Establishing an AI-based response system with security embedded from the development stage
The government is moving to establish a security system covering the entire process from software development to operation in response to the spread of artificial intelligence (AI).
The Ministry of Science and ICT and the National Intelligence Service announced the 'SW Supply Chain Security Roadmap for the Era of AI in Daily Life' on the 24th.
The roadmap presented the application of SW supply chain security from the early stages of development and supply as a key strategy.
To this end, measures such as establishing security standards and guidelines, checking corporate security levels, and expanding SBOM-based management systems will be pursued.
SBOM (Software Bill of Materials) is a technology that manages software components and dependencies, and is used to increase supply chain transparency.
We also plan to simultaneously develop automated supply chain security management technology utilizing AI.
The government strengthens detection and response systems in consideration of the characteristics of supply chain attacks.
Key measures include expanding vulnerability reporting and reward systems, AI-based anomaly detection, and establishing a public-private collaborative response system.
The government explained that establishing a rapid response system is particularly important because supply chain attacks can lead to cascading damage.
The government plans to form an inter-governmental consultative body to establish a framework for implementing supply chain security policies.
In addition, the plan is to support companies' global expansion by expanding security certification systems and mutual recognition of overseas certifications.
Recently, software supply chains are expanding into various industries, and their complexity is increasing. With the emergence of AI-based cyber attacks, security threats are growing.
The government announced that it plans to gradually strengthen the supply chain security system through this roadmap.