AhnLab participated in the global IT exhibition ‘Tech Week Singapore 2024,’ held from October 9 to 10 at Marina Bay Sands Expo & Convention Center in Singapore, with a dedicated booth. Additionally, Soojin Choi, Senior Researcher of AhnLab’s threat intelligence unit, ASEC, delivered an expert session analyzing real-world attack cases, receiving significant positive feedback from attendees.

 

Let’s take a closer look at the event where AhnLab engaged with attendees from various countries.

 

 

Tech Week Singapore is one of Southeast Asia's largest IT exhibitions, featuring dedicated zones for seven IT sectors, including cybersecurity, cloud, data centers, big data & AI, and e-commerce. This year's event was held under the themes of "Riding the Wave of Disruptions with Intelligent Technologies" on Day 1 and "Reinventing Business in the Digital Age: Leveraging Technologies for Success" on Day 2. Over the two days, the event attracted approximately 26,000 participants.

[Photo 1] AhnLab Featured as a Key Exhibitor at Cyber Security World

 

AhnLab operated an exclusive booth at the Cyber Security World exhibition zone, showcasing and demonstrating its global strategic solutions. The slogan AhnLab presented at the event was “AI-Augmented Security. Simplified.,” emphasizing its mission to deliver powerful yet simplified security powered by AI. AhnLab is advancing threat detection and classification by integrating AI technology into its solution-based infrastructure (backend). Additionally, AhnLab plans to incorporate generative AI into its threat analysis and response platform, AhnLab XDR, to support efficient risk management for its customers.

 

[Photo 2] A Full View of the AhnLab Booth

AhnLab introduced and demonstrated its solutions at the event, including ▲AhnLab CPS PLUS (OT-IT Convergence Security Platform) ▲AhnLab TIP (Threat Intelligence Platform) ▲AhnLab XDR (Threat Analysis and Response Platform). Over two days, approximately 600 local industry professionals from Southeast Asia, including Singapore, Malaysia, and Indonesia, visited the booth, expressing significant interest in AhnLab's solutions.

 

[Photo 3] AhnLab Booth Crowded with Visitors

 

The booth also featured a “Security Map” on its back wall, visually organizing AhnLab’s comprehensive security platforms, products, and services. In September, during AhnLab ISF 2024, AhnLab officially introduced its unified security platform, "AhnLab PLUS," encompassing endpoints, networks, clouds, services, security operations, and CPS (Cyber-Physical System). Visitors showed great interest not only in the solutions showcased and demonstrated at the booth but also in AhnLab's diverse offerings, including endpoint security, mobile security, and cloud security, as visualized in the AhnLab PLUS platform-based Security Map.

[Photo 4] Explanation of the AhnLab PLUS Platform and Security Map

 

Next, here are the key details about the solutions introduced and demonstrated at the booth.

 

AhnLab CPS PLUS: Capturing Attention with Expanded OT Connectivity

Traditionally, OT environments were considered relatively secure compared to IT environments due to their isolated nature, with strictly controlled external access. However, as digitalization accelerates and the overlap with IT environments grows, cyberattacks on OT systems are also on the rise. This has heightened the importance of OT security and necessitated a new integrated security approach connecting OT and IT.

 

AhnLab addresses these evolving security needs with its integrated CPS security platform, “AhnLab CPS PLUS,” which comprehensively protects OT endpoints, networks, and IT environments connected to OT systems. Notably, AhnLab CPS PLUS provides one of the broadest security coverages globally and leverages customer references from industries such as manufacturing, refining, and transportation.

 

[Photo 5] AhnLab CPS PLUS Architecture

 

At this event, AhnLab introduced the overall structure and concept of AhnLab CPS PLUS and demonstrated its key components: ▲AhnLab EPS (OT Endpoint Security), ▲AhnLab XTD (OT Visibility and Threat Detection), and ▲AhnLab ICM (Central Management for CPS Security). Visitors resonated with the need for a new security approach as external touchpoints in OT environments increase. Notably, attendees focused on AhnLab ICM for its centralized management capabilities that enhance security efficiency and the Lock Mode feature of AhnLab EPS, which prevents system changes to ensure operational stability. Additionally, there were numerous inquiries about other solutions, such as "AhnLab Xcanner," which disinfects infected equipment, and "AhnLab Data Diode," a one-way data transfer solution.

 

[Photo 6] Introduction to AhnLab CPS PLUS

 

Visitors who attended the AhnLab CPS PLUS introduction and demonstrations engaged in detailed discussions, not only about the platform’s foundational concepts but also about its use cases in industries such as manufacturing, ports, and data centers, relevant to their respective organizations. These interactions reaffirmed the increasing global demand, including in Korea, for security solutions integrating OT and IT. AhnLab plans to continue advancing AhnLab CPS PLUS and its associated solutions to address diverse customer challenges and enhance communication touchpoints with existing and potential clients.

► Go to the AhnLab CPS PLUS Introduction Page

 

AhnLab TIP: AhnLab’s Differentiated Threat Intelligence

As advanced cyber threats transcend borders, acquiring next-generation threat intelligence is becoming increasingly important for businesses and organizations worldwide. Proactively identifying the latest trends and techniques of global attack groups allows organizations to optimize security decision-making and strengthen their overall security posture.

