Function Specification
※ Last updated: 2025-02-02
This document is the specification for the SHIELD Web (RBI for external web service protection) functionality.
| Major Category | Mid-category | Subcategory | Detailed Description |
|---|---|---|---|
| Attack Surface Management | ASM Enhancement | Minimizing Attack Surface | Minimize external exposure entry points by blocking direct access to the actual web server. |
| Providing Substantial Protection | Beyond the existing ASM vulnerability detection function, directly blocking attacks. | ||
| Immediate protection effect | Immediate protection provided even before vulnerability improvement | ||
| Isolated Access | Web Access | Isolated Browser Access | Hosting a web browsing session on the server to protect legacy web services from external attacks |
| DNS-based application | Change the existing web service domain DNS to SHIELD Web and apply. | ||
| Server-side rendering | Run all web content on the server and send only the screen to the user. | ||
| Chromium-based | Support for the latest web standards with the Google Chromium browser engine | ||
| Front Protection | Entry Point Control | Initial Entry Point | All external access is first received and processed by SHIELD Web. |
| Firewall Integration | The actual web server is configured to allow only SHIELD Web IP. | ||
| Direct Access Blocked | Complete blocking of direct access to the web server from the outside. | ||
| Browser Features | Basic Features | URL input field | You can navigate to pages by entering the URL in the top bar. |
| Top Bar Control | Control the top bar with the expand/collapse feature | ||
| Right-click menu | Right-click context menu item support | ||
| Back/Forward | Browser Default Navigation Features | ||
| Refresh | Page Refresh Function | ||
| Shortcut keys | Zoom In/Out | Ctrl + +, -Zoom in/out with shortcut keys | |
| Text Search | Ctrl + FSearch text within the page using a shortcut | ||
| new tab | Ctrl + TOpen a new tab with a shortcut | ||
| Close Tab | Ctrl + WClose current tab with shortcut | ||
| Web Standards | HTML5 Support | HTML5 Perfect Support | |
| CSS3 Support | CSS3 Styles, Animation, Transition Effects Support | ||
| JavaScript Support | JavaScript ES6+ (ECMAScript 2015 and above) normal execution | ||
| WebSocket Support | Support for real-time bidirectional communication based on WebSocket | ||
| WebGL Support | WebGL-based 3D rendering support | ||
| Canvas Support | Canvas API Normal Operation | ||
| AJAX Support | Support for XMLHttpRequest and Fetch API | ||
| Security Features | Blocking Vulnerabilities | Vulnerability Diagnosis Blocking | Blocking Vulnerability Exposure through Vulnerability Scanning on Web Servers Remotely |
| API Protection | API Structure Non-Exposure | Unable to check API in developer tools | |
| Direct Call Blocking | API endpoint can only be called by SHIELD Web | ||
| Screen Stream Transmission | Transmit only the screen to prevent API information exposure | ||
| Firewall Integration | The web server only allows SHIELD Web IP. | ||
| Streaming | WebJet™ | Based on HTTPS | Use only standard HTTPS (port 443) |
| Low Latency Transmission | Screen transmission delay < 50ms | ||
| High-quality screen | 30~60 FPS frame rate | ||
| Bandwidth Optimization | Send only the changed areas for efficient bandwidth usage | ||
| Direct Transmission | Direct Streaming Without a Relay Server | ||
| Session Management | Isolation Environment | Independent Session | Providing independent environments by user/session |
| Session Initialization | Complete reset upon session termination | ||
| Data Residual Prevention | Delete all data including cookies and cache | ||
| DNS-based application | Easy Application | DNS Change | Change the domain A record to SHIELD Web IP |
| Certificate Registration | Using Customer Provided SSL/TLS Certificates | ||
| Certificate Management | Expiration Notification (30 days, 7 days before) | ||
| Wildcard Support | Multiple subdomains available | ||
| scalability | Auto Scaling | Automatic Scaling During Traffic Increase | |
| Load Balancing | Distributed processing of multiple instances | ||
| Automatic Switching | Automatic Exclusion of Fault Instances | ||
| Multi-tenancy | Domain-specific isolation | Providing domain-specific independent environments | |
| Data Isolation | Complete data separation between customers | ||
| Resource Isolation | Independent Resource Allocation by Customer | ||
| Security | Encryption | TLS 1.3 | Latest Transport Layer Encryption |
| Screen Encryption | Encrypt and transmit only screen data | ||
| Source Code Non-Disclosure | Do not send web source code |