Skip to main content

Function Specification

※ Last updated: 2026-03-12
The contents of this document may change without prior notice due to product updates.


RFP Notation Standards

NotationmeaningDescription
RequiredCommon Evaluation CriteriaCommonly Required Features in File Sanitization (CDR) Project RFP
readerDifferentiation ItemsUnique features of SHIELDEX File provide an advantage over competitors —Recommendation to Add Evaluation Criteria to the RFP
SelectionAdditional ItemsFeatures proposed optionally based on customer requirements

Major CategoryMid-categorySubcategoryDetailed DescriptionRFP notation
DecontaminationDecontamination ProcessingDecontamination Method (CDR)Instead of detecting the maliciousness of a file, it selectively identifies document elements to reconstruct the file.CDRProcessing method. Does not rely on the signature.Zero-Day AttackBlock unknown threats includingreader
MS Office Document SanitizationRemove risk factors (macros, OLE objects, DDE, ActiveX, hyperlinks, etc.) from MS Office documents and extract only safe content for recombination.Required
PDF Document SanitizationRemove risk factors in PDF documents (JavaScript, Actions, Annotations, Hyperlinks, etc.) and extract only safe content for recombination.Required
Hancom Office Document SanitizationRemove risk factors (objects, hyperlinks, scripts, etc.) from Hancom Office documents and extract only safe content for recombination.Required
HTML SanitizationRemove risk elements (scripts, web beacons, hyperlinks, etc.) from the HTML document and extract only safe content for recombination.Required
JSON DeserializationRemove risk factors in JSON data (duplicate keys, executable links, risky keys, operators, etc.)Required
Image File SanitizationImage file sanitization andSteganographyDetection and RemovalRequired
Decompressing the compressed fileProcess individual files inside compressed files (including multiple compressed files) for harmlessness.Required
File VerificationFile Format IdentificationIdentify document formats based on content rather than file names or extensions, and perform sanitization processing that complies with the identified format.reader
Extension ValidationCheck the consistency between the identified file format and extension to detect extension forgery.Required
Vaccine InspectionScan the file with antivirus before decontamination to detect known malware.Selection
File BackupBackup of the original fileEncrypt the original file before decontamination processing.Required
Decontamination Completed File BackupStore the file that has completed declassification processing by encrypting it.Required
DRM IntegrationDecontamination PreprocessingDecryption of DRM files before sanitizationreader
Decontamination Post-TreatmentDRM encryption after demilitarization processing is completereader
Operation Status ManagementSystem StatusResource MonitoringDisplay the CPU, memory, and disk usage of the server in real-time chartsRequired
Major Service StatusDisplays the execution status and integrity check results of key services such as the admin web console, decontamination interface, and decontamination service.Selection
Abnormal Symptoms StatusBlocking and Original Import StatusView the trend of the number of files blocked or imported as originals according to policyRequired
Blocked·Original Import Users TOP 10Display the top 10 users with frequent block or original import occurrencesRequired
Status of DecontaminationStatus of DemilitarizationCheck the status of the ongoing demining operations (total, pending, in progress, completed) in real time.Required
Summary of Decontamination Treatment ResultsMonthly processing results (success/exceptions/blocking) and risk status visualized and summarizedSelection
Decontamination Result ManagementResult InquiryView Result ListCheck the list of decontamination results, risk levels, and detailed information for all processed files.Required
Search and FilterSearch and filter by various conditions such as date range, file name, extension, task ID, user, integration system, processing result, and risk level.Required
Exporting CSVList of declassification results being queriedCSVDownload in formatRequired
Download Backup FileDownload the original file stored in encrypted form and the file that has been successfully decrypted.Required
Detailed Information InquiryResult DetailsCheck detailed analysis information such as request information for each file, file information (before/after size), user information, processing results, and risk level.Required
Time Required TimelineDisplay the decontamination time required step by step (request → queue → start → complete) in a timeline in seconds.Selection
Work LogOverall processing flow timeline and system response/engine module informationJSONCheck in the format and utilize for technical analysis and debugging.Selection
Forensic DataAnalyze metadata such as creation/modification history, production tools and versions, permission settings, document format and page count to identify the source and risk level of the file.Selection
Compressed File DetailsCheck the results of harmlessness for each sub-file inside compressed files such as ZIP, TAR, and 7Z in detail.Required
Decontamination Policy ManagementCommon PolicyFile Import Method SettingsSelect the file import method: 'Decontamination Processing' / 'Original Import' / 'Recording Mode'. In recording mode, decontamination processing and results are recorded according to policy, but the import is carried out with the original file.Required
Setting the Decontamination Treatment StrengthSet the decontamination processing level. 'Maximum Security' identifies all risk factors and extracts only safe content, while 'Maximum Integrity' selects safe content while maintaining the original structure as much as possible.Required
Harmless Extension FilterSpecify the file extensions allowed for decontamination processingRequired
Harmless Block Extension FilterSpecify the extensions that block the import itself, regardless of the decontamination process.Required
Setting Size Limits for Decontamination ProcessingSet the maximum size of files that can be processed for decontamination.Required
