 |
Photo courtesy of Yonhap News |
[Alpha Biz= Kim Jisun] Naver on March 6 released its “2025 Naver Security White Paper,” outlining its security strategies and key initiatives in response to growing cybersecurity challenges in the AI era.
The company emphasized that service reliability and security are becoming core competitive factors for digital platforms as artificial intelligence technologies rapidly expand.
The white paper summarizes Naver’s major security activities over the past year, including efforts to respond to new security threats emerging from advances in AI technologies.
Naver said it has strengthened security inspection processes across the entire service lifecycle, including service design, development and operations. The company also upgraded its abuse and phishing detection models and expanded security education and awareness campaigns for employees and partner companies.
As a result of these efforts, the number of valid vulnerability reports submitted through its bug bounty program—which encourages external security researchers to identify service vulnerabilities—has declined by 77.2% over the past five years. Naver has operated the bug bounty program since 2015 to proactively detect and address security risks.
The company also enhanced support for global data privacy regulation compliance.
Through its Privacy Center, Naver introduced a new section called “Global Privacy Monthly Trends,” which will begin publishing monthly updates on major global privacy regulations and data protection issues starting in March.
Naver also expanded its privacy policy drafting guidelines for companies operating overseas. In addition to existing guidance focused on the United States and Europe, the updated resources now include China and Japan, along with newly added FAQ sections.
Naver noted that it was the first Korean company to establish a Privacy Center and publish transparency reports, providing detailed information on its data protection policies and technologies.
The company also undergoes regular verification of its information security practices through international and domestic certifications, including ISO/IEC 27001, ISMS-P, and ISMS.
Alphabiz Reporter Kim Jisun(stockmk2020@alphabiz.co.kr)
