Customer about: Starting as a system implementation specialist for financial institutions, SMBs, Saltware is a SW professional company focused on solution development and IT consulting, providing business integration platform services based on EP solutions to the public sector and to all enterprises. In delivering business-integrated platform services, it was important to build a fast IT environment and combine it with customer service, along with reliability, cost, and compliance for the B2B business.
Challenge: Webshell is a Script consisted of Web Programming language. It is a powerful hacking tool that can execute remote command after uploading through vulnerabilities of the Web Server and causes secondary damage such as leakage of Web Server data and internal (personal) information.
Saltware was looking for a way to protect the WEB / WAS system from the web shell while building the system for SMB companies.
SK Shieldus has developed a web shell detection system to address these challenges. In addition, we provided control services with the solution, enabling our Saltware customers to deliver secure WEB services.
In the past, similar solutions were custom built and costly. SK Shieldus's webshell detect systems, however, are easy to implement, low cost, and scalable.
This provides an opportunity for SMB companies with limited time and resources to provide secure and uniform WEB services.
In addition, they are used SK Shieldus's Managed Cloud Security Service for security stability of operation and responding to infringement incidents.
To this end, the customer built an anti-webshell solution to protect the web contents and selected SK Shieldus Managed Cloud Security Service as the 24X365 security control service to build and operate a secure service environment.
How Saltware solved it with Anti-webshell Solution: We have built an optimal webshell detection system for web services built on AWS and have improved efficiency and functionality.
Anti-Webshell solution detects and isolates webshell inserted into web server in real time. This effectively increased the safety of web services.
If security incident occures, We'll perform a swift analysis and response. also, SK Shieldus established group response system for continuous intension of security level and management plan for security threat.
In this project, it was necessary to secure the stability of the security service while enabling casual services considering the characteristics of WEB services. In order to meet these requirements, it was important to establish a countermeasure against possible security threats while providing services.
To this end, the customer built an anti-webshell solution to protect the web contents and selected SK Shieldus Managed Cloud Security Service as the 24X365 security control service to build and operate a secure service environment.
Impacts include the following:
- Provide secure web service
- Reduced downtime of web services
- Reduced damage that can be caused by Webshell
