Improving Corporate Incident Response Systems
Long-Term Tracking of Covertly Infiltrating Attack Groups

On the 29th, the Korea Internet & Security Agency (KISA) and the Ministry of Science and ICT announced the release of the 10th profiling report, which explains the entire process of a cyber intrusion incident in a way that companies can easily understand. Hackers use hacking techniques tailored to the characteristics of the corporate environment. Accordingly, KISA has been publishing profiling reports that companies can actively utilize to improve their cyber incident response systems. This is the 10th report.

KISA Releases Profiling Report 'Selective Penetration Attack Strategy Analysis' View original image

This report, titled "Analysis of Attack Strategies Using Zero-day Vulnerabilities for Selective Penetration," is the result of long-term tracking and analysis of attack groups that selectively infect target companies and covertly infiltrate internal corporate networks. The report can be downloaded and viewed on KISA’s Boho Nara website (www.boho.or.kr). It conveys the entire process of a cyber intrusion incident using the MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) framework. MITRE is a nonprofit research and development organization supported by the U.S. government. By comprehensively analyzing multiple cyber intrusion incidents that occurred in companies with similar defense environments, the report details how attackers complete their attacks through specific strategies, techniques, and processes according to the characteristics of each company.



Choi Kwang-hee, Head of KISA’s Cyber Incident Response Headquarters, stated, “To improve the level of cyber incident response, it is necessary for companies to fully understand how cyber incidents can occur within their own environments.” He added, “KISA will continue various efforts to effectively deliver cyber incident analysis know-how to companies, including the publication of profiling reports.”


This content was produced with the assistance of AI translation services.

© The Asia Business Daily(www.asiae.co.kr). All rights reserved.

Today’s Briefing