KT Forms Alliance with Security Solution Firms to Collaborate on Email Hacking Defense

KT announced on the 2nd that it has formed an alliance with domestic security solution companies and launched the ‘KT Secure Intelligent Threat Mail Blocking’ service based on AI (Artificial Intelligence) intelligent persistent threat (APT) analysis technology for effective defense against email hacking.

The domestic email security solution companies that formed the alliance with KT are AhnLab, Jiransoft Security, SecureLetter, and NetNCQ. These companies possess specialized technologies related to spam blocking and APT-related security.

[Image source=Yonhap News]

The ‘KT Secure Intelligent Threat Mail Blocking’ service consists of ▲spam security that blocks known malicious emails and advertisements ▲dynamic analysis sandbox that detects APT threats ▲AI analysis platform that detects threats using AI.

The spam security was developed based on the technologies of Jiransoft Security and NetNCQ, and the APT security for dynamic analysis applied the latest technologies from AhnLab and SecureLetter. The AI analysis technology applies KT’s AI analysis and detection models, enabling effective defense against various types of new and mutated APT hacking attacks.

The ‘KT Secure Intelligent Threat Mail Blocking’ service provides differentiated functions by integrating two AI models to detect and block threat emails. It operates by converting the code of malicious files into images and analyzing the similarity with learned malicious codes, making the detection speed 180 times faster than conventional dynamic analysis methods. This allows near real-time detection of various forms of APT malicious codes entering through emails.

Additionally, it applies a method that directly accesses the internet addresses (URLs) embedded with malicious codes to collect screenshots, attachments, and additional information for AI analysis, effectively detecting and blocking constantly evolving phishing attacks.

The core database (DB) of the ‘KT Secure Intelligent Threat Mail Blocking’ service utilizes over 100 million email data accumulated annually on the KT AI analysis platform and optimizes the DB for the domestic environment. KT continuously updates the threat DB by creating threat data for an average of about 10 new or mutated APT attacks daily to effectively defend against APT attacks.

In addition to mutated executable files and mutated phishing URLs, the detection scope has been expanded to various attack types such as mutated executable files and document-type (PDF, Word, HWP) malicious files by integrating multi-sandboxes from AhnLab and SecureLetter to improve detection performance.

The ‘KT Secure Intelligent Threat Mail Blocking’ service is provided as a subscription service that changes the Domain Name System (DNS) settings, reducing costs and management burdens compared to expensive on-premise security systems.

KT is offering a one-month free trial of the ‘KT Secure Intelligent Threat Mail Blocking’ service until the end of this year. The main details of the service can be found on the KT Enterprise website.

Baek Seung-taek, Deputy General Manager of KT’s Data Infrastructure DX Business Division, said, “The alliance of security solution companies is a meaningful case contributing to the development of the domestic security service ecosystem and the establishment of a safe corporate security environment.” He added, “KT will lead the enhancement of competitiveness in domestic security services by applying AI technology not only to APT solutions but also to various domestic security solutions such as EDR (Endpoint Detection and Response), network security equipment, and cloud security in the future.”

This content was produced with the assistance of AI translation services.