National Cybersecurity Research Articles

ФОРМУВАННЯ СИСТЕМИ КІБЕРЗАХИСТУ ДЛЯ ІНТЕГРОВАНОЇ ГАЛУЗЕВОЇ ІНФОРМАЦІЙНОЇ СИСТЕМИ УКРАЇНИ СЕКТОРУ НАЦІОНАЛЬНОЇ КІБЕРБЕЗПЕКИ

This The article is devoted to the disclosure and elucidation of the envisaged composition, structure of measures and tools that will be part of a comprehensive system of protection of industry-integrated MIS in the national cybersecurity sector. The article also describes the specifics and strategic value of the involved resources, which will be operated by the established system of cybersecurity. It is noted that the industry-integrated cyber defense MIS envisages the use of a set of interconnected means and measures, the implementation of which is necessary and sufficient for the full protection of industry-integrated MIS to counter external unauthorized access, etc. Emphasis is placed on the compliance of the envisaged cybersecurity system with international criteria and standards of protection of such control systems for NATO countries, in particular, the US Department of Defense cybersecurity standard (TCSEC also known as "Orange Book"); with international criteria and standards for the protection of similar control systems for other leading countries, in particular, the international technical standard ISO/IEC 15408 "General criteria for assessing IT security", which has been ratified by most leading countries; with guidelines and recommendations of the International Organization NCSS (National Cyber Security Strategies) for NATO Partner countries, as set out in the National Cyber Security Strategy and developed by international national cybersecurity experts, scholars and European international cybersecurity advisers in the context of NATO's "Science for Peace and Security (SPS) Programme"; with national technical standards of Ukraine. The article also presents in detail the full range of mandatory resources and tools for the cybersecurity of designed industry-integrated MIS in the national cybersecurity sector, which include five levels of cybersecurity (organization, software, hardware, engineering, additional physical level).

AN ANALYSIS OF THE LITERATURE ON SOCIETY'S CONCERNS ON INDIA'S CYBERSECURITY IN THE TWENTY-FIRST CENTURY

Cyber security is concerned with matters of cyber-ethics and cyber-safety. The idea of cyber security should be introduced to and ingrained from a young age. Security countermeasures aid in preserving the confidentiality, availability, and integrity of information systems by preventing or lessening asset losses brought on by cyber security threats. An intrusion detection system (IDS) application analyses what happens during an execution and searches for indications that the computer has been mistreated. Numerous metaphors, including those relating to biological processes, healthcare, markets, three-dimensional space, and the preservation of tangible goods, were taken into account. These in turn sparked the investigation of a wide range of prospective tactics for advancing cyber security in the future. The concepts of "Heterogeneity," "Motivating Secure Behaviour," and "Cyber Wellness" were employed to define these tactics. Cyber security plays an important role in the development of information technology and Internet services. Our attention tends to gravitate toward "Cyber Security" when we hear about "Cyber Crimes." Therefore, how well our system handles "Cyber Crimes" is the first factor we take into account when talking about "National Cyber Security". This newsletter focuses on expanding trends in cyber security in light of the widespread adoption of cutting-edge technologies including mobile computing, cloud computing, e-commerce, and social networking. In the research, it is also covered how challenges are exacerbated by a lack of coordination between security organizations and crucial IT infrastructures.

Metaheuristic Optimization for Enhancing Cyber Security Index Prediction: A DTO+FGW Approach with MLP Integration

