South Korea's Cybersecurity Experts: White Hat Hackers, Purple Lab, and the Future of AI Security

사이버 보안 전문가는 디지털 시스템을 부지런히 보호하여 신뢰할 수 있는 기술을 보장합니다.

### AI 시대의 사이버 보안 전문가: 퍼플랩과 화이트햇 해커의 활약
* 👨‍💻 **사이버 보안의 중요성**: 최근 발생한 대규모 IT 장애 사례를 통해 디지털 시대의 사이버 보안 전문가 역할의 중요성이 강조됨.
* 🛡️ **퍼플랩(Purple Lab)의 협력**: LG CNS의 '퍼플랩'은 공격(Red Team)과 방어(Blue Team)를 통합, 시스템 보안 강화에 힘씀.  "**방어 시스템을 개선하는 방법**"에 집중.
* ⚔️ **끊임없는 경쟁**:  Red Team과 Blue Team의 상호작용을 통해 공격 기술과 방어 능력을 향상시키는 **'창과 방패'의 싸움**과 같은 구조.
* 🏆 **CTF 대회와 실력 향상**:  회사 내부 해킹 대회(CTF)를 통해 실력 향상 및 최신 기술 트렌드 학습.  수상 경력은 높은 실력을 증명.
* 👨‍🏫 **정부 지원 프로그램(BoB) 활용**:  'Best of the Best' 프로그램을 통해 실무 경험을 쌓고 차세대 보안 리더 양성.
* 🏠 **집중력과 끈기**:  취약점 모니터링의 지속적인 노력을 요구하는 직무 특성상, **집중력과 끈기**를 가진 인재가 필요함.
* 🤖 **AI 해킹 시대**: AI 기술 발전과 함께 AI 해킹 위협 증가,  **"AI가 해킹을 한다"**는 현실적인 문제 제기.
* ✨ **미래 전망**:  사이버 보안은 국가 전략 기술로 지정될 만큼 중요하며,  **미래 유망 산업**으로 꾸준히 성장할 것으로 예상됨.

Drunk again, working hard again. And now it's almost over! The real, final, and fake... real final...

Gosh. How would you feel if suddenly all screens went blank during such an important moment? Recently, there was an IT incident described as the "worst IT outage in history."

Even a brief cyber blackout caused massive damage around the world. An era of digital hyperconnectivity.

Now, the role of experts who meticulously work to ensure there are no gaps has become even more crucial.

I met with cybersecurity experts, also known as white hat hackers. In the field of cybersecurity,

the red team focuses on identifying system vulnerabilities and conducting simulated attacks as the 'offensive' position,

while the blue team analyzes attack patterns and manages overall security as the 'defensive' position. At LG CNS, the red and blue teams collaborate under the name 'PURPLE LAB.'

We handle both offense and defense, focusing on the question, "How can we make the system more secure?"

and work on improving safety. From the red team's perspective, seeing how attacks are defended against helps improve our attack strategies, figuring out ways to bypass defenses.

On the other hand, the blue team, which used to only think from the defender's viewpoint,

can now see attacks from a broader perspective. This collaboration allows us to enhance our attack techniques and improve our detection

and defensive capabilities. So, it's a bit like a battle between the spear and the shield?

Yes, that's it. The spear becomes sharper, and the shield becomes stronger. The red and blue teams working together with synergy in PURPLE LAB,

as well as the various tasks performed by cybersecurity experts, were more diverse than expected.  "Black Hat" is the most famous name in the world of security conferences,

and we had the opportunity to attend it this time. You can learn about the latest technologies and understand how modern security trends are evolving.

We also hold hacking competitions within the company, providing opportunities through such events. How is the hacking competition typically conducted?

A competition called CTF, which stands for "Capture The Flag," is held. In this event, problems are presented in various fields, and participants solve these problems through hacking.

The flag, representing the solution, is then submitted as the answer. So everyone gets together, tap, tap...

This is fun. Not really, "this is fun" kind of thing. In dramas, you often see that just pressing enter without typing anything causes everything to appear all at once...

As long as you don’t use any offensive language... So, how did the competition results turn out?

He won a prize. I was lucky last year. And he's even humble. It's difficult to definitively judge who is good or not in this field.

Making it to the finals or winning a competition reflects a high level of skill and achievement. In practice, there are still many areas that are not well understood without hands-on experience within a company.

I heard that the government runs a program called BoB, "Best of the Best," to train the next generation of security leaders.

Mentors who are active in the field come to provide training and oversee real projects, allowing participants to learn how to handle tasks and what the work entails.

