Naru Security Launches AI Web Defense Service 'Zerotica Lite Web'

Naru Security announced on the 20th the launch of its AI web defense service, 'Zerotica Lite Web.' The service extends the company's existing firewall log-centered breach assessment technology into the web domain, with a focus on strengthening an AI-based threat response system that covers both networks and the web.

The company cited the automation of attacks using AI as the backdrop for the launch. It said cases are increasing in which attackers search for vulnerabilities in web services and APIs exposed to the internet and then carry out repeated attacks, while attacks that exploit connections between multiple systems and services continue to target major institutions such as financial firms.

The company also said it saw a problem in that it is difficult to understand the flow of an attack and whether a breach has actually occurred through the detection and blocking functions of individual security devices alone. Accordingly, it said it developed the service with the premise that a compromise may already have occurred and that organizations should continuously check their security status.

'Zerotica Lite Web' is a subscription-based breach assessment service. Naru Security said the service uses AI to analyze large-scale logs from corporate web servers and services, track signs of attack and abnormal behavior, and continuously assess and verify whether a breach has occurred and what potential attack risks exist.

Zerotica Lite Web applies AI technology and Naru Security's proprietary threat analysis model to use web logs not merely as a list of incidents, but as core data for breach assessment and verification. The solution analyzes the connections between repeated attacks and abnormal behavior in vast logs to identify patterns that people can easily miss. It is also designed to go beyond individual events to grasp the overall flow of an attack and confirm signs of compromise.

The analysis takes four perspectives: verifying past breach traces, identifying current attack status, predicting future targets, and determining AI and automated threats. Based on past web logs, it tracks attempted attacks and behavior that may have led to a breach, and it identifies ongoing abnormal access and attacks. It also analyzes repeated attack patterns and service exposure characteristics to predict likely next targets and determines whether the threat is linked to automated attacks such as AI agents.

On that basis, companies can use web log records to determine whether damage from an attack has occurred, whether an attack is currently underway, and where the next likely target may be. They can also assess their organization’s security status and review the areas that need priority response.

Naru Security said that with the launch of this service, it will strengthen its AI defense capabilities for AI attacks targeting the web and network, and accelerate its push into the related market. It also plans to pursue an AI security as a service (SECaaS) business based on AI analysis of security log data held by companies.

Kim Hyuk-jun, CEO of Naru Security, said AI is a powerful tool for both attackers and defenders. He added that applying AI to cyber defense can create an autonomous defense system that protects a broader scope, and said the company aims to lead the AI threat response market by continuously verifying an organization’s overall threat and security status through advanced AI defense services to secure business visibility.

Source: IT DAILY · Yang Seung-gap
Original: https://www.itdaily.kr/news/articleView.html?idxno=242314

References

• https://www.itdaily.kr/news/articleView.html?idxno=242314