[nibbleshifter]

10 years ago for work we assessed a similar client side software solution (a "secure browsing" pile of ActiveX and C++) for protecting banking sites users.

Absolute steaming garbage.

Its "anti keylogging" functionality could be bypassed trivially, as could its various screen hijacking tricks designed to defeat some methods used by the banking trojans that were common at the time.

I see that snake oil industry lives on in Korea :/

Very excited to see the results of OP's work (the disclosures).