Sparrow Supplies Source Code Security Vulnerability Analysis Tool to Donga Publishing

Sparrow has supplied Sparrow SAST, a source code security vulnerability inspection tool, to Donga Publishing, a company specializing in educational content. Through this tool, Sparrow supports the AI digital textbook developer in obtaining the Cloud Service Security Authentication (CSAP) and establishing a secure development environment.

Donga Publishing is a company with extensive experience in textbook development, having been the first in Korea to publish the Korean language textbook "Sin Saeng Guk Eo Dok Bon" and mobile digital textbooks. Based on nearly 80 years of rich educational content, Donga Publishing is strengthening its edutech competitiveness by developing AI digital textbooks to be introduced in schools starting next year.

AI digital textbooks utilize artificial intelligence technology to provide learning content tailored to each student's abilities and level. They are scheduled to be introduced in schools from next year and gradually expanded until 2028. According to the "AI Digital Textbook Development Guidelines" announced by the Ministry of Education, AI digital textbooks are developed as cloud (SaaS)-based web services, and obtaining a medium-level CSAP certification is mandatory. Accordingly, developers are adopting secure coding tools to supply safe and reliable cloud services.

The Sparrow SAST adopted by Donga Publishing is a tool that diagnoses potential security vulnerabilities in source code and provides solutions and inspection result reports. By using Sparrow SAST, AI digital textbook developers can address vulnerabilities early, fulfilling the control items required for CSAP security certification acquisition and shortening the CSAP review period.

Jang Ilsu, CEO of Sparrow, stated, “As AI digital textbooks are expected to expand to all subjects by 2028, many textbook publishers and edutech companies are adopting Sparrow SAST for source code inspection purposes.” He added, “We will contribute to reducing the burden of vulnerability inspection for AI digital textbook developers struggling to meet the strict technical requirements for CSAP acquisition, allowing them to focus on educational content development.”