Generative AI is also being used greedily by cyber attackers, and is believed to contribute to the productivity and success rate of attacks. Despite the expansion of the domestic security market and the implementation of countermeasures, damage continues to increase without any sign of stopping, and companies are expected to strengthen their operations by actively utilizing generative AI. In this presentation, we will consider the state of security measures in the age of generative AI, along with corporate strategies.

Introducing tools alone is not enough. With the current situation requiring security audits from business partners and compliance with the Ministry of Economy, Trade and Industry’s “Security Measures Evaluation System,” it is also important to establish and comply with security rules. We will introduce practical measures that can be implemented immediately in preparation for the evaluation system.

AI-based security significantly improves defense capabilities, but security does not end with the implementation of the product. Actual threats occur 24 hours a day, 365 days a year, and a rapid response after detection minimizes damage to a company. In this presentation, we will explain the importance of “operational security,” which combines improved detection accuracy using AI with a rapid response system by a specialized team, and propose a sustainable form of defense necessary for companies in the AI ​​era.

“AI for Security” and “Security for AI” are terms we’ve been hearing a lot lately. Regarding “AI for Security,” we will introduce an example of our efforts to utilize AI at our SOC and explain the outlook for the future of AI in the security field. Meanwhile, in response to threats that are often overlooked as AI usage rapidly advances, we will explain the most recent risks and the need for countermeasures from the perspective of “Security for AI.”

The top 10 information security threats can be broadly divided into countermeasures against external threats and countermeasures against internal fraud. In this session, we will introduce countermeasures against external threats using Attack Surface Management (ASM) and countermeasures against internal fraud using browsers. In the section on countermeasures against external threats, we will introduce countermeasures that enable management of externally exposed assets through visualization of externally exposed assets, including those at overseas bases, and risk assessment from an attacker’s perspective using ASM. In addition, in the section on countermeasures against internal fraud, we will introduce countermeasures that start from the browser, which can improve convenience for employees and managers without limiting the scope of implementation, including the use of AI.

The top 10 information security threats can be broadly divided into countermeasures against external threats and countermeasures against internal fraud. In this session, we will introduce countermeasures against external threats using Attack Surface Management (ASM) and countermeasures against internal fraud using browsers. In the section on countermeasures against external threats, we will introduce countermeasures that enable management of externally exposed assets through visualization of externally exposed assets, including those at overseas bases, and risk assessment from an attacker’s perspective using ASM. In addition, in the section on countermeasures against internal fraud, we will introduce countermeasures that start from the browser, which can improve convenience for employees and managers without limiting the scope of implementation, including the use of AI.

Rising geopolitical risks are having a major impact on the field of cybersecurity, as evidenced by the government’s enactment of the Economic Security Promotion Act and active cyber defense initiatives. Turning to the technology side, the expansion of AI use by companies is raising new security risks, such as attacks on AI using prompt injection. This presentation will examine the impact of geopolitical risks and the expansion of AI use on the security services market.

The speed at which AI evolves continues to exceed our imagination. Often, a new way to utilize AI is conceived and then, a few months later, it’s already outdated. One of the essentials for reaping the benefits of AI is “speed.” Speed ​​here doesn’t mean performance, but rather an environment where ideas can be implemented as soon as they’re conceived. Read Teaming and Guardrail monitor and protect LLM, while NaaS allows all agents to connect securely and simply. In this session, we’ll introduce an example of building such an environment and explain specific approaches, allowing you to keep up with the advances in AI and reap the benefits.

The rapid spread of AI, the emergence of quantum computers, and unstable international situations are all factors that make the environment surrounding modern society difficult to predict. From a security perspective, new methods, new technologies, and new attackers are creating numerous security threats every year, and the limits of traditional detection-based defenses are beginning to become apparent. In this presentation, we will introduce next-generation endpoint security solutions to address these rapidly changing threats, including the world’s first hardware device equipped with quantum-resistant firmware and an anti-malware solution that does not rely on detection but instead utilizes in-device isolation technology.

The government has submitted a bill on active cyber defense, marking a new stage in cybersecurity. This represents a major step forward for Japan’s cyber defense and an opportunity for companies to change their mindset. The impact of this bill will extend beyond critical infrastructure operators to related companies and general businesses. The term “active defense” is originally a military term, referring to the idea of ​​achieving defensive objectives through offensive means. This concept is also prevalent in Japanese history, as seen in the Toyotomi-Tokugawa War and the Siege of Osaka, where the idea of ​​proactive defense was seen as luring the enemy in and then striking them down. Modern companies should not just passively defend themselves, but should instead adopt a proactive approach to corporate cyber defense. This may be the first step toward active corporate cyber defense.