By introducing SecuLetter's security solution, Korea's BNK Busan Bank has strengthened its security against Advanced Persistent Threats (APTs) between network connections.

 

SecuLetter is a Korean information security company and a member company of the Born2Global Centre that develops and supplies security products capable of detecting, diagnosing, analyzing, and blocking malware attacks that existing signature-based solutions and behavior-based (sandbox-based) APT security solutions find difficult to detect. SecuLetter has been an active member of the Born2Global Centre since 2016.

 

SecuLetter's products are equipped with various diagnostic technologies that are used for static, dynamic, and detailed analyses based on its own proprietary technology and are characterized by their accurate and rapid diagnosis.

 

BNK Busan Bank has been reviewing solutions that detect and block APT attacks using non-PE (portable executable) files, such as Microsoft Office, PDF, and HWP files, which existing APT solutions cannot detect.

 

After thoroughly comparing various solutions and proof of concepts (PoCs), the bank finally selected SLF (SecuLetter FileServer) and could eliminate its security blind spots. With this solution, the bank was able to enhance its security at network bridging environment and satisfied with SLF's built-in content disarm and reconstruction (CDR) feature, high diagnostic rate, rapid diagnosis speed, and easy integration with various security products.. With this solution, the bank was able to enhance its air-gap security and was especially satisfied with SLF's built-in content disarm and reconstruction (CDR) feature, high diagnostic rate, rapid diagnosis speed, and easy integration with various security products.

 

Senior Manager Woo Sunghoon of BNK Busan Bank's Information Security Department said, "When looking at the recent trend of APT attacks, the percentage of malicious attacks conducted using non-PE files is far higher than those using executable files such as exe, dll, or sys files. Considering the current urgent need for security measures for non-PE files on the network, we have chosen SecuLetter's security product."

 

He added, "Having introduced and used SLF, we are impressed with its minimization of over-detection (false positive detection) when diagnosing malicious code and rapid diagnostic speed. Moreover, when we deployed it in our network bridging environment, there was no delay in our work."

 

In response to cyber-attacks, BNK Busan Bank established its own unique enterprise security management platform for the first time in Korea in 2016. The platform is used to collect the logs (containing data related to personal information protection, email cyber-attacks, and equipment security vulnerabilities) generated by all equipment and analyze and visualize all security threats for effective security management.

 

Lim Chasung, CEO of SecuLetter said, "Through a case study conducted by BNK Busan Bank, it was confirmed that our solution can be effectively applied to APT security and CDR in network bridging and air-gap environments. This year, many Korean financial customers are planning to introduce air-gap security and CDR solutions, and we expect many of them will adopt our solutions."

 

SecuLetter's products, SLE (SecuLetter Email) and SLF, are being actively used by major national institutions, financial institutions, and companies, including KEPCO E&C, Korea Post Information Center, KISA (Korea Internet & Security Agency), BNK Busan Bank, KAMCO (Korea Asset Management Corporation), KSD (Korea Securities Depository), and KTCU (Korean Teachers' Credit Union).



This is the seventh post in our series: Discover Korea’s Tech, 

where we will talk to a mix of Korean startup entrepreneurs 

who stood their own ground with their technology, 

in Korea’s economy notoriously dominated by gigantic companies. 

 

Stay tuned over the coming month as we talk to Korean entrepreneurs. 

You can follow our updates @technodechina for new stories in the series. 

Cyber security is an increasingly important issue. 

Large companies have played victim to some very public attacks; 

Sony Pictures Entertainment was the victim of a cyber attack in November 2014 

that revealed personal information of its employees. 

 

Target also discoverd malware on its point-of-sale systems in December 2013.

According to a Raicati Email Statistics Report released in 2015, 

77 percent of all malware are installed via email. 

 

39% of total malware installations were from attached files in the email 

with 34% coming from embedded links in the email.

“Many Mac users think they are safe, but they are also vulnerable to cyber attacks. 

Same goes for Gmail users. 

If you leave it on default, it detects the malware, but if you change encoding, 

it is vulnerable to malware attacks,” CEO of SecuLetter, Chasung Lim told TechNode.

SecuLetter protects the email server from advanced attacks 

and cloud services to protect email server, 

using Hybrid Analysis method to detect and block cyber attacks.

 

“If an antivirus software detected a cyber attack, it means that the attack is already well-known.

New kinds of attack such as spear phishing, ransomware, and other targeted attacks 

can get through existing security solutions and penetrate a company’s security layer,” Mr. Lim says.

SecuLetter’s SLE detection automatizes reverse engineering. 

When a user receives an email, the company will open the email in the operating system 

and analyze attached files on the assembly level. 

After quarantining and blocking malware emails, it sends safe emails to the email server.

SecuLetter’s first trial provides cloud services 

and charges the usage on a monthly basis to reduce the cost burden.

“Other APT attack solutions cost more. 

You need to purchase all the equipment first, which requires high upfront investment,” Mr. Lim added. 

The main competitor in APT attack solution market is FireEye, a publicly listed cyber security company.

“Korea’s biggest retailer company conducted BMT (Benchmarking Test) comparing FireEye’s solution and SecuLetter’s. 

According to their test, SecuLetter detected malware with a higher percentage than FireEye,” Mr. Lim stated. 

“Our solution has a higher detection accuracy than sandbox-based APT attack solution 

because we have proprietary technology, specializing in Non-PE email content.”

 

The company raised 2 billion KRW ($1.7 million USD) last month, 

led by Korea Investment and UTC Investment

SecuLetter is supported by K-ICT Born2Global Center, 

a major Korean government agency under the Ministry of Science, 

ICT and Future Planning (MSIP).

