Naver Turns to In-House Security AI After Claude Access Disruption
Naver began developing an artificial intelligence (AI) model specialized for cybersecurity after export controls on Anthropic’s Claude disrupted access to the service.
The disruption led the company to conclude that it could not rely on overseas models for its security capabilities.
Kim Jin-hwi, an executive director at Naver Cloud’s Security Division, disclosed the circumstances at the AIDC Security Technology Workshop held at Militopia Hotel in Seongnam, Gyeonggi Province, on Sept. 7. Kim, a former National Intelligence Service official, joined Naver in April. He oversees infrastructure security across the group, including Naver, Naver Cloud and Naver Webtoon.
“The service was interrupted midway because of export controls,” Kim said. “After experiencing that problem, we decided that we needed to build our own AI model.”
The US Department of Commerce in June ordered Anthropic to suspend access by all foreign users to Claude Fable 5 and Claude Mythos 5, citing national security concerns. Access to the two models was blocked for 19 days until the department lifted the restrictions. Mythos 5 remains available only to certain approved organizations.
Kim also pointed to limitations of overseas models. “Foreign models don’t have an understanding of the domestic threat environment,” he said. “Their guardrails, or AI control mechanisms, also pose major problems for how we use them.” He added that the episode made Naver realize it could not depend on overseas providers for its security policies and capabilities.
Kim said, however, that Naver does not plan to handle all AI security tasks with its own model. The company intends to continue using external solutions for tasks including vulnerability assessments.
According to Kim, Naver is already using existing AI models in actual security operations. AI automatically scans all ports on about 100,000 externally exposed servers twice a day. The company also operates a system in which a red team responsible for attacks and a blue team responsible for defense and patching exchange results and repeatedly validate vulnerabilities.
As Naver prepared its own model, it also built an in-house “harness” that connects AI models with vulnerability-analysis tools and execution environments. “Using this harness, we reproduced all of the open-source vulnerabilities that Mythos had discovered,” Kim said. Naver’s security team identified and reported 29 previously undisclosed high-risk vulnerabilities during the process, he said.
Against that backdrop, the government announced a project in late July to develop an AI foundation model specialized for cybersecurity. Naver Cloud formed a consortium and applied. “There were many areas that were difficult to address at the level of a single company,” Kim said. “It is an opportunity to build GPU resources, data and validation capabilities on a national scale.”
The consortium, comprising Naver Cloud and 32 other organizations, was selected on Sept. 3 as the final contractor for the government’s project to develop an AI foundation model specialized for cybersecurity.
Naver will contribute 4,000 of its own GPUs. The consortium aims to train Naver’s HyperCLOVA X and LG’s EXAONE on security data to develop a mixture-of-experts (MoE) security model with 700 billion parameters. The completed model will also be deployed on domestic AI chips from FuriosaAI and HyperAccel to validate its performance.
Development will begin on Sept. 18. With Minister of Science and ICT Bae Kyung-hoon saying the security-specialized model will be unveiled within the year, the consortium is targeting a demonstration in December. An interim evaluation will follow in February next year, with the project scheduled to conclude in July. Naver plans to release the final model as open source and distribute it through application programming interfaces (APIs) and software development kits (SDKs), allowing Korea’s cybersecurity industry to use it.