Strengthening cybersecurity in Ukraine: Legal frameworks and technical strategies for ensuring cyberspace integrity
Article Sidebar
Main Article Content
Abstract
Since 2014, Ukraine has been grappling with increasing cyberattacks linked to ongoing conflicts, notably with the Russian Federation. The study highlights the evolution of Ukraine’s cyber defense strategies, including responses to significant incidents such as the 2017 Petya virus attack and the escalation of cyber hostilities following Russia's full-scale invasion in February 2022. The research provides an in-depth analysis of legal measures and technical infrastructure aimed at safeguarding Ukraine’s cyberspace. It examines key legal frameworks adopted to enhance cybersecurity, the role of governmental and non-governmental entities, and the technical challenges faced in protecting critical infrastructure from cyber threats. The paper also reviews significant contributions from both Ukrainian and international scholars, offering a comprehensive understanding of cyberspace’s multifaceted nature and its implications for national and global security. The paper concludes with strategic recommendations for advancing Ukraine’s cybersecurity posture, including the continuous improvement of national security systems, balancing information openness with access restrictions, fostering digital innovation, and enhancing public cyber hygiene. The findings underscore the importance of a cohesive approach to cybersecurity that integrates legal, technical, and societal dimensions to effectively counter cyber threats and uphold national security. By addressing these critical areas, Ukraine aims to establish itself as a resilient participant in the global information and cyberspace community.
Article Details
Section
This work is licensed under a Creative Commons Attribution 4.0 International License.
How to Cite
References
A brief primer on international law and cyberspace (2021). Carnegie Endowment for International Peace. Retrieved from: https://carnegieendowment.org/2021/06/14/brief-primer-on-international-law-and-cyberspace-pub-84763
Committee on National Security Systems (CNSS) Glossary (2022). CNSSI 4009. Retrieved from: https://www.serdp-estcp.org/content/download/47576/453617/file/CNSSI%204009%20Glossary%202015.pdf
Cyber-attacks on Ukrainian web resources are possible on February 22 – CERT-UA (2022). In Ukrainska Pravda. Retrieved from: https://www.epravda.com.ua/rus/news/2022/02/21/682554/
Cyberspace Definition (2022). In Duhaime Legal Dictionary. Retrieved from: https://www.duhaime.org/legal-dictionary/term/cyberspace
Definition of cyberspace (2022). In TheFreeDictionary. Retrieved from: https://legal-dictionary.thefreedictionary.com/cyberspace
Developing Cyber-Resilient Systems: A Systems Security Engineering Approach (2021). NIST Special Publication 800-160. Revision 1. Retrieved from: https://doi.org/10.6028/NIST.SP.800-160v2r1
Folsom, T. C. (2007). Defining Cyberspace (Finding Real Virtue in the Place of Virtual Reality). Tulane Journal of Technology & Intellectual Property, 9, 75. Retrieved from: https://ssrn.com/abstract=1350999.
Furashev, V. M. (2012). Cyberspace and information space, cybersecurity and information security: essence, definition, differences. Information and Law, 2(5), 162–175.
Gibson, W. (2004). Neuromancer: 20th anniversary edition. New York: Ace Books.
