[Digital Daily Reporter Kim Bo-min] SECURE SYSTEMS, a specialized information security company, has obtained a technology patent related to artificial intelligence (AI)-based threat hunting.
On the 28th, SECURE SYSTEMS (CEO Son Dong-sik) announced that it had obtained a patent for a 'method for generating dynamic playbooks using a threat hunting platform.' This patent details a technology that goes beyond static security response methods, enabling response to attacks through AI-based threat hunting.
Existing security systems use statically defined playbooks based on predefined rules (IOC) and are effective against known threats. However, when new attack techniques or mutated threats appear, security personnel face limitations in establishing response procedures.
SECURE SYSTEMS focused on addressing these limitations. The core is to analyze, using a machine learning model, how detected threat events are similar to existing threat intelligence, and to automatically generate dynamic playbooks based on the similarity. For example, when detecting a RAT (Remote Access Trojan) attack, the system identifies whether the attack belongs to the attack flow of an APT group's 'credential theft' or 'command and control (C&C)' and automatically proposes response measures.
SECURE SYSTEMS is advancing a next-generation security operation strategy that combines AI and automation technology, centering on its SOAR (Security Orchestration, Automation & Response)-based integrated security management platform, Secure Orchestra.
Son Dong-sik, CEO of SECURE SYSTEMS, introduced, "This patent is a technology that not only automates security beyond optimizing and applying playbooks—one of SOAR's most powerful features—or forming playbook workflows including internal policies, but also expands organizations' threat analysis and response capabilities." He added, "We plan to help clients proactively respond to external threats."
Meanwhile, SECURE SYSTEMS will operate an exhibition booth with its parent company Hunesion at the global cybersecurity event CSK 2025 (Cyber Summit Korea 2025) hosted by the National Intelligence Service on the 8th of next month. It also plans to participate in the international cyber defense training program 'APEX25.'