My company is trying to implement a new feature on our site to let customers load documents accompanying an order. We know that we will need to perform some kind of malware scan by calling out to a service. However, my boss has also asked for the scan to be performed for questionable content which could wind up on our servers if not caught. The files in question would be PDF format. My gut tells me this is a significant increase in complexity, as the system would need to decipher the content of each PDF file. Is there anything out there that does this today, and what would the system do in order to achieve this?
Out of the box install:
client --> uploads file to system system --> system sends it to one of the above program --> analyzes file creates report
You would need to do something like the following:
client --> uploads file to system system --> system sends it to one of the above program --> analyzes file if malicious delete/quarantine/etc program --> analyzes file is not malicious send file to your org
This can be done with some work otherwise this becomes a "vendor" specific question: "What product can..." which is off-topic here.
The problem is defining what "questionable content" is. The three possibilities which spring to mind are
- copyrighted material being distributed without licence,
- content deemed to be offensive as slander / blasphemy / thoughtcrime / pornography....
The first one can be massively mitigated by flattening the PDF files and virus scanning for good measure.
Addressing the second is also relatively easy - just build a database of all the copyrighted content in the world and see if anything in the PDF matches it. You still need a manual proces for "fair use".
Third one is a bit tricky.