news

south korea aims to build international hub for cybersecurity exercises

2024-09-23

한어Русский языкEnglishFrançaisIndonesianSanskrit日本語DeutschPortuguêsΕλληνικάespañolItalianoSuomalainenLatina

recently, south korea has been making a lot of noise in cyberspace: hosting the korea cyber ​​summit, holding the "alliance force 2024" cybersecurity exercise with nato as the host country, and holding a cyber attack and defense competition in the country. some analysts said that south korea's defense "combination punch" in cyberspace is aimed at building itself into an international hub for cybersecurity exercises. its stepped-up expansion of invisible battlefield armaments will intensify regional camp confrontation.

international cyber security exercise held

"alliance force 2024" is the third multinational cybersecurity exercise jointly conducted by south korea and the united states and other countries this year. south korean president yoon seok-yeol said at the cyber ​​summit held at the same time that this is the first time that south korea has hosted a "world-class" cybersecurity exercise, which will strengthen south korea's cybersecurity cooperation with nato. in the first half of this year, south korea sent personnel to participate in two multinational joint exercises, nato's "locked shield 2024" and the us cyber ​​command's "cyber ​​flag 2024".

the "alliance force 2024" exercise was held at the coex convention and exhibition center in seoul from september 10 to 12. it was hosted by the national intelligence service of south korea and co-organized by the cyber ​​operations command of the ministry of national defense, the ministry of science and technology, ict, the national security research institute, the national security strategy research institute, and the nato cooperative cyber ​​defense center of excellence. about 70 cyber warfare personnel from 24 countries including the united states, italy, japan, and singapore participated in the exercise.

the exercise is conducted against the backdrop of "cyber attacks and intimidation and blackmail against critical infrastructure of multiple allies in the pacific region" and is divided into two phases.

the first phase is a "cyber reality technology" training, in which the south korean cyber ​​operations command task force acts as the "red army" and launches covert attacks on six "blue army" teams, focusing on testing the level of response to cyber threats. each "blue army" team warns of enemy actions during a controllable period of escalating danger, and carries out defense and counterattack actions such as information sharing, joint task force formation, and source tracing.

the second phase is the assessment of the "cyberspace security cooperation mechanism", which focuses on assessing the legal and media response procedures of participating countries during cyber crises. this phase is led by the national intelligence service of south korea, with advice from the nato cooperative cyber ​​defense center of excellence. following nato's example, it has established multiple seats for threat assessment, information release, legal advice and external liaison, and basically follows nato's training model for this type of training.

yoon woo-joon, deputy director of the exercise and deputy director of the national intelligence service of south korea, said that the "internationality" of the exercise is not only reflected in the fact that participating countries come from all over the world, but also in the professional setting of the scene. according to reports, the exercise platform and simulation system, attack and defense scenarios, etc. were all developed by experts from the nato cooperative cyber ​​defense center of excellence. during the exercise, the simulated power grid system, network services, digital forensics and incident response components all played their due role. the south korean participating institutions introduced a special network training model for the exercise in accordance with nato standards.

promote the construction of network mechanisms

yoon seok-yeol once said that he wanted to build south korea into a "global hub country" to demonstrate the country's influence. the proposal of an international hub for cybersecurity exercises is a promotion and implementation of the above proposal. according to the report, the so-called "hub" status is mainly reflected in the alignment of south korea's cyberspace policies and regulations with the west, strengthening cooperation with nato, and demonstrating the country's cyber hard power.

after signing a cybersecurity cooperation framework agreement with the united states in april 2023, south korea released the national cybersecurity strategy in february this year, once again moving closer to the united states in terms of the name of the guidance document and specific guidelines. recently, the south korean ministry of defense released a cybersecurity risk management document, proposing that the south korean cyber ​​operations command will be responsible for the cybersecurity risk management of weapon systems, further "aligning" with the us cyber ​​command.

the multi-level security system proposed by the national intelligence service of south korea, the latest version of the vulnerability analysis and assessment guidelines of the south korean cyber ​​operations command, and the newly revised cyber ​​defense posture regulations of the navy are all similar to the cyberspace challenges and issues list launched by the us cyber ​​command, emphasizing technology empowerment and support operations. in addition, the korea information protection association also held the first "hacker international cyber ​​security week" event with the silicon valley cyber ​​security council of the united states to strengthen cooperation between the two sides in the field of cyber security.

south korea is working with japan, australia and other countries to establish a new consultation mechanism with nato to strengthen cooperation in areas such as cybersecurity, combating false information and emerging technologies. the south korean presidential office said that by 2027, south korea will invest more than 30 million us dollars to establish a cybersecurity center to further strengthen cybersecurity cooperation with nato. the center's international cyber training and education platform plans to train more than 3,000 cyberspace experts each year.

south korea also followed the so-called "integrated cyberspace operations concept" of the united states and organized a two-week joint military-civilian cyber crisis management exercise, with a total of 556 companies and 234,000 people participating. the national intelligence service of south korea held a nationwide cyber attack and defense competition, highlighting capabilities such as vulnerability detection, event analysis and response, and threat source tracking, in order to reserve human and technical resources for the construction of an integrated network.

helping the us put together a "small circle"

it is reported that south korea's "combination punch" in the field of cybersecurity is also to piece together a "small circle" in cyberspace for the united states. for some time, the united states has been keen to support and encourage its allies in asia and europe to act as "vanguards" and fulcrums in emerging fields such as cyberspace.

on the one hand, it is trying to attract south korea and japan to participate in nato-led multinational exercises such as "cyber ​​flag" and "locked shield" as new members, increase the frequency and quality of cooperation in the cyber field with allies in the indo-pacific region and europe, and improve the level of technical and tactical cooperation with allies in cyberspace. on the other hand, it is working with allies such as south korea, the united kingdom, and australia to jointly formulate "international standards" for 6g networks and artificial intelligence technology development, and strengthen its leading position in emerging fields.

it is reported that the above-mentioned move by south korea will accelerate the promotion of the so-called "paradigm" and "model" of the united states. the united states has established the us-japan-philippines joint cyber ​​defense framework and the us-japan-australia "blue spectrum" cyber ​​alliance in the indo-pacific region. south korea, the united states and japan are negotiating to add cyber warfare content to the second phase of the "freedom blade" exercise at the end of the year. however, some analysts said that the cybersecurity exercise hosted by south korea has more symbolic significance than substantive content. the multinational forces did not carry out high-intensity network confrontation and high-value target attack training. it was more focused on process operation, with a short duration and few personnel, and it was more like a "staged photo shoot."