Ministry of Education to Enhance 'AI-Based Automated Cyber Intrusion Detection and Notification System'

Focused Response to High-Risk Malware Cyberattacks
AI Cyber Safety Center to Open on April 23
Advancing an AI-Driven Security Monitoring Model Tailored for Educational Institutions

The government has decided to actively respond to cyberattacks targeting educational institutions.

The Ministry of Education and the Korea Education and Research Information Service (KERIS) announced that they will further advance their self-developed and patented "AI-based Automated Cyber Intrusion Detection and Notification" system.

The Ministry of Education designated KERIS as the dedicated institution to operate the "Ministry of Education Cyber Safety Center," which provides 24/7, year-round cybersecurity monitoring and incident response for 435 educational institutions. To respond to cyberattacks more efficiently, the ministry has been developing and implementing "AI-based Automated Cyber Intrusion Detection" since 2022. Last year, the ministry further enhanced the system by adding the "AI-based Automated Notification" feature, thereby establishing a practical foundation for "AI-based Cybersecurity Monitoring."

Ministry of Education

Last year, through AI-powered cybersecurity monitoring, the Ministry of Education detected a total of approximately 480 million signs of cyber intrusion using detection equipment installed at 435 educational institutions. Out of these, around 86,000 cases were identified as actual cyber intrusions and dealt with accordingly. This represents a 36% increase compared to about 63,000 cases in 2024, prior to the advancement of the AI-based cybersecurity monitoring system.

The Ministry of Education and KERIS will officially launch the "Ministry of Education AI Cyber Safety Center" on April 23, 2026. The center will leverage AI to collect, analyze, and respond to cyberattack data targeting educational institutions, and will also provide real-time security monitoring in response to the increased use of private cloud services.

To this end, since July last year, the Ministry of Education has been working with private cloud service providers to install detection equipment linked to the Cyber Safety Center on private cloud servers, and has conducted pilot operations to ensure the safe transmission of detection rules and results. Within this year, the ministry plans to further enhance the model by training the "AI-based Cybersecurity Monitoring System" with access logs collected from security, network, and server equipment at metropolitan and provincial offices of education, thereby making the system more tailored to educational institutions. Starting next year, the ministry also plans to apply the "AI-based Cybersecurity Monitoring System," currently operated by the "Ministry of Education Cyber Safety Center (ECSC)," to the security monitoring of metropolitan and provincial offices of education, enabling the joint collection, analysis, and response to cyber intrusion attempts targeting educational institutions.

This content was produced with the assistance of AI translation services.