Cybersecurity Of Ukraine Research Articles

THE SIGNIFICANCE OF LEGAL REGULATION IN ENSURING CYBER SECURITY IN THE CONDITIONS OF WAR: EXPERIENCE FOR UKRAINE

Introduction. In the vast majority of countries, there is a constant trend towards a significant increase in the number and expansion of the spectrum of cyber-attacks with the aim of violating the confidentiality, integrity and availability of state information resources, in particular those distributed on the Internet and objects of critical information infrastructure. Summary of main results. The large-scale deployment of a hybrid war against our state seriously affects all aspects of social life. To a large extent, the strategic success of countering the challenges of hybrid warfare depends on the effective and quality of the legal response. Ensuring an adequate level of cyber security is difficult to imagine without clearly planned joint actions and measures developed by responsible entities, which must be synchronized and implemented according to a single strategic plan and development vector of the national cyber security system of a declarative nature. That is why cyber security in most countries of the world is recognized as an important component of national security, the provision of which is impossible without the formation and functioning of a national system in the field of cyber security, which is based on such principles as respect for the principles and norms of international law, protection of fundamental values defined by current legislation, protection national interests in cyberspace. It is emphasized that the state's national security largely depends on the state of cyber security. It has been proven that hybrid war significantly increases the impact of cyber threats on Ukrainian society and actualizes the danger of targeted cyber attacks as a tool of aggression against our state in the context of global trends regarding threats in cyberspace. Conclusions. In the process of conducting the research, we formulated conclusions in which special attention was paid to the peculiarities of the current state of functioning of the legislation on cyber security and considered promising directions for its improvement in the future, which, in turn, will become the basis for improving the administrative and legal regulation of cyber security in Ukraine.

Правові аспекти забезпечення кібербезпеки в Україні: сучасні виклики та роль національного законодавства

The article identifies the peculiarities of the current state of cybersecurity in Ukraine and emphasizes the importance of applying effective legislation aimed at protecting the cyber structure, as well as choosing the best tools and mechanisms to combat cyber threats. For the purpose of this study, the author has selected the national legislation aimed at regulating the cybersecurity sector. The key aspects of legislation affecting cybersecurity and protection of information resources of Ukraine, in particular in the context of current challenges and threats of modern cyberspace, are quite effective today, as evidenced by the results of statistics on solving problems related to hacker attacks on Ukraine during the military conflict in 2022–2024. However, despite the fact that the current legislative acts create a solid basis for the development of Ukraine’s cybersecurity system, the article discusses issues that remain unresolved. In particular, the role of artificial intelligence in the field of data protection against cyberattacks in the current environment. The role of international cooperation in ensuring cybersecurity is also considered as one of the necessary conditions for ensuring the national security protection system of Ukraine.

Comparative Risk Assessment of Cyber Threats Based on Average and Fuzzy Set Theory

Applied results of scientific analysis should be the key focus of modern security research. A comparative analysis of research results obtained using different methods, as an applied task, forms a broader basis for interpreting the results and substantiating the conclusions. A social survey and expert opinion research were conducted to implement the general concept of strategic analysis of cybersecurity in Ukraine. Using the method based on determining the average value in a certain set of estimates, as well as the method based on the theory of fuzzy sets, the risks of spreading certain cyber threats in Ukraine were assessed. The results were compared. Although the use of different measurement methods led to some differences in quantitative risk indicators, the comparative analysis of the ratio of the level of different cyber threats did not change significantly. At the same time, the fuzzy set method provided more flexible interpretation of the results to characterize cyber threats in terms of their upward or downward trend. In general, the combined approach to cyber threat risk assessment can become an important risk management tool, as it takes advantage of different methods and allows for a deeper understanding of the current situation and the formation of more informed management decisions.

CYBER SECURITY AND ARTIFICIAL INTELLIGENCE IN THE CONTEXT OF ENSURING BUSINESS SECURITY IN WARTIME

Ensuring security for business becomes especially relevant in the context of geopolitical conflicts, increasing digitization and introducing new technologies into the financial and production sectors, booming frequency and complexity of cyber-attacks aimed at the business sphere, as well as with more diverse applications of artificial intelligence. The article studies the specifics of ensuring business security in Ukraine during wartime using artificial intelligence and cyber protection. A retrospective review of the literature has been conducted revealing that there is no research on the ways artificial intelligence is applied to ensure business activity security, which indicates the research novelty of this article. The authors outline the potential and threats of artificial intelligence for business security. Directions for securing entrepreneurship in war conditions with the help of artificial intelligence and elimination/minimization of cyber threats are formulated. The regulatory and legislative framework governing the regulation of cyber security in Ukraine is outlined and directions for its improvement are suggested.

