Protection Of Cyberspace Research Articles

Information Systems Strategy and Security Policy: A Conceptual Framework

As technology evolves, businesses face new threats and opportunities in the areas of information and information assets. These areas include information creation, refining, storage, and dissemination. Governments and other organizations around the world have begun prioritizing the protection of cyberspace as a pressing international issue, prompting a renewed emphasis on information security strategy development and implementation. While every nation’s information security strategy is crucial, there has not been much work conducted to define a method for gauging national cybersecurity attitudes that takes into account factors and indicators that are specific to that nation. In order to develop a framework that incorporates issues based on the current research in this area, this paper will examine the fundamentals of the information security strategy and the factors that affect its integration. This paper contributes by providing a model based on the ITU cybersecurity decisions, with the goal of developing a roadmap for the successful development and implementation of the National Cybersecurity Strategy in Greece, as well as identifying the factors at the national level that may be aligned with a country’s cybersecurity level.

CRITICAL ASSESSMENT OF THE OPERATION OF THE STATE SECURITY SYSTEMS IN POLAND

The undertaken research on the assessment of the operation of state security systems is an attempt to critically assess them from the point of view of a citizen. The aim of the work is to analyze the systemic approach to security in relation to its actual state. The work uses methods typical of social sciences, which include security sciences. To carry out the research, monographic methods, qualitative content analysis and comparative analysis were used. The work indicates that a number of security threats occurring in the country were analyzed. Among those causing the greatest problems, and at the same time neglected, are social threats related to demographic problems. Economic threats related to the current financial situation and threats resulting from poor protection of cyberspace. It was pointed out that, despite the existence of appropriate systems to counteract the threat, there is a lack of it. The repeatability of events constituting a threat and the lack of implementation of real actions that prevent threats were emphasized.

Cyber security as an innovative protection in the political space of Ukraine

The article focuses on the values of the role of cybersecurity in the modern information society. To develop an effective system of interaction in the information space, there is a need to form boundaries of protection for users. The system of protection that exists in society is aimed at resolving the contradictions that arise at the level of actual confrontation and significant influence on political processes with clearly defined subjects of political activity. For the modern world, the subjects of global governance pay serious attention to the level of security of the management system in individual countries and regions, which indicates the effectiveness or imbalance in the management system. Also, the role of such an entity at the supranational level of the management system. Therefore, the chosen topic is quite relevant for the global process of interaction and taking into account the views of individual regions. In addition, effective protection of cyberspace will help reduce the level of manipulation by political actors, which will help increase the level of political culture among politicians and the level of political awareness among ordinary citizens. The article analyzes modern scientific approaches to understanding the concept of cybersecurity and cybersecurity, provides a generalized description of these concepts, identifies modern forms of security in cyberspace, analyzes the state of cybersecurity in the Ukrainian information space and defines its status as a subject of global interaction in the information space. In the political process, an integral element of interaction is the information space, as the modern platform for public relations between policy actors has been reformatted in the latest ways, and therefore the mechanisms of influencing citizens become innovative and demonstrate uncertain response from society and possible ways of political development. events. As a result, a number of mechanisms need to be put in place to protect all cyberspace users who engage in public communication on important policy issues.

Problems of providing protection of cyber space from the activities of terrorist organizations.

The problems of ensuring the protection of cyberspace from the activities of terrorist organizations have been studied. The existing definitions of terrorism in cyberspace in the legal literature are considered. There is an analysis of legislative acts in the field of counter-terrorism, among which the Cyber ​​Security Strategy of Ukraine and the Concept of Counter-Terrorism stand out. The article covers main tendencies of development of activity of the international terrorist organizations with use of information technologies, main tasks of which are reduced to: propaganda of terrorism, including with use of the Internet; recruiting and training new members; obtaining information about the objects of possible terrorist attacks; ensuring terrorist activities; distribution of instructional materials for the manufacture of explosive devices. On the basis of the analysis of innovations of the anti-terrorist legislation of the EU countries the ways of improvement of counteraction of activity of the terrorist organizations in cyberspace are offered.

