Ukraine's Strategy to Counter Russian Cyber Threats in the Russo–Ukrainian War

Abstract

This study investigates the cyber threats that Russia poses to Ukraine and examines the strategies that Ukraine employs in response. The Russian cyber operations are believed to have started covertly before the beginning of the Russia-Ukraine War in 2022. These operations peaked when Russia targeted the Kyiv Post news agency and the KA-SAT satellite, resulting in significant communication disruptions and power outages within Ukraine, which affected both the government and society. The research utilizes theories of security strategy, cyber threats, and cybersecurity strategy to analyze the cyber tactics used during the Russia-Ukraine conflict. Employing qualitative methods and case study models, the study describes Russia's cyber operations that threaten Ukraine’s security, as well as Ukraine's responses to these threats. The operations included information manipulation and attacks on critical infrastructure. Findings reveal that the Ukrainian government implemented several effective strategies, such as establishing legal frameworks, creating cybersecurity agencies, and collaborating with the United States. These measures have proven successful in countering Russian cyber-attacks. Through its partnership with the U.S., Ukraine’s rapid response team (CERT) was able to recover systems that had been targeted, thereby enhancing Ukraine’s cyber resilience against Russian threats.