Drunk again, working hard again. And now it's almost over! The real, final, and fake... real final...

Gosh. How would you feel if suddenly all screens went blank during such an important moment? Recently, there was an IT incident described as the "worst IT outage in history."

Even a brief cyber blackout caused massive damage around the world. An era of digital hyperconnectivity.

Now, the role of experts who meticulously work to ensure there are no gaps has become even more crucial.

I met with cybersecurity experts, also known as white hat hackers. In the field of cybersecurity,

the red team focuses on identifying system vulnerabilities and conducting simulated attacks as the 'offensive' position,

while the blue team analyzes attack patterns and manages overall security as the 'defensive' position. At LG CNS, the red and blue teams collaborate under the name 'PURPLE LAB.'

We handle both offense and defense, focusing on the question, "How can we make the system more secure?"

and work on improving safety. From the red team's perspective, seeing how attacks are defended against helps improve our attack strategies, figuring out ways to bypass defenses.

On the other hand, the blue team, which used to only think from the defender's viewpoint,

can now see attacks from a broader perspective. This collaboration allows us to enhance our attack techniques and improve our detection

and defensive capabilities. So, it's a bit like a battle between the spear and the shield?

Yes, that's it. The spear becomes sharper, and the shield becomes stronger. The red and blue teams working together with synergy in PURPLE LAB,

as well as the various tasks performed by cybersecurity experts, were more diverse than expected.  "Black Hat" is the most famous name in the world of security conferences,

and we had the opportunity to attend it this time. You can learn about the latest technologies and understand how modern security trends are evolving.

We also hold hacking competitions within the company, providing opportunities through such events. How is the hacking competition typically conducted?

A competition called CTF, which stands for "Capture The Flag," is held. In this event, problems are presented in various fields, and participants solve these problems through hacking.

The flag, representing the solution, is then submitted as the answer. So everyone gets together, tap, tap...

This is fun. Not really, "this is fun" kind of thing. In dramas, you often see that just pressing enter without typing anything causes everything to appear all at once...

As long as you don’t use any offensive language... So, how did the competition results turn out?

He won a prize. I was lucky last year. And he's even humble. It's difficult to definitively judge who is good or not in this field.

Making it to the finals or winning a competition reflects a high level of skill and achievement. In practice, there are still many areas that are not well understood without hands-on experience within a company.

I heard that the government runs a program called BoB, "Best of the Best," to train the next generation of security leaders.

Mentors who are active in the field come to provide training and oversee real projects, allowing participants to learn how to handle tasks and what the work entails.

So, it's a program that allows you to experience practical work closely before becoming affiliated with a company as a security expert.

Yes, it was very helpful. This is a field where you need to continuously learn trends and prove your skills through various activities,

from conferences to competitions. However, there was also a common tendency among them: homebodies. I'm also a homebody.

Not everyone is, but I am. - I think most of them are.
- Really? Since you need to continuously monitor for vulnerabilities

without knowing whether they exist, you need to be persistent. For that, being a homebody might be the most suitable.

You need to be persistent. Some people can't do that. I can, but it’s best if someone who can be truly dedicated and persistent takes on the task.

So it requires more of that persistent drive to solve problems on your own. Are you both introverts?

I am totally an introvert. Me too. Okay. I was a big excuse. Cybersecurity experts, who silently and steadfastly protect security barriers,

have become essential in the advancement of AI technology, as security cannot be separated from it. They say, "The era of AI hacking has arrived."

So, I looked into how hacking is done, and I heard that there are cases where a black hat hacker inputs vulnerabilities,

and then AI continuously runs day and night to carry out the hacking. There have likely been cases of hacking ChatGPT as well.

If you directly ask for a Windows license key, it will respond with "I can't provide that information."

However, depending on how the question is phrased, the response can vary. By asking in different ways, you might eventually obtain the actual Windows license key.

Even if barriers are put in place, there are always ways to circumvent them, and it seems that nothing is completely foolproof.

No matter what new technology emerges, it always comes with security concerns, so the field of security can never disappear.

I believe it will remain a promising industry in the future. The government has also identified cybersecurity as one of the national strategic technologies that our country must secure

in the technology supremacy competition. When I entered school, there were almost no departments related to security.

However, nowadays, most interns and new hires come from security-related fields. Until a major security incident makes the news,

cybersecurity is often an invisible field. However, if the global internet were to stop for just 10 seconds, it could halt our daily lives as well.

Therefore, cybersecurity is an essential field for our society. So, what are white hat hackers thinking about as their next steps?

Currently, we are focused on analyzing actual attacks and researching attack methods. I'm interested in going beyond technology

to work in consulting, addressing and solving customer needs across the entire security domain. It's related to PURPLE LAB activities,

and it would be great if I could develop the ability to infiltrate more secure and robust systems than our current level.

So you'd like to try penetrating a system with even more ironclad security. It's not fun if we only do the easy stuff.

People who meticulously compete every minute and second to ensure that the convenient IT technologies surrounding us can perform their roles.

We met the 'Cybersecurity Experts' today. How about a job like this in the future?

요즘엔 AI가 해킹을 한다네요…? 하지만 '이 사람'이 있으면 문제 없습니다 | 미래직무탐구 EP.4

LG그룹 공식 유튜브입니다.
('LG group' official channel in YouTube)

운영자: (주)디앤오(D&O)
