EverSpin announced on the 2nd that it has unveiled a security solution based on Moving Target Defense (MTD) and Real Time Threat Alarm Service (RTAS) to enhance app security in the financial sector. The company explained that this is an alternative approach given that domestic and foreign financial institutions still rely on operating system (OS) basic APIs that are vulnerable to hooking.
According to EverSpin, existing financial app security has relied on system APIs accessible to any developer, and tools like Frida, a reverse engineering tool, can bypass security module analysis. As a result, concerns have been raised that even low-level attackers could threaten financial app security.
To address this, EverSpin is operating the MTD-based security solution "Eversafe." Eversafe uses syscall-based security code instead of system APIs and applies a structure that periodically modifies it to enhance security. Additionally, RTAS is designed so that attackers cannot neutralize all financial apps installed on a device unless they tamper with them simultaneously through a mutual protection system among financial apps.
This system is based on EverSpin's malicious app detection technology "FakeFinder." It is currently applied to apps from over 60 major financial companies in Korea, protecting approximately 43 million devices cumulatively. Based on this, RTAS is providing services by establishing a collective defense network among financial apps.
MTD-based security is attracting attention as a next-generation security method overseas, with many startups in the U.S. and Europe continuing research. EverSpin explained that it has secured technological and legal competitiveness by registering 36 patents in 12 countries, including Korea, the U.S., Japan, Europe, and China.
Currently, major banks and securities firms in Korea are implementing this solution to enhance security levels, and there is a trend towards expansion into overseas financial institutions in Japan and Southeast Asia.
Yoon Seong-wook, Chief Technology Officer (CTO) of EverSpin, noted, "The multilayer security system combining MTD and RTAS aims to provide a more stable environment for financial app users," adding, "We will continue to raise the level of mobile security in cooperation with domestic and foreign financial institutions."