MegazoneCloud Builds Multi-Cloud Security Framework for Coway

MegazoneCloud completed the "Coway CNAPP (Cloud-Native Application Protection Platform) Build" project to strengthen security across Coway's enterprise systems. The project went live on the 18th.

Through the project, MegazoneCloud built a cloud security framework for Coway to conduct integrated checks across multi-cloud and development environments. In the process, it was responsible for designing a customized security architecture tailored to Coway's multi-cloud environment.

MegazoneCloud also handled the build and integration of Wiz, a global cloud security company, solution. The build covered AWS infrastructure, GCP infrastructure, GitHub, as well as Coway's overall cloud assets and development environment.

The project was designed so that security statuses previously managed separately could be checked under a single framework. The scope of work also included alert integration with internal collaboration tools, employee training, and technical support.

MegazoneCloud applied Wiz Cloud Advanced to change the security inspection framework. The build focused on moving away from the previous model, in which the security team checked systems only after development was completed, and toward a structure in which, after the build, the development and infrastructure teams directly verify the security status of their respective areas from the early development stage. It also changed the security inspection framework during the development phase.

With this application, it became possible to analyze security factors such as internet exposure and permission settings together. As a result, it became possible to identify interconnected risk paths, rather than simply listing individual vulnerabilities. Based on the results derived in this way, security issues could also be prioritized.

MegazoneCloud also integrated Wiz Code into the development process. This enabled security flaws to be identified before code was deployed to the actual environment. It also applied a structure that divides inspection by the scope of assets each organization is responsible for, with the goal of reducing issues found after deployment and easing the burden of security response.

Wiz Cloud Advanced and Wiz Code were applied to the Coway project, and the two solutions are components of Wiz CNAPP. Wiz Cloud Advanced is responsible for checking security across the cloud environment without requiring additional agent installation, while Wiz Code performs code scanning during the development stage. Weesuyoung, head of the HALO unit at MegazoneCloud, said the Coway project is a case in which a security inspection framework based on Wiz was actually implemented from the development stage.

Weesuyoung, head of the HALO unit at MegazoneCloud, said the company has the capability to support the entire process from security consulting to solution build. He also said the company plans to expand a system in which the entire organization handles security together to more clients.

Gwak Seong-young, CISO of Coway, said the build secured integrated security visibility from the development stage through pre-deployment. He explained that this would allow the company to focus its capabilities on responding to actual high-risk factors. He added that Coway plans to continue working with the development and infrastructure teams to expand a system in which security is checked together from the development stage.

Source: TECHWORLD · Kim Seung-ki
Original: https://www.epnc.co.kr/news/articleView.html?idxno=407188

References

• https://www.epnc.co.kr/news/articleView.html?idxno=407188