Customer about:
Since its establishment in 1997, Nuri Media has been conducting business with the goal of becoming a knowledge content specialist. Currently, as a company operating a competitive academic information platform that can be said to be the number one in Korea, it is servicing DBpia, an integrated academic information service, and KRpia, a Korean studies knowledge content service. Many institutions that make up the academic ecosystem, such as about 320 domestic four-year universities and research institutions, 180 global universities and research institutions, 530 companies and public institutions, and 2640 academic publishing institutions subscribe to DBpia and There is. In providing knowledge content services, it was important to build a fast IT environment with reliability, cost and compliance, and combine it with customer service.

Challenge:
Webshell is a script in web programming language that is a powerful hacking tool that can execute remote commands after uploading through web server vulnerabilities. It causes system damage, information leakage, and secondary damage. Webshell attacks are difficult to detect because it is easy to bypass existing security solutions through script encryption and obfuscation. In order to properly detect and respond to this, it is necessary to use a professional security solution and to manage it through continuous monitoring. While migrating the computer system to AWS, Nurimedia considered introducing a security solution that can protect the WEB/WAS system from Webshell, and adopted SK Shieldus' Anti-Webshell solution. SK Shieldus develops and distributes its own Anti-Webshell solution and supports the AWS environment. Because it is easy to implement with an agent installation type, low cost, and scalable, it is quick and easy to introduce a security solution when migrating to AWS infrastructure. In addition, SK Shieldus Managed Cloud Security Service is used as a 24x365 security control service to respond to operational and security stability and breaches.

How Nuri Media solved it with Anti-webshell Solution:
In order to provide web services in the AWS environment, it was necessary to secure the safety of security services. In order to meet the requirements, it was important to establish a collective response system and a security risk management plan to continuously strengthen the security level for rapid analysis and response in the event of a security incident. To this end, the customer selected SK Shieldus Managed Cloud Security Service as the 24x365 security control service to build an AWS-specific Anti-Webshell solution and operate a safe service environment. The Anti-Webshell solution allows customers to use AWS AMIs and is designed to enable auto-scaling settings, allowing flexible scale in/out according to the customer's web workload usage so that it can be used in the right place. In addition, Anti-Webshell was able to effectively increase the safety of AWS-based web services by detecting and isolating the web shell inserted into the web server in real time.

The impact of security solutions and control services is as follows.
- Provide secure web service
- Reduced downtime for web services
- Reduced damage caused by Webshell