Girich, V. L. & Chuprina, V. N. (2007). Global information space and the problem of access to world information resources. Retrieved from: http://marc21.rsl.ru/upload/mba2007/mba2007_05.pdf
Guide for Conducting Risk Assessments (2011). NIST Special Publication 800-30. Revision 1. Gaithersburg: National Institute of Standards and Technology. Retrieved from: https://nvlpubs.nist.gov/nistpubs/legacy/sp/nistspecialpublication800-30r1.pdf
Guo, Q., Gao, C., Jiang, D., Wang, Z., Fang, C. & Hao, M. (2019). Theoretical basis and technical methods of cyberspace geography. Journal of Geographical Sciences, 29(12), 1949–1964. Retrieved from: https://doi.org/10.1007/s11442-019-1698-7
Inside the Cunning, Unprecedented Hack of Ukraine's Power Grid (2016). In WIRED. Retrieved from: https://www.wired.com/2016/03/inside-cunning-unprecedented-hack-ukraines-power-grid/
Lieberman, J. (2010). S.3480 - Protecting Cyberspace as a National Asset Act of 2010. 111th Congress. Homeland Security and Governmental Affairs. Retrieved from: https://www.congress.gov/bill/111th-congress/senate-bill/3480/text
Managing Information Security Risk. Organization, Mission, and Information System View (2011). NIST Special Publication 800-39. Gaithersburg: National Institute of Standards and Technology. Retrieved from: https://nvlpubs.nist.gov/nistpubs/legacy/sp/nistspecialpublication800-39.pdf
Medeiros, B. P. & Goldoni, L. R. F. (2020). The fundamental conceptual trinity of cyberspace. Contexto internacional, 42(1), 31–54. Retrieved from: https://doi.org/10.1590/s0102-8529.2019420100002
Morningstar, C. & Farmer, F. R. (2003). The Lessons of Lucasfilm's Habitat. The New Media Reader (pp. 664-667). Cambridge, Massachusetts, London: The MIT Press. Retrieved from: https://monoskop.org/images/4/4c/Wardrip-Fruin_Noah_Montfort_Nick_eds_The_New_Media_Reader.pdf
Myronets, O.M., Burdin, M., Tsukan, O. & Nesteriak, Y. (2019). Prevention of human rights violation. Asia Life Sciences, 21(2), 577–591.
On information (2022). Law of Ukraine No. 2657-XII. Retrieved from: https://zakon.rada.gov.ua/laws/show/2657-12#text
On the Basic principles for the development of the information society in Ukraine for 2007-2015 (2007). Law of Ukraine No. 537-V. Retrieved from: https://zakon.rada.gov.ua/laws/show/537-16#text
On the main principles of ensuring the cybersecurity of Ukraine (2022). Law of Ukraine of No. 2163-VIII. Retrieved from: https://zakon.rada.gov.ua/laws/show/2163-19#text
Proskurina, O. (2009). Information strategy of Ukraine in the modern geopolitical space. Information Society, 3, 1–8. Retrieved from: https://ipiend.gov.ua/wp-content/uploads/2018/07/proskurina_informatsina.pdf
Russia daily carries out more than 10 cyber-attacks on strategic objects of Ukraine – SSU (2022). In Ukrainska Pravda. Retrieved from: https://www.pravda.com.ua/rus/news/2022/11/9/7375609/
Security and Privacy Controls for Federal Information Systems and Organizations (2021). NIST Special Publication 800-53 Revision. 5. Retrieved from: https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-53r4.pdf
Smovzhenko, T. S. & Skrynnyk, Z. E. (2015). Ukrainian people in the European world: the dimension of identity. Kyiv: UBD NBU. 609 p.
Sopilko, I. M. (2021). Information security as an object of regulation in the law of Ukraine. Journal of International Legal Communication, 1(1), 11–22. Retrieved from: https://doi.org/10.32612/uw.27201643.2021.1.
Supplemental Information for the Interagency Report on Strategic U. S. Government Engagement in International Standardization to Achieve U. S. (2015). NISTIR 8074. Retrieved from: https://nvlpubs.nist.gov/nistpubs/ir/2015/NIST.IR.8074v2.pdf
This is the world's first cyber war. The Ministry of Digital told about the Ukrainian IT army (2022). In Suspilne News. Retrieved from: https://suspilne.media/222186-ce-persa-u-sviti-kibervijna-u-mincifri-rozpovili-pro-ukrainsku-it-armiu/
Virchow, D. & Braun, J. (2000). Okinawa Charter for the Global Information Society. Geology. Retrieved from: https://www.semanticscholar.org/paper/Okinawa-Charter-on-Global-Information-Society-Virchow-Braun/3eae8bc9b7564b4dd0840d744fad1280038d9131
Weiss, M. & Biermann, F. (2021). Cyberspace and the protection of critical national infrastructure. Journal of Economic Policy Reform, 1–18. Retrieved from: https://doi.org/10.1080/17487870.2021.1905530
What Does Cyberspace Mean? (2022) Techopedia. Retrieved from: https://www.techopedia.com/definition/2493/cyberspace