Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Since I have no experience with AV solutions on Unix-like environments, I would need help with suggestions on something that can be suitable for scanning files that are uploaded by anonymous users through a Web application.

I'm mostly interested in providing an additional service to users to show that we care about what we distribute to them through our service, but nothing that would have to be 100% secure--we'll leave the 100% strive up to our user's discretion.

It would be great if it was something that's fast and resource efficient, preferably that could be used to scan single files passed through command-line arguments, but that could also work as a long-running process that we could access from several threads.

share|improve this question
add comment

2 Answers

up vote 7 down vote accepted

A lot depends on which unix like environments you're talking about. Linux probably has the best support for AV engines - but the open-source ones will run on any posix environment.

Personally, I'd go for Clam Av. Not only has it got a very good fingerprint database, and update mechanism, but (perhaps not surprisingly) it's well documented as tool for integration into applications.

share|improve this answer
    
Just noticed this : virus.untangle.com –  symcbean Nov 30 '11 at 11:49
    
Thanks for all the useful resources. With the catch rate and documentation reviewed, I'll be settling for ClamAV. –  Filip Dupanović Nov 30 '11 at 13:05
add comment

ClamAV is an open source virusscanner that is often used by mailservers. You can easily script it, run it from cron, or from a webapp. It's typically used from commandline with arguments. It also has a daemon component (clamd).

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.