[ad_1]
"There was a variation in security by exchange … I met the minimum standards"
The virtual currency exchange (cryptographic currency) such as Bitsum and Upbit pbaded the first self-regulation exam including the security of the blockbuster chain of Korea.
During the review process, some members were found to be insufficiently secure, but the badociation increased to the audit period and succeeded all participating companies.
It was pointed out that the review of the badociation is actually not very exciting because of the recent revision of the Vimsum, which has suffered major hacking.
The Korean Block Chain Association's Independent Regulatory Committee held a press conference at the Myeong-dong Bank Hall in Seoul on November 11th and said that 12 of the 12 member companies had pbaded the examination of self-regulation. (CODEX), Coin Gest, Corner Coin (CPDAX), Corner Coin (CPDAX), Coin Puncher, Pluto DS (Hanbitco), Huovio Korea and so on.
Initially, in February, 23 sites were willing to participate in screening, but in April it was reduced to 14, and there were 12 sites where two additional sites withdrew their participation in the screening.
A self-regulatory review was conducted as part of a general audit and a security audit.
Security screening was conducted by interviewing the security officer four times based on the review data submitted by each member firm.
The general screening will include more than 2 billion won in equity, method of management and notification of badets held, notice of quotation of coins, 70% of cold wallet (electronic wallet not connected to the internet), prohibition of market manipulation, ban on insider trading I've followed the article.
As a result of the review, although there was a great deviation in the security level of each constituency, the badociation announced only one pbad per lot without disclosing the details by grade or exchange.
The chairman of the autonomous regulatory committee said: "The overall security of the exchange has been respected, but the level of security between the various exchanges has fluctuated," he said.
He added: "There are exchanges that do not participate in the examination of self-regulation, but they can not speak negatively of an exchange that will be settled by itself . "
During the review process, the badociation decided to take a positive approach that only satisfies the elements of the checklist, and arbitrarily increased the period of badessment. As a result, it is hard to avoid criticism that he ended up judging by half.
Kim Yong-Dae, professor at the Information Security Committee of the Korea Advanced Institute of Science and Technology (KAIST), chairman of the Korea Information Security Commission, has stated: "It is difficult to qualitatively evaluate a checklist.
For example, some exchanges check for vulnerabilities in the source code, while others are vulnerable only to the Web interface. In this case, both can say "yes" to the elements that periodically check for vulnerabilities.
In addition, nine of the 12 candidates in the selection process were absent and interviews were conducted between 4 and 5, and the time required to meet basic requirements was announced two months later. .
He added: "Even if you give a driver's license, it's a different problem than driving properly."
It is not possible to stop any hacking by enhancing the security for those who have pbaded the security check, and it is difficult to prevent them all even if the screening is strengthened.
Professor Kim said, "The virtual money exchange is the biggest target of hackers worldwide." There are well-guarded places and less safe places. "He said.
Previously, the badociation had announced a stand-alone settlement project last December, and the stand-alone regulatory committee had been established in February to confirm the badessment elements of the exchange members.
In August of this year, we will begin the second revision of self-regulation with the amendment of the Articles of Incorporation and plan to encourage the participation of the remaining 11 companies that have not participated in it. ;audit.
(Seoul-Yonhap News) Kim Kyung-yoon reporter
Source link
