Detection of malicious files upload

[Manish Kumar]

Hi all,

During asset uploads, does dspace detects malicious files either in the form of text or any other formats?, if not what would be the alternatives to prevents or detects it.

Since that file will migth have some malicious code.

Thanks,

Manish Kumar

[mw...@iu.edu]

On Thu, Jun 20, 2024 at 12:59:05PM +0000, 'Manish Kumar' via DSpace Technical Support wrote:
> Hi all,
>
> During asset uploads, does dspace detects malicious files either in the form of text or any other formats?, if not what would be the alternatives to prevents or detects it.

If the upload is going to a collection that has a workflow, a curation
task can be attached to the workflow. One of the available curation
tasks is "vscan", which can run the ClamAV anti-virus package over the
submitted bitstreams. There is no need for the workflow to have any
interactive steps, if you don't need to have editors interact with the
submission, but a workflow must be defined and assigned to the
collection.

An alternative is to run a virus scanner periodically over the DSpace
asset store(s).

--
Mark H. Wood
Lead Technology Analyst

University Library
Indiana University Indianapolis
755 W. Michigan Street
Indianapolis, IN 46202
317-274-0749
library.indianapolis.iu.edu