In the realm of cybersecurity, the evaluation and enhancement of cyber resilience are paramount to safeguarding nations and organizations against evolving digital threats. This paper introduces a novel approach that integrates the Dipper Throated Algorithm (DTO) and the Grey Wolf Optimizer (GWO) to fortify the analysis of Cyber Security Indexes. These indexes encompass vital metrics, including the Cybersecurity Exposure Index (CEI), Global Cyber Security Index (GCI), National Cyber Security Index (NCSI), and Digital Development Level (DDL). Leveraging the adaptive nature of DTO and the collaborative hunting strategies of GWO, the proposed DTO+GWO algorithm aims to optimize the evaluation of cyber readiness, exposure levels, and global commitments to cybersecurity. The Cyber Security Indexes dataset, featuring indicators from 193 countries, serves as the testing ground. This study contributes to advancing cyber threat assessment methodologies, fostering a proactive stance in the face of cyber risks globally. Through rigorous optimization, the DTO+GWO algorithm exhibits promising potential to elevate the precision and efficacy of cybersecurity evaluations. The optimization results demonstrate a notable achievement, with an RMSE of 0.0090, reflecting the algorithm's enhanced performance in fine-tuning the assessment of cybersecurity indexes.

ТЕОРЕТИКО-МЕТОДОЛОГІЧНИЙ АНАЛІЗ ІННОВАЦІЙНИХ ФОРМ І МЕТОДІВ ВЕДЕННЯ ІНФОРМАЦІЙНОЇ БОРОТЬБИ: ВИКЛИКИ ТА ЗАГРОЗИ КІБЕРБЕЗПЕЦІ

With the beginning of full-scale and open aggression on the part of the Russian Federation, improving the system of ensuring Ukraine's national security became an urgent issue. At the same time, ensuring cyber security is one of the priorities in the national security system. The implementation of the specified priority should be carried out by strengthening the capabilities of the national cyber security system to counter cyber threats in the modern security environment. Since now almost every inhabitant of the planet has access to the Internet, there are many more opportunities to influence our thoughts and actions. Information aggressors now do not just tell tales about the enemy, they form a different vision of the world, replace reality with such a well-thought-out hoax that it is almost impossible to distinguish it from the truth. At the end of the 20th beginning of the 21st century. the world received a new form of confrontation  a hybrid war. One of the leading countries that actively uses the tools of hybrid warfare today is Russia. The basic components of the Russian strategy and tactics of modern hybrid warfare were formulated in 2013. In the context of the functioning of the online network space, as a means of conducting information warfare, any format and topic of projects can be used. The best tool for penetrating the enemy's information field is the so-called media viruses - information carriers (events, scandals, rumors, activities of organizations and individuals) that carry veiled ideas and messages in a hidden form. The modern development of the media and online environment makes certain adjustments to our lives. Gradually, new forms of relations between objects and subjects of society in its various spheres: economic, political, social and other are perceived as the norm. Informational and psychological confrontation is no exception. One of the forms of such confrontation is informational online network war, which should be understood as a complex of informational influences between social systems (groups) aimed at obtaining certain advantages in economic, military, political, cultural and public confrontations.

The role of the Cybersecurity Strategy of the Republic of Poland in ensuring cybersecurity

Cybersecurity belongs to the area of activity of state and supra-state actors, giving direction to national and international systems of law as components of national and supranational systems of political, economic, military cooperation, etc. Still, the state has a monopoly on the causality of lawmaking, which forms the basis of cyberspace use security activities. The state responds to national security needs by actively participating in the formation of the collective security order of the supranational level. The aim of this paper is to demonstrate the significance of the national Cybersecurity Strategy of the Republic of Poland for ensuring the safe use of cyberspace. The Strategy, while referring to the national order, is at the same time an implementation of supranational arrangements within the scopes adopted by the state authorities, which means that the Strategy is subjected to logical evaluation depending on the impact of cyber conditions or binding arrangements of the international environment. The text is based on two research methods: the doctrinal legal research method to analyse the applicable legal regulations governing the issues related to the strategic aspects of cybersecurity and the law theory method aimed at evaluating the strategic solutions in respect of security in cyberspace.