Activation of international cooperation in the field of cybersecurity: the ways of improvement in today’s realities

The strategic bases of Ukraine's international cooperation in the field of cybersecurity have been identified. The tasks of international cooperation in the field of cybersecurity are generalized. The international initiatives implemented to strengthen the protection of cyberspace are analyzed. The directions of information security policy modernization at the UN level are detailed. The key priorities of international cooperation in the field of cybersecurity between Ukraine and NATO are outlined. Prospective activities of the NATO Cyber Security Trust Fund in Ukraine are considered. Modern world trends that affect NATO's security policy and require appropriate response measures are substantiated. On the basis of generalization, the directions to improve international cooperation in the field of cybersecurity have been identified.

Statistical Indicators of Cybersecurity Development in the Context of Digital Transformation of Economy and Society

Introduction. The scale and destructive consequences of the unlawful impact on cyberspace is a key problem of modern geopolitics, and cyber reliability is recognized as one of the most important security priorities by the subjects of international relations.Problem Statement. Monitoring of cyber incidents and anomalies in information and communication systems and prompt response to risks determined by cyber threats require the development of a system of indicators and criteria for cybersecurity assessment.Purpose. Summarize the international experience of assessing the cybersecurity, to position countries by their level of development in the global space, to identify strengths and weaknesses in cybersecurity management, and to ensure effective protection of cyberspace at the national level.Materials and Methods. Used the component indices of the international rankings characterizing the potential of the digital economy (ICT IDI, NRI, EGDI) and the participation of countries in the field of cybersecurity(GCI and NCSI).Results. It has been argued that cybersecurity ratings play the role of a kind of identifier of the relative advantages and vulnerabilities of the national cyber strategies, and indicate the need for their review in order tostrengthen protection against cyber-attacks and improve the cyber risk management system. In countries with a high level of economic development, which is largely based on the contribution of IT technologies to the national production, the cybersecurity potential is significantly higher, regardless of geolocation. The discovered correlation between GCI, information society development indices (IDI, NRI, EGDI) and GDPper capita confirms that the digital transformation of the economy and society acts as a key driver of economicdevelopment if the information- and cyber-security are assured only. The best practices are highlighted, andcritically weak segments of the national cybersecurity are identified.Conclusions. Using the NCSI indicators, the preparedness of Georgia and Ukraine to prevent the implementation of fundamental cyber threats and to manage cyber incidents and large-scale cyber crises is assessed.

Analysis of College Students’ Cybersecurity Awareness In Indonesia

Internet-based attacks have become common and are expected to happen continuously with the development of technology. Therefore, cybersecurity emerged as an important concept in everyday life. It is defined as the protection of cyberspace. Cybersecurity Awareness (CSA) exists as a major defense key in protecting users and systems from internet-based attacks. The research presented in this study aims to assess the level of CSA among college students in Indonesia. This study uses the Analytic Hierarchy Process (AHP) method to test students in three dimensions, including attitudes, knowledge, and behavior. To measure this dimension, six focus areas in the topic of cybersecurity were taken and developed from previous studies on the same topic. The six focus areas are password security, cyberbullying, phishing, malware, identity theft, and the last is downloading, sharing and use of pirated content. The results showed that the total level of CSA for college students in Indonesia was in the good criteria. This is indicated by a total percentage of awareness around 80%. Nevertheless there are some focus areas that can be improved to increase the percentage.

