비즈니스 문서로 위장한 악성코드 대응 시스템 설계 및 구현 방안

초록

With the rapid spread of COVID-19 worldwide since 2019, the corporate work environment has shifted from office work to telecommuting and non-face-to-face work. As a result, work using documents and e-mails increased, and as a result, the inflow of malicious codes disguised as documents increased rapidly. In the past, there were many attacks using executable files, but recently, it has changed to a form of inserting malicious macros into documents. A zero-day attack that exploits the function of a normal document like this blurs the boundary between a malicious file and a normal file, and bypasses antivirus and sandbox. In order to protect against such attacks, the zero-trust paradigm, which verifies and trusts all documents, is attracting attention. This study introduces content malware detoxification (CDR) technology, which is a security technology that best implements a zero-trust perspective in order to respond to business document spoofing attacks. And how to effectively configure CDR in various environments (on-premises, SaaS) will be introduced.

키워드