Assessing the Impact: Evaluating Western-Cybersecurity Assistance to Ukraine

SafeMode Bilyana Lilly on Western Cybersecurity Assistance to Ukraine

A Remarkable Success in Repelling Russian Cyberattacks

More than a year into Russia’s invasion of Ukraine, Kyiv has seen remarkable success in repelling Russian cyberattacks. This can be attributed, in part, to the extensive cybersecurity assistance provided by Western governments and private sector players, supported by Ukraine‘s investments in building up its computer response teams. In an interview on Safe Mode, Bilyana Lilly, Chair of the Cyber Track at the Warsaw Security Forum, discusses the elements of Western aid to Ukraine, what worked, what didn’t, and the role of Elon Musk’s Starlink in the conflict.

The Scale and Nature of Private Sector Cybersecurity Assistance

Numerous companies have been assisting Ukraine since the beginning of the conflict, providing a variety of support, including hardware, software, cybersecurity services, and incident response assistance. While data on the exact contributions is limited, it is estimated that 20 to 30 companies have been involved, with contributions ranging from several hundred million dollars to single instances of incident response aid. Some companies choose not to disclose their contributions, which makes it difficult to fully assess the extent of assistance provided.

The Role of Starlink and Elon Musk

One fascinating aspect of the hardware assistance is the use of Starlink, SpaceX’s satellite internet access, which has become a key tool for the Ukrainian military. The deployment of Starlink in Ukraine came about through a Twitter request from the Vice Prime Minister of Ukraine to Elon Musk after a cyberattack, and Musk immediately authorized its deployment. Starlink has since played a crucial role in the war effort, being used by over 150,000 Ukrainians for command and control and communication purposes. However, there have been concerns about Musk’s statements regarding the provision of Starlink, highlighting the risks of relying heavily on one tool during a war.

Lessons Learned and Recommendations

The case of Starlink in Ukraine highlights the need for improved policies and coordination in providing assistance to countries under attack. It is crucial for companies and governments to establish binding agreements to ensure the continuous provision of services during conflicts. Transparency and communication between companies, governments, and affected countries are essential for effective assistance. Companies should also consider hiring policy teams and subject matter experts to navigate geopolitical conflicts and make informed decisions. The coordination of assistance, timely provision, compatibility of different services, and long-term funding arrangements are areas that require further attention.

Software Assistance and the Use of AWS Snowballs

The software assistance to Ukraine included the use of AWS Snowballs, mobile devices for data transfer, to save Ukrainian government data as Russian forces approached. Companies like Amazon and Microsoft played a critical role in helping Ukraine migrate its data to the cloud, ensuring the functioning of government services during the conflict. While the data migration was a success, there were challenges due to the speed and pressure of the situation. Lessons learned from this experience will inform future data migration processes in similar circumstances.

Accelerating Digital Services and Comprehensive Apps

The successful data migration has allowed Ukraine to accelerate its digital services, including the development of a comprehensive app that enables citizens to access government services more efficiently. Both Amazon and Microsoft have been credited with saving the ability of the Ukrainian government to conduct its functions without major interruptions.

Assessment of Cybersecurity Assistance to Ukraine

While the full assessment of cybersecurity assistance to Ukraine is yet to be completed, some aspects have been identified as successful. Companies like Cloudflare, Google, Microsoft, and Mandiant have played significant roles in providing anti-DDoS tools, cyber threat intelligence, and incident response assistance. The establishment of CERT organizations within Ukraine has also contributed to its cybersecurity resilience. However, challenges remain, such as the coordination of assistance, expiration of free licenses, and the need for more robust agreements and funding mechanisms.

The Role of Western Tech Companies in Times of War

The involvement of tech companies in times of war presents unique challenges. While they have shown their capacity to assist during conflicts, market considerations and the definition of armed conflicts remain important factors. The level of private sector assistance in future conflicts will depend on numerous factors, including market share, geopolitical considerations, and government policies. It is crucial for governments to incentivize companies to transition from volatile markets to more stable ones and support them during the process.

Conclusion

The cybersecurity assistance provided by Western governments and private sector players has played a crucial role in Ukraine‘s resilience against Russian cyberattacks. Companies have contributed hardware, software, cybersecurity services, and incident response aid, with Starlink serving as a key tool in the war effort. Lessons learned from the Ukrainian conflict, including the need for coordination, binding agreements, and subject matter expertise, should inform future assistance efforts in similar situations. The successful migration of data to the cloud and the development of digital services demonstrate the positive impact of such assistance. However, challenges related to funding, coordination, and market considerations need to be addressed to ensure effective cybersecurity support in times of conflict.