Ransomware on the Rise
In November, many companies and organizations set plans and budgets for the following year, including security-related line items. According to the source, last year 274 ransomware complaints were reported in South Korea, about 1.4 times more than the previous year. The source explains that the spread of artificial intelligence makes attacks faster and more automated, complicating defense efforts.
In this scenario, an approach is gaining ground that starts from assuming intrusion as a possibility. The Korea Internet & Security Agency (KISA) stresses the importance of backups kept separate from the network, so that data can be restored even in the event of an incident. Dream Security adds a second element: encryption, which makes data unreadable even if it is stolen.
Encryption as the Last Line of Defense
Kim Dae-sik, chief technology officer of Dream Security, said that user authentication and access control reduce an attacker's room for movement but do not eliminate the risk of compromise. According to his statement as reported by the source, encryption is not intended to meet regulatory requirements but to protect data even after a breach: it is presented as the final measure in baseline security.
The source notes that the effectiveness of encryption depends on the type of algorithm used. In the Korean public sector, adopting encryption products for non-secret work documents requires compliance with certain requirements, including cryptographic modules verified by the national intelligence agency. Dream Security obtained KCMVP certification in 2008, developed its own modules, and also received U.S. CMVP certification. Kim reported that internally developed modules are supplied to other security companies and equipment manufacturers, with applications ranging from VPNs and 5G equipment to cloud platforms, DRM systems, payment servers, remote IoT monitoring, and defense-related research and development.
Keys and Quantum Prospects
Alongside the use of verified algorithms, the source highlights key management: if keys remain in source code, on developers' computers, or on servers, encryption loses its function. The source cites the case, which occurred last year, of South Korea's leading e-commerce company: a former employee allegedly used an authentication signing key obtained during his employment to generate fake tokens, leading to a large-scale leak of personal data. The trend identified is to entrust keys to dedicated systems, such as key management systems (KMS), which manage their entire lifecycle and do not expose them externally. Kim said that the Magic KMS system has been deployed at two life insurance companies and a subsidiary of a large group, centralizing API keys and signing keys.
The source identifies the transition to post-quantum cryptography as the next challenge. In August, the Korean government included the quantum sector among seven SEED projects for future growth. Because quantum computers could decrypt current algorithms, the prospect of attacks that collect encrypted data today to decrypt it later becomes relevant. Kim reported that last year, as part of a pilot project supported by the Ministry of Science and the competent agencies, seven post-quantum algorithms were applied and verified in database encryption, certificate issuance, and facial recognition; this year the company is responsible for the pilot project in the telecommunications sector. He also indicated that the MagicQKMI equipment for quantum key management obtained the first security verification from Korean national intelligence in 2023.