Ways of improving the public-private partnership in the sphere of cyber security of Ukraine

The article examines the content and forms of public-private partnership in the field of cyber security in Ukraine, the relevance of this direction in the context of cyber security of Ukraine. The experience of the USA and the EU in the field of public-private partnership development is analyzed. Actual areas of improvement of public-private partnership are proposed. Proposals for improving the current legislation of Ukraine regarding such a partnership in the field of cyber security have been formulated.

The special features of using the artificial intelligence in the matters of cybersecurity

The role and importance of artificial intelligence in the field of cyber security is determined. The methods of using artificial intelligence in cyber security are detailed. The advantages and priorities of the use of artificial intelligence in the sphere of cyber security are defined. The shortcomings and problematic issues related to the use of artificial intelligence technologies by hackers in the field of cyber security are summarized. The innovative achievements of the practical implementation of generative artificial intelligence technologies ChatGPT (Generative Pre-trained Transformer) are highlighted. The legal principles of the regulation of artificial intelligence in the field of cyber security in Ukraine are outlined. Threatening trends in the use of artificial intelligence technologies have been identified based on the Europol report 2023. A review of the legislative initiatives of the EU aimed at regulating the field of artificial intelligence, in particular in the issue of cyber security, was conducted. The directions of improvement of the legal framework and regulatory requirements regarding the use of artificial intelligence technologies in the field of cyber security are summarized, especially in the conditions of the legal regime of martial law in Ukraine.

CYBER SECURITY AND PERSONAL RIGHTS UNDER THE LEGISLATION OF UKRAINE

The aim of the article is to study the issue of achieving a balance between information protection in the cybersecurity system and freedom of expression in accordance with the position of the UN and the case law of the European Court of Human Rights. Research methods include the analysis of legislation on cybersecurity, generalization of legal information and cybersecurity practices. As a result, it was found out that in Ukraine the basic legal act on cyber security is the Law “On the basic principles of cyber security of Ukraine”. The preamble of this Law defines the legal and organizational basis for protection of vital interests of citizens, society and state, national interests of Ukraine in cyberspace, main goals, directions and principles of state policy in cybersecurity, authorities of state bodies, enterprises, institutions, organizations, individuals and citizens in this field, the basic principles of coordination of their activities to ensure cybersecurity. Ukraine has ratified the Council of Europe Convention on Cybercrime of 23 November 2001. The Convention states that the fight against cybercrime is dictated, in particular, by the need to protect legitimate interests in the use and development of information technology. In particular, the Convention identifies the following types of cybercrime: offenses against the confidentiality, integrity and availability of computer data and systems; computer-related offenses; offenses related to child pornography; offenses related to copyright and related rights infringement. Finally, legal regulation of cybersecurity in Ukraine is based on the requirements of striking a balance between information protection and freedom of expression, the position of the UN and the case law of the European Court of Human Rights.

Risk Forecasting of Data Confidentiality Breach Using Linear Regression Algorithm

The paper focuses on the study of cyber security in Ukraine and creation of a predictive model for reducing the risk of identified cyber threats. Forecasting is performed using a linear regression model, taking into account the optimal dependence of specific threats in the field of cyber security of Ukraine on variables characterizing capabilities / vulnerabilities of cyber security. An unique empirical base was used for the analysis, which was formed on the basis of an expert survey of the cyber security system’s subjects in Ukraine. In order to increase the representativeness of the research, based on the selection of reliable expert population, data cleaning is provided. Methodological research is based on a risk-oriented approach, which provided a risk assessment of the spread of cyber threats and, on this basis, the determination of capabilities / vulnerabilities of the cyber security system in Ukraine. The value of the research is formed not only by assessing the risks of the spread of cyber threats, but by a more in-depth analysis of the dependence of the cyber threats’ level on the vulnerability of the cyber security system based on the search for optimal and statistically significant relationships. The experiment was conducted on the basis of determining the optimal model for forecasting the risk of the spread of one of the most significant threats in Ukraine – data confidentiality breach (54.67%), depending on the variables that characterize the capabilities / vulnerabilities of the cyber security system in Ukraine. The experiment showed that the optimal model emphasizes the predictors characterizing the vulnerability of the organizational cyber security system – "Departmental level of cybersecurity monitoring" and capabilities: "The level of use of risk management approaches at the operational level" and "The level of methodological support for cybersecurity of the critical infrastructure system".