Правовые аспекты современной кибербезопасности и противодействия киберпреступности

The article analyses contemporary legal aspects and current cybersecurity issues, cybercrime features of Rus- sian and foreign law of information and communication technologies. The research methods consist of comparative legal analysis of contemporary Russian and foreign legislation and law enforcement practice, as well as, a formal and logical study of a conceptual apparatus, content and struc- ture of the research object. The study results enable the authors to formulate the awareness of cybercrime legal content, that includes not only offenses committed by using computer technology, but other information and communication equipment and tools, including software either. The rapid spread of cybercrime, the emergence of new forms of organized crime using the global Internet, intended and well-organized cyber attacks on a critical infrastructure of states and private companies indicate the formation of a special area of crime - cybersecurity crime and information technol- ogy, which goes beyond a common insight of crime of information technology and communications. Therefore, the authors came to certain conclusions to conceptualize theoretical and methodological principles, develop the foundations of law and order of cybersecurity, clarify the conceptual apparatus and specifics of legal regulation of cybersecurity in public and private law, as well as the formation of a new line of criminology of cybercrime. The scientific novelty of the study consists of a conceptual justification of a cybercrime countering, as an ele- ment of national cybersecurity, as well as, the substantiation of a specific line of criminology - cybercriminology.

Особенности формирования системы национальной кибербезопасности Государства Кувейт

The article is devoted to the analysis of the state of the national cybersecurity system of the State of Kuwait. Based on the cybersecurity standards of the International Telecommunication Union (a specialized UN agency responsible for coordinating international efforts to develop the digital sector) the author reveals the main specific features of the formation of the Kuwaiti cyber system, and also determines the level of the country's participation in the development of the international digital security system. The author comes to the conclusion that the digital system of Kuwait is formed with imbalances, and many decisions are aimed at "selective" relief of digital threats. In addition, the author draws attention to the existence of contradictions in the Kuwaiti model of international cooperation on cybersecurity issues: on the one hand, the country advocates more active participation in international processes, and, on the other hand, does not actively participate in the work of key international platforms. In addition, the sharp anti-Israeli position of the country has a certain negative impact on the Kuwaiti model of digital protection. The author notes that Kuwait is currently aimed at harmonizing the national cyber system and developing a more effective approach to international cooperation. However, to make these efforts more effective, some aspects of the existing approach need to be revisited, such as developing a model for interacting with digital companies that do business with Israel.

Transforming underground coal mine workings into critical cyber security facilities in the perspective of the European Green Deal plan

Purpose: in the cognitive space, the article focuses on cybersecurity as one of the top priorities of the European Commission and a cornerstone of a digital and connected Europe. The increase in cyberattacks during the coronavirus crisis has shown how important it is to protect hospitals, research centers and other infrastructure. Decisive action is needed in this area to future-proof the EU's economy and society. Therefore, cybersecurity is a key element to ensure the safe and effective implementation of the European Green Deal plan. Methodology: the theses presented in the article were verified using the following methods: literature review, critical analysis of literature, analysis and comparison of documents and an example of good practices. Result: the results of analyzes and research clearly revealed that cyberattacks do not stop at state borders, therefore it is necessary to strengthen cooperation between EU Member States, exchange information on threats and develop common standards and best practices in the field of cybersecurity. This allows for effective protection against attacks and minimization of risk to critical infrastructure related to the European Green Deal. Originality: in the perspective described in the article, important and significant challenges arise in the field of protecting critical infrastructure against cyber threats. One of them is the transformation of underground workings of hard coal mines into facilities critical for national cybersecurity. The theses presented in the article were verified using the following methods: literature review, critical analysis of literature, analysis and comparison of documents and examples of good practices. Keywords: transforming, coal, cyber security.

National Cybersecurity Strategy 2023

In the modern world, a country’s cyberspace plays a decisive role in ensuring national security. The last US Cybersecurity Strategy was released in 2018, and on March 2, 2023, the Biden administration released the New US National Cybersecurity Strategy. This document represents the detailed planned goals and objectives of the United States in cyberspace until 2030.

