PDF Policy Settings
[Policy] > [Basic Demilitarization Policy] > [PDF] Settings
The PDF tab defines policies for removing malicious elements that may be included in PDF files or safely importing them.
You can control elements such as scripts, comments, and actions to respond to PDF-based threats.
⚠️ The permission to set the basic de-identification policy is granted to [Administrator Type - System Administrator], and
Administrator permission settings can be found under [Administrator Settings] > [Account and Permission Management].
Detailed Description of Settings Items
| Policy Name | Description |
|---|---|
| Digital Signature PDF Processing Settings | Set the handling of PDFs that include digital signatures. A digital signature is a feature that ensures the integrity of a document, but signed documents can also contain malicious content. |
| PDF JavaScript Removal Settings | Set whether to remove the JavaScript code included in the PDF. JavaScript is a script that automatically executes when viewing PDF documents, which can trigger malicious behavior. |
| PDF Action Removal Settings | Set whether to remove action scripts and commands included in the PDF document. Action can trigger automatic actions such as opening documents, navigating pages, and calling external links, which can be considered a security threat. |
| PDF Annotation Removal Settings | Set whether to remove annotations included in the PDF document and the metadata associated with those annotations. Comments can lead to unintended information leakage by the document author and can be exploited for security threats such as the insertion of malicious scripts. --- Hyperlinks are also included in annotations, and you can set them as exceptions for removal by specifying 'LinkAnnotation' in 'PDF Annotation Exception Settings'. |
| PDF Annotation Exception Settings | Specify the annotation types to exclude from removal.<br / > By preserving annotation content used for important notes, form fields, and interaction elements within the document, you can maintain the meaning and integrity of the document. --- LinkAnnotation is the hyperlink connection area, PopupAnnotation is the popup text of the note annotation, and WidgetAnnotation corresponds to form field UI such as input fields and checkboxes. Input Example) PopupAnnotation;WidgetAnnotation;LinkAnnotation; |
Input Rules and Precautions
- PDF Annotation Exception Settingsis
주석 제거 설정thisONIt only applies when. - When specifying exceptions, the comment type is**Use the correct names and separate with semicolons (;)**must do.
- Digital signature documents can become invalid if the content is changed due to security characteristics, soSelect a processing method according to the purpose of the workmust do.
- JavaScript and Action elements can trigger actions without the user's consent when executing a PDF, so their removal is recommended.
Reference Notes
| Terminology | Definition | Security Threats | example |
|---|---|---|---|
| Digital Signature | Electronic signature that can verify the authenticity of the document and the presence of forgery or alteration. | Malicious JavaScript or attachments included in signed PDFcan be | Hidden malicious script included in signed contract PDF |
| PDF JavaScript | Insertable into PDF documentsscript codeto respond to user actions or perform automated tasks | When viewing the documentAutomatic Download, Accessing External SitesPossible malicious acts such as | Automatically open a window when opening a document, URL access |
| PDF Action | Executed according to document eventsCommand Action Trigger(e.g.: Open document, Click button, etc.) | Specific actions upon document openingAutomatic ExecutionThus, the possibility of security threats may arise. | Open another document as soon as the document is opened, execute script |
| PDF Annotations (Annotation) | Additional elements for information delivery such as notes, highlights, and file attachments inserted in the document. | malicious links in comments,Hidden CodeorAttached fileInsertable | Link included in the highlight, attached executable file |
- This setting applies only to PDF documents. For document formats such as Word and HWP, settings must be configured in a separate tab.
- All configuration change histories can be tracked and restored in the [Policy Change History] menu.