Active cyberprotection concept in context of technical capabilities for cyber threats mitigation

Abstract

Ensuring cybersecurity has been identified as one of the key priorities within the national security system of Ukraine, while cyberspace is regarded as a potential theater of warfare. The evolution of the cyber threat landscape and the advancement of tools used for their implementation, against the backdrop of rapid digitalization, have led to a significant increase in the speed of cyberattacks and, consequently, a reduction of the time permissible for effective response. This highlights the need for the implementation of proactive cybersecurity measures, limited strictly to non-offensive actions.

 The article provides an overview of the cybersecurity strategies of selected European and Asian countries, with a focus on their approaches to the development of active cyber protection and the application of related technological capabilities. Such an analysis makes it possible to identify international trends and explore the potential for their adaptation in the national context.

 Special attention is given to approaches aimed at active counteraction to cyber threats based on preventing network communication between victim's device and attacker's infrastructure at the IP and DNS levels. The study also considers the scalability of such solutions, real-time reaction, contextualization of data, and the technical feasibility of generating cyber threat alerts (early warning messages).