영상 자막
The importance of ICT infrastructure is enhanced in the era of digital transformation represented by new technologies such as Big Data, Cloud Computing, and A.I. Accordingly, intelligent cyber attacks have grown and it requires constant improvement of responding ability. National Information Resources Service safely protects security management environment with A.I. based Adaptive Security Management System. The A.I. Security System is the latest cyber attackr esponse scheme employing Big Data and A.I technologies grounded in over 15 years of experiences. The system is capable of controlling over 5 billion cases of data every day and automatically detects and responds to cyber attacks. NIRS is the Korean Government Data Center which operates over 40,000 information resources to provide over 2,400 digital government services. All data generated from the whole systems are consolidated as Big Data. The A.I. system exercises the Big Data to identify cyber attacks or abnormal behaviors and responds automatically by utilizing security systems such as IDS, IPS, and Firewall. Most current security defense systems have only focused on handling known attacks. However, the A.I. Security System has raised the level of cyber security management capability by getting access to unknown ones. Started from implementing nSIMS, a Big Data log analysis system, that is capable of managing logs and events of all internal IT resources. The A.I. Security System has elaborated accuracy in abnormality detection by employing external threat information intelligence and persistent machine learning. Abnormality detection performance has been improved by standardizing and automating the responding procedures. In particular, time for processing security events has improved from hours to less than a minute and security event processing rates have been risen to 85%. nSIMS collects logs and events from all devices and applications. The A.I. platform adds up all the collected data and carried out identifying abnormal behaviors and classifying 1st attack. The A.I. Security System investigates new threats complying with a standard procedure and self-operates its analysis and responding processes. Tasks needed to be handled manually are then allocated to the staff in charge. Security devices automatically performs tasks such as blocking IPs according to the policies assigned by the A.I. Security System. The various equipment used for the system has enabled expanding the realm of automatic responding ability. Additionally, in the hand-operating procedure, once staff in charge reviews the assigned contents, it would be used in advancing the model or the automated procedure. Managing the resources comprehensibly, systematically, and automatically. Amplified monitoring efficiency and value-added one-stop security control. A.I. based Adaptive Security Management System of NIRS takes the lead to make the world a better and safer place.