Skip to main content

Introduction to SHIELD Web Products

Product Introduction​

SHIELD Web is a web security solution based on RBI (Remote Browser Isolation).

  • Protects external web services that are outdated or have vulnerabilities without directly modifying them.
  • It can be applied on the same day just by changing the DNS, and there is no need to modify the existing web service code.
  • Server-side rendering executes all web content in an isolated environment, delivering only safe screens to the user.
  • It is a security solution that effectively blocks vulnerabilities discovered through ASM (Attack Surface Management).
  • By moving away from the existing 'detection and blocking' method, it physically isolates the attacker from the web server, thereby eliminating the attack surface itself.

Core Protection Mechanism​

  • The user receives the screen through the SHIELD Web client without directly accessing the actual web server.
  • All web content (HTML, CSS, JavaScript, API calls) is executed only in the SHIELD Web isolation environment.
  • The user's browser cannot access the original source code, API structure, or parameters.
  • The actual web server only allows SHIELD Web IP through the firewall, blocking direct external access.
  • Completely hides infrastructure information such as the web server's IP, OS information, and middleware environment from external sources.

Core Features​

1) Complete Web Isolation (Remote Browser Isolation)​

  • Access the actual web server in an isolated environment and execute all content.
  • All web sessions run in independent virtual containers within the server.
  • The user's browser receives only the rendered screen (pixel stream) and cannot access the original source code or API structure.
  • Completely blocks malicious scripts or vulnerability attacks from reaching the user's browser.
  • All threat elements are executed only within an isolated environment, so they do not affect the user.

2) Attack Surface Hiding (Invisible Infrastructure)​

  • The IP address of the web server, the type of OS, and the middleware environment cannot be identified from the outside.
  • Structurally eliminate the possibility of penetration from advanced targeted attacks such as APT (Advanced Persistent Threat).
  • Implements a 'isolation-centric security' system where the attacker cannot find the target itself.

3) Web Vulnerability Protection​

Parameter Manipulation Block

  • It is not possible to check the API call history in the developer tools, so direct API calls and parameter manipulation are not possible.
  • The web server only allows access from SHIELD Web, blocking attempts to manipulate parameters from outside.

Zero-Day Vulnerability Defense

  • Even if a new vulnerability is discovered, it will only run in an isolated environment, ensuring user protection is maintained.

Response to 21 Items of Vulnerabilities in the National Intelligence Service Website

  • SQL Injection, XSS, parameter tampering, etc. can be used as compensating control measures for all items before the National Intelligence Service diagnosis.
  • We support securing a stable security rating by supplementing the inadequate configuration of aging servers in regular security assessments of public institutions.

4) WebAPI Protection​

API Structure Non-Exposure

  • Only the WebJet™ streaming protocol is displayed in the browser developer tools (F12), and the actual API structure is completely hidden.
  • You cannot check the API endpoint, parameters, and response structure in the Network tab like a regular web service.

Unauthorized Access Blocked

  • Only the SHIELD Web IP is allowed on the actual web server firewall, blocking direct API calls from the outside.
  • Unauthorized API calls through external tools such as Postman and curl are fundamentally blocked.
  • Prevents API price manipulation, privilege escalation, and data leakage attempts.

5) Server-side Rendering​

Supported Environment

  • Fully supports the latest web standards (HTML5, CSS3, ES6+) identical to Google Chrome.
  • Compatible with all modern frameworks such as React, Vue, Angular, and does not require modifications to existing web services.
  • Guarantees high-performance execution with the JavaScript V8 engine.

WebJet™ Protocol (Developed by SOFTCAMP)

  • Only high-quality screen streaming is transmitted in real-time using standard HTTPS (port 443).
  • It provides the same experience as regular web browsing with low latency and efficient bandwidth usage.
  • No additional firewall configuration is required with a direct connection between SHIELD Web and the user's browser without a relay server.
  • All user inputs such as clicks, scrolls, and typing are received by SHIELD Web and processed in real-time.

Application Method​

Step 3 Easy Setup​

Step 1: Change DNS

Existing: example.com → Customer Web Server IP  
Change: example.com → SHIELD Web Url Convert Nginx Ingress IP
  • Change the domain's A record to the SHIELD Web server

Step 2: Provide SSL/TLS Certificate

  • Registering the SSL certificate of the existing web service in SHIELD Web Nginx Ingress
  • Maintaining HTTPS Connection

Step 3: Firewall Configuration

Web server firewall rules:
   - Allow: Only SHIELD Web IP range
   - Block: All other external access

Main Application Target​

Public Institutions and Finance · Defense Industry​

  • Public institutions that must undergo regular security assessments by the National Intelligence Service
  • Financial institutions required to comply with electronic financial supervision regulations
  • Defense and military institutions exposed to advanced targeting attacks such as APT
  • Institutions operating special OS and legacy systems that are no longer patched

Aging Web Service​

  • System where source code improvement is difficult due to the termination of the contract with the outsourcing development company
  • Services that cannot be redeveloped due to budget constraints
  • Legacy technology stack (ASP, JSP, PHP, etc.) makes it difficult to onboard new developers.
  • System with insufficient technology transfer due to the departure of the person in charge

Services with a large attack surface​

  • Public services and government agency websites accessed by unspecified large numbers of people
  • Service that exposes WebAPI externally
  • Systems with vulnerabilities continuously found in regular security checks
  • Institutions Struggling with Practical Improvements After ASM Implementation

Emergency Security Response​

  • When vulnerabilities are found during security checks
  • If improvement work is expected to take time but immediate action is required

Introduction Effect​

Strengthening Security​

  • Immediate Improvement of Web Vulnerabilities
  • Blocking unauthorized access, parameter manipulation, and attempts to bypass permissions in WebAPI
  • Establishing a proactive defense system against zero-day vulnerabilities
  • Improving overall security level by minimizing attack surface
  • National Intelligence Service Web Vulnerability 21 Items Remediation Control Achievement

Cost Reduction​

  • Cost Reduction Effects in Web Redevelopment
  • No additional hardware equipment required
  • Minimizing maintenance costs such as server management and updates

Rapid Application​

  • Zero Downtime Deployment Without Service Interruption
  • Immediate protection effect occurs with just DNS changes.
  • No need to modify existing web service code

Compliance Response​

  • Compliance with the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection
  • Response to Electronic Financial Supervision Regulations in the Financial Sector
  • National Intelligence Service Regular Security Inspection and Vulnerability Diagnosis Passed
  • Various Security Certifications and Audit Preparations

Operational Convenience​

  • No separate server installation and management required
  • Flexible structure that can be expanded or contracted as needed