By Baek Byung-yeul
Samsung SDS has warned its enterprise customers to prepare for increased security threats due to the rise of generative AI, which is one of the cybersecurity threats to watch this year, according to the company on Wednesday.
The company identified the top five cybersecurity issues that need attention this year, based on an analysis of cybersecurity threats occurring domestically and abroad in 2023.
These include AI-abusing security threats, cloud security threats in hybrid environments, leaks of personal data and sensitive information, ever-evolving ransomware, and network security threats.
“This survey presents the results of a questionnaire conducted among more than 700 security experts from large national companies and the public sector, particularly in the fields of IT, manufacturing, finance, transportation and of accounting. Samsung SDS also proposed countermeasures based on its experience in global security operations and technical capabilities. “, the company said.
Among various security threats, the adoption of technologies triggered by generative AI is rapidly spreading across industries, leading to new security threats, the company said.
“Hackers are developing AI-based criminal tools like WormGPT and FraudGPT, and attempting to launch cyberattacks by easily mass-producing malware using generative AI,” Samsung SDS said. He said businesses need security defense technologies such as AI-enabled malware analysis and automatic threat identification.
Additionally, companies using different types of cloud computing systems have complex security configurations and management, leading to a high risk of security vulnerabilities, the company pointed out.
Companies should also be on alert regarding data leaks containing sensitive information, as data leak paths and methods become more diverse and leaked data is exchanged on the dark web, causing secondary damage.
To prevent these types of threats, Samsung SDS advised companies to establish business processes and employee compliance rules, systematically manage data loss prevention and copyright, and make more efforts to prevent data leaks and comply with regulations.
Regarding ransomware, a type of malware that encrypts files on a target system, businesses must ensure security resilience to minimize losses in the event of a ransomware attack by eliminating security vulnerabilities and strengthening security end points.
To address network security threats, Samsung SDS also emphasized that access to systems and data should be granted after user authentication.
While the use of generative AI is increasing dramatically, companies are hesitant to expand its use due to concerns about mishandling sensitive information.
For these customers, Samsung SDS unveiled FabriX, which enables various uses of generative AI in a private environment and provides AI filtering functions that detect and block sensitive information.
“Security threats from generative AI and cloud must be addressed from an enterprise-wide crisis management perspective,” said Byun Sang-kyung, vice president and head of the technology office. security at Samsung SDS. “Businesses should be aware that introducing zero trust solutions and services to improve security is an essential part of business management.”