How to Build an Effective Malware Protection Architecture for File Uploads in Modern Web Apps

Explore a novel approach to building and operating a practical automated malware analysis platform for web applications in this 30-minute LASCON conference talk. Learn how to effectively detect and discard malicious file uploads while maintaining heavy performance needs at an enterprise level. Discover the challenges posed by the API economy and the programmatic approach to file uploads. Delve into various analysis techniques, including surface analysis, traditional antivirus scans, dynamic runtime analysis, pack analysis, static analysis, and machine learning classifiers. Gain insights into scaling considerations, image magic, and JavaScript implementation for a comprehensive malware protection architecture.

Introduction
About me
Agenda
Disclaimer
Filebased attacks
Surface analysis
Traditional antivirus scan
Dynamic runtime analysis
Pack analysis
Static analysis
ML classifiers
Image Magic
JavaScript
Scaling