Agent Self-Protection — Designing for Confidentiality, Integrity and Availability

We implemented the security functions of the management server and the agent in compliance with every item of the security requirements that Korea has established to counter cyber threats against its national and public institutions.

Confidentiality

• Password creation rules are enforced at login, and user account information is encrypted and stored securely.
• Critical data generated or exchanged while the management server and the agent are running is stored and transmitted in encrypted form.
• Critical files are kept hidden, and the encryption keys in use comply with security certification standards.

Integrity

• For safe operation, the critical executables of the agent and the management server, along with their critical running processes, undergo periodic integrity verification.
• Files found to be damaged during integrity verification are restored automatically, and the administrator is notified immediately.

Availability

• Attempts to change permissions in order to gain the right to modify files are blocked.
• Attempts to delete critical executables are blocked.
• Session hijacking attempts are blocked, and sessions that have been idle for longer than a set time are terminated automatically.

Detailed diagrams are available on the Self-Protection page.