Cyber security as the basis for the national security of Ukraine

The goal of the article is to identify cybersecurity issues as a component of national security and suggest ways to solve them. The topic of the research is the cyber security of Ukraine. In the course of the research, the following methods were used: dialectical method, formal and legal method, comparative-legal method and scientific abstraction method. As a result, the legal acts governing cybersecurity in Ukraine are analyzed, the cyber security actors are determined and their functions are defined. Practical implementation. There is a need to establish and implement an annual plan for the implementation of the Cyber Security Strategy, which should detail the actions to ensure cyber security, identify specific measures, deadlines and responsible actors. It is concluded that, ways to improve the cybersecurity system (as part of national security), which will update the legal mechanisms of cybersecurity, create cybersecurity infrastructure at the global level, establish effective interaction between cybersecurity actors regardless of their departmental affiliation and / or form of ownership, including with the owners of critical infrastructure and non-state owned information), are in their primary phase.

Practice of the Implementation Cyber Security and Financial Inclusion at the Micro-, Macro- and Global Levels of the Economy

Authors presented main aspects of cybersecurity in the current context of global challenges in terms of password protection Wi-Fi network, hacking detection, external cyber threats, complex mechanisms of hacking IT systems, cyberattacks that are complex and widespread. The opinion is expressed that one of the tendencies of development of cybersecurity of Ukraine is creation of the concept and introduction of technologies of Smart Information Systems. Main results achieved should be the ability to monitor, controllable, intelligent control of the decision-making system of digital asset management, which provides high reliability and high economic performance. Authors expressed the opinion that Enabling Financial and Digital Inclusion takes place through the implementation of the following chain type: “Financial identity – Secure electronic account – Ability to save, borrow, insure – Access to global economy”. In general, the future of finance in digital world, which involves the emergence of new qualities of financial literacy, is possible through the following vectors of development, namely: The finance factory, The role of Finance, Finance cycles, Self-service, Operating model, Finance applications and micro-services, Workforce and workplace. Main threats to national security are named, including the inconsistency of infrastructure and modern requirements; Insufficient efficiency and level of coordination of the security and defense sector of Ukraine. Pursuing the goal of successful implementation of the Cyber Security Strategy of Ukraine, it is proposed to move on to the following steps, namely: to follow the path of creating a national cybersecurity system; increasing the effectiveness of combating threats in the military sphere; cyber protection of state electronic information resources, as well as information infrastructure; protection of the interests of the citizen, society and the state in cyberspace. Authors presented a practical example of licensing DigitalLab by businesses to enhance cybersecurity through the use of DigitalLab-Light, DigitalLab-Express, DigitalLab-Standart, DigitelLab-PRO.

Cyber risks to Ukrainian and other health systems

Cyber risks to Ukrainian and other health systems

ЄВРОПЕЙСЬКИЙ ДОСВІД ДЕРЖАВНО-ПРИВАТНОГО ПАРТНЕРСТВА У СФЕРІ КІБЕРБЕЗПЕКИ: МОЖЛИВОСТІ ДЛЯ УКРАЇНИ

The article examines the process of initiation and development of Public-Private Partnership (PPP) in the EU, including the Great Britain, in the field of cyber security. The main stages of the formation of the PPP are considered, the key factors contributing to the intensification of cooperation in this direction are analyzed, as well as challenges that arise during the development of the partnership. The description of the current state of the cyberspace of Ukraine is given, taking into account the problems of the development of PPP. The main advantages and disadvantages of the existing system are described and recommendations, which are likely options for the future development of PPP in the field of cyber security, are offered. The opinion about the necessity of a thorough study of the problem of PPP development in the field of cyber security in Ukraine is advocated, taking into account the European experience according to a scientific and political-strategic context.

IMPROVEMENT OF THE CYBER PROTECTION OFTHE ARMED FORCES TAKING INTO ACCOUNT THE EXPERIENCE OF COUNTERING MILITARY CYBER ATTACKS OF THERUSSIAN FEDERATION IN 2022

The article considers the possibilities of improving the cyber defense system of the Armed Forces of Ukraine and the Ministry of Defense of Ukraine in accordance with the goals and objectives defined in the decisions of the National Security and Defense Council of Ukraine and the Laws of Ukraine. A review of the requirements of normative documents on information and cyber security of Ukraine and similar documents of the United States of America was carried out. The considered algorithm for developing a risk management system in the direction of information security is outlined in the USA national standards. The scientific novelty of the work is that in the process of developing the risk management system in the information and communication systems (ICS) of the Armed Forces of Ukraine and the Ministry of Defense of Ukraine, it was proposed to create an decision support system that will be based on a specialized knowledge base capable of accumulating experience both during cyber-defense measures of the ICS and during the implementation of cyber-influences on the ICS of the enemy. An overview of open international standardization methods and relevant knowledge bases that can be used to update information on vulnerabilities and countermeasures in IC systems was carried out. The joint to use of open knowledge bases and specialized knowledge bases potentially can create new opportunities not only during cyber defense, but also during the implementation of cyber influences on the ICS of the enemy, therefore, this direction of research is promising and corresponds to the national interests of Ukraine

