As digital transformation accelerates and the attack surface expands, IBM presents the Randoli platform to proactively respond to cybersecurity threats.

IBM held a press conference at the IBM Korea office in Yeouido IFC on the 18th and introduced the cybersecurity platform of Randori, an ASM company acquired in 2022.

“With cybersecurity threats rapidly increasing, existing security systems and methods must change,” said Brian Hazard, co-founder and CEO of Randoli. “By understanding vulnerabilities from an attacker’s perspective, avoiding security blind spots, and training to prioritize attacks and proactively defend, we can proactively and efficiently respond to security threats.”

'Attack Surface Management (ASM)' is a recent cybersecurity strategy that is a hot topic. This is an activity that continuously monitors cybersecurity vulnerabilities and potential attacks that constitute an organization's attack surface. This stems from concerns that external assets that companies are unaware of could become attack surfaces and targets for hackers due to changes such as cloudization, remote work, and increased M&A.

Gartner has selected ASM as the #1 security and risk management priority for chief information security officers (CISOs) in 2022. IBM, which announced the AI-based QRadar suite in May to speed up cyber threat detection and response, is continuously expanding its cybersecurity solution lineup.

The attack surface is any internet-based HW, SW, SaaS, and cloud assets where information is stored. It is a point that can be confirmed by hackers, whether inside or outside the company or a third party. According to a survey by Enterprise Strategy Group, 76% of hacking cases in companies were exposed to unclear cybersecurity threats.

■ Randori Platform, Providing ASM Experience

IBM's Landori provides an offensive security platform that helps customers clearly understand cyber threats. The goal is to be like an 'ally who is like an enemy', providing the attacker's perspective from the defender's perspective, enabling effective attack surface management strategies.

Enterprises can discover their attack surface through an intuitive dashboard on the platform provided by the portal, and see which vulnerabilities and how threats were discovered. They can also prioritize cybersecurity threats.

Knowing your priorities means you can proactively defend against your biggest vulnerabilities. Based on this, companies can establish possible response measures and verify their own security programs.

IBM's Randori platform is divided into Randori Recon and Randori Attack. Randori Recon provides ASM as a single integrated platform to provide a continuous and active attack surface management experience. Randori Attack supports the verification work on the attack surface, and analyzes the possibility of attack during the verification process and checks whether the applied security system is responding well to the threat.

Companies help maximize security by becoming partners who conduct attack and defense training during operations and a 'red team' that carries out attacks on platforms provided as SaaS.

“The strength of the Randori platform is that it creates a secure environment with confidence,” said CEO Brian. “As the direction of cybersecurity is shifting from visibility to discovery and verification, we have high expectations for the Asia Pacific region and the Korean market.”

Meanwhile, at the event, Landori said, “Landori Recon was introduced in the first half of this year to one of the three domestic mobile carriers.” It is being used for mobile carriers’ cloud migration work, blocking IoT threat expansion, understanding attackers’ positions, and shadow IT (defending against threats that may arise from other teams).

Kim Kang-jung, head of IBM Security Business Unit, said, “It is an end-to-end attack security platform based on hackers’ actual advanced technologies and automated methods,” and “It is expected to be needed in all target areas such as telecommunications, medical care, finance, and the public sector.”

Additionally, the “Landori platform can be used independently or is compatible with third parties. “It provides interoperability and openness because it is important to be able to use it operationally,” he said.