Product Introduction
Why is the SHIELDEX File necessary?
Email attachments, file sharing services, cloud storage, etc. throughMalicious File InfluxThis is emerging as a major attack vector.
existingAntivirusIsandboxis the maliciousness of the fileDetectionin a way that,Zero-Day AttackIt is vulnerable to this variant of malware and requires continuous updates.
Approach to SHIELDEX File
SHIELDEX Fileis not a detection methodCDR(Content Disarm & Reconstruction) Extraction and Reconstruction Method Based onIt operates as.
By extracting only safe content regardless of maliciousness and reconstructing it into a new file, unknown threats can also be blocked in advance.
Processing Example
- Extension Forgery Attack: By verifying the document format, we block the infiltration of disguised malicious files where the extension does not match the actual file format.
- Macro-based attacks: Blocks malware attacks that are automatically executed when opening documents by identifying macros.
- Script-based attacks: Identifies scripts such as JavaScript, VBScript, and blocks phishing site connections and malware download attacks.
- External Link-Based Attacks: Identifies external links and blocks automatic connection attacks to malicious sites.
- Steganography-based attacks: Identifies hidden malware in images to block malware execution attacks within image files.
CDR vs Existing Security Technologies
| item | Antivirus / Sandbox | CDR |
|---|---|---|
| Operating Principle | Signature / Behavior-based Detection | Zero TrustBase Extraction and Reconstruction |
| Zero-Day Response | Detection failure possibility | Identify risk factors and extract only safe content for response. |
| Processing speed | slowness | high |
| System Load | high | low |
| Update Dependencies | Signature DB update needed | No update dependencies |
Main Features
| Features | Explanation |
|---|---|
| Zero-Day Attack Response | Reconstruct files with only safe content to block unknown potential sources of risk. |
| High-Performance Processing | Fast processing based on a high-performance demining engine (sandboxExecution process unnecessary) |
| Support for various formats | MS Office, PDF, Hancom Office, HTML, JSON, text, images, compressed files (ZIP/TAR/7Z) and other extensive format support |
| Detailed Analysis | 6-step risk visualization (Safe → Doubt → Warning → Danger → Serious →Tampering) andforensic dataprovision |
| Steganography Detection | Detection and Removal of Hidden Malware in Images |
| Flexible Policy Management | Detailed policies by file type, policies by user/group, support for policy change history management |
Application Environment
- Email Gateway: Email Attachment Neutralization
- Web Gateway: File Download Neutralization via the Web
- Disaster Recovery Environment: Sanitization during file transfer in a network-separated environment
- Cloud Storage: Cloud File Sharing Service Integration
- API Integration: Integration of various systems through REST API
Learn more
- Main Features: Complete list of provided features
- Application Scenario: Real-world application cases and scenarios
- Administrator Guide: How to Use the Web Admin Console
- API Guide: How to Integrate REST API
- Glossary: Definition of Technical Terms