Security

Enki Whitehat Supplies AI Penetration Testing Automation Solution to KB Kookmin Bank

IT DAILY ·

Enki Whitehat supplied KB Kookmin Bank with its AI-based penetration testing automation solution, “Open AI DAST.” [Photo: Enki Whitehat]

✦ AI Summary

Enki Whitehat said on the 7th that it had supplied KB Kookmin Bank with 'OFFen AI DAST,' an AI-based web application penetration testing automation solution.

KB Kookmin Bank adopted OFFen AI DAST to build infrastructure for real-time security threat response in a 365-day, uninterrupted environment.

OFFen AI DAST is a DAST solution with features that complement the limits of rule-based detection and automate the entire security assessment process.

Enki Whitehat announced on the 7th that it had supplied KB Kookmin Bank with 'OFFen AI DAST,' an AI-based web application penetration testing automation solution. The background for the move was cited as the limits of human-centered manual vulnerability checks in responding to threats in the financial industry’s digital service operations, where a 365-day, uninterrupted environment is maintained, as well as the limits of one-off assessments in responding to threats.

In this environment, KB Kookmin Bank adopted OFFen AI DAST with the goal of building real-time infrastructure for responding to security threats. OFFen AI DAST, supplied by Enki Whitehat, is a Dynamic Application Security Testing (DAST) solution.

OFFen AI DAST addresses the limits of rule-based detection and has features that unify and automate the entire security assessment process. AI analyzes the structure and context of customer services and provides a variety of attack scenarios.

AI also verifies whether those scenarios can be actually exploited, allowing OFFen AI DAST to reduce the burden of manual verification and lower the false positive rate.

The functions included in this supply were designed to respond to the financial sector’s security environment and include support for joint certificate logins, compatibility with internal security solutions, and automated authentication functions. This makes it possible to inspect web services and also inspect internal pages after authentication procedures are completed.

It also supports guardrail functions aimed at preventing disruptions to operating services, controlling the execution of risky commands and preventing indiscriminate account creation. Lee Seong-kwon, CEO of Enki Whitehat, said this supply is an achievement that shows its intelligent Offensive security technology meets the financial sector’s strict standards, and added that the company plans to provide a security environment that does not interfere with corporate business operations through its AI security technology.

Source: IT DAILY · Kim Ho-jun
Original: https://www.itdaily.kr/news/articleView.html?idxno=241437

References

This article was produced with the help of an automated content generation algorithm.


Source: IT DAILY

View original

This article was summarized and organized by BizCrush based on the original article from IT DAILY. For exact quotations and full details, please refer to the original article.