At the booth, AhnLab demonstrated its threat intelligence platform, AhnLab TIP, highlighting its unique strengths, including its analysis capabilities focused on Asian attack groups and the value of its proprietary Indicators of Compromise (IOC). Unlike other companies that solely provide threat intelligence, AhnLab delivers its unique IOC based on threat data detected through its diverse range of security solutions. This is further enhanced by the expertise of ASEC (AhnLab SEcurity intelligence Center), a team of top-tier professionals, to deliver precise analysis of attack group trends and techniques.

[Photo 7] Demonstration of AhnLab TIP

 

Visitors highly praised various features supported by AhnLab TIP, including monitoring the dark web, a key topic in recent security threats, and the cloud sandbox function, which enhances the platform’s capability to counter mobile scams effectively.

► Go to the AhnLab TIP Introduction Page

 

AhnLab XDR: AI-Powered Efficient Risk Management

As organizations face an expanding attack surface and a growing number of security solutions to manage, the burden on security teams continues to increase. This complexity has intensified, particularly since the COVID-19 pandemic, as remote work environments also need protection. Many organizations report challenges with the fragmented management of heterogeneous solutions and the overwhelming volume of alerts they must handle.

 

This issue is a shared concern for organizations not only in Korea but globally. At the event, AhnLab introduced and demonstrated its threat analysis and response platform, AhnLab XDR, as a solution to these challenges. AhnLab XDR identifies an organization’s assets based on “User” and “Device” criteria and calculates a risk score ranging from 0 to 100 using a formula that incorporates various security factors. This enables users to intuitively grasp the organization’s risk posture.

 

[Photo 8] Demonstration of AhnLab XDR

 

AhnLab XDR, aiming to be an Open XDR, supports flexible integration not only with AhnLab’s solutions but also with third-party heterogeneous solutions. This allows data collection and analysis across multiple security domains to deliver optimal response strategies. It received positive feedback, particularly for its ability to automate systematic response processes using Playbooks.

 

Visitors also showed strong interest in the generative AI feature embedded in AhnLab XDR, called “AhnLab Annie AI.” This cybersecurity-focused generative AI, trained on AhnLab’s high-quality data, supports efficient security operations by enabling real-time risk monitoring and other capabilities. AhnLab plans to officially integrate AhnLab Annie AI into AhnLab XDR and release it to the market soon.

► Visit the AhnLab XDR Introduction Page

 

Expert Session: Captivating the Audience with Real-World Case Analysis

On the second day of the event, ASEC Senior Researcher Soojin Choi delivered an expert presentation titled “Learning from Cyber Incidents: Real-World Attacks.”

 

Soojin Choi explained that cyberattacks can originate from diverse methods, ranging from simple phishing emails to zero-day vulnerabilities, with objectives varying from stealing personal information and financial gains to targeting state or corporate data. She emphasized the importance of understanding that the methods and consequences of cyberattacks differ in each case.

 

[Photo 9] Presentation Session by Senior Researcher Soojin Choi

 

Soojin Choi shared key insights and implications from four real-world cases analyzed by ASEC.

 

#1. A Breach in an OT Environment with Weak Security Management Connected to the Internet:

Even small security gaps can compromise an organization’s defense system. Particularly in OT environments, such as factories, where regular security updates are challenging, greater attention is needed for management.

 

#2. A Case Where a Cyberattack Years Earlier Led to a Successful Hacking Attempt Later:

Cyberattacks are not isolated but intricately interconnected. Initial breaches open the door for future attacks, and attackers often use the first breach to link TTPs (Tactics, Techniques, and Procedures).

 

#3. A Case of Data and Asset Theft by Bypassing MFA Through Phishing:

Attackers intercepted communication between users and legitimate services, capturing valid session information to bypass MFA using an AITM (Adversary in the Middle) technique. To prevent this, device-based authentication should be enforced, suspicious login activity should be monitored, and all sessions should be terminated upon detecting anomalies.

 

#4. A Case Where Centralized Management Software Was Hacked to Infect Organizational Endpoints:

When central management software is exploited for malicious purposes, the entire organization can be affected. Trusted solutions and features should be used, and logs should be regularly audited. Additionally, security solutions like EDR should be deployed to continuously monitor and trace suspicious activities.

 

[Photo 10] A Packed Audience for the Presentation Session

 

Soojin Choi’s presentation resonated deeply with attendees by offering a detailed analysis of real-world cases. The session quickly filled to capacity, and many participants praised the session on social media after the presentation.

 

Conclusion

AhnLab continues to participate in key global conferences to monitor cybersecurity trends and build valuable connections with potential customers worldwide. By integrating insights from these events into its products and technologies, AhnLab strives to enhance its solutions and contribute to creating secure business environments for its clients.

 

AhnLab’s Head of Marketing Division, Vincent S.K. Lee, who oversaw this event, stated, “During this event, we engaged in numerous discussions with representatives from Southeast Asia, confirming the region’s strong interest in AhnLab’s integrated security solutions and services. Moving forward, we will continue to explore various opportunities to engage with Southeast Asian customers and expand our global presence.”