'No Movement for Any Ransomware Suspicious Activity' Gwangju City's Self-Developed AI Model 'Hwae'

First Among All Local Governments Nationwide to Participate in the 'Cybersecurity Performance Sharing Meeting'

Successfully Detected 24 Types of Ransomware Including Previously Unknown Variants at 100% Rate

Gwangju, an AI demonstration city, has proven its excellence in cybersecurity as well.

On the 26th, Gwangju Metropolitan City announced that it developed an artificial intelligence (AI) model that detects malicious programs demanding ransom (ransomware) and was selected as an excellent case in cybersecurity.

Gwangju became the first local government to participate in the ‘2024 Cybersecurity Artificial Intelligence (AI) Dataset Excellent Utilization Performance Sharing Meeting’ hosted by the Korea Internet & Security Agency (KISA). The city shared its achievements by presenting the ‘Case of Ransomware Detection and Response Using Artificial Intelligence (AI).’

This performance sharing meeting was an opportunity to share cases that achieved excellent results in the security field using AI, by participating in the ‘Cybersecurity Artificial Intelligence (AI) Dataset Construction Project’ promoted by KISA last year.

Gwangju was recognized for its achievements in cybersecurity by detecting all suspicious ransomware activities through its self-developed AI model, and was selected as an excellent case, becoming the first among local governments nationwide to participate.

This year, Gwangju independently established an AI-based security monitoring system and developed a ‘Cybersecurity Artificial Intelligence (AI) Dataset Model’ that applies next-generation security technology (EDR) for detecting and responding to abnormal terminal behavior.

By integrating 46 types of AI datasets provided by KISA into this model, Gwangju detected ‘suspicious ransomware activities’ and successfully identified a total of 24 types of ransomware (17 known ransomware types and 7 unknown ransomware types) with 100% accuracy.

Through this AI model, Gwangju confirmed the capability to ▲respond to new and mutated ransomware with unknown patterns ▲and complement existing security equipment mutually.

KISA plans to produce a booklet of the excellent cases presented at this performance sharing meeting and distribute it to institutions and companies for utilization.

Bae Il-kwon, Director of Planning and Coordination, said, “Gwangju, as an AI-centered city, is demonstrating various AI technologies,” and added, “We will do our best to actively utilize AI technology in the cybersecurity field to create a safe cyber environment.”