Cyberzagrożenia w cyberprzestrzeni. Cyberprzestępczość, cyberterroryzm i incydenty sieciowe

Nowadays, taking into account the number of Internet users, as well as the increasing use of ICT solutions in public administration, we are dealing with the intensification of cyberthreats, which take the form of cybercrimes, cyberterrorism or network incidents. The aim of the article is to characterize the threats occurring in cyberspace. The subject of the study covers the classification of cybercriminal and cyberterrostic threats, including their criminalization. In addition, due to the variety of cyberthreats, aspects of the national cybersecurity system related to incident handling and the implementation of cybersecurity policy is presented. The analysis of the issues will allow to answer the following questions: are we dealing with the intensification of cyberthreats today, and if so, are they homogeneous or diverse? Whether the only solution in the fight against cyberthreats is to penalise them? and what factors should be taken into account in order to minimise the negative effects of cyberthreats? The study will discuss issues related to the systematics of network threats in the framework of cyberterrorism, cybercrime and network incidents. The adopted research methods include the analysis of basic legal acts and the literature on the subject.

Romania’s Implementation of International and European Cyber Law to Strengthen National Cybersecurity

Since the establishment of the Council of Europe Convention on Cybercrime in 2001, Romania has been at the forefront of ratifying and implementing the provisions and various directives and cooperating with international partners. In 2021, Romania became the headquarters of the European Center of Industrial, Technological and Research Competence (ECCC) in the field of cybersecurity. Its mission is securing digital infrastructures, conducting research in the field of cybersecurity and making technological developments. Because Romania is such an influential leader in European cybercrime, the purpose of this investigation report is to explore the level of implementation of international law into Romanian law, as well as to discover possible shortcomings. The report will specifically explore the implementation of the Convention on Cybercrime and related European directives into the national framework.

PREREQUISITES FOR THE FORMATION AND DEVELOPMENT OF INFORMATION ECONOMY IN UKRAINE

The article examines the prerequisites for the emergence of an information economy, which on the basis of systematization allows to schematically reflect the transformation of the structure of social production. Social production is represented by five sectors of the economy: mining and agriculture; industry and construction; production and personal services; trade, finances, insurance and real estate operations; health care, education, research, recreation industry, public administration. As each of these sectors saturate, a new type of economy is formed – information economy.
 The analysis of the views of economists on the interpretation of the term "information economy" has been carried out, as a result of which it is revealed that the information economy is a type of economy in which in all spheres of activity of economic entities the ability to effectively generate, process and use information based on knowledge prevails.
 The main characteristics of the information resource, which include limitlessness and inexhaustibility in use; accessibility, are determined. Its cost does not depend on the volume of aggregate demand, and the process of forming the price of information differs from determining the price of any other product or service.
 A study of the level of development of the information economy in Ukraine has been carried out on the basis of two indicator systems: 1) the main statistical indicators calculated by the State Statistics Service of Ukraine; 2) a set of development indicators that are reflected in international indexes and ratings every year.
 The domestic system of indicators for the development of the information economy is represented by the number of enterprises that have access to the Internet; the number of companies with a website; the number of enterprises that use social networks; the number of enterprises that buy cloud computing services; the number of enterprises that conduct training in the field of ICT; the number of e-commerce enterprises; e-commerce sales volume.
 The assessment of the level of development of the information economy in Ukraine is carried out according to the following global indicators: network readiness index, global communication index, global digital competitiveness rating, global cyber security index, national cyber security index, global innovation index, global knowledge index. As a result of the analysis, the potential for the development of the information economy in Ukraine is revealed.

