Glossary
Product-related terms
| Terminology | Description |
|---|---|
| SHIELD Gate | Web security solution based on Remote Browser Isolation (RBI) technology. Protects users' web browsing sessions by hosting them on a server to safeguard against online threats. |
| SHIELD Viewer | A dedicated viewer that provides a safe preview when downloading files. Supports read-only document viewing functionality. |
| SHIELD Drive | The file storage feature of SHIELD Gate. A storage system that safely keeps files downloaded in an isolated environment. |
| Edge server | Server supporting the establishment of local storage for internal protection. Key elements of a file storage-based architecture. |
Security Technology Terms
| Terminology | Description |
|---|---|
| RBI (Remote Browser Isolation) | Remote browser isolation. A security technology that executes web browsing sessions on a remote server to isolate the local system from threats. |
| CDR (Content Disarm and Reconstruction) | Document sanitization technology. Removing malware or threats from files and reconstructing them into a safe form for delivery. |
| Isolated Browser | Remote browser running on the server. Provides an isolated environment to prevent web content from being directly stored on the user's local PC. |
| Screen Marking | A feature that displays user identification information on the screen in the form of a watermark to ensure traceability in case of information leakage. |
Access and Authentication Terms
| Terminology | Description |
|---|---|
| SSO (Single Sign-On) | Single Sign-On. An authentication method that allows access to multiple systems with a single login. Used in conjunction with internal accounts. |
| AD (Active Directory) | Microsoft's directory service. Used for managing user accounts and permissions, and can be integrated with SHIELD Gate. |
| OTP (One-Time Password) | One-time password. A time-based or event-based password used for additional security authentication. |
| RBAC (Role-Based Access Control) | Role-based access control. A method of granting system access permissions based on the user's role. |
| WOL (Wake On LAN) | Technology to remotely power on a PC that is turned off via the network. Used for desktop remote access. |
Policy-related terms
| Terminology | Description |
|---|---|
| Conditional Policy | Access control policies that are applied differently based on specific conditions such as the user's location, time, device, group, etc. |
| Priority | A value that determines the order of policy application. The lower the number, the earlier it is applied, and in case of a conflict, the more restrictive policy is applied last. |
| Web Category | A group that classifies URLs according to their nature (e.g., shopping, social media, finance, etc.). You can set access allow/block policies by category. |
| wildcard | Special character (*) used for URL pattern matching. Used before the domain to match all URLs including subdomains. |
| Regular Expression (Regex) | Expression to find strings of a specific pattern. Used for detecting sensitive information (resident registration number, account number, etc.) |
| Expiration Date | Start and expiration date of the policy. It can be set to activate the policy only during the specified period. |
Network Terms
| Terminology | Description |
|---|---|
| PAC (Proxy Auto-Config) | Proxy auto-configuration file. A script that automatically determines which proxy to use when the browser accesses a specific URL. |
| DNS (Domain Name System) | A system that converts domain names to IP addresses. In the RBI environment, DNS queries are performed on an isolated server. |
| Protocol | Network communication protocols. HTTP and HTTPS are separately distinguished for policy application. |
| VDI (Virtual Desktop Infrastructure) | Virtual Desktop Infrastructure. A technology that provides virtual desktops from a server. |
File-related terms
| Terminology | Description |
|---|---|
| extension | The suffix after the filename that indicates the file format (e.g., .pdf, .xlsx, .docx). Upload/download control is possible by extension. |
| clipboard | Temporary storage area used for copy/paste functionality. Clipboard usage between PC and remote browser can be controlled by policy. |
| Isolated Storage | Isolated storage space where downloaded files are saved. They are stored in designated storage instead of being saved directly on the local PC. |
| Trash bin | A space where deleted files are temporarily stored. Automatically deleted after a certain period (default 30 days) and can be restored before that. |
| Encryption | The process of converting files using a special algorithm to protect them securely. Automatic encryption can be processed upon upload. |
User Interface Terms
| Terminology | Description |
|---|---|
| app | Icon or shortcut to access the business system (ERP, groupware, etc.) registered by the administrator |
| URL input field (address bar) | An input field where users can directly enter a web address to access the site. |
| GNB (Global Navigation Bar) | Global navigation bar. A top menu that displays a list of recently accessed apps/URLs and supports quick access. |
| Top Bar | Menu and control area at the top of the screen. Supports full screen view through hide/show functionality. |
| Lock Screen | A guide page displayed when access is blocked by policy. Customizable |
Collaboration and Integration Terms
| Terminology | Description |
|---|---|
| M365 (Microsoft 365) | Microsoft's cloud-based productivity platform. Includes Teams, Office365, Word, PowerPoint, etc. |
| Teams | Microsoft's collaboration tool. Supports viewing, uploading, and editing files within the Teams app at SHIELD Gate. |
| Collaborative Editing | A feature that allows multiple users to edit a single document simultaneously. Supported by MS365, Google Docs, etc. |
| Google Docs | Google's cloud-based document editing tool. Provides real-time collaboration features. |
| Hancom Web | Hancom's web-based document editing solution. hwp/hwpx files can be viewed and edited online. |
| NAS (Network Attached Storage) | Network-connected storage device. Can be linked to external storage. |
| OneDrive | Microsoft's cloud storage service |
| Google Drive | Google's Cloud Storage Service |
Remote Access Terms
| Terminology | Description |
|---|---|
| SSH (Secure Shell) | Network protocols for secure remote access. Command execution and file transfer support |
| SFTP (SSH File Transfer Protocol) | Secure File Transfer Protocol Based on SSH |
| Terminal | A text-based interface that allows you to control the system by entering commands. |
| Remote Console | Console interface that allows remote access and management of web servers, etc. |
Log and Monitoring Terms
| Terminology | Description |
|---|---|
| log | Data that records system and user activities. Includes history of login/logout, file downloads, policy modifications, etc. |
| session | The duration of access from the time the user logs in until they log out or are automatically terminated. |
| Timeout | A feature that automatically ends the session when there is no user activity for a certain period of time. |
| Dashboard | A management screen that visually displays key indicators and statistics. Monitor access status, website categories, and more. |
| archive | A file stored in compressed format for long-term log retention |
| Integrity Verification | The process of verifying that log data has not been tampered with |
Technical Terms
| Terminology | Description |
|---|---|
| WebGL | JavaScript API for Rendering 3D Graphics in Web Browsers |
| cache | A memory area that temporarily stores frequently used data to improve performance |
| Cookie | A small data file that a website stores in the user's browser. Used for maintaining login status, etc. |
| Session Information | Server-side data to maintain user connection status |
| Endpoint Broker | Technology that supports web applications requiring internal communication within a PC (such as banking security programs, etc.) |
Management Terms
| Terminology | Description |
|---|---|
| License | Product usage permissions. Can be assigned automatically or manually depending on the number of users. |
| Inbound Provisioning | Function to automatically synchronize user information from external systems (Microsoft 365, SCI Server, etc.) |
| scheduling | A feature that schedules a specific task to run automatically at a designated time. |
| Policy Group | A bundle of users subject to the same policy. Create and manage groups according to the organizational structure. |
| CSV | Comma-separated values format file. Used for bulk user registration. |
| Activation/Deactivation | Availability status of the user account. Access to the service is not possible when deactivated. |