АНАЛІЗ ЗМІСТУ ПІДГОТОВКИ БАКАЛАВРІВ З КІБЕРБЕЗПЕКИ В СУЧАСНОМУ КОНТЕКСТІ ФУНКЦІОНУВАННЯ ЗАКЛАДІВ ВИЩОЇ ОСВІТИ

The article analyzes the content of training bachelors in cybersecurity in the modern context of the functioning of higher education institutions. It is noted that the provision of cybersecurity is relevant for many areas of activity, in particular, the fields of science, technology and technology, covering issues related to the protection of cyberspace of the country, individual objects of its infrastructure, characterized these objects. The educational program, which provides for mandatory professional training in order to obtain a bachelor's degree in cybersecurity, is analyzed. Involvement of teachers and professionals working in the system of vocational education and production in the field of information security, as well as business representatives, in order to transfer best practices to future professionals, highlighting the latest advances in science and technology, the rules of successful business. It is noted that in order to develop and update the list of elective subjects at the beginning of the second semester of each academic year, working groups are created at the faculties under the chairmanship of deans. The composition of the working groups is approved by order of the rector. The working groups analyze the quality of educational and methodological and informational support of the submitted disciplines and form their recommendations on quantitative changes in the existing list of disciplines. Based on the analysis of the above information, the working groups form a list of selected disciplines in due time and submit it to the information department for the formation of an updated general academic catalog, which is approved by the Academic Council of the University. The duly approved catalog of selected disciplines recommended for study in the next academic year is posted for acquaintance of higher education students on the official website of the university. It is proved that the program learning outcomes include basic knowledge of basic sciences, to the extent necessary for the development of general professional disciplines, knowledge of the state and one of the foreign languages in order to ensure the effectiveness of professional communication. Knowledge of the functioning of information technology systems and networks and their components of the legislative and regulatory framework, as well as the requirements of relevant, including international, standards and practices for professional activities are important.

Cybersecurity and E-commerce in Free Trade Agreements

We are facing a digital age characterized by constant flows of goods and services, financial assets, people, information and communication. As a consequence, the world economy is increasingly connected, and digitalization has spread to such an extent that today’s world economy is a digital one, which has come to break down commercial barriers that the traditional economy and politics were unable to. Security and trade policy concerns are nothing new. However, given the electronic nature of commercial transactions (e-commerce), this has taken on a new and urgent importance. Cyberspace is a space of flows, a virtual space that grows every day with the transactions that take place through the use of ICT. Governments of many countries have begun to develop cybersecurity strategies, while trying to promote the benefits of a hyperconnected and cyber-enabled world. This article analyzes how e-commerce policies promote the protection of cyberspace. Specifically regarding e-commerce, care must be taken so that the cybersecurity strategy does not become an obstacle or constraint to such electronic transactions. The protection of cyberspace must be carried out with a multi-stakeholder approach. These issues are also of public interest since threats to cyberspace can affect entire countries and societies.

Indonesian Cyber Law Formulation in The Development Of National Laws In 4.0 Era

The digital age has made the loss of boundaries for interaction and communication which then creates a new world of cyberspace. The cyberspace entity on the one hand provides advantages and on the other hand also causes losses if there is no protection in the cyberspace. Protection of cyberspace in Indonesia is still far from good and tends to be bad. Even President Susilo Bambang Yudhoyono has been a victim of the weak protection of the cyberspace. These weaknesses are the implications of the existence of norms that are legal norms which are the basis of the implementation of cyberspace protection in Indonesia. In this paper ,we will discuss about the problems of cyberspace in Indonesia and how legal norms should be present as a means of social control and engineering. Especially the cyberspace in order to realize order and security in the cyberspace. The method used in this study is the normative juridical method with the legislation approach and case approach.

Rola i kompetencje prezydenta Ukrainy w zakresie kształtowania reżimu prawnego ochrony cyberprzestrzeni. Analiza teoretycznoprawna regulacji prawnych z zakresu cyberbezpieczeństwa U krainy

<p>Tematyka artykułu oscyluje wokół zagadnień związanych z kształtowaniem regulacji prawnych dotyczących cyberbezpieczeństwa Ukrainy. W artykule przeprowadzono teoretycznoprawną analizę aktów prawnych, w szczególności Konstytucji Ukrainy z dnia 26 czerwca 1996 r. oraz ustaw i dekretów prezydenta Ukrainy regulujących ochronę obszaru cyberprzestrzeni Ukrainy. Autor przedstawił również rolę prezydenta Ukrainy w zakresie formułowania polityki cyberbezpieczeństwa wraz z wyszczególnieniem konstytucyjnych oraz ustawowych kompetencji głowy państwa w przedmiocie ochrony cyberprzestrzeni.</p>

