File Safer concepts

Available in Classic and VPC

Before exploring the complete File Safer workflow, review a few key concepts. This page covers the following concepts:

• Malicious code detection quickstart
• Benefits of using File Safer

Malicious code detection quickstart

An appropriate workflow is essential for effective malicious code detection while maintaining service performance. Scanning for malicious code while users upload or download files can slow down the service and cause inconvenience. Scanning after an upload is complete does not affect the user experience, allowing time for file scanning or analysis. The workflow for detecting and blocking malicious code should therefore vary depending on the situation.
Hash Filter checks whether files or URLs are malicious using their extracted hash values. Its short, simple transactions minimize the load on integrated systems. For new malicious code or variants that Hash Filter cannot identify, use File Filter to analyze files and detect whether they are malicious. File Filter transactions are slower than Hash Filter transactions and may affect service speed. You can therefore combine Hash Filter and File Filter to suit your service. For example, use Hash Filter for malicious code filtering in user-facing operations where speed is important. Use File Filter after files enter the system, when scanning does not inconvenience users. This approach lets you detect and block malicious code efficiently while maintaining service performance.
Design your malicious code detection quickstart based on your business logic. You decide whether to block detected malicious code.

Hash Filter quickstart

The following workflow uses Hash Filter to detect and block malicious code when an attacker creates a post.

The following workflow uses Hash Filter to detect and block malicious code when a user downloads a malicious attachment from a post.

File Filter quickstart

The following workflow uses File Filter to detect and block malicious code when an attacker creates a post. Apply this workflow when scanning does not affect service speed or when rescanning is required.

Benefits of using File Safer

File Safer offers the following benefits:

• Flexible integration through REST APIs: File Safer features are available through REST APIs, so you can integrate them into your business logic.
• Detection history management: View malicious code detection history. You can also receive email notifications when malicious code is detected or a malicious code lookup fails. Advanced settings let you receive email notifications when the number of detections reaches or exceeds a specified threshold within a user-defined period.