Customer about: Medialog, a subsidiary of LG U+, changed its name from Chollian to Medialog in 2012 and has been focusing on software development for its parent company, such as computer system development and maintenance, LG U+ supplementary service content development, and LG U+ TV content supply.
As a specialized company that currently supports the media/ICT services of MVNO (U+Frugal Mobile) and LG U+, it provides technology-based services optimized for the business environment of various customers. In providing key services within the AWS cloud infrastructure, it was important to build a fast IT environment with reliability, cost, and compliance, and combine it with customer service.
Challenge: Webshell is a script in web programming language that is a powerful hacking tool that can execute remote commands after uploading through web server vulnerabilities. It causes system damage, information leakage, and secondary damage.
Webshell attacks are difficult to detect because they can easily bypass existing security solutions through script encryption and obfuscation.
In order to properly detect and respond to this, it is necessary to use a professional security solution and to manage it through continuous monitoring.
MediaLog was providing web services in the AWS environment, and due to the nature of the service, it was necessary to introduce a security solution that could effectively detect and block web shell attacks.
SK Shieldus' Anti-Webshell solution was developed systematically and stably through years of experience by understanding the customer service environment. It was selected because it supports AWS, the customer's web service deployment environment, so that it can be introduced immediately.
In addition, SK Shieldus Managed Cloud Security Service is used as a 24x365 security control service to respond to operational and security stability and breaches.
How Medialog solved it with Anti-webshell Solution: Medialog has built an Anti-Webshell solution, a webshell detection system specialized for AWS.
Anti-Webshell can be used by customers as an AWS AMI, and it is designed to flexibly scale in/out according to the customer's web workload usage with Auto-Scaling setting.
In addition, the web shell inserted into the web server can be detected in real time, so web services can be safely provided, and by using the largest security control service in Korea provided by SK Shieldus, it is possible to analyze and respond to the best cause in case of an accident.
