Lotte Duty Free Conducts Black Box Penetration Test to Strengthen Security Assessment

Security Assessment Conducted in Collaboration with Stealien for One Month

Lotte Duty Free announced on January 21 that it had conducted a "black box penetration test" with cybersecurity specialist company Stealien for about one month to strengthen its information security standards.

A black box penetration test is carried out without the company requesting the test providing any prior information, such as system architecture or vulnerability details, and without a specific scenario. Instead, all possible methods are used from the perspective of an external attacker to attempt to breach the system.

Unlike typical penetration tests, which are conducted under specific conditions or scenarios agreed upon with the company, this approach allows for a comprehensive assessment of the security system in an environment that most closely resembles an actual hacking attack.

From December 29 of last year, Lotte Duty Free underwent this assessment for about one month by Stealien's team of white hat hackers. The scope of the test included all Lotte Duty Free services accessible from outside via the internet.

Through this penetration test, Lotte Duty Free aims to thoroughly identify any potential security gaps in its services. The company also plans to work jointly with Stealien to review and address any vulnerabilities discovered during the testing period. By doing so, it expects to eliminate security threats in advance and prevent potential security incidents, thereby further enhancing customer trust.

Lim Jeongwoo, Head of Information Security at Lotte Duty Free, said, "This black box penetration test is a valuable opportunity to proactively identify and address company-wide security vulnerabilities. We will continue to strengthen our security capabilities to provide safer and more reliable services for our customers."