Naru Security is introducing a security service that uses artificial intelligence to analyze logs generated by web servers and services, enabling continuous monitoring for breaches and attack risks.
The company said Tuesday that it has launched its AI-powered web defense service, 'ZeroTiCA Lite Web.' The service extends existing breach assessment technology, which was previously centered on firewall logs, to the web domain.
According to the company, as AI-driven attacks become automated, cases are increasing in which vulnerabilities in internet-exposed web services and APIs are rapidly scanned and subjected to repeated attacks. In environments where multiple systems are interconnected, it is difficult to grasp the flow of attacks and determine whether an actual breach has occurred by relying solely on detection and blocking from individual security devices.
ZeroTiCA Lite Web uses AI to analyze large-scale logs generated by a company's web servers and services. It is a subscription-based service that tracks attack traces and anomalous behavior while continuously assessing the likelihood of actual breaches and potential attack risks.
Previously, web logs were primarily used as material for identifying causes after an incident. Naru Security has applied AI and its proprietary threat analysis model to this data, enabling it to analyze correlations between repeated attacks and anomalous behavior and to grasp the overall flow of attacks.
The analysis is conducted from four perspectives: verifying past breach traces, identifying current attack status, predicting future attack targets, and determining whether attacks are AI- or automation-driven.
It tracks behaviors in historical logs that may have led to actual breaches and identifies ongoing abnormal access. Based on repeated attack patterns and service exposure status, it analyzes points with a high likelihood of future attacks and also assesses correlations with automated attacks such as those by AI agents.
Naru Security explained that it has verified its technology for finding attack traces and breach circumstances in large-scale web logs by applying the service to some institutional investors who recently experienced security incidents.
The company plans to strengthen an AI defense system that combines network and web security, and expand into an 'AI SECaaS (Security as a Service)' business that uses AI to analyze various security logs held by companies. Small and mid-sized companies, which find it difficult to directly operate large-scale security operations centers, are also key targets.
Kim Hyuk-jun, CEO of Naru Security, said, "AI is a powerful tool not only for attackers but also for defenders," adding, "We will expand our AI defense services that can continuously verify threats and the overall security status of an organization."
in TECH
