Busan is good

Busan Metropolitan City Launches AI-Powered Intelligent Cybersecurity Monitoring

내용

Busan Metropolitan City, led by Mayor Chun Jae-soo, will begin operating its AI-powered intelligent cybersecurity monitoring system today, September 1.

Recent advances have made “autonomous cyberattacks” a reality, in which generative AI is exploited to write attack code and independently identify and exploit system vulnerabilities.

In response, Busan Metropolitan City has established an AI-powered cybersecurity monitoring framework to move beyond passive monitoring, proactively counter increasingly sophisticated attacks, and ensure that residents can use public-facing services safely and without interruption.

The City’s Cyber Incident Response Center has substantially upgraded its security monitoring infrastructure to respond to previously unknown and emerging or modified Zero-Day attacks, as well as cyberattacks disguised as legitimate access.

The Cyber Incident Response Center serves as a “digital breakwater,” monitoring public services and internal administrative networks around the clock. However, attacks that exploit AI to bypass conventional detection systems have recently been increasing.

To address these threats, the City has significantly strengthened its security monitoring infrastructure and capabilities to rapidly and precisely analyze tens of billions of security logs generated each day and automate the entire process from threat detection through response.

The newly established intelligent security monitoring framework combines an Integrated Security Analytics System (XDR), capable of searching more than 10 billion records per second, with an AI monitoring assistant.

The Integrated Security Analytics System (XDR) organically links Network Detection and Response (NDR), Security Information and Event Management (SIEM), and Security Orchestration, Automation and Response (SOAR) technologies to comprehensively analyze security events and track anomalies.

In particular, SOAR automates previously manual analysis and decision-making processes and enables rapid threat response and follow-up actions in accordance with standardized response procedures, or playbooks.

In addition, a generative AI monitoring assistant automatically summarizes and classifies complex security alerts, allowing security monitoring personnel to focus on in-depth analysis of and responses to high-risk threats.

Since the system was introduced, the time required to analyze large volumes of security logs has been reduced from several hours to minutes or seconds, while hundreds of threats are automatically blocked in real time each day without intervention by monitoring personnel.

This enables the City to rapidly identify genuine threats among vast numbers of security events and significantly strengthens its initial response capabilities by blocking threats before they can spread through internal networks.

Busan Metropolitan City plans to continuously advance its AI-based analytical algorithms and automated response framework to establish a “proactive and active security monitoring system.”

Moving away from the conventional approach of responding only after an incident occurs, the City will transition to a system that uses AI to analyze accumulated data, identify signs of threats and internal security weaknesses in advance, and take preventive action.

Through these efforts, the City plans to further strengthen the foundation for Busan as a safe “digital maritime capital” that remains resilient against any cyberattack.

Heo Nam-sik, Director General of the Administration and Autonomy Bureau, emphasized, “Cyber threats directly affect residents’ daily lives and public trust in government administration. Based on an AI-powered proactive response system, we will create a secure digital environment in which residents can feel confident and safe.”