Cybersecurity and Country of Origin: Towards a New Framework for Assessing Digital Product Domesticity

Recent events concerning the Kaspersky anti-virus software in the UK and the Android operating system in the US have highlighted the significance of the domesticity of digital products for national cybersecurity, and the importance of establishing the origin of digital products has been further brought into focus by the war in Ukraine and China’s military activities around Taiwan. Digital products can contain hardware components, software elements, embedded systems, and data, and determining the country of origin (COO) in these circumstances is problematic. The aim of this research, and its main contribution, is to provide an operational framework for the application of the COO concept to address this problem. Using an inductive research methodology based on semi-structured interviews and an online survey, a 19-parameter framework for assessing the COO of digital products is developed and then applied to the case example of a mobile phone import in Turkey. This article concludes that new processes and policies are urgently required to enhance the cyber and information security for digital products, aid domestic digital technology production, and support the transition to recyclable technologies. Such developments are of significance not only for western nations concerned with data and security issues, but also for developing world countries trying to develop their own domestic digital product manufacturing capabilities. This is also of relevance to the computer end-user, who would benefit from greater clarity on the origin of digital products ahead of a purchase decision.

STRATEGI INDONESIA MEMBENTUK CYBER SECURITY DALAM MENGHADAPI ANCAMAN CYBER CRIME MELALUI BADAN SIBER DAN SANDI NEGARA

Cyber security has become a priority issue for all countries in the world since information and communication technology is used in various aspects of life, both in social, economic, legal, organizational, health, education, culture, government, security, defense, and other aspects. In direct proportion to the high level of utilization of information and communication technology, the level of risk and threat of misuse of information and communication technology is also getting higher and more complex. In response to these events, Indonesia then formed the National Cyber and Crypto Agency (BSSN) as a model for national cyber security institutions. This study uses a qualitative method with a descriptive approach. The purpose of this research is to find out how Indonesia's strategy in establishing cyber security in dealing with the threat of cyber crime through the National Cyber and Crypto Agency.

Legal Aspects of the Supply Chain Cybersecurity in the Context of 5G Technology

The 5G networks are considered to be crucial for the digital transformation of the economy and society and therefore will be subject to the regulations concerning the supply chain cybersecurity. Numerous European documents point out cyberthreats relating the supply chain and oblige the Member States to introduce laws enabling risks assessment of suppliers, which, in accordance with the EU Toolbox, should cover technical and non-technical factors such as dependence of the supplier from third countries. So far, Poland has not introduced regulations in this respect and provisions on recognition of high-risk suppliers to be implemented in the Act on national cybersecurity system are still in the draft phase. The key criterion for the risk assessment will be a threat to the national security, which is vague and may in the future be difficult for interpretation due to the specifics of the proceedings (limited right to participate in the proceedings, limited access to information). As the effects of the proceedings are far-reaching (the obligation to withdraw the products), they may potentially raise some concerns with regard to the freedom of economic activity. The new cutting-edge technologies such as 5G, as well as the need to ensure cybersecurity along with the on-going political polarization in the world will increase the amount of legal regulations relating to the supply chain cybersecurity.

A model of a comprehensive phishing prevention system

In particular, the results of our analysis indicate that with the accumulation of large data sets (properties, conditions, influencing factors, consequences) it will be possible immediately obtain more accurate results about possible security events and thus reduce the amount of spent working time by at least 50%, taking into account costs time to eliminate the consequences of erroneous information security decisions that are of a subjective nature. The security administrator will reduce the time spent on risk analysis and prioritization, and will be able to start processing them almost immediately, which will increase the effectiveness of existing information protection mechanisms. According to the tasks, a model of a comprehensive phishing prevention system has been developed, which consists of a Telegram bot, a mobile application, a website, a browser extension, a shared database, and a DNS server. In this structure, the data collection processes are improved by increasing the number of participants in their formation. Data processing becomes faster due to automation, and data exchange is characterized by the standardization of the source. The system can also be used for the early detection of mass mailings. Such detection is based on estimating the number of transitions from one network to one link in a unit of time. The use of the system data will contribute to the safety of users and increase the effectiveness of CERT-UA, the Cyber Police, the National Bank of Ukraine, and the National Cybersecurity Coordination Center in the process of their operational interaction. The prospects for further research include the integration of artificial intelligence methods (BERT model) into the developed neural network infrastructure to improve the algorithms for identifying malicious resources. The development of the infrastructure also involves creating an API and its further use in messaging services (messengers, web resources with messaging function). Key words: cyber security, phishing, cyber risk.

