The Korea Information & Communication Technology Association announced that starting from the 1st, it will support the security of domestic artificial intelligence (AI) development products and provide the country's first 'AI security testing service,' which verifies the security throughout the entire lifecycle of AI models, in order to support the national AI transformation (AX).
The 'AI security testing service' tests security requirements at all stages, from AI model design to data collection and processing, model development, system implementation, distribution, and operation, issuing reliable certificates and reports based on the results. This service tests whether the AI model meets security requirements tailored to its specific threats, considering that existing security solutions struggle to effectively address these unique threats.
The AI security testing service verifies various security requirements, including the de-identification of personal and sensitive information and prevention of data contamination during the data collection and preprocessing stages, as well as defense against adversarial attacks and prevention of model tampering during the learning phase, and API security, model access control, and integrity verification during distribution and operation.
From May to June this year, the Korea Information & Communication Technology Association conducted pilot tests on three types of domestic AI products (vision, voice, and language models) to improve and finalize testing procedures. Additionally, in April of this year, it proposed a collective standard task ('Common security requirements for AI model security verification') and is currently working on standardization (PG504, application security/evaluation certification).
In the future, the Korea Information & Communication Technology Association plans to expand the testing areas and design levels (Basic/Advanced/Industry-Specific) based on the impact level of AI security, aiming to develop customized verification criteria for corporations and enhance the testing services.