Blocking settings when decontamination processing size exceedsSet whether to block files that exceed the specified size limit or to import them as is.Required
Password Protected Document Processing SettingsSet whether to block password-protected document files or import them as isRequired
Password Protected Compressed File Handling SettingsSet whether to block password-protected compressed files or import them as isRequired
Encryption File Processing SettingsSet whether to block files encrypted with DRM or to import them as is.Required
Format Identification Unavailable File Processing SettingsSet whether to block files that cannot be analyzed due to file corruption or unknown encryption, or to import them as they are.Required
Block unsupported file extensions settingSet the handling method for unsupported file extensions in the system (block / import original / log mode)Required
Extension Tampering Prevention SettingsThe actual format of the file does not match the extension.Extension ForgerySet the file processing method (block / original import / log mode)Required
File Path Length Exceed Block SettingSet whether to block or import as is if the file path length exceeds the system's allowed range.Required
Exception PolicyForced Import Settings for Specific ExtensionsFiles with the specified extension are imported as is without any sanitization.Required
Blocked Exception Settings for Unsupported ExtensionsWhen blocking unsupported file extensions, specify the extensions that are allowed as exceptions for importing the original.Required
Exception settings for blocking extension forgeryWhen blocking extension forgery, specify the extensions that allow the import of the original as an exception.Required
Unspecified Extension File Import SettingsSet whether to block files without extensions or to import them as isRequired
Original Import Settings When Threat Elements Are Not DetectedSet whether to import files that do not contain threat elements (macros, scripts, etc.) as is or to sanitize them.Required
Original Import Settings on TimeoutSet whether to import as is or block when the decontamination processing time exceeds the set standard.Required
Setting Timeout CriteriaSet the decontamination operation time limit in minutesRequired
Import settings for the original when a decontamination error occursSet the handling method (block / import original / log mode) when a system error occurs during the decontamination process.Required
MS Office PolicyObject (OLE) Deletion Settings in DocumentInserted in MS Office documentsOLESet whether to remove objects (other documents, executable files, etc.)Required
Object retention settings within the documentSpecify the object to keep as an exception when deleting the OLE objectRequired
Macro Processing Settings in the DocumentIn MS Office documentsVBA macroSet whether to removeRequired
Remove DDEAUTO setting in the documentAllows automatic data exchange between documentsDDESet whether to remove the featureRequired
Remove ActiveX Control Settings in DocumentEnabling interaction in the documentActiveXSet whether to remove the controlRequired
Setting ActiveX Content to be Maintained in the DocumentSpecify ActiveX content to retain as an exception when removing ActiveX controlsRequired
Blocking settings for documents prior to MS Office 97Set the blocking of files from MS Office versions prior to 97 that do not meet modern security standardsRequired
Remove OLE External Link Settings in DocumentSet whether to remove OLE external links that connect to external files or web addresses in the document.Required
Remove hyperlink settings in the documentConnecting to external files, web addresses, etc. within the documenthyperlinkSet whether to removeRequired
PDF PolicyDigital Signature PDF Processing SettingsSet whether to import the PDF document with the digital signature as is or to process it for sanitization.Required
PDF JavaScript Removal SettingsSet whether to remove JavaScript that can trigger the execution of malicious code in PDF documents.Required
PDF Action Removal SettingsSet whether to remove the Action that triggers a specific task in the PDF document.Required
PDF Annotation Removal SettingsSet whether to remove annotations (notes, highlights, etc.) that may contain malicious code or links in PDF documents.Required
PDF Annotation Exception SettingsSpecify the annotation types to keep as exceptions when removing PDF annotations.Required
Hancom Office PolicyRemoving Objects in Hancom Office DocumentsSet whether to remove OLE objects inserted in Hancom Office documentsRequired
Removing Hyperlink Settings in Hancom Office DocumentSet whether to remove hyperlinks in Hancom Office documentsRequired
Hancom Office Document Script Removal SettingsSet whether to remove scripts that control or automate the operation of Hancom Office documents.Required
Setting Object Retention in Hancom Office DocumentSpecify the object to keep as an exception when removing the OLE object.Required
Hancom Office Distribution Document Blocking SettingsSet whether to block the Hancom Office file created as 'Deployment Document' or to import it as is.Required
Blocking Non-Standard MS Office File Creation in Hancom OfficeSet whether to block non-standard MS Office files created in Hancom Office or to import them as is.Required
HTML PolicyHTML script removal settingsSet whether to remove scripts that perform dynamic functions within the web pageRequired
HTML Web Beacon Removal SettingsSet whether to remove web beacons that track user behavior on the web pageRequired
HTML hyperlink removal settingsSet whether to remove hyperlinks that connect to external files, web pages, etc. within the web page.Required
JSON PolicySetting to Block Duplicate Keys in JSONJSONSet block status if duplicate keys are included in the dataRequired
Setting Block for Specified Executable LinksJSONBlock the specified executable links in the data (e.g., javascript, powershell, etc.)Required
Blocking settings for specified built-in file formats (MIME)JSONThe specified built-in file format in the data (MIME typeto blockRequired
Setting Block for Specified Risk KeysJSONdesignated risk key in the data (e.g.:proto, blocking constructors, etc.Required
Setting Specified Operator BlockageJSONBlock the specified operators in the data (e.g., $where, $eval, etc.)Required
