Samsung has recently disclosed critical information regarding the security measures it employs to protect its Galaxy devices, including smartphones and tablets. This initiative, known as Project Infinity, is aimed at identifying and addressing potential security vulnerabilities.
Project Infinity utilizes a comprehensive mechanism that scans both the software and hardware of devices to ensure rapid response and user protection. The project features multiple working groups identified by colors, including collaboration between the Cyber Threat Intelligence (CTI) team and the Blue, Purple, and Red teams.
Each security team at Samsung has specific responsibilities: the Blue and Red teams focus on proactively detecting security vulnerabilities, while the Purple team engages in both offensive and defensive security activities. These teams are distributed globally, with operations in various countries, such as Brazil, Poland, and Vietnam. The CTI team, in particular, has been instrumental in implementing security updates for Galaxy devices.
Among the major areas of research for the CTI team are the Deep Web and Dark Web, where various forms of malware pose threats to mobile security. When potential threats are identified, the CTI team collaborates closely with developers and operators to prevent and resolve these issues swiftly.
To further strengthen the security of its Galaxy devices, Samsung has formed partnerships with external organizations. As part of this collaboration, the company offers rewards of up to 1 million EUR for the discovery of vulnerabilities within its systems.
Justin Choi, vice president and head of Samsung’s security team, emphasized the importance of vigilance, stating, “We closely monitor forums and markets for targeted Zero-day or N-day exploits aimed at Galaxy devices, as well as any information leaks that could serve as access points into the system.”
