"Corporate Information Faces Limits with Internal Security Alone... Attention Needed for Post-Leak Management"

Seo Sang-deok, CEO of IT security company S2W Lab. Photo by Korea Chamber of Commerce and Industry

[Asia Economy Reporter Choi Dae-yeol] While protecting internal information such as corporate confidential documents and contracts is important, it has been pointed out that identifying and managing information after it has been leaked externally is even more crucial.

Seo Sang-deok, CEO of S2W Lab and an IT security expert, pointed this out during the Korea Chamber of Commerce and Industry CEO Insight online lecture released on the 21st, stating that damages caused by the cyber risk zone known as the "Dark Web" are increasing. The Dark Web refers to websites accessible only through special web browsers and is used for online crimes involving the trade of illegal information.

Seo said, "In the past, companies focused on strengthening internal security systems to protect information, but recently, the emphasis in security has shifted to identifying and managing information leaked externally," adding, "The paradigm of corporate security is undergoing a significant change."

He explained that Amazon’s unmanned store "Amazon Go" is protected not by walls or doors but through internally installed closed-circuit (CC)TV and data, saying, "Even if internal security is weak, analyzing data flow well can actually maintain greater safety." He continued, "As data-centric digital transformation accelerates with technologies like the metaverse and cloud, cybercrime is rapidly evolving," and added, "Companies that generate and utilize vast amounts of data need to understand the Dark Web for information protection."

Seo stated, "Especially with cryptocurrency Bitcoin emerging as a major payment method and the formation of cyber black markets, the scale of the Dark Web has exploded," noting, "Recently, there have been numerous cases of domestic companies being targeted with demands for cryptocurrency as ransom for leaked corporate secrets."

He further emphasized, "Most internal information such as corporate confidential documents, contracts, and emails are leaked through partners, call centers, overseas branches, and remote workers," and stressed, "Since companies cannot manage the vulnerable security systems of their partners, it is more important to actively identify how leaked information is being exploited."