Scan file uploads have data security compliance requirements that require scanning file uploads for malicious code. Implementing these security measures reduces the risk of legal issues and increases user confidence in your site.
To help you secure your site against these threats, we provide the Secure File Scan feature that checks incoming file upload field attachments on submitted forms and workflows for viruses and malware. You can enable this on the Admin Dashboard > Security page. Any flagged files are notified to the content owner (form or workflow) for follow-up.
How Frequent Scanning of File Uploads Can Save Your System
Restricting the types of files that can be uploaded to your website is an important first step. For example, by limiting the allowed extension of an uploaded file, you can prevent attackers from using exploited file formats to take over your web servers. By also validating the MIME-type, you can add a layer of protection by checking that the file actually is what it claims to be.
The most effective way to protect your site against malware is to scan all uploaded files on the edge, before they get to your web servers, applications – and users. Akamai Malware Protection does just that by detecting and blocking dangerous files at the network edge, before they reach your application systems or users.
With an extremely fast, in-memory architecture and sub-second response times, the virus scanning API delivers 360-degree content protection against a wide range of file upload threats at once – including executables, password protected files, macros, XML external entities, JSON insecure deserialization, and OLE embedding. Using an extensive cloud-updated list of more than 17 million virus and malware signatures, this powerful security solution detects threats before they can cause damage and prevent attacks from spreading.
…