Digitalization of Youth policy in Russia as a factor in the development of national cybersecurity strategy

Digitalization of Youth policy in Russia as a factor in the development of national cybersecurity strategy

The position of the Computer Security Incidents Response Teams in the national cybersecurity system

1. Chałubińska-Jentkiewicz K., Karpiuk M., Kostrubiec J., The legal status of public entities in the field. Google Scholar

The Cybersecurity Obligations of States Perceived as Platforms: Are Current European National Cybersecurity Strategies Enough?

Cybersecurity is a relatively recent addition to the list of preoccupations for modern states. The forceful emergence of the internet and computer networks and their subsequent ubiquitusness quickly brought it to the fore. The use of the internet in public and private administrations developed fast from a useful addition to an inherent, embedded element of all relevant policies and strategies. By now modern administrations, regardless whether public or private, are inconceivable outside the digital sphere. Nevertheless, with great opportunities came also great risk. Attacks against computer systems quickly evolved from marginalised incidents to state affairs, and concern. The exponential increase in the importance of cybersecurity over the past few years has led to a multi-level response. New policies, followed by relevant laws and regulations, have been introduced at national and international level. New academic interest has emerged, adding to the traditional studies on security. Perhaps most prominently, however, among these responses, modern states have been compelled to devise concrete cybersecurity strategies. The commonality, however, of computer network technologies and of the internet itself (including the digital means to cause harm) has led to considerable harmonisation among state responses. In other words, national cybersecurity strategies made available over the internet more or less resemble one another. Such uniform thinking could develop into a risk per se: challenges may appear unexpectedly, given also the dynamic nature of the internet and the multitude of actors and sources of risk, that could put common knowledge, if not wisdom, to the test at a stage with limited space for response. This paper builds upon the idea of national states being perceived as platforms within the contemporary digital and regulatory environment. In this context, it elaborates upon a concrete consequence of states-as-platforms within the cybersecurity field. To this end, Section 2 introduces the idea of states as platforms; Section 3 then particularizes this general discussion by specifically referring to the cybersecurity field, in an attempt to highlight specific consequences of states being perceived as platforms. The focus is then turned to the EU, and the NIS Directive’s obligation upon Member States to introduce and implement national cybersecurity strategies, which are therefore examined under the lens introduced in Section 2. Finally, specific points for improvement in these cybersecurity strategies are presented in Section 5.

Global Digital Convergence: Impact of Cybersecurity, Business Transparency, Economic Transformation, and AML Efficiency

The article substantiates the existence of convergence processes in the field of digitization of countries, taking into account the number of Internet users; people with advanced skills; and indicators of infrastructure (network coverage, population covered by at least a 3G mobile network, population covered by at least a 4G mobile network), access (access to ICT at home, active mobile broadband subscriptions, fixed broadband subscriptions), enablers (fixed broadband over 10 Mbps, mobile data and voice basket, high consumption) and barriers (improved broadband access from 256 kbps to 2 Mbps and from 2 Mbps to 10 Mbps mobile data and voice basket, low consumption) of digital development. The methodological basis for determining the sigma convergence of digitization processes is the coefficient of variation. The values of the coefficient of variation confirmed the high level of convergence between the studied countries in terms of the degree of use of the Internet for conducting digital transactions. The developed econometric model, which describes the influence of statistically significant integral indicators of the national cybersecurity level, ease of doing business, and the anti-money laundering index on the country’s digital development level, made it possible to determine the average trend of dependence on the level of digital development. One hundred four countries were considered for the analysis. The conducted study of the impact of digitalization on economic transformations based on developed quantile regressions made it possible to analyze exactly how the level of digital development for countries with a high level of digitalization and for countries with a low level of digitalization development depends on the value of the national cybersecurity indicator and the ease of doing business, and which countries have the least resistance to the risk factors of their involvement in fraudulent schemes for the purpose of legalizing criminal income.