#Japan #Cybersecurity #Tokyo #BIPROGY #Codename MDASH

BIPROGY Initiates Vulnerability Verification Using Codename MDASH

BIPROGY, a leading player in the tech industry, has announced the start of a crucial vulnerability verification process for its services. This initiative comes as a proactive measure against the increasingly sophisticated cyber threats posed by the advancements in frontier AI technologies. Leveraging Microsoft Corporation's innovative code scanner, Codename MDASH, the verification aims to evaluate the effectiveness of AI-driven techniques in identifying vulnerabilities that may have gone unnoticed by traditional methods.

Context of the Initiative

The rapid evolution of frontier AI technologies has vastly improved the ability to detect software vulnerabilities. This, however, has raised concerns about the potential misuse of this capability in cyberattacks. The Financial Services Agency and the Bank of Japan recognized these changes and urged financial institutions to bolster their cybersecurity measures, including vulnerability management, as early as May 2026.

In response to the growing frequency of unauthorized access incidents to corporate data, there is an increasing demand for ongoing improvements in security quality. To effectively address the accelerated threat landscape, it has become essential to integrate new methodologies into standard vulnerability assessments to detect and rectify issues promptly.

Addressing the Frontier AI Landscape

BIPROGY views these environmental changes as a management challenge and is actively pursuing ways to mitigate the new cybersecurity risks associated with frontier AI. This involves utilizing AI technologies not only to assess existing conditions but also as a robust method to complement and enhance traditional vulnerability assessments.

Overview of the Verification Process

Collaborating with Microsoft Japan, which has been a long-standing partner, BIPROGY will conduct static security assessments (SAST) of the source codes used in its services. This evaluation is intended not to replace existing reviews and vulnerability assessment methods but to augment them using AI-driven insights.

Unlike traditional rule-based assessments that largely rely on known vulnerability patterns, MDASH employs multiple AI models and over 100 specialized AI agents to conduct comprehensive vetting of potential vulnerabilities, offering suggestions for remediation when necessary. Microsoft also employs MDASH for enhancing security measures in its own software and cloud offerings.

Comparison of Conventional Assessments and MDASH

In this verification, the following aspects will be primarily evaluated:

• - The presence of previously undetected issues and the assessment accuracy based on expert validation.
• - A comparison of time, labor, and costs associated with traditional assessment methods.
• - The utility of AI-driven remediation recommendations and their compatibility with current development processes.
• - Prioritization of detected issues and suggested intervention strategies for development and operations teams.

The source code will be accessed through a secure, isolated tenant for read-only diagnostics, and findings will be managed via Microsoft Defender. The aim is to finish static assessments by December 2026 and resolve identified vulnerabilities by March 2027.

Future Directions

BIPROGY intends to incorporate insights gained from this verification into its product and service development processes, optimizing priority-based approaches for early detection and risk management.

Post-verification, the company will assess the applicability of its findings to other solutions and enhance its overall vulnerability management and multi-layered defenses. Looking ahead, BIPROGY also considers extending the insights from this project into new services, thereby strengthening client security measures.

Endorsement

Ranko Fujisawa, the Executive Director at Microsoft Japan’s Customer Success Division, has expressed support for BIPROGY’s endeavors. She stated that as frontier AI evolves, so too does the capability to detect software vulnerabilities. To adapt to these changes, it is critical to leverage AI as a defensive measure, and she looks forward to BIPROGY's innovative use of AI to enhance security and provide value to its customers.

• ---

This announcement serves as a pivotal step for BIPROGY in advancing its security posture amidst the challenges posed by modern cyber threats.