Development of the national cybersecurity system of Ukraine as a necessary element of information society development

The article examines modern development problems of the national cybersecurity system of Ukraine. With the emergence of new challenges and threats in cyberspace, there is a need to find new methods and ways to combat cybercrime and cyberterrorism. The current state of the fight against cybercrime in Ukraine and the prospects for capacity building and reform of the main subjects in cybersecurity in Ukraine are outlined.
 In the course of the research general philosophical, comparative and phenomenological methods were used. The aim of the article is to reveal the peculiarities of building the national cybersecurity system of Ukraine in the context of information society development. Among cyber threats, special attention is paid to cyberattacks based on ransomware viruses.
 The need to implement the provisions of the Convention on Cybercrime, in particular in the context of the draft Second Additional Protocol to the Convention on Cybercrime to strengthen cooperation and disclosure of electronic evidence, in particular on direct cooperation with service providers (Article 6) and domain names registration services (Article 7), for the disclosure of information for the identification of suspects, accelerated forms of cooperation between the Parties for the disclosure of subscriber information and traffic data (Article 8), acceleration of cooperation and disclosure of information in emergencies (Articles 9 and 10). Attention is drawn to the unconditional fulfillment of the tasks of the new Cyber Security Strategy of Ukraine, especially those related to cyber protection of critical infrastructure. It is noted that at the legislative level it is advisable to provide for cyber defense measures in peacetime and the functions of military cyber units during hostilities, as well as the possibility of preventive cyberattacks and procedures for bringing cyber defense troops to active hostilities.
 The necessity of strengthening international cooperation and improving the current legislation in the conditions of growing number and complexity of cybercrimes is substantiated.

Організація професійної підготовки фахівців із кібербезпеки основними суб’єктами національної системи кібербезпеки: практичний аспект

Проведено аналіз нормативно-правового забезпечення підготовки фахівців ізкібербезпеки та надано характеристику системі підготовки та підвищення кваліфікації фахівців із кібербезпеки основних суб’єктів національної системи кібербезпеки. Виявлено проблемні питання щодо підготовки та підвищення кваліфікації фахівців із кібербезпеки основних суб’єктів національної системи кібербезпеки, що уповільнюють впровадження інформаційних технологій в усіх сферах суспільного життя та діяльності. Сформульовано пропозиції основним суб’єктам національної системи кібербезпеки та Національному координаційному центру кібербезпеки, які беруть участь у професійній підготовці фахівців із кібербезпеки, для подальшого використання у практичній діяльності та для удосконалення відповідної нормативно-правової бази.

Legal and organizational provision of protection of the critical information infrastructure from cyberattacks

The article considers the legal and organizational aspects of ensuring the protection of the critical information infrastructure from cyberattacks. Attention is drawn to the positive experience of the United States in ensuring the resilience of the objects of critical infrastructure. The provisions of the new Cyber Security Strategy of Ukraine are analyzed, one of the priorities of which is to improve the regulatory framework for cyber security of critical information infrastructure. The shortcomings of the previous Cyber Security Strategy of Ukraine (2016) are noted. Contains a detailed analysis of legislation and initiatives on providing cybersecurity. General requirements for cyber protection of critical infrastructure objects are considered. Based on the analysis of the current legislation on cyber security of Ukraine, ways to improve the legal and organizational support for the protection of the critical information infrastructure from cyber attacks are proposed.

Principles of legal regulation of the institute of information security

The article in the context of methodologies of systematic analysis of legal phenomena reveals the content of the principles of legal regulation of the institute of information security. It is noted that information security is defined as the impossibility of causing harm by means of a security object, due to information and information structure. Principles play an important role in the legal provision of information security. The basic principles of legal regulation of the information sphere are enshrined in the Laws "On Information", "On the Basic Principles of Cyber Security of Ukraine", most of which are key to the development of legal regulation of information security processes. In order to improve the information security system from various challenges and threats, it is proposed to enshrine in information legislation the principle of presumption of security of critical information infrastructure, which establishes that critical information infrastructure is considered protected as long as the organizational and legal security of these facilities requirements set forth in regulations in the field of information security. It is stated that a wide range of problems of information security of the individual, society and state, development of cybersecurity culture, ensuring privacy and protection of access rights, protection of information systems, resources and networks, expanding the use of information technology in public administration, other information problems security needs careful study. The principles of legal regulation in the field of information security are revealed through normative detail. It is emphasized that with the development of scientific and technological progress and the latest forms of processing and use of information, the principles of regulation in the field of information security need to be correlated at the level of regulatory support.

