[E-Daily Reporter An Yu-ri ] SANDS LAB Inc.(411080) announced on the 9th that it participated in the AI Special Pavilion at the “15th Information Security Day Commemoration Ceremony” held at the HotelShilla in Seoul on the 8th, where it showcased its AI-based threat analysis and response technologies.

As one of the companies participating in the AI Special Pavilion, SANDS LAB Inc. took part in the event to mark Information Security Day and demonstrate the practical applications of domestic AI security technology.

Following its unveiling of a deepfake detection AI agent at last year’s 2025 AI Cyber Defense Contest (ACDC), SANDS LAB Inc. structured this year’s demonstration at the Information Security Day ceremony around AI-based network anomaly detection and automated AI malware analysis technologies.

While last year’s demonstration highlighted the potential to counter digital threats posed by generative AI, this year’s focus was on showcasing SANDS LAB Inc.’s full-cycle AI security capabilities—spanning large-scale threat data, AI security models, and the implementation of AI security products.

At the event, key domestic officials—including Song Ki-ho, Third Deputy Director of the National Security Office—and international delegations from member countries of the Global Cybersecurity Cooperation Network (CAMP), established by KISA, visited the SANDS LAB Inc. booth to observe the technology demonstrations, demonstrating high levels of interest.

SANDS LAB Inc. employees demonstrated firsthand how the company uses its AI-based Network Threat Detection and Response (NDR) solution “MNX” and Cyber Threat Intelligence (CTI) service “CTX” to analyze and interpret increasingly sophisticated AI-driven threats and derive response strategies.

SANDS LAB Inc. sequentially demonstrated a process—based on attack flows that could occur in real-world security environments—that begins with the detection of network anomalies via MNX, proceeds to in-depth analysis by Agent AI, and culminates in automated threat analysis using CTX’s large language model (LLM).

First, the company demonstrated how MNX uses generative AI to detect new types of cyberattacks and network security events, providing threat assessments, detection rationale, and response guidelines. In particular, it highlighted the system’s ability to identify even encrypted traffic at the application level, ensuring threat visibility even in complex network environments.

Next, AI agents performed their respective roles—detection, analysis, verification, and response decision-making—while synthesizing network events, internal logs, and external threat intelligence to determine the presence of a threat and the evidence supporting it. The demonstration then connected this process to CTX, where a large language model (LLM) automatically analyzed static and dynamic malware characteristics and API call flows to interpret attack methods, emphasizing how AI can transform complex security data into actionable insights to support security professionals’ decision-making and response.

Kim Ki-hong, CEO of SANDS LAB Inc., stated, “AI-native security is not merely about adding AI capabilities to existing security technologies, but rather about expanding the very approach to observing, interpreting, and responding to threats to be AI-centric.” He added, “Based on our long-accumulated cyber threat intelligence data and AI model research capabilities, we will continue to enhance our products so they can effectively respond to security threats that are becoming increasingly sophisticated through AI.”