As cyberattacks become increasingly sophisticated, SK shieldus introduced an integrated response strategy that combines an artificial intelligence (AI)-based next-generation security monitoring platform with a managed detection and response (MDR) service capable of real-time threat detection and response at the 'IDC Security Conference 2025' held on the 25th, the company noted on the 26th.
The AI-based security monitoring service from SK shieldus goes beyond the traditional role of managed security service (MSS) by providing the capability to detect initial movements of hackers such as reconnaissance, infiltration, and privilege escalation in real-time. While traditional security monitoring relied on known attack patterns to send alerts after the fact, next-generation security monitoring focuses on predicting threat indicators and issuing alerts upon immediate detection through real-time analysis of logs and traffic by AI. This is similar to how a military guard monitoring a CCTV screen captures unusual behavior and responds proactively.
After detection, rapid analysis and response are carried out through the MDR. The MDR is structured so that the first monitoring team analyzes the abnormal indicators captured by AI monitoring, and based on that, specialized security personnel conduct detailed analysis and actual response measures. For example, if a hacker hijacks an administrator account and accesses the system from a different time or location than usual, the MDR will perceive this as suspicious, detect it, block it in real-time, and check for any signs of infection.
In particular, leveraging the capabilities of Top-CERT, a specialized organization with the most incident response experience in the country, advanced responses reflecting the threat characteristics of various industries are provided. Corporations or institutions that find it difficult to maintain separate security personnel can easily adopt this subscription model, effectively enhancing security.
On this day, SK shieldus also introduced its AI-based security monitoring platform 'Secudium' and the security solution from its subsidiary 'Seculayer.' To enhance its security monitoring platform, SK shieldus is progressively implementing measures such as ▲ replacing the security information and event management (SIEM) engine ▲ introducing threat response automation (SOAR) ▲ establishing a threat impact analysis system.
Kim Byeong-mu, head of cybersecurity at SK shieldus, said, "In response to increasingly intelligent cyber threats, SK shieldus is presenting a security strategy centered around a proactive response system based on AI to protect the business continuity of our clients," and added, "We will organically connect our incident response specialized organization with MDR services and the AI-based security monitoring platform to create a safe digital environment."