СТАН ТА ОСОБЛИВОСТІ ПРОТИДІЇ КІБЕРЗЛОЧИННОСТІ В УКРАЇНІ В УМОВАХ ПАНДЕМІЇ COVID-19

The paper analyzes the state of cyber security in Ukraine as a result of the COVID-19 pandemic. It is determined that the main reason for the aggravation of the situation in this area in 2020-2021 was the transition of an unprecedented number of citizens to remote working and an increase in the share of e-commerce. This situation has exacerbated existing and contributed to the emergence of new problems of legal, organizational, software and technical and other areas of cyber security in Ukraine. Based on the analysis of statistical data, analytical materials (obtained primarily from open sources of the Cyberpolice of Ukraine), international experience has shown that the COVID-19 pandemic most actively contributed to the development of such cybercrimes as: obtaining user credentials through malware distribution (usually phishing method); fraud schemes for the sale of personal protective equipment, medicines and other goods designed to prevent coronavirus (COVID-19) infection, as well as for the sale of other consumer goods; spreading misinformation and fakes in order to create panic and social instability in the state. The conducted analysis allowed to outline the main priority areas in counteracting this socially dangerous phenomenon. Among them: the need to intensify the activities of law enforcement agencies in Ukraine in cybercrime counteraction, to strengthen cooperation with law enforcement agencies of other countries; to create new and make amendments to existing regulatory legal acts to combat cyber threats, including on the basis of international experience and international standards; improvement of software and hardware of information and telecommunication systems; improving public awareness of the cyber security system in the country, etc.

Features of the initial stage of investigating fraud with financial resources in cyberspace

The article aims to characterize the forensic features of the initial stage of investigating fraud with financial resources in cyberspace, its significance, analysis, and justification as a type of cybercrime that is dangerous for everyone, and prove the need for urgent measures to prevent and combat such criminal offenses. The authors used several methods of scientific cognition: logical-semantic, system-structural, analytical, formal-legal, forecasting, dialectical, interpretation, and hermeneutics. The article focuses on the general provisions of the forensic characteristics of Internet fraud with financial resources; analysis of the information model of the mechanism of committing fraud with financial resources in the field of computer information; coverage of the tactical features of individual investigative actions at the initial stage of the investigation of fraud with financial resources in cyberspace. It was concluded that the effectiveness of combating Internet fraud and the level of cybersecurity in Ukraine is very low. Therefore, the investigation of fraud with financial resources in cyberspace requires in-depth specific knowledge from the subjects of the investigation.

Cyber crime, computer crime or cyber offense? The analysis of the features of a terminology application

Today cybercrime and computer terrorism are identified as one of the threats to Ukraine’s national security in the information sphere. Cybersecurity measures include achieving and maintaining security features in the resources of an institution or users, aimed at preventing relevant cyber threats. Cybercrime is a set of criminal offenses committed in cyberspace by computer systems or by using computer networks and other means of access to cyberspace, within computer systems or networks, as well as against computer systems, computer networks and computer data, has been widely developed. The paper considers such terms as «computer crime», «information crime», «crime in the field of computer information», «crimes in the field of information technology». Scientific works of domestic and foreign researchers on the issues of countering cybercrime are analyzed. The connection of the concept of «cybersecurity» with the terms «cybercrime», «computer crime» and «cybercrime» the concepts of «cybercrime» was given. The difference in the interpretation of the concepts «cybersecurity» and «information security» was considered. The definitions of «cybercrime», «computer crime» and «cyber offense» were given for comparison. Their main features were considered. The concept of «computer victimhood» and its components were considered. With the introduction of the institute of criminal offenses in the national criminal law, the terms «cybercrime» and «computer crime» should lose their relevance, as evidenced by the change of title of Chapter XVI of the Criminal Code of Ukraine to «Criminal offenses in the use of electronic computing machines (computers), systems and computer networks and telecommunications networks». Therefore, instead, we can recommend the use of the term «cyber offense», which we propose to understand as «socially dangerous criminal act in cyberspace and/or using it, liability for which is provided by the law of Ukraine on criminal liability and/or which is recognized as a criminal offense by international treaties of Ukraine, and cybercrime is a set of cyber offences». It is clear that this will require the introduction of appropriate terminological changes in the Law of Ukraine «On the Basic Principles of Cyber Security of Ukraine» and other regulations.