PDF Policy Settings
[Policy] > [Basic Demilitarization Policy] > [PDF] Settings
The PDF tab defines policies for removing malicious elements that may be included in PDF files or safely importing them.
You can control elements such as scripts, annotations, actions, and embedded files to respond to PDF-based threats.
⚠️ The basic declassification policy setting authority is granted to [Administrator Type - Super Administrator], and
Administrator permission settings can be done in [Administrator] > [Administrator List].
Detailed Description of Settings Items
| Policy Name | Explanation |
|---|---|
| Digital Signature PDF Processing Settings | Set the handling of PDFs that contain digital signatures. Digital signatures are a feature to ensure the integrity of the document, but signed documents can also contain malicious content. |
| PDF JavaScript Removal Settings | Set whether to remove the JavaScript code included in the PDF. JavaScript is a script that runs automatically when a PDF document is opened and can trigger malicious behavior. |
| PDF Action Removal Settings | Set whether to remove action scripts and commands included in the PDF document. Actions can trigger automatic execution behaviors such as opening documents, navigating pages, and calling external links, which are considered security threats. |
| Settings for Removing Embedded Files in PDF Documents | Set whether to remove files attached (embedded) in the PDF document. Embedded files can hide malicious payloads such as executable files, so removal is recommended. |
| PDF Annotation Removal Settings | Set whether to remove annotations included in the PDF document and the metadata associated with those annotations. Annotations can lead to unintended information leakage by the document creator and can be exploited for security threats such as the insertion of malicious scripts. --- Hyperlinks are also included in annotations, and you can set them as removal exceptions by specifying 'LinkAnnotation' in the 'PDF Annotation Exception Settings'. |
| PDF Annotation Exception Settings | Specify the annotation types to exclude from removal.<br / > By preserving annotation content used for important notes, form fields, and interactive elements within the document, you can maintain the meaning and integrity of the document. --- LinkAnnotation corresponds to hyperlink connection areas, PopupAnnotation corresponds to the popup text of note annotations, and WidgetAnnotation corresponds to form field UIs such as input fields and checkboxes. Input example) PopupAnnotation;WidgetAnnotation;LinkAnnotation; |
Input Rules and Precautions
- PDF Annotation Exception Settingsis
주석 제거 설정thisONIt only applies when. - When specifying exceptions, the comment type is**Use the correct names and separate with semicolons (;)**must do.
- Digital signature documents may become invalid if the content is changed due to security characteristics, soSelect the processing method according to the purpose of the workmust do.
- JavaScript and Action elements can trigger actions without the user's consent when executing a PDF, so their removal is recommended.
Reference Note
| Terminology | Definition | Security Threats | example |
|---|---|---|---|
| Digital Signature | Electronic signature that can verify the authenticity of the document and the presence of forgery or alteration. | Malicious JavaScript or attachments included in signed PDFcan be | Hidden malicious script included in the signed contract PDF |
| PDF JavaScript | Insertable in PDF documentsscript codeto respond to user actions or perform automated tasks | When viewing the documentAutomatic Download, Accessing External SitesPossible malicious acts such as | Automatically open window when opening document, URL access |
| PDF Action | Executed according to document eventsCommand Action Trigger(e.g.: Open document, Click button, etc.) | Specific Actions When Opening a DocumentAutomatic ExecutionThus, the possibility of security threats may arise. | Open another document as soon as the document is opened, execute script |
| PDF Annotation | Additional elements for information delivery such as notes, highlights, file attachments, etc. inserted in the document. | malicious links in comments,Hidden CodeorAttached fileInsertable | Link included in the highlight, attached executable file |
| PDF Embedded File | Attached (Embedded) Files in PDF Documents | Attached file inMalicious Executable · Payload Hidingpossible | Executable files (.exe) and scripts attached to the PDF |
- This setting applies only to PDF documents. For document formats such as Word and HWP, settings must be configured in a separate tab.
- All configuration change histories can be tracked and restored in the [Policy Change History] menu.