Specification Document
※ Last updated: 2025-02-02
Attack Surface Management (ASM) Section
| item | Content |
|---|---|
| Requirement Classification | Attack Surface Management 부문 |
| Requirement Name | Implementation of Substantial Protection for ASM |
| Definition | Providing practical protection that goes beyond the existing ASM's vulnerability discovery function to directly block attacks. |
| Detailed Information | - Minimize attack surface 1) Direct access to the actual web server is blocked 2) Only SHIELD Web allows access to the web server 3) Minimize external exposure entry points - Vulnerability Exposure Prevention 1) Vulnerability Scan Prevention 2) Protection of data transmission and reception with the web server 3) API endpoint non-exposure |
Web Isolation (RBI) Section
| item | Content |
|---|---|
| Requirement Classification | Remote Browser Isolation Section |
| Requirement Name | Web Isolation for Protecting External Web Services |
| Definition | Isolate the web content of the legacy web service to block external attacks |
| Detailed Information | - Web Content Isolation 1) Execute all web content such as HTML, CSS, and JavaScript on the SHIELD Web server. 2) Using Chromium-based browser engine 3) Stream only the rendered screen to the user 4) Actual web server source code not exposed - Web Script Isolation 1) All JavaScript runs only in an isolated environment 2) Protecting User PCs from Malicious Scripts - Network Isolation 1) All traffic passes through SHIELD Web 2) API calls are only performed by SHIELD Web 3) The user's browser receives only the screen - User PC Protection 1) Protecting data such as cookies from being stored on the local PC 2) Malicious scripts cannot be executed on user PCs |
Web Vulnerability Protection Section
| item | Content |
|---|---|
| Requirement Classification | Web Vulnerability Protection Section |
| Requirement Name | Web Attack Prevention |
| Definition | Blocking Server Attacks through Vulnerability Scanning |
| Detailed Information | - Blocking exposure of web server information through vulnerability scanning 1) Preventing web server information exposure through vulnerability scanning 2) Store only in session information isolation environment - Block WebAPI attacks 1) API Structure Non-exposure 2) Unable to check API in developer tools 3) API calls only on the server side 4) Direct API call not possible |
Security Sector
| item | Content |
|---|---|
| Requirement Classification | Security Sector |
| Requirement Name | Data Protection and Encryption |
| Definition | Data Security for Transmission and Storage |
| Detailed Information | - Transmission Encryption 1) TLS 1.3 Encryption 2) Only screen data is transmitted between the user PC and the RBI section. 3) Source code non-exposure 4) API Structure Non-exposure 5) Parameter Information Non-Disclosure - Session Security 1) Independent environment per session 2) Session Timeout Setting 3) Complete deletion upon session termination 4) Data Residual Prevention - Access Control 1) SHIELD Web IP only allows access to the web server 2) Management Console Access Control 3) Audit Log Recording |
Browser Compatibility Section
| item | Content |
|---|---|
| Requirement Classification | Browser Compatibility Section |
| Requirement Name | Support for HTML5-based web standards |
| Definition | Major Browser Support and Compliance with Latest Web Standards |
| Detailed Information | - Browser Support 1) HTML5 Browser Support 2) Support for the latest web standards 3) RBI Browser Regular Version Update - Supported Web Standards 1) HTML5 2) CSS3 (including animation, transition effects) 3) JavaScript ES6+ (ECMAScript 2015 and above) 4) WebSocket (Real-time Bi-directional Communication) 5) WebGL (3D graphic rendering) 6) Canvas API 7) AJAX, Fetch API |
Streaming Sector
| item | Content |
|---|---|
| Requirement Classification | Streaming Sector |
| Requirement Name | WebJet™ Protocol-Based Screen Streaming |
| Definition | SOFTCAMP Custom Development Protocol for Low Latency High-Quality Screen Transmission |
| Detailed Information | - Protocol 1) Use standard HTTPS (port 443) 2) Additional firewall configuration not required 3) Direct transmission without a relay server - Performance 1) Screen transmission delay: < 50ms 2) Frame rate: 30~60 FPS 3) Optimize bandwidth by sending only the changed areas - Image Quality 1) Provides high-quality display 2) Adaptive Quality Adjustment 3) Automatic optimization based on network status |