Protecting What’s Most Important
for Your LG Commercial Display
All images are for illustrative purposes only.
LG Shield is a security framework for products developed in-house by LG Electronics to protect products and data in a secure state. It consists of a systematic LG security process (LG-SDL: Secure Development Lifecycle) that covers all aspects of software, along with essential security technologies. LG-SDL reduces vulnerabilities and verifies security through a structured process applied across all stages, including design, development, testing, and maintenance.
A wide range of security technologies is applied across multiple software components, such as the OS, framework, and applications, protecting devices from various security threats. Customer data is encrypted to help prevent data leakage during storage and transmission.
In addition, LG Shield helps protect applications and the OS from unauthorized access, and through a unique monitoring system, it detects intrusions and supports rapid response and recovery in the event of a security breach.
With LG Shield’s security technologies and management framework, users of LG Signage and Commercial TVs can use their products without security concerns.
In addition, LG Shield helps protect applications and the OS from unauthorized access, and through a unique monitoring system, it detects intrusions and supports rapid response and recovery in the event of a security breach.
With LG Shield’s security technologies and management framework, users of LG Signage and Commercial TVs can use their products without security concerns.
5-tiered Defense System
LG Shield is not limited to safeguarding just single layer within the product. It employs a five-tiered defense system, encompassing the services, application, platform, system (kernel) and hardware. Each layer operates independently to provide robust multi-layer protection against various threats.
Protecting Data and Privacy
LG Shield helps ensure that critical data transmitted between the device and the server, as well as user privacy-related information, is protected from external security threats.
Secure Cryptographic Algorithms
Important information and content exchanged between the content server and the device are encrypted during transmission and are decrypted only after being securely received by the intended party. Until this process is complete, content and data remain protected by advanced encryption algorithms.
Ensuring Data Integrity
LG Shield helps protect data integrity, helping to prevent data from being altered or tampered with. EKP (Enhanced Kernel Protection) safeguards the kernel from external threats, while AppProtect protects applications installed on the device from various malware threats. In addition, Secure FOTA (Firmware Over-The-Air) helps prevent firmware file tampering during firmware updates, which are often performed as part of device maintenance and servicing.
EKP (Enhanced Kernel Protection) / AppProtect
With AppProtect, applications installed on LG devices are protected from threats such as tampering, rooting, jailbreaking, and unauthorized debugging. The relevant source code is obfuscated to make analysis and modification more difficult. EKP protects the kernel, which forms the foundation of the operating system and its architecture. It can help block unauthorized attempts to modify critical kernel resources in real time. For sensitive kernel operations, execution takes place in a separate, secured, and isolated environment. Through AppProtect and EKP, users help maintain the integrity of sensitive data and source code, while supporting the stability of both system and application operations.
AppProtect-d.jpg)
AppProtect-m.jpg)
Secure FOTA (Firmware Over-The-Air)
When new firmware (FW) or metadata is updated on devices connected to the server for maintenance purposes, the integrity of the corresponding FW file can be verified. Integrity and authenticity of the firmware distributed through the server are verified within the device, and it is decrypted and updated only after it has been confirmed as valid. The Secure FOTA feature supports the security and reliability of maintenance activities performed in a wireless environment.
-d.jpg)
-m.jpg)
Real-time Monitoring
LG Shield detects and helps prevent malicious activities and policy violations occurring on the device or network through its IDPS (Intrusion Detection and Prevention System). It also continuously monitors for various potential security breaches. Furthermore, through the STMS (Security Threat Management System) solution, it analyzes security-related status information for deployed products on the server to support proactive detection and response to increasingly sophisticated threats.
IDPS
(Intrusion Detection & Prevention System)
To prevent unauthorized activities from external sources (such as telematics-based attacks, malware injection, and sniffing) and block access by malicious software, both the device and the network are monitored in real time. If any type of security threat or anomaly is detected, the relevant information is promptly reported to the main server. Monitoring data related to these activities can also be extracted as event logs and compiled into reports.
STMS
(Security Threat Monitoring and Response Solution)
Detected threats are collected and transmitted to the server, and any deactivation of security features is promptly identified. When a security threat occurs, rapid response is supported through the dashboard and alert systems (such as email and push notifications), supporting corrective actions on the device to address the issue. Real-time security status is available via the dashboard, and weekly or monthly reports can be generated to support long-term security analysis. Through IDPS and STMS, users can manage security in a systematic and efficient way.
-d.jpg)
-m.jpg)
CC EAL2 Certified
LG display devices based on the webOS platform and certified with LG Shield meet the rigorous security standards of Common Criteria (CC) certification. Products certified with LG Shield on the webOS 8.0 platform are implemented with the LG App Monitoring Security Solution, which has obtained Common Criteria (ISO/IEC 15408) EAL2 certification.
Security Management Process
A key aspect of LG Shield is that it is supported by a system that continuously manages customer information security. It goes beyond simply embedding security features into products; LG has established and maintains processes to ensure security throughout the entire product lifecycle, including design, launch, sales, and maintenance. LG continuously monitors global product security regulations, incorporates them into its internal security policies for management, and standardizes key security activities to support their consistent execution both before and after product release.
LG-SDL
Preparation 
Training on the LG-SDL process and security technologies is provided to development personnel to strengthen the security capabilities required for software development, and these capabilities are applied to product development projects.
Requirement 
Based on global security regulations and standard requirements*, LG establishes security standards for its products and carries out activities to apply them during development.
* ETSI EN 303 645, UK PSTI Act and Regulations, EU RED Delegated Act, EN 18031-1~3: EU RED, UNECE UNR. 155 CSMS, ISO/SAE 21434, NIST Cybersecurity Framework, NIST IR 8425, US Cyber Trust Mark Program
Design 
Potential threats are analyzed, and actual risks are identified and evaluated. Mitigation measures are derived and incorporated into software requirements and design.
Implementation 
To support secure implementation, industry-recognized secure coding standards are applied, along with system hardening techniques designed to defend against hacking and other malicious attacks. These measures significantly reduce potential vulnerabilities and enhance the overall security posture of the product.
Test 
Security vulnerabilities in open source used within the product are identified and remediated, and the appropriate application of secure coding practices is verified. The product is validated against defined security requirements to verify correct implementation. Potential security vulnerabilities are identified and addressed through penetration testing and fuzz testing. In this process, internally developed cybersecurity diagnostic tools are used for automated security inspections.
Release 
The outputs of security activities and identified security issues are reviewed, and final confirmation is made to verify that the product meets international security standards and the company’s internal security policies. The product release decision is made based on the review results.
Response 
After product release, security issues and incident information obtained externally are managed through a centralized channel, LG PSRT (https://lgsecurity. lge.com). Identified security issues and incidents are addressed promptly and proactively. For newly discovered vulnerabilities, ongoing security patches are provided to maintain and strengthen the security of the delivered products.
