Glossary
Product-related terms
| Terminology | Description |
|---|---|
| SHIELD Web | RBI solution for protecting external web services. It protects legacy web services from external attacks with just a DNS change, providing practical defense capabilities beyond the limitations of existing ASM. |
Security Concept Terms
| Terminology | Description |
|---|---|
| ASM (Attack Surface Management) | Attack surface management. A security approach that discovers and manages vulnerabilities in systems exposed to the outside. Existing ASM identifies and reports vulnerabilities, but SHIELD Web directly blocks them, providing substantial protection. |
| Attack Surface | All entry points through which external attackers can access the system. This includes web services, APIs, ports, etc. |
| Minimizing Attack Surface | A security strategy that reduces the attack surface by minimizing exposed entry points. SHIELD Web minimizes the attack surface by blocking access to the actual web server. |
Security Technology Terms
| Terminology | Description |
|---|---|
| RBI (Remote Browser Isolation) | Remote Browser Isolation. A security technology that executes web content on a server to isolate the user's PC from threats. |
| Server-side rendering | A method where web content is executed on the server and only the rendered screen is sent to the user. The core technology of SHIELD Web. |
| Isolated Browser | Remote browser running on the server. Isolated so that web content is not directly stored on the user's PC. |
| CDR (Content Disarm and Reconstruction) | Document Sanitization Technology. Removing malware from files and reconstructing them in a safe form (SHIELD Web Phase 2 Future Plans) |
| WebJet™ Protocol | SOFTCAMP's self-developed screen streaming protocol. Provides low latency and high-quality screen transmission using standard HTTPS only. |
Terms Related to Application
| Terminology | Description |
|---|---|
| DNS (Domain Name System) | A system that converts domain names to IP addresses. When applying SHIELD Web, change the DNS to redirect traffic to SHIELD Web. |
| A record | A record that maps a domain to an IP address in DNS. When applying SHIELD Web, change the A record to the SHIELD Web IP. |
| TTL (Time To Live) | The time that DNS records are kept in cache. The shorter the TTL, the faster DNS changes are reflected. |
| SSL/TLS Certificate | Digital certificate that verifies the identity of a website. Used for HTTPS communication encryption. |
| Wildcard Certificate | A certificate that covers multiple subdomains with a single certificate (e.g. *.example.com) |
| firewall | A security system that controls network traffic. The actual web server is configured to allow only SHIELD Web IP. |
| whitelist | Allowed IP or domain list. When applying SHIELD Web, register the SHIELD Web IP in the web server firewall whitelist. |
Web Security Terms
| Terminology | Description |
|---|---|
| Parameter Manipulation | An attack that bypasses permissions or manipulates data by arbitrarily changing parameter values during an API call. Blocked by the non-exposure of SHIELD Web's API. |
| Zero-Day Attack | Attacks using undisclosed vulnerabilities. Defense is difficult without a patch, but it can be blocked by the isolation method of SHIELD Web. |
| Session Hijacking | Attacks that steal user session information to impersonate permissions |
Network Terms
| Terminology | Description |
|---|---|
| IP address | Unique number that identifies a device on the network |
| port | A number that distinguishes applications in network communication. HTTP uses port 80, and HTTPS uses port 443. |
| Protocol | Network communication protocols. HTTP, HTTPS, WebSocket, etc. |
| HTTPS | A security protocol that applies SSL/TLS encryption to HTTP. SHIELD Web supports TLS 1.3. |
| DDoS (Distributed Denial of Service) | An attack that generates excessive traffic to a specific server using multiple systems, causing the service to become paralyzed. |
Web Technology Terms
| Terminology | Description |
|---|---|
| HTML | Markup language that defines the structure of a web page |
| HTML5 | The latest standards of HTML. Enhanced multimedia features such as video and audio. |
| JavaScript | Programming languages that add dynamic functionality to web pages |
| CSS | A language that defines the style and layout of a web page |
| CSS3 | Latest standards of CSS. Includes advanced features such as animations, transition effects, etc. |
| API (Application Programming Interface) | Interface for communication between applications. REST API, GraphQL, etc. |
| REST API | API Design Method Using HTTP Protocol |
| WebSocket | Protocol for Real-time Bidirectional Communication |
| WebGL | Technology for rendering 3D graphics in web browsers |
| Canvas | API for Drawing Graphics in HTML5 |
| AJAX | Technology for communicating with the server in an asynchronous manner |
| Cookie | Small data that a website stores in the user's browser. Used for maintaining login status, etc. |
| session | Server-side data to maintain user session state |
| cache | Memory that temporarily stores frequently used data to improve performance |
Cloud and SaaS Terms
| Terminology | Description |
|---|---|
| SaaS (Software as a Service) | A method of providing software as a service. Used via a web browser without installation. The provision method of SHIELD Web. |
| Cloud | Service that provides computing resources over the internet |
| Auto Scaling | A feature that automatically scales server resources according to traffic changes |
| Load Balancing | A technology that distributes traffic across multiple servers to balance the load. |
| High Availability (HA, High Availability) | A method to configure the system so that the service does not stop even in the event of a system failure. |
| Multi-tenancy | A structure that independently services multiple customers within a single system |
Security Terms
| Terminology | Description |
|---|---|
| Encryption | The process of transforming data using a special algorithm to protect it securely. |
| TLS (Transport Layer Security) | A protocol that encrypts network communication. The successor version of SSL. |
| TLS 1.3 | Latest version of TLS. Provides stronger security and faster speeds. |
| AES-256 | Advanced Encryption Standard using a 256-bit key. Currently one of the most secure encryption methods. |
| hash | A one-way encryption technique that converts data into a fixed-length value. |
| Integrity | Attribute that guarantees that the data has not been tampered with |
Web Service Terms
| Terminology | Description |
|---|---|
| domain | The address of the website (e.g:www.company.com) |
| Subdomain | Subdomains of the main domain (e.g., api.company.com, shop.company.com) |
| URL | Address that indicates the location of web resources |
| web server | Server that provides web pages |
| Response Code | The code that indicates the result of processing a client request by the web server (e.g., 200 Success, 404 Not Found, 500 Server Error) |
| Endpoint | Specific URL paths provided by the API (e.g., /api/users, /api/orders) |
Development Terms
| Terminology | Description |
|---|---|
| Legacy System | An old system that is difficult to maintain. It is challenging to apply the latest technology, but it is a system that must continue to be used for business purposes. |
| ActiveX | Microsoft's legacy web technology. It has many security vulnerabilities and is not recommended for use currently. Not supported in Chromium browsers. |
| Chromium (Chromium) | An open-source web browser engine developed by Google. Chrome, Edge, etc. are based on Chromium. |
| Rendering | The process of displaying web page data on the screen |
| Streaming | A method of continuously transmitting data for real-time playback |
| Frame Rate (FPS) | Frames per second. The higher, the smoother the display. |