SUCCESS STORY

Background

• Project name: The operation support for an integrated information system of local administration
• Scope: annual license for 70 users and 23 projects of cities and provinces administration system, and 20 projects of cities and countries administration system
• Environment: Linux(CentOS 7 64bit) / IE 9 or later, Chrome, etc.
• Customer’s needs: The KLID used to use a secure coding solution (provided by another vender in Korea) for the operation and maintenance of its integrated information system of local administration. The system is required to diagnose and eliminate 47 security weaknesses designated by the Ministry of Government Administration and Home Affairs(MOGAHA). Due to internal issues, the KLID was looking for another secure coding solution with more powerful and convenient functionalities for safe and stable operation of the system.

Solution
The KLID has replaced the existing secure coding solution to HancomSecure SOFOS Coding for the 23 projects of cities and provinces administration system and 20 projects of cities and countries administration system.

Result
The KLID is using HancomSecure SOFOS Coding for the operation and maintenance of the administration systems since early 2016. The HancomSecure SOFOS Coding helps 70 developers managing the integrated system to have secure coding inspection habits on the SW Development Lifecycle(SDLC) and to minimize their time for source code correction with real-time diagnosis, partial analysis and cause-centric detection functionalities.

Background

• Project name: The 2nd implementation of medical information system (MIS)
• Scope: 1-year license for 20 users and 3 projects, integration with SVN (configuration mgmt. tool)
• Environment: Windows Server / IE 9 or later, Chrome, etc.
• Customer’s needs: The hospital has been developing the medical information system that manages patients’ private information and critical data from medical examination and keeps electronic medical records (EMR). The law of ‘Privacy Protection Act’ is applied to the EMR for storage, management and processing in Korea and the hospitals are required to manage the sensitive medical records very seriously. To develop secure medical information system against any security threats and prevent information leakage incidents in advance, the hospital needed to apply a secure coding solution to the development environment.

Solution
The hospital deployed a development system diagnosing security vulnerabilities of the source codes, which applies HancomSecure SOFOS Coding from the early development stage.

Result
The implementation of medical information system has completed well and the system has been operated since 2016. The HancomSecure SOFOS Coding has contributed to enhance the project quality and security of the system.

Background

• Project name: The achievement management system upgrade
• Scope: Twice secure coding diagnosis and provision of report on the project (project-based license)
• Customer’s needs: Since 2015, all informatization projects required for a business supervision are obliged by the government to apply secure coding and eliminate security weaknesses from the SW development stage. The achievement management system of the KESCO was also required to get an audit, so the KESCO needs to find and choose an appropriate secure coding solution for the project audit and corrections of the source codes before system open for safe and cost-effective achievement management system operation.

Solution

The KESCO analyzed the source codes of the achievement management system using HancomSecure SOFOS Coding first and realized that it is very critical on security vulnerabilities. The developers fixed the source codes to eliminate security weaknesses according to the guidance of the SOFOS Coding analysis report. After correction, it was verified through the second secure coding analysis that the security weaknesses are almost eliminated.

Result
The upgraded achievement management system has opened in 2016. The KESCO expects that the system is being operated securely against any cyber threats and security incidents.