Re: [Web Security] File Upload Virus Scanning

Great suggestions by Robert.

I could only add one thing, if you are looking for a antivirus solution
which can start scanning files as soon as they get uploaded, or probably
want a multiscanner you could look at Metascan (commercial -
http://www.opswat.com/products/metascan/metascan), which gives API access to
most antivirus solutions out there.

Thanks,
Atul Agarwal
Secfence Technologies


On Fri, Jul 9, 2010 at 11:43 PM, 0x4150 <[email protected]> wrote:

> All,
>
> I am reviewing Java EE web application which allows uploads of various
> file types, stores them in a directory, and then offers the same files
> to other users for download. The files could be images (jpg, gif,
> png), documents (doc, docx, xls, pdf), or text files(txt, csv).
>
> My question is regarding virus scanning of these uploaded files. With
> vulnerabilities being reported in formats like PDF, I would like to
> protect the users and infrastructure as much as possible.
>
> Are there any best practices for this?
>
> What products (commercial or free) should I evaluate for this process?
>
> Thanks in advance for any insight!
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL
> certificate.  We look at how SSL works, how it benefits your company and how
> your customers can tell if a site is secure. You will find out how to test,
> purchase, install and use a thawte Digital Certificate on your Apache web
> server. Throughout, best practices for set-up are highlighted to help you
> ensure efficient ongoing management of your encryption keys and digital
> certificates.
>
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>
>