АНАЛІЗ СТАНУ КІБЕРБЕЗПЕКИ В ПРОВІДНИХ КРАЇНАХ СВІТУ

The article is devoted to the study of trends in cybercrime, which is a threat to the country's information security. The place and role of cybersecurity in the system of national security are determined. The state of the system of protection against cyber attacks in the developed countries of the world, such as France, Japan, China, South Korea and the United Kingdom, was analyzed. The main shortcomings and perspectives of protection of cyberspace are revealed. The use of modern information technologies in state structures, as well as in society in general, proposes solving information security problems as one of the main ones. The economy, logistics and security of the country increasingly depend on the technical infrastructure and its security. To improve the effectiveness of the fight against cybercrime, developed countries have long started the appropriate work needed to create their own cyber security strategy. Incidents in the field of cybersecurity affect the lives of consumers information and many other services and cyber attacks aimed at various objects of infrastructure of electronic communications systems or technological processes management. Modern world trends in the development of cybercrime and the strengthening of cyber attacks indicate an increase in the value of combating it for the further development of society, which in turn predetermines the assignment of certain groups of social relations of the cybersphere to the competence of legal regulation. The current situation with cybercrime requires constant improvement of methods the fight against cybercrime, the development of information systems and methods aimed at ensuring the cyber security of the country. Necessary tasks are the development of a national strategy on cybersecurity, which will include tactical and strategic priorities and tasks in this area for state bodies. So, the issue of cyberspace security, the fight against cybercrime is relevant both at the international level and at the level of the individual country, and therefore needs further consideration.

CYBERSECURITY AS A NEW DIRECTION OF THE INFORMATION COMPONENT OF NATIONAL SECURITY OF UKRAINE: CONSTITUTIONAL LEGAL ASPECT

The article is devoted to defining the place of cybersecurity of Ukraine, as the latest trend of information component of national security system of Ukraine, which is based on provisions of the Constitution and legislation of Ukraine. The main reasons for the development of the concept of cybernetic security of Ukraine should include the emergence of challenges and threats in information and cyberspace in the context of rapid development of scientific and technological progress of mankind. It is also essential to add that in the conditions of the armed aggression of Russia against Ukraine, the question of protection and its legal reasoning from the point of view of the Constitution of Ukraine with the aim of protecting state sovereignty and independence of the Ukraine is extremely urgent. In the article the special attention is paid to appearance and development of the term "cybersecurity". The approaches of Ukrainian scholars to determining the cybersecurity from the legal point of view are analysed. As the basis for the system of national security of Ukraine, the rules of the Constitution of Ukraine define the fundamental focus on the protection of cyberspace and critical infrastructure of Ukraine. It is important to note that the implementation of the cybersecurity of Ukraine is the protection of the rights and freedoms of man and citizen in Ukraine, the interests of society and the state, effective functioning of bodies of state power, of the ability to confront the challenges and threats in the sphere of high technologies. As well the author considers the problems of determining the informational sovereignty of Ukraine, identifies and consolidates its legal features, including cybersecurity, which is included as part of the overall information security policy in the system of national security of Ukraine. Special attention is devoted to the recently adopted normative legal acts in the sphere of implementation of cybersecurity in Ukraine, which define the essence and the concept of cybersecurity, the basic principles and tasks for its implementation in Ukraine. The article as well defines the characteristics of the national system of cybersecurity in Ukraine. The basic principles of activities, tasks, and limits of competence of the relevant entities ensuring the implementation of cybersecurity in Ukraine are analysed. In conclusion the author singles out the main norms of the Constitution of Ukraine that recognize cybersecurity as a part of the information component of national security of Ukraine.

Protection of Cyberspace as a Component of Ukraine’s Information Security

Cyber security and cyber space of Ukraine remained for a long time out of the attention of domestic researchers and, therefore, civil servants. For more than 20 years, the young Ukrainian state did not waste its efforts on the formation of not only effective and reliable troops, but also information security. The government did not endeavored to strengthen the country’s defense, and only weakened its lack of progress in fighting corruption and the dominance of Russian media and intelligence. As a result, in the spring of 2014, after a long confrontation between the regime of Viktor Yanukovych and the citizens of Ukraine, Russia failed to conduct special operations with the aim of annexing the Crimea and facilitate the war in Donbas. Not the least role in this played a raid for information and factors cyber Russian hackers for the purpose of paralyzing government agencies and influence on public opinion in Ukraine through Russian-controlled media. As a result of prolonged and massive cyber attacks, Ukrainian state structures, the banking system, industrial facilities and private business suffered significant material and reputational losses. At the same time in Ukraine began to realize the seriousness of cyber security as a component of national security and contribute to creating cyber police, national cyber security strategy, acceptance of a number of regulations on cyber security, strengthening public defense for the protection of domestic cyber space. At the moment, Ukraine is on the way to rethinking the role of cyber security and the formation of a national system of protection against cyber threats.

