The Korea Internet & Security Agency (KISA) announced that it will operate an "IoT Security Vulnerability Intensive Reporting Period" for two months starting in August to intensively receive and process vulnerabilities in IoT devices in preparation for new security threats to IoT devices.

As part of the 'SW New Vulnerability Reporting Reward (Bug Bounty)', new security vulnerabilities that may affect the latest versions of software (firmware, etc.) for devices frequently used in daily life, such as smart home devices, drones, and AI speakers, are subject to reporting. Any Korean residing at home or abroad can participate.

KISA plans to receive reports on new security vulnerabilities for various IoT devices through the 'IoT Vulnerability Intensive Reporting Period,' analyze and evaluate their impact, and request relevant manufacturers to take measures to resolve the vulnerabilities. Additionally, for software vulnerabilities for which no security update was released at the time of reporting and which could cause harm to a large number of citizens if exploited in an actual attack, KISA will provide a reward ranging from 300,000 won to 5 million won.

Detailed information regarding reporting and registration can be found on the Boho Nara website (www.boho.or.kr)*.

Lee Dong-geun, Head of the Incident Analysis Division at KISA, said, “In addition to activating bug bounties to prevent IoT intrusion incidents, KISA will take the lead in internalizing IoT convergence security so that the public can experience it firsthand, including expanding security testing for IoT devices and holding an IoT security vulnerability search event at the 2017 Hacking Defense Competition.”