Ministry of Science and ICT Conducts Cyber Penetration Testing Training to Strengthen Hacking Response Capabilities

Training for public institutions under the Ministry of Science and ICT until September
Agencies defend against attacks by private white hackers
Student hackers also participate in 'Blind Simulation Training'

The Ministry of Science and ICT announced on the 24th that it has commenced cyber penetration testing training for its affiliated public institutions and research institutes.

The cyber penetration testing, conducted together with external security experts, will continue until September. The training involves attacks carried out using scenarios similar to actual hacker intrusion attempts, followed by defensive measures. The goal is to identify security vulnerabilities in information systems from the perspective of external hackers and to develop countermeasures.

Private white-hat hackers test the institutions' cyber attack defense capabilities according to scenarios similar to real situations. For example, they use domestic and international major information security vulnerability standards such as the Ministry of the Interior and Safety's web vulnerabilities to infiltrate internal systems from the boundary between internal and external networks, seize control of key servers, and attempt to steal administrator privileges to leak important data.

In particular, a "blind penetration testing" involving student white-hat hackers who have won awards at domestic and international hacking competitions is also conducted. Unlike regular training where attack attempt dates are agreed upon in advance and exchanges occur, this training simulates real situations by attempting attacks unexpectedly without prior notice. Student white-hat hackers receive prior education on penetration test planning methods, key inspection items, and precautions before participating in the training.

After the penetration testing, white-hat hackers directly explain the vulnerabilities they discovered and the results of their penetration on-site at public institutions. On-site consulting is also provided to eliminate the penetration routes.

Gu Hyeok-chae, Director of Planning and Coordination at the Ministry of Science and ICT, stated, "The nature of cyber attacks occurring without prior notice aligns well with the blind training format involving student white-hat hackers, raising expectations for the training's effectiveness. The Ministry of Science and ICT plans to continue efforts and investments to protect the excellent research and development achievements and accumulated scientific technologies of its affiliated and subordinate institutions."

This content was produced with the assistance of AI translation services.