Moving
Target
Defense
Dynamic security prevents mobile hacking
Excellent app hacking prevention through the only technology that has achieved MTD
Applying dynamic technology to every possible element for more secured protection
Proven achievements with top-tier references
Hacking defense solution that doesn't change, why is it dangerous?
Threat 1
Hackers access app information
that is open to everyone
No hackers access the server recklessly. Hackers analyze mobile apps that anyone can easily download and try to break into them.
vulnerability analysis
Various damage caused
Threat 2
Even a complicated maze can be solved with enough time
Existing hacking defense solutions do not change their code. Therefore, no matter how complicated a security module is, if a hacker analyzes it with enough time, it will eventually break through.
Allowing analysis of mobile apps can cause various damages.
Hackers analyze apps' vulnerabilities and modify/forge apps for their own purposes.
They can also analyze communication between apps and servers and penetrate into the key systems.
The goal of modern security, MTD
MTD (Moving Target Defense)is the aim of modern security which reduces and changes the attackable range. With ever-changing dynamic security modules, hackers end up losing the purpose and pretext of the attack.
MTD is evaluated as a security model suitable for this fast-evolving era, and the global security industry continues to research the effective implementation of MTD.
Eversafe's self-developed technology, Dynamic Security Technology, is the only anti-hacking technology in Korea that fully captures the core of MTD.
Eversafe for MOBILE is the next generation of hacking defense solution
with ever-changing security codes.
One STATIC security module
operates without change.
Given sufficient time, a system that relies on a single security module to protect a service can be bypassed.
VS
Every time,
a new DYNAMIC security module is assigned.
Unlike the static security module, Eversafe's security module changes its pattern every time. Therefore, even if a hacker makes great efforts to analyze the system to bypass it, the security module is soon replaced with a new one, requiring the hacker to analyze it all over again.
Technical Advantages of Eversafe for MOBILE
It has surpassed the limitations of the existing static approach with its dynamic technology.
Existing Solution
Security Module
The same, single security module is operated all the time. Once analyzed, the security module becomes ineffective.
Security module changes on a per-time basis. Even if the security module is analyzed once, it needs to be reanalyzed as the security module is replaced with a new one.
Implemented Function
As API is used, developers can easily analyze and bypass the security module.
As system interfaces that are not easily accessible to developers are used, hackers cannot identify the security modules easily.
Server Validation
Most security modules don't have the protection logic for the module itself,and even if it exists, the validation mechanism is limited to the client, making bypass easy.
The security module is protected through server integration and the use of dynamic modules, making it difficult for hackers to bypass.
Protection Area
The protection scope is limited to the app's integrity and hacking OS and tools.
Based on dynamic security technology, it is possible to protect not only the app's stored data but also the communication data that becomes the target of hackers' analysis.
Easy Defense
Knowing the security status itself is impossible. Even if it's possible, responding to a security issue is impossible.
It is possible to grasp the security status and make real-time modifications to security policies.
Features of Eversafe for MOBILE
Detect and block abnormal app usage in real time.
1
Blocks app execution on manipulated OS
Blocks the app from running on the manipulated OS.
2
Protects app integrity
Prevents tampered apps containing malware from running.
3
Detects and blocks reverse engineering
Prevents and blocks app analysis using various hacking tools.
4
Storage Data Protection
Additional encryption is applied to the DATA stored by the app to prevent app analysis.
5
Communication encryption
App analysis is prevented by applying additional encryption to communication data between the app and the server.
Remarkable technology of Eversafe for MOBILE
Eversafe's technology has already been proven through large domestic and international financial companies.
KOREA
Woori Bank conducted a technical competition (BMT) through bidding with 10 security companies to address ongoing hacking issues in its app. EverSpin, which did not allow a single hacking incident for over ten days among the 10 companies, took first place and [Eversafe] was selected by Woori Bank.
JAPAN
SBI Financial Group in Japan commissioned a Pen-Test to one of the Big 4 consulting firms for the adoption of a solution across the group's subsidiaries. As a result, Eversafe for MOBILE was found to be free of vulnerabilities and the gradual introduction to all SBI Group affiliates was decided.
INDONESIA
Mandiri Bank, the Indonesian state-owned bank, commissioned a Pen-Test from ITSEC for the adoption of Eversafe for MOBILE, which proved to be absolutely secure with zero critical security threats. In addition, it was proven that EverSafe had superior technological capabilities compared to the technology of a well-known US security company, A, which competed in the process.