Compression File PolicyLimit on the number of items in a compressed fileSet the upper limit on the number of files that can be included in a compressed file.Required
Compression File Subdirectory Depth LimitSet the maximum depth of nested compression in the compressed fileRequired
Image File PolicyImage Processing Intensity SettingsSet the processing intensity of the image file. 'Maximum Security' isSteganographyRemove up to, 'maximum consistency' preserves the original quality as much as possible.Required
Encryption PolicyOriginal File Encryption SettingsSet whether to perform encryption on the original fileRequired
Decontamination File Encryption SettingsSet whether to perform encryption on the completed decontamination file.Required
Integration System Policy ManagementIntegration System ManagementRegister the external system to issue an API Key, and set the default de-identification policy to be applied to that system.Required
Setting Policy Expiration DateSpecify the validity period for each policy item, automatically switching to the default decommissioning policy after expiration.Selection
Individual Policy ManagementMember ManagementManage individual policy targets by adding or removing users or groups as policy subjects.Required
Individual Policy ManagementCreate individual policies to apply different policies for users or groups, and delete unnecessary policies.Required
Setting Policy Expiration DateSpecify expiration dates for individual policy items so that the individual policies no longer apply after expiration.Selection
reportSystem Performance StatisticsResource Utilization SummarySet the query unit (10 minutes/1 hour/1 day) and period to summarize the average values of CPU, memory, and disk usage.Required
Performance Summary ChartVisualizing CPU, Memory, Disk, and Network as graphs over time intervalsRequired
Network Transmission SummaryDisplay the total network reception and transmission amount (MB) during the query period.Selection
Visualization DownloadCharts and data in SVG, PNG,CSVDownload in formatSelection
Influx and Processing StatisticsCDR Result DistributionCDRDisplay the processing result (success/exception/block) ratio as a pie chart and summary list.Required
Periodical Inflow StatisticsVisualizing the number of incoming files by date in a bar chartRequired
Traffic Statistics by ExtensionDisplay the distribution of incoming traffic by file extension in a bar graph.Selection
Statistics by Integration SystemProvision of the number of inflows, imports, and blocks by linked system and reasons for blocking (encrypted files, unsupported extensions, tampering, etc.) in charts and tables.Selection
Content Risk StatisticsRisk Distribution by GradeVisualize the risk ratio from 'Safety' to 'Tampering' in a pie chart, and display the representative content types and counts for each grade.Required
Threat Element Inflow StatisticsDisplay the number of detections by threat factor in a bar graph and data tableSelection
Log ManagementPolicy Change HistoryChange History InquiryView the policy change history as a list, and check detailed information such as the previous/changed policy values and reasons for the changes for each record.Required
Restoring HistoryRestore the changed policy to its previous state and enter the reason for restoration to record the restoration history.Selection
Administrator Audit LogAudit Log InquiryView audit logs for administrator actions (menu access, configuration changes, etc.) in chronological order, and filter by period, type, and search terms to check detailed information.Required
Exporting CSVQuerying and Filtering Audit LogsCSVDownload in formatSelection
API Request LogAPI Request Log ViewView the request logs of the deactivation API of the integration system in chronological order, and filter by integration system, request results, etc.Selection
Administrator SettingsAccount and Permission ManagementAdmin Account ManagementView, register, modify, delete, and change the password of the administrator account. Access permissions are distinguished according to the administrator type (system/channel).Required
Web Console Access Control Management (IP)IP-based Access ControlSet the access control mode of the administrator web console (Allow All / Whitelist) and specify the allowedIPv4Manage AddressRequired
Data Organization Schedule ManagementSetting Up DB Data Cleanup ScheduleSet the activation status of the DB table cleanup schedule, execution frequency, and retention period by table.Selection
View DB Data Cleanup ResultsCheck the consolidation execution date, data size before and after consolidation, and the number of records.Selection
File Data Organization Schedule SettingSet the activation status of the file data organization schedule, execution frequency/day/time, and retention period by path.Selection
File Data Organization Result ViewCheck the cleanup execution date, storage capacity before and after cleanup, and the number of files.Selection
Integrity Check ManagementIntegrity Check SettingsSet the activation status of integrity checks (service status checks) and the automatic check repetition cycle.Selection
Manual Inspection ExecutionPerform immediate integrity checkSelection
Inspection History InquiryDisplay the inspection date, method, number of subjects, success/error count as a list and check detailed information such as service status and integrity status for each history.Selection
Server ManagementServer Information RetrievalView the server list (ID, server name, representative IP:Port, etc.) and detailed information for each server such as IP, MAC address, registration/modification date, etc.Selection
Service ManagementService InquiryCheck the list of installed service modules and detailed information such as the name, version, running status, port, memory usage, etc. of each service.Selection
Service RestartRestart the selected service (stop and restart if it is running)Selection
Configuration File ManagementView and manage service configuration files and register patch filesSelection
Control History InquiryCheck service control operation records (date, time, service name, administrator ID, reason for change, etc.) in list and detail view.Selection