| ML-based security threat attack scenario learning
| Self-creation and inspection of new attack types
Detect even unknown vulnerabilities

On the 25th, Kuntec announced that it will launch NexPloit, a machine learning-based application security inspection solution from NeuraLegion, an Israeli security solution company, in Korea.

As the domestic distributor of Neural Legend, Kuntek provides machine learning-based application security solutions to domestic customers.

The application layer is vulnerable to cyber threats due to inherent vulnerabilities in the code itself and limitations in environmental monitoring and manual analysis. Consequently, among various breach incidents caused by malicious attacks, the number of breaches occurring at the application layer continues to increase.

Accurately analyzing vulnerabilities and responding immediately to threats with appropriate security solutions is essential. However, the problem is growing as the types of cyber-threats and breaches are becoming more diverse.

However, existing solutions have limitations in detecting new types of attacks and preventing damage. Existing solutions, where the platform itself is driven by a complex system, have fatal flaws: they are process-heavy, time-consuming, and incapable of defending against unknown vulnerabilities and entirely new forms of attack.

Additionally, there are many false positives during analysis, so a lot of time must be spent on accurately interpreting the report, which leads to a significant waste of resources.

Nexploit is a machine learning-based web application security environment inspection solution that analyzes and identifies vulnerabilities through customized automated test scenarios for applications.

Nexploit, which provides security services by connecting to the cloud, has enhanced learning capabilities based on machine learning, enabling it to learn new scenarios and generate new attack types on its own.

Nexploit basically identifies web vulnerabilities through static analysis (Static Application Security Testing), which analyzes potential vulnerabilities inherent in source code, and dynamic analysis (Dynamic Application Security Testing), which analyzes vulnerabilities in web applications by approaching them with attack methods actually used by attackers. In some cases, vulnerabilities can be analyzed in a new form that combines the two methods.

Nexploit, which utilizes AI-based fuzzing techniques to find potential security flaws by inputting invalid or random values into programs, can detect zero-day vulnerabilities and even unknown vulnerabilities.

It provides vulnerability identification analysis results without false positives, enabling immediate vulnerability reports and issue resolution guidelines, and does not require extensive resources for report analysis.

Nexploit also provides location tracking for vulnerable code, making it easy to review reports through a clean, highly visible screen.

Kuntek CEO Bang Hyuk-jun stated, “The frequency of breach incidents is increasing, and 2018 in particular was a record year for data leaks and information theft,” and “Since many breach incidents are occurring at the application layer, we decided that introducing Nexploit in Korea was urgent.”