Files can carry malware and exploits that can infect applications, spread through the organization, and cause significant damage. Embedded antivirus scanning for file uploads can detect and block malware at the point of entry to cloud storage, mitigate attacks in progress and in the future, and prevent the propagation of files within the organization or through content distribution channels. Scan files to block malware uploads can also support compliance requirements in regulated industries, help maintain business continuity, and build trust with customers and stakeholders.
Secure User-Generated Content
Scanning files uploaded to a web application using a software development kit (SDK) implemented into the app demonstrates an organisation’s commitment to security controls, and can minimise the risk of infection, ransomware, botnet, malware, or other attacks that could start with a simple file upload. This approach can be enhanced with additional security layers, such as a WAF, to ensure that uploaded files do not reach the target of an attack and can’t be executed or used for further malicious purposes.
On-upload and on-demand scanning provide layered defences against malware at the point of entry to cloud storage, ensuring that both existing archived data and new uploads are protected. Both modes can be deployed in combination with other cloud protection services, such as CASBs, to ensure comprehensive defences against the most advanced threats.
The SDK for malware scanning supports most programming languages, and can be accessed from the Microsoft GitHub repository. Additional information, such as the supported file types and sizes, privacy considerations, blob scan throughput rate limits, and impact on IOPS, can be found in the Malware scanning guide.