@article{ART003364223},
author={Seung Han Yoon and Ah Reum Kang},
title={A Study on the Empirical Analysis of South Korea's Cyber Threat Landscape and Internet-Exposed Asset Vulnerabilities through the Integration of Shodan EASM and Threat Intelligence},
journal={Journal of The Korea Society of Computer and Information},
issn={1598-849X},
year={2026},
volume={31},
number={7},
pages={127-140}
TY - JOUR
AU - Seung Han Yoon
AU - Ah Reum Kang
TI - A Study on the Empirical Analysis of South Korea's Cyber Threat Landscape and Internet-Exposed Asset Vulnerabilities through the Integration of Shodan EASM and Threat Intelligence
JO - Journal of The Korea Society of Computer and Information
PY - 2026
VL - 31
IS - 7
PB - The Korean Society Of Computer And Information
SP - 127
EP - 140
SN - 1598-849X
AB - This paper presents a comprehensive analysis of South Korea's cyber threat landscape and internet-exposed asset vulnerabilities by integrating Shodan EASM scan data (April 11, 2026) with CYFIRMA threat intelligence. The scan identified over 37.17 million exposed ports, with 538,230 hosts vulnerable under CISA KEV and 1,820,536 under VulnCheck KEV. Critical findings include 4,321 ICS/OT devices directly exposed to the internet, 25,742 unauthenticated databases, 1,171 BlueKeep-unpatched systems, and 50 hosts with confirmed remote code execution vectors. North Korea-linked APT groups including Lazarus Group, Kimsuky, and APT37, alongside ransomware operators Qilin and LockBit, are actively exploiting these vulnerabilities. This paper proposes a tiered security roadmap with immediate (0-30 days), short-term (1-6 months), and long-term (6+ months) countermeasures, along with sector-specific priority action matrices.
KW - EASM;Cyber Threat Intelligence;KEV;ICS/OT Security;APT Group;Ransomware
DO -
UR -
ER -
Seung Han Yoon and Ah Reum Kang. (2026). A Study on the Empirical Analysis of South Korea's Cyber Threat Landscape and Internet-Exposed Asset Vulnerabilities through the Integration of Shodan EASM and Threat Intelligence. Journal of The Korea Society of Computer and Information, 31(7), 127-140.
Seung Han Yoon and Ah Reum Kang. 2026, "A Study on the Empirical Analysis of South Korea's Cyber Threat Landscape and Internet-Exposed Asset Vulnerabilities through the Integration of Shodan EASM and Threat Intelligence", Journal of The Korea Society of Computer and Information, vol.31, no.7 pp.127-140.
Seung Han Yoon, Ah Reum Kang "A Study on the Empirical Analysis of South Korea's Cyber Threat Landscape and Internet-Exposed Asset Vulnerabilities through the Integration of Shodan EASM and Threat Intelligence" Journal of The Korea Society of Computer and Information 31.7 pp.127-140 (2026) : 127.
Seung Han Yoon, Ah Reum Kang. A Study on the Empirical Analysis of South Korea's Cyber Threat Landscape and Internet-Exposed Asset Vulnerabilities through the Integration of Shodan EASM and Threat Intelligence. 2026; 31(7), 127-140.
Seung Han Yoon and Ah Reum Kang. "A Study on the Empirical Analysis of South Korea's Cyber Threat Landscape and Internet-Exposed Asset Vulnerabilities through the Integration of Shodan EASM and Threat Intelligence" Journal of The Korea Society of Computer and Information 31, no.7 (2026) : 127-140.
Seung Han Yoon; Ah Reum Kang. A Study on the Empirical Analysis of South Korea's Cyber Threat Landscape and Internet-Exposed Asset Vulnerabilities through the Integration of Shodan EASM and Threat Intelligence. Journal of The Korea Society of Computer and Information, 31(7), 127-140.
Seung Han Yoon; Ah Reum Kang. A Study on the Empirical Analysis of South Korea's Cyber Threat Landscape and Internet-Exposed Asset Vulnerabilities through the Integration of Shodan EASM and Threat Intelligence. Journal of The Korea Society of Computer and Information. 2026; 31(7) 127-140.
Seung Han Yoon, Ah Reum Kang. A Study on the Empirical Analysis of South Korea's Cyber Threat Landscape and Internet-Exposed Asset Vulnerabilities through the Integration of Shodan EASM and Threat Intelligence. 2026; 31(7), 127-140.
Seung Han Yoon and Ah Reum Kang. "A Study on the Empirical Analysis of South Korea's Cyber Threat Landscape and Internet-Exposed Asset Vulnerabilities through the Integration of Shodan EASM and Threat Intelligence" Journal of The Korea Society of Computer and Information 31, no.7 (2026) : 127-140.