A Security Analysis Method for Security Protocol Implementations Based on Message Construction

Security protocols are integral to the protection of cyberspace against malicious attacks. Therefore, it is important to be confident in the security of a security protocol. In previous years, people have worked on security of security protocol abstract specification. However, in recent years, people have found that this is not enough and have begun focusing on security protocol implementation. In order to evaluate the security of security protocol implementations, in this paper, firstly, we proposed the Message Construction to Security Protocol Implementation (MCSPI), a message construction method based on application programming interface (API) traces, which automatically generates the constructed client valid request messages. Then, we presented the Security Analysis Scheme (SAS), a security analysis scheme that generates an abstract model of a security protocol server. Next, we proposed a security analysis method to evaluate the security of security protocol implementations on the basis of constructed client request messages generated with MCSPI, corresponding to the server-side response message and server-side abstract model produced by SAS. Finally, we implemented the Security Protocol Implementation Analysis (SPIA) tool to generate client valid request messages and a server-side abstract model to assist in evaluating security protocol implementations. In our experiments, we tested Tencent QQ mail system version 2017 and RSAAuth system and found that RSAAuth is vulnerable and its server has only security checks for user password, while Tencent QQ mail system version 2017 is more secure and has strong security restrictions at server-side besides security checks for user password.

Секрет успіху США у сфері інформаційної безпеки

У ході дослідження виявлено багато чинників, які сприяли проведенню успішної інформаційної політики США. Серед них виділено нормативно-правове регулювання, удалу політику державних органів й адміністрації президента, інформованість і довіру населення, кібер-страхування й міжнародну співпраця.
 Наголошено, що США має потужну законодавчу базу. Початок розвитку інформаційної безпеки закладено ще в першій половині ХХ ст. Виокремлено, що від адміністрації президента залежить подальший курс усієї держави, тому двоє останніх приділяли багато уваги проблемі кібертероризму. Вони визнавали, що кіберзлочин і кібершпигунство становлять загрозу національній безпеці країни.
 Охарактеризовано законодавство США у сфері зовнішньої інформаційної безпеки, що включає сукупність федеральних законів, законів штатів та нормативних актів, які разом створюють правову основу для утворення й здійснення державної політики у сфері інформаційної безпеки. Виокремлено основні з них: «Національну стратегію захисту кіберпростору» (2003), «Огляд з кібербезпеки» (Cyber Security Review, 2009), «Ініціативу зі всеосяжної національної кібербезпеки» (2010), Стратегію кібербезпеки США 2011 р., Закон CISPA 2012 р. («Cyber Intelliggence Sharring and Protection Act»).
 Проаналізовано п’ять основних напрямів діяльності з питань інформаційного захисту, які визначає Стратегія: постійний моніторинг і безперервна оцінка загроз та вразливих місць державних інформаційних систем; здійснення національних заходів зі зменшення загроз й уразливості кіберпростору; уживання заходів щодо захисту інформаційних систем органів влади; забезпечення якісної освіти та навчання з питань захисту кіберпростору; співробітництво з питань національної безпеки й безпеки міжнародного кіберпростору.
 Доведено, що кібер-страхування стає поширене в межах країни, тим самим зменшує шанси кіберзлочинців на проведення кібератак. Міжнародна співпраця є однією з важливих складових частин забезпечення інформаційної безпеки.

