Cloud storage scanner
A system, method and computer program for a scanning service is presented. A scanning service compatible with a cloud storage system is configured to receive notifications from a cloud storage service about storage event activity and to access data in the cloud storage service. The scanning service receives a notification regarding storage activity related to a file in the data. After the completion of the storage activity, the scanning service receives the file from the cloud storage service and scans the file. When a determination is made based on the scan that at least a portion of the file should not be distributed then an action is taken with respect to the cloud storage service based on the determination that at least a portion of the file should not be distributed.
1. A system comprising:
a processor; and
a non-transitory computer readable storage medium having computer readable code thereon for a scanning service, the medium including instructions executable by the processor to perform operations, comprising:
configuring the scanning service to receive notifications from a cloud storage service about storage activity and to access data in the cloud storage service;
configuring the scanning service with an account having access to change permissions on files in the data stored by the cloud storage service;
receiving, by the scanning service from the cloud storage service, a notification regarding storage activity related to a file in the data;
after completion of the storage activity, receiving by the scanning service from the cloud storage service, the file;
in response to receiving the notification regarding storage activity and receiving the file from the cloud storage service, scanning, by the scanning service configured with an account having access to change permissions on files in the data stored in the cloud storage service, the file received from the cloud storage service for malware;
determining from the scan that at least one portion of the file should not be distributed to one or more applications because the at least one portion of the file contains malware or other malicious content; and
taking an action with respect to the cloud storage service based on the determination that the at least one portion of the file should not be distributed, wherein the action includes, with the scanning service configured with the account having access to change permissions on the file, setting a permission for the file on the cloud storage service to make the file unavailable to one or more applications when the at least one portion of the file contains malware or other malicious content.
2. The system of claim 1 , wherein the instructions are further executable by the processor to configure the scanning service to receive notifications from said cloud storage service about storage activity associated with a plurality of accounts associated with the cloud storage service.
3. The system of claim 1 , wherein the instructions are further executable by the processor wherein, based on the determination that the at least one portion of the file should not be distributed, the file contains malware comprising disruptive computer instructions that may cause one or more of damage to one or more computing devices, compromising files on one or more computer devices, or obtaining private information from the one or more computing devices.
4. The system of claim 1 , wherein the instructions are further executable by the processor wherein, based on the determination that the at least one portion of the file should not be distributed, the file contains confidential information comprising one or more of credit card numbers, social security numbers, multiple phone numbers, or a predefined pattern.
5. A method comprising:
configuring a scanning service to receive notifications from a cloud storage service about storage activity;
configuring the scanning service with an account having access to change permissions on files stored by the cloud storage service;
receiving, by the scanning service from the cloud storage service, a notification regarding storage activity related to a file;
after completion of the storage activity, loading by the scanning service from the cloud storage service, the file;
in response to receiving the notification regarding storage activity and receiving the file from the cloud storage service, scanning, by the scanning service configured with an account having access to change permissions on files in the data stored in the cloud storage service, the file received from the cloud storage service for malware;
determining from the scan that at least one portion of the file should not be distributed to one or more applications because the at least one portion of the file contains malware or other malicious content; and
taking an action with respect to the cloud storage service based on the determination that the at least one portion of the file should not be distributed, wherein the action includes, with the scanning service configured with the account having access to change permissions on the file, setting a permission for the file on the cloud storage service to make the file unavailable to one or more applications when the at least one portion of the file contains malware or other malicious content.
6. The method of claim 5 , further comprising configuring the scanning service to receive notifications from said cloud storage service about storage activity associated with a plurality of accounts associated with the cloud storage service.
7. The method of claim 5 , further comprising wherein, based on the determination that the at least one portion of the file should not be distributed, the file contains malware comprising disruptive computer instructions that may cause one or more of damage to one or more computing devices, compromising files on one or more computer devices, or obtaining private information from the one or more computing devices.
8. The method of claim 5 , further comprising wherein, based on the determination that the at least one portion of the file should not be distributed, the file contains confidential information comprising one or more of credit card numbers, social security numbers, multiple phone numbers, or a predefined pattern.
9. A non-transitory computer readable storage medium having computer readable code thereon for a scanning service, the medium including instructions executable by one or more processors to perform operations, comprising:
configuring the scanning service to receive notifications from a cloud storage service about storage activity;
configuring the scanning service with an account having access to change permissions on data in the cloud storage service;
receiving, by the scanning service from the cloud storage service, a notification regarding storage activity related to a file in the data;
after completion of the storage activity, receiving by the scanning service from the cloud storage service, the file;
in response to receiving the notification regarding storage activity and receiving the file from the cloud storage service, scanning, by the scanning service configured with an account having access to change permissions on files in the data stored in the cloud storage service, the file received from the cloud storage service for malware;
determining from the scan that at least one portion of the file should not be distributed to one or more applications because the at least one portion of the file contains malware or other malicious content; and
taking an action with respect to the cloud storage service based on the determination that the at least one portion of the file should not be distributed, wherein the action includes, with the scanning service configured with the account having access to change permissions on the data including the file, setting a permission for the file on the cloud storage service to make the file unavailable to one or more applications when the at least one portion of the file contains malware or other malicious content.
10. The non-transitory computer readable storage medium of claim 9 , wherein the instructions are further executable by the one or more processors to configure the scanning service to receive notifications from said cloud storage service about storage activity associated with a plurality of accounts associated with the cloud storage service.
11. The non-transitory computer readable storage medium of claim 9 , wherein the determination that the at least one portion of the file should not be distributed is based on the file containing malware comprising disruptive computer instructions that may cause one or more of damage to one or more computing devices, compromising files on one or more computer devices, or obtaining private information from the one or more computing devices.