Skip to main content

Main Features

Overview​

SHIELDEX File isCDRIdentify the risk factors of files coming in from external sources based on technology and extract and reconstruct only safe content.File Security Solutionis.
File Decontamination ProcessingfromPolicy Management, Real-time Monitoring, Detailed Analysis, Report GenerationSupports the entire process of file security up to __PH_0__.

※ Full feature list isFeature SpecificationPlease refer to it.

File Sanitization​

Existing detection-based security solutions are vulnerable to unknown threats.
SHIELDEX File identifies risk factors within the file(macro, script, identifying links, etc.) and extracting only safe content to recombine into a new file, soBlock unknown threats at the sourcedoes.
The text, images, tables, and layout of the original document are maintained according to the established policy to ensure business continuity.

FunctionExplanation
File SanitizationIdentify risk factors within the file according to policy and extract only safe content for recombination. Supports various formats such as MS Office, PDF, Hancom Office, HTML, JSON, text, images, compressed files, etc.
Vaccine InspectionScan files with antivirus before decontamination to detect known malware in advance. Strengthen security with a dual defense system combining CDR and antivirus.
Extension Forgery InspectionCompare the actual format (metadata) of the file with the extensionExtension ForgeryDetection. Blocking the influx of malicious files disguised with extensions.
Decontamination File BackupOriginal file and decontaminated fileAESStore encrypted. Used for cause analysis and reprocessing in case of security incidents.

Decontamination Policy Management​

Uniform security policies can hinder work efficiency, while flexible policies can create security vulnerabilities. The legal team primarily handles contract PDFs, the marketing team requires image files, and stricter policies are needed when exchanging files with external collaborators.
SHIELDEX File isApply policies segmented by file type and user groupThis allows for setting security levels that match the characteristics of each department's work. Through this, both security and work efficiency can be secured simultaneously, and the organization's security policies can be effectively complied with.

FunctionExplanation
File Type PoliciesMS Office (macro, OLE object, ActiveX, etc.), PDF (JavaScript, Action, etc.), Hancom Office, HTML, JSON, text, image, compressed files, etc. Detailed policy settings according to the characteristics of each format. Control the threat elements of each file type individually.
Extension Filter and Tampering PreventionSpecify extensions for decontamination processing, specify extensions to block,Extension ForgeryControl file influx through blocking, set allow/block rules according to the organization's security policy.
Individual PolicyApply different security policies for each user and group. Manage policies that are detailed according to the organizational structure, such as by department, role, or external collaborators. Provides policy change history management and restoration functionality.

Real-time Monitoring​

Detecting system failures or performance degradation in advance and monitoring the status of mitigation processing in real-time is essential for stable operation.
SHIELDEX File isCheck the status of system resources and mitigation processing at a glanceProvides a dashboard that allows for immediate response in case of issues.

FunctionExplanation
Resource MonitoringDisplays the CPU, memory, and disk usage of the server in real-time charts for an at-a-glance understanding of the system status. Detects system failures or performance degradation in advance for immediate response.
Status of Decontamination ProgressCheck the status of the ongoing demining operations (total, pending, in progress, completed) in real-time. Immediately assess the system load situation and any processing delays to utilize for capacity planning.
Summary of Decontamination Processing ResultsMonthly processing results (success/exceptions/blocks) of files that have been decontaminated and the status of risk are visualized and summarized. This allows for a quick understanding of the organization's security status and an evaluation of the effectiveness of security policies.
Blocking and Original Import StatusVisualize the number of block and original import incidents and the top 10 users to quickly understand the status of policy operations.

Analysis of Demilitarization Results​

To analyze the cause and respond to a security incident, it is essential to accurately identify which files contained what threat elements and when.
SHIELDEX File isDetailed information of all processed files and forensic datato provideTherefore, it provides the data necessary for incident response.

FunctionExplanation
Result Inquiry and SearchCheck the success status, risk level, and detailed information of all files processed by the system in a list. Search and filter based on various conditions such as date range, file name, extension, user, processing result, and risk level.
Decontamination Results DetailsCheck the request time of each file, job ID, file information (before/after size), user information, processing results, sanitization logs, risk level, detailed analysis information, and antivirus scan information. In case of an incident, accurately identify which file contained what threat element at what time.
forensic data InformationAnalyze file metadata such as creation/modification history, production tools and versions, permission settings, document format, version, and page count to accurately assess the source and risk level of the file. Utilize for security incident cause analysis.
Download Backup FileDownload the original file stored in an encrypted format and the file after decryption for use in incident cause analysis or reprocessing.

Security Statistics and Reports​

To establish security policies and optimize system operations, data-driven decision-making is necessary.
SHIELDEX File isVisualizing file influx patterns, risk distribution, and threat element detection statusBy providing this, it supports accurately understanding the organization's security status and establishing effective security policies.

FunctionExplanation
Risk StatisticsVisualize the risk level ratio from 'Safety' to 'Tampering' in a pie chart. Provide representative content types and counts for each risk level, as well as detection counts by threat factors, to understand the organization's security threat level and identify areas where security training or policy enhancement is needed.
Influx and Processing StatisticsCDRVisualize the processing result (success/exception/block) ratio, the number of incoming files by date, distribution by extension, and processing results by integrated system. Evaluate the effectiveness of security policies and identify problematic file types or integrated systems to utilize for policy improvement.
Report Generation and DownloadStatistical dataCSVDownload in the format and utilize it for creating security reports. Provide data necessary for executive reports or security audits to support security investment decision-making.

Administrator Settings​

To ensure system security and stable operation, various management functions such as administrator privilege management, access control, and audit logs are required.
SHIELDEX File isIntegrated provision of core management functions necessary for system operationTherefore, it supports ensuring both compliance with security policies and operational efficiency.

FunctionExplanation
Admin Account ManagementView, register, modify, delete administrator accounts, and toggle active/inactive status. Separate the highest administrator and linked system administrator permissions to apply the principle of least privilege. Inactive accounts are immediately denied upon login attempts.
Login Failure LimitIf the number of failed administrator login attempts exceeds the allowed limit, the account will be locked to block brute force attempts. Locking method (automatic release / permanent lock), allowed attempts, and duration settings for automatic release.
Access ControlThe web console enhances system security through IP-based access control (whitelist), while the API uses integration system unit authentication (integration system name + label or API Key).
Session Automatic LogoutAutomatically terminate the session if not used for a certain period or if the same account logs in multiple times, restricting access during the period after login.
Administrator Audit LogView audit logs for administrator actions (menu access, configuration changes, etc.) andCSVExport in the format. Used for security audits and compliance.

Learn more​