Government to Support SMEs Against AI Security Threats... Vulnerability Assessments Available from July

Reducing Attack Surfaces,
Vulnerability Assessment Using Frontier AI

As cyberattacks exploiting artificial intelligence (AI) become increasingly sophisticated, the Ministry of Science and ICT is taking steps to strengthen the security capabilities of small and medium-sized enterprises (SMEs).

On June 26, the Ministry announced that, as a follow-up to the "Private Sector Information Security Promotion Plan for Responding to AI-Based Cyber Threats," it will work with the Korea Internet & Security Agency to support efforts to enhance the security levels of SMEs.

The Ministry of Science and ICT plans to introduce and support programs that will help SMEs build stronger foundational security capabilities to counter AI security threats.

The main programs include: security investment; attack surface assessment; software (SW) supply chain security system inspection; SME information protection support; provision of AI vulnerability assessment infrastructure; SME penetration testing; and SME security vulnerability inspection.

SMEs will be able to assess their security levels using a web-based security guide, identify the security investment priorities based on importance and within their available budgets, and review government support programs. Attack surface assessments can also be requested free of charge. Infrastructure enabling SMEs to check for vulnerabilities in their software using frontier AI models will be available for reservation from July.

For companies with national strategic technologies and those in sectors closely related to daily life, the government is offering free, real-world penetration testing using actual hacking techniques. The program identifies security vulnerabilities that could lead to hacking damages, such as information leaks or system failures, in SMEs’ system development and operational environments, as well as in services like websites and apps, and provides technical support for remediation.

Lim Jeonggyu, Director of Information Security Network Policy at the Ministry of Science and ICT, stated, "We are preparing a variety of programs to strengthen the security capabilities and fundamentals of SMEs, and will strive to ensure that many companies can benefit from them."

This content was produced with the assistance of AI translation services.