Support for establishing a security management system, including source code security checks and mobile app security vulnerabilities.

Ahop, a mobile security specialist and the implementer of the '2018 Fintech Service Security Enhancement Support Project' promoted by the Korea Internet & Security Agency, and Coresnet, a secure coding and infrastructure vulnerability diagnosis specialist, announced that they are recruiting 'Fintech Security Enhancement Free Consulting Support Companies' that will support the establishment of a security management system through app vulnerability analysis, improvement, and obfuscation web service mock hacking to ensure a high level of security from the fintech service development process.

The Korea Internet & Security Agency's 'Fintech Security Enhancement Free Consulting Support Project' is part of efforts to strengthen the national competitiveness of the fintech industry, which is attracting attention as a future growth engine, and to lay the foundation for revitalizing the domestic fintech industry. The project will be carried out completely free of charge until the end of this year after screening and selecting approximately 30 consulting companies that develop and operate fintech service apps. Companies selected for consulting will receive support for analyzing app vulnerabilities, improving them, and establishing a security management system for web services through mock hacking, enabling fintech service companies to secure a high level of security.

Key features of the free fintech security enhancement consulting service include: source code security checks and corrections; mobile app security vulnerability assessments and support for protective measures, including mobile app obfuscation; web service mock hacking, service infrastructure vulnerability diagnosis, and support for establishing a security management system.

Jo Seong-won, head of the consulting department at Ahop, the business operator, said, “As a result of the diagnosis of about 40 companies in 2016 and 2017, we found that domestic companies are insufficiently taking measures to prevent source code reverse engineering, OS-level hacking, and basic infrastructure hacking for fintech apps they provide, so measures to strengthen security are absolutely necessary. The best way to do this is to obfuscate the source code to a level where it is impossible to analyze even if reverse engineered.” He added, “By providing fintech security enhancement consulting services completely free of charge, we expect to significantly enhance the global service competitiveness of fintech apps developed by companies.”

Applications for this project can be submitted by downloading the application form from the Korea Internet & Security Agency website and submitting it via email (fintech@kisa.or.kr) by the end of December 2018.