung ehiing
nhuthe
nao eho hieu qua.
Tiiy
thupc vao quy md, mue
dfeh,
chifc nang, ddi tupng phue vu va kha

thuan Idi.
TAI LIEU THAM KHAO
1.
American Library Association
(1998). Access to electronic information,
services, and networks: An interpretation
of the Library Bill of
Rights.
Truy cap ngay
20 thang 6 nam 2008, tai:
http://www.ala.org/alaorg/oif/eleetace.htm
I.
2.
Banerjee, K. (2003). How much
security does your library need?
Computers in Libraries, 23(5), 12-15. Truy
cap ngay
18
thang 6 nam 2008, tU ed sd
dtf lieu ProQuest.
3. Breeding, M. (2003). Defending
your
ILS
against security threats.
Computers in Libraries, 23(5), 38-40.
Truy cap ngay 18 thang 6 nam 2008, tU
cd sd du lieu Emerald.
4.
Shuman, B. A. (1999). Library secu-
rity and safety handbook: prevention,

cac he thdng thong tin. Ngoai ra tac
gia cung gpi md mpt sd yeu td can chu y
de dam bao an toan thong tin trong cac
thu vien va trung tam thong tin b Viet
Nam,
dac biet tai cac thu vien va trung
tam thong tin Idn, sif dung nhieu trang
thie't bj cong nghe thong tin hien dai phuc
vu ban dpc va cong tac nghiep vu.
In the era of information explosion, the
issue of ensuring information security is
of interest of not only banking and finan-
cial firms but also libraries. To better
understand this issue, the author pro-
vides definitions on information security
in general and in libraries and information
centers, indispensable factors in ensur-
ing information security, reasons for
ensuring information security in libraries,
and major threats to the security of infor-
mation systems. Some other factors are
also mentioned, especially for big
libraries and information centers, which
use state-of-the-art information technolo-
gies and equipments to support clients
and staff.
j
Tap chi
THU VIEN VIET NAM
(19)