So, it's a program that allows you to experience practical work closely before becoming affiliated with a company as a security expert.

Yes, it was very helpful. This is a field where you need to continuously learn trends and prove your skills through various activities,

from conferences to competitions. However, there was also a common tendency among them: homebodies. I'm also a homebody.

Not everyone is, but I am. - I think most of them are.
- Really? Since you need to continuously monitor for vulnerabilities

without knowing whether they exist, you need to be persistent. For that, being a homebody might be the most suitable.

You need to be persistent. Some people can't do that. I can, but it’s best if someone who can be truly dedicated and persistent takes on the task.

So it requires more of that persistent drive to solve problems on your own. Are you both introverts?

I am totally an introvert. Me too. Okay. I was a big excuse. Cybersecurity experts, who silently and steadfastly protect security barriers,

have become essential in the advancement of AI technology, as security cannot be separated from it. They say, "The era of AI hacking has arrived."

So, I looked into how hacking is done, and I heard that there are cases where a black hat hacker inputs vulnerabilities,

and then AI continuously runs day and night to carry out the hacking. There have likely been cases of hacking ChatGPT as well.

If you directly ask for a Windows license key, it will respond with "I can't provide that information."

However, depending on how the question is phrased, the response can vary. By asking in different ways, you might eventually obtain the actual Windows license key.

Even if barriers are put in place, there are always ways to circumvent them, and it seems that nothing is completely foolproof.

No matter what new technology emerges, it always comes with security concerns, so the field of security can never disappear.

I believe it will remain a promising industry in the future. The government has also identified cybersecurity as one of the national strategic technologies that our country must secure

in the technology supremacy competition. When I entered school, there were almost no departments related to security.

However, nowadays, most interns and new hires come from security-related fields. Until a major security incident makes the news,

cybersecurity is often an invisible field. However, if the global internet were to stop for just 10 seconds, it could halt our daily lives as well.

Therefore, cybersecurity is an essential field for our society. So, what are white hat hackers thinking about as their next steps?

Currently, we are focused on analyzing actual attacks and researching attack methods. I'm interested in going beyond technology

to work in consulting, addressing and solving customer needs across the entire security domain. It's related to PURPLE LAB activities,

and it would be great if I could develop the ability to infiltrate more secure and robust systems than our current level.

So you'd like to try penetrating a system with even more ironclad security. It's not fun if we only do the easy stuff.

People who meticulously compete every minute and second to ensure that the convenient IT technologies surrounding us can perform their roles.

We met the 'Cybersecurity Experts' today. How about a job like this in the future?

요즘엔 AI가 해킹을 한다네요…? 하지만 '이 사람'이 있으면 문제 없습니다 | 미래직무탐구 EP.4

LG그룹 공식 유튜브입니다.
('LG group' official channel in YouTube)

운영자: (주)디앤오(D&O)


LG그룹

최근 IT 사고와 사이버 보안 전문가의 중요성

최근 발생한 심각한 IT 장애 사례 언급

디지털 연결성 증가로 인한 사이버 보안 중요성 강조

시스템 보안에 대한 전문가 역할 강조

화이트햇 해커(사이버 보안 전문가) 인터뷰 시작

레드팀과 블루팀의 역할 설명 (공격 및 방어)

LG CNS 퍼플랩의 레드팀과 블루팀 협업

공격과 방어를 통합한 시스템 보안 강화 전략

레드팀의 공격 전략 개선을 위한 방어 분석

블루팀의 공격 관점 확대 및 방어 능력 향상

해킹 대회 참가 및 최신 기술 학습 경험

내부 해킹 대회(CTF) 및 사이버 보안 전문가 양성

대회 수상 경험 및 실력 평가의 어려움

정부의 차세대 보안 리더 양성 프로그램(BoB) 소개

사이버 보안 전문가의 특징과 자질

끊임없는 학습과 기술 증명의 필요성

전문가들의 내향적인 성격 특징 언급

지속적인 노력과 문제 해결 능력 강조

내향적인 성격과 지속적인 자기 계발의 중요성

AI 시대의 사이버 보안 위협과 미래 전망

AI 기술 발전과 사이버 보안의 불가분의 관계

사이버 보안 분야의 지속적인 성장 가능성 전망

정부의 사이버 보안 국가 전략 기술 선정

사이버 보안 분야 인력 증가 추세

화이트햇 해커의 미래 계획 및 포부

실제 공격 분석 및 공격 방법 연구

기술 분야를 넘어선 컨설팅 분야 진출 희망

더욱 강력한 시스템 침투 능력 개발 목표