2024.08.13. The Fair Economy — AI-based cyber threat intelligence (CTI) specialist SANDS Lab (CEO Kim Gi-hong) announced on the 13th that it signed a memorandum of understanding (MOU) with Logpresso, a cloud security information and event management (SIEM) specialist, on the 8th to develop an AI-based next-generation XDR (extended detection and response) product.
XDR refers to an information security technology or solution that detects and responds to threats through security data analysis across various information technology (IT) infrastructure components. While existing EDR (endpoint detection and response) focused on detecting and responding to threats at endpoints such as terminal devices, the more advanced XDR expands its scope to perform detection, analysis, and response across the entire IT infrastructure, including endpoints, networks, servers, cloud workloads, and SIEM.
According to SANDS Lab, the two companies will develop a domestic XDR product that is expected to become a pillar of the future cybersecurity market through this agreement. They plan to integrate SANDS Lab's AI technology for security threat detection with Logpresso's SIEM/SOAR (Security Orchestration, Automation, and Response)-based technology to native XDR levels.
The main cooperation areas between the two companies include: building a collaborative relationship for the development of next-generation AI-based XDR; continuous technology exchange and mutual integration plans for XDR development; and joint marketing to expand the XDR market.
SANDS Lab generates extensive attacker-centered analytical information through its AI-based cyber threat intelligence platform, CTX. It uses its own AI models to analyze indicators of compromise (IoC) used by attackers and holds threat information in contextualized form. In addition, through various AI models, it not only determines maliciousness and detects threats but also enables threat profiling that can construct diverse scenarios based on actual breach incidents, allowing it to secure multidimensional data collection and an advanced detection system needed for XDR development.
Logpresso provides a security operations solution that enables integrated monitoring and response across a company's entire IT infrastructure—including on-premises, cloud, and software-as-a-service (SaaS)—from a single platform. In particular, it boasts the scalability to instantly integrate a wide range of security solutions, infrastructure, and services using hundreds of third-party apps distributed through the Logpresso Store. It also effectively resolves the difficulties currently faced by security organizations using its own big data engine and storage technology.
Meanwhile, the two companies are jointly carrying out KISA's 'Cyber Security AI Dataset Construction and Utilization Enhancement' project this year, verifying the performance and effectiveness of their respective technologies.
Kim Gi-hong, CEO of SANDS Lab, said, "The two companies share the same direction in believing that the future cybersecurity market will be the XDR market." He added, "Based on Logpresso's unrivaled platform, we will do our best to develop a product that properly reflects the voice of the market and can effectively respond to the future cybersecurity environment through continuous technical exchange."
Yang Bong-yeol, CEO of Logpresso, said, "We have confirmed that the innovative technologies of both companies can generate the greatest synergy with XDR as a common denominator." He added, "By combining with SANDS Lab's cybersecurity-specialized AI technology, we will unveil a next-generation security platform that represents the future cybersecurity market."
0 Comments
No comments yet.