Unrestricted File Upload vulnerabilities pose significant cybersecurity risks. After an analysis of these issues, focusing on the challenge related to type detection of the uploaded files, we propose an implementation that uses content-based analysis with Magika, integrated with Apache Tika, to detect the true type of an uploaded file. Additionally, it performs a structural analysis of PDF files, to detect potential JavaScript injections.
SECURING FILE UPLOAD PROTOTYPES
CARBONARA, FRANCESCO
2024/2025
Abstract
Unrestricted File Upload vulnerabilities pose significant cybersecurity risks. After an analysis of these issues, focusing on the challenge related to type detection of the uploaded files, we propose an implementation that uses content-based analysis with Magika, integrated with Apache Tika, to detect the true type of an uploaded file. Additionally, it performs a structural analysis of PDF files, to detect potential JavaScript injections.File in questo prodotto:
| File | Dimensione | Formato | |
|---|---|---|---|
|
Tesi - CARBONARA FRANCESCO.pdf
File consultabile da postazioni biblioteca
Dimensione
2.38 MB
Formato
Adobe PDF
|
2.38 MB | Adobe PDF |
I documenti in UNITESI sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.
Utilizza questo identificativo per citare o creare un link a questo documento:
https://hdl.handle.net/20.500.14253/64609