Cybersecurity company Stillion said on Aug. 27 it supplied KB Kookmin Bank with its AI-based vulnerability analysis solution, AlienRay.

AlienRay is a black-box AI vulnerability analysis solution that analyzes deployed binaries without source code, symbols or build environments. It analyzes attack surfaces and potential vulnerabilities, and verifies real-world exploitability through attack chains and proof of concept (PoC).

It can also analyze externally sourced software and commercial software where source code is difficult to obtain, making it usable for supply chain security.

AlienRay evaluates risk based on the likelihood of actual exploitation and the impact of discovered vulnerabilities, and presents response priorities. It also provides recommended actions and risk mitigation measures by vulnerability, helping security staff specify improvement directions and respond quickly.

AlienRay has been supplied to major institutions and companies such as the National Tax Service and Samsung Electronics, Stillion said. It added it is also conducting multiple PoCs for financial firms and large companies.

Joo-hwan Son (손주환), head of Stillion's research institute, said it is important not only to find vulnerabilities quickly using AI but also to verify whether they pose a risk that could lead to real attacks, and then propose appropriate measures. He said the company will continue to advance the product so that industries where supply chain security is important, including the financial sector, can identify and respond to practical security risks more efficiently.