 

 

Image Credit: SecuLetter

 


http://technode.com/2016/11/25/company-opens-malicious-email-files-dont/

 

 

This is the seventh post in our series: Discover Korea’s Tech, 

where we will talk to a mix of Korean startup entrepreneurs 

who stood their own ground with their technology, 

in Korea’s economy notoriously dominated by gigantic companies. 

 

Stay tuned over the coming month as we talk to Korean entrepreneurs. 

You can follow our updates @technodechina for new stories in the series. 

Cyber security is an increasingly important issue. 

Large companies have played victim to some very public attacks; 

Sony Pictures Entertainment was the victim of a cyber attack in November 2014 

that revealed personal information of its employees. 

 

Target also discoverd malware on its point-of-sale systems in December 2013.

According to a Raicati Email Statistics Report released in 2015, 

77 percent of all malware are installed via email. 

 

39% of total malware installations were from attached files in the email 

with 34% coming from embedded links in the email.

“Many Mac users think they are safe, but they are also vulnerable to cyber attacks. 

Same goes for Gmail users. 

If you leave it on default, it detects the malware, but if you change encoding, 

it is vulnerable to malware attacks,” CEO of SecuLetter, Chasung Lim told TechNode.

SecuLetter protects the email server from advanced attacks 

and cloud services to protect email server, 

using Hybrid Analysis method to detect and block cyber attacks.

 

“If an antivirus software detected a cyber attack, it means that the attack is already well-known.

New kinds of attack such as spear phishing, ransomware, and other targeted attacks 

can get through existing security solutions and penetrate a company’s security layer,” Mr. Lim says.

SecuLetter’s SLE detection automatizes reverse engineering. 

When a user receives an email, the company will open the email in the operating system 

and analyze attached files on the assembly level. 

After quarantining and blocking malware emails, it sends safe emails to the email server.

SecuLetter’s first trial provides cloud services 

and charges the usage on a monthly basis to reduce the cost burden.

“Other APT attack solutions cost more. 

You need to purchase all the equipment first, which requires high upfront investment,” Mr. Lim added. 

The main competitor in APT attack solution market is FireEye, a publicly listed cyber security company.

“Korea’s biggest retailer company conducted BMT (Benchmarking Test) comparing FireEye’s solution and SecuLetter’s. 

According to their test, SecuLetter detected malware with a higher percentage than FireEye,” Mr. Lim stated. 

“Our solution has a higher detection accuracy than sandbox-based APT attack solution 

because we have proprietary technology, specializing in Non-PE email content.”

 

The company raised 2 billion KRW ($1.7 million USD) last month, 

led by Korea Investment and UTC Investment

SecuLetter is supported by K-ICT Born2Global Center, 

a major Korean government agency under the Ministry of Science, 

ICT and Future Planning (MSIP).

 

 

Image Credit: SecuLetter

 


http://technode.com/2016/11/25/company-opens-malicious-email-files-dont/

 

 

This is the seventh post in our series: Discover Korea’s Tech, 

where we will talk to a mix of Korean startup entrepreneurs 

who stood their own ground with their technology, 

in Korea’s economy notoriously dominated by gigantic companies. 

 

Stay tuned over the coming month as we talk to Korean entrepreneurs. 

You can follow our updates @technodechina for new stories in the series. 

Cyber security is an increasingly important issue. 

Large companies have played victim to some very public attacks; 

Sony Pictures Entertainment was the victim of a cyber attack in November 2014 

that revealed personal information of its employees. 

 

Target also discoverd malware on its point-of-sale systems in December 2013.

According to a Raicati Email Statistics Report released in 2015, 

77 percent of all malware are installed via email. 

 

39% of total malware installations were from attached files in the email 

with 34% coming from embedded links in the email.

“Many Mac users think they are safe, but they are also vulnerable to cyber attacks. 

Same goes for Gmail users. 

If you leave it on default, it detects the malware, but if you change encoding, 

it is vulnerable to malware attacks,” CEO of SecuLetter, Chasung Lim told TechNode.

SecuLetter protects the email server from advanced attacks 

and cloud services to protect email server, 

using Hybrid Analysis method to detect and block cyber attacks.

 

“If an antivirus software detected a cyber attack, it means that the attack is already well-known.

New kinds of attack such as spear phishing, ransomware, and other targeted attacks 

can get through existing security solutions and penetrate a company’s security layer,” Mr. Lim says.

SecuLetter’s SLE detection automatizes reverse engineering. 

When a user receives an email, the company will open the email in the operating system 

and analyze attached files on the assembly level. 

After quarantining and blocking malware emails, it sends safe emails to the email server.

SecuLetter’s first trial provides cloud services 

and charges the usage on a monthly basis to reduce the cost burden.

“Other APT attack solutions cost more. 

You need to purchase all the equipment first, which requires high upfront investment,” Mr. Lim added. 

The main competitor in APT attack solution market is FireEye, a publicly listed cyber security company.

“Korea’s biggest retailer company conducted BMT (Benchmarking Test) comparing FireEye’s solution and SecuLetter’s. 

According to their test, SecuLetter detected malware with a higher percentage than FireEye,” Mr. Lim stated. 

“Our solution has a higher detection accuracy than sandbox-based APT attack solution 

because we have proprietary technology, specializing in Non-PE email content.”

 

The company raised 2 billion KRW ($1.7 million USD) last month, 

led by Korea Investment and UTC Investment

SecuLetter is supported by K-ICT Born2Global Center, 

a major Korean government agency under the Ministry of Science, 

ICT and Future Planning (MSIP).

 

 

Image Credit: SecuLetter

 


http://technode.com/2016/11/25/company-opens-malicious-email-files-dont/

 

 

Newsletter Sign Up

By clicking "submit," you agree to receive emails from Bron2Global and accept our web terms of use and privacy and cookie policy*Terms apply.