Blog - LINE ENGINEERING

TAG ARCHIVES: Security

How we optimized the AES-GCM-SIV encryption algorithm
Juhong Han2023-09-21
In charge of security technology research and security consulting in the Security R&D team.
Hello, this is Juhong Han, who is in charge of security research and consulting in the Security R&D team. There are various security technologies in the world, and among them, cryptographic algorithms are essential for data security. LINE also applies various cryptographic algorithms to protect sensitive data when providing services. And in our team, we are developing cryptographic libraries to make it easier to use for other LINE developers who are not used to cryptographic algorithms. AES-
- Security
Mobile device management with Android's work profile
Prashant Pol2023-08-28
Android Engineer at LINE messaging application.
Many companys desire a communication medium that keeps their employees connected. To achieve this, they often install a company-specific communication app. This can be done either by providing a new dedicated device to the employee or by implementing a bring your own device (BYOD) policy, where the company asks employees to use their personal devices. Under the BYOD policy, companies require employees to install a mobile device management (MDM) app and activate a work profile. Before, I had a ba
- Android
- Security
About the LINE Anti Phishing promotion
Lee Myeongjae2021-12-01
He is a security engineer at LINE.
Hello, this is MJ from LINE's Security Team. The LINE Anti Phishing promotion begins today (December 1). For more details on the promotion, please check the official site. Promotion details The LINE Anti Phishing promotion asks participants to provide information on phishing sites that target services provided by LINE Corporation and partner companies Yahoo Japan Corporation, PayPay Corporation, and PayPay Bank Corporation. If the information provided is deemed beneficial, we will o
- Security
- LINE Anti Phishing
LINE New-Grad Engineers: [June] Security Engineers
Koh You Liang2019-08-01
Application and Game Security Engineer at LINE. I also develop automation tools and handle bug bounty reports @kohyouliang
LINE welcomed 33 newly graduated engineers this year. In this monthly series, they will be introducing their experiences and give an overview of the work that they do. We have invited Mr. Koh from the Application Security Team to talk about his initial work and experiences. Introduction Hello! I am Koh You Liang and I officially joined the Cyber Security Department's Application Security Team (AST) in Fall 2018. Before that, I did part time work for the same team for over hal
- Security
- newgrads
How AIR ARMOR checks iOS Code Signing
Minyoung Sim2019-05-14
I develop AIR ARMOR at LINE
AIR ARMOR is a security solution of AIR; AIR is a component of the LINE GAME PLATFORM. You can refer to Seunghoon's posting on AIR GO and APK Signing for information on the APK signature scheme. For this posting, I'll explain about iOS code signing, one of Apple's security mechanism. Code signing is to verify the integrity of the software code and confirm the signer (who wrote the code). I'll also cover checking the integrity of iOS Mach-O bin
- iOS
- Security
- Client
LINE Security Bug Bounty Program Report 2018
Kazuhiro Kubota2019-02-19
I hunt for vulnerabilities at LINE.
Hello, this is Kazuhiro Kubota from the LINE Security Department. Last time we brought you the report for the first half of 2018. Today, I'd like to summarize the results of the LINE Security Bug Bounty program for 2018. Number of reports in 2018 In 2018, a total of 88 reports qualified for the program. This figure is almost twice as many as the 45 cases in 2017. Indeed, we did expand our scope of the program from the previous year, 2017, but we think t
- Security
- Bug Bounty
AIR GO and APK Signing
Seunghoon Kim2019-01-29
I am a developer of the detection module for AIR GO.
Hello you all, this is Seunghoon Kim, a member of the AIR GO development team at LINE. Previously on our blog, we had a chance to introduce AIR GO with this post, Introducing AIR GO. Following up on the article, I'd like to talk about APK Signing and what AIR GO detects in regards to it. Recently, Google introduced the APK Signature Scheme v3 for Android 9 Pie and AIR GO has updated its verification process to check for the new scheme. Today, I'd like to share what I've learnt th
Introducing AIR GO
Taewoo Kim2018-09-28
I develop the analysis part of AIR GO.
AIR GO is an app vulnerability scanning service for finding vulnerabilities in Android or iOS app package files (APK or IPA). AIR GO is somewhat similar to SandDroid, an open source project. Recently, LINE has been using AIR GO to check LINE apps for vulnerabilities before they are released, to provide secure services to LINE users. Anyone can access AIR GO simply by registering their email address. Actually, AIR GO had been introduced on the LINE website previously; today, I'd like to discuss a
Buffer overflow in PJSIP, a VoIP open source library
Kim Youngsung2018-02-26
He's a security engineer at LINE. He enjoys looking for bugs and is highly interested in secure coding.
Hi all, I am Youngsung Kim (Facebook, Twitter) of the Application Security team at LINE and am in charge of evaluating security of LINE services. On this post, I'd like to share a vulnerability (CVE-2017-16872, AST-2017-009) of PJSIP, a VoIP open source library. PJSIP is a multimedia communication library based on the following standard protocols; SIP, SDP, RTP, STUN, TURN, and ICE. The Asterisk framework, widely used on IP-PBX and VoPI gateway has an SIP stack implemented based on PJSIP.
LINE Security Bug Bounty Program Report 2017
Lee Myeongjae2018-02-13
He is a security engineer at LINE.
Hello again, this is Myoungje Yi (MJ) from LINE's security team. I'd like to share our annual report on running the LINE Security Bug Bounty Program in 2017. Program scope expansion & donation option The 'LINE Security Bug Bounty Program' aims to provide LINE users the most secure service by fixing potential vulnerabilities in advance, by getting reports from external security researchers. As we have already mentioned in our previous post, we have expanded the program scope in 2017, which re
- Security
- Bug Bounty

1 2