MILITARY COOPERATION OF UKRAINE AND SLOVAKIA IN THE SPHERE OF DEFENCE OF STATE BOUNDARY

This article reviewed cross-border cooperation between Ukraine and Slovakia, which is one of the priority directions of bilateral relations of both countries. The author emphasizes the importance of signing a number of documents regulating cross-border (interregional) cooperation, in particular: Laws of Ukraine, international treaties, orders of the Administration of the State Border Guard Service of Ukraine, etc. The military cooperation of the partner countries in the sphere of the protection of the state border is in cooperation, namely: in the field of information and telecommunication systems, in matters of arms and disarmament, in the development of cooperation with NATO (for example, educational maneuvers, search operations, development of the Military Doctrines of Ukraine and Slovakia) in accordance with the requirements of international law, in space research, in the technical advice of military experts, in counteracting the leakage of information constituting state secrets, etc. The Law of Ukraine «On Transfrontier Co-operation» states that «cross-border cooperation is joint actions aimed at establishment and deepening of economic, social, scientific, technological, environmental, cultural and other relations between the subjects and participants of such relations in Ukraine and relevant subjects and participants in such relations from neighboring states within the limits competence defined by their national law». Protection of cyberspace and use of databases of «GART» software and hardware complex by border services in the interests of national security, in particular for the fight against organized crime, countering the illegal crossing of the state border by migrants are among the topical issues related to the military cooperation between Ukraine and Slovakia. Cyber defense is a component of intelligence and counter-intelligence activities of bilateral relations (for example, the Slovak Information Service and the Inherent and Internal Security of the State Border Guard Service of Ukraine are engaged in it) for maintaining the regime at checkpoints of the Ukrainian-Slovak border. The Law of Ukraine «On the Basic Principles of Cybersecurity of Ukraine» (Article 4. Objects of Cybersecurity and Cyber Defense) states that the objects of cybersecurity are «the state, its constitutional system, sovereignty, territorial integrity and inviolability». Key words : military cooperation; inherent and internal security; GART global automated information system; cryptographic information protection; Police forces of Slovakia (Slovak Policajný zbor ).

\u2018Dialogue, partnership and empowerment for network and information security\u2019: the changing role of the private sector from objects of regulation to regulation shapers

The protection of cyberspace has become one of the highest security priorities of governments worldwide. The EU is not an exception in this context, given its rapidly developing cyber security policy. Since the 1990s, we could observe the creation of three broad areas of policy interest: cyber-crime, critical information infrastructures and cyber-defence. One of the main trends transversal to these areas is the importance that the private sector has come to assume within them. In particular in the area of critical information infrastructure protection, the private sector is seen as a key stakeholder, given that it currently operates most infrastructures in this area. As a result of this operative capacity, the private sector has come to be understood as the expert in network and information systems security, whose knowledge is crucial for the regulation of the field. Adopting a Regulatory Capitalism framework, complemented by insights from Network Governance, we can identify the shifting role of the private sector in this field from one of a victim in need of protection in the first phase, to a commercial actor bearing responsibility for ensuring network resilience in the second, to an active policy shaper in the third, participating in the regulation of NIS by providing technical expertise. By drawing insights from the above-mentioned frameworks, we can better understand how private actors are involved in shaping regulatory responses, as well as why they have been incorporated into these regulatory networks.

New Issue Domains in the UN Ambit: Negotiating Meanings for Security in the Cyberspace

The international institutional architecture for cybersecurity activities is currently dominated by a multiplicity of initiatives aimed at increasing cooperation at the international level, as well as by a redefinition of the roles played by existent actors and so far no new entity has been empowered to handle security in the cyberspace. The present study explores the meanings given to security in the cyberspace from a politico-military perspective in the largest and most powerful international organization, the United Nations (UN). It investigates the resolutions issued by two of the most active UN bodies in this field: the General Assembly (GA), starting in 1998 and the International Telecommunications Union (ITU), starting in 2007, asking how the wording of the relevant paragraphs concerning cybersecurity shapes the entitlement to participation in the governance of this new issue domain. In this regard, the definition of issues to be covered and of the actors that are, could or should get involved becomes crucial for understanding the broader roles assigned in the regulation of a new domain. The main findings reveal that, in spite of the numerous resolutions proposing steps further for the protection of cyberspace discussed in the General Assembly, a specific definition of cybersecurity has not been provided until 2008. The shift from a state-centric perspective to a multistakeholder approach is yet to be fully completed, and different instances of contestation can be currently observed.

Applying public health strategies to the protection of cyberspace

Abstract Modern society has made massive strides in public health that have contributed to the quality of life we enjoy today. However, the current cyberspace health environment is arguably similar to the public health environment that existed in nineteenth century New York City, if not Europe during the Middle Ages. How would the critical infrastructure cope with a pandemic cyberspace infection with the virulence and potency of the Black Death? This paper presents a strategy for cyberspace health that is inspired by constructs and initiatives in the public health domain. The strategy has five components: (i) sanitizing the environment; (ii) controlling community infections; (iii) educating the actors; (iv) organizing detection and prevention services; and (v) creating the social machinery for cyberspace health.