File upload validation

A method for protecting a set of files, comprising:

• deploying, to a computer, a hot-patched method for an original method in a method library that is dynamically loaded by a software application running on the computer, wherein the hot-patched method is configured to intercept requests from the software application to the original method;
• specifying an upload policy related to permissible characteristics of a given file or an Internet site destination;
• intercepting, by the hot-patched method, a request from the software application to the original method to upload the given file from the computer to the Internet site;
• making a comparison of the intercepted request to the upload policy, wherein making the comparison comprises analyzing metadata of the given file to detect if the given file comprises a specific attribute indicating a violation of the upload policy;
• and
• controlling the upload in response to the comparison.

An apparatus for protecting a set of files, comprising:

• a memory;
• and
• a processor configured:
• to deploy, to the memory, a hot-patched method for an original method in a method library that is dynamically loaded by a software application running on the computer, wherein the hot-patched method is configured to intercept requests from the software application to the original method;
• to specify an upload policy related to permissible characteristics of a given file or an Internet site destination;
• to intercept, by the hot-patched method, a request from the software application to the original method to upload the given file from the computer to the Internet site;
• to make a comparison of the intercepted request to the upload policy, wherein making the comparison comprises analyzing metadata of the given file to detect if the given file comprises a specific attribute indicating a violation of the upload policy;
• and
• to control the upload in response to the comparison.

A computer software product for protecting a set of files, the computer software product comprising a non-transitory computer-readable medium, in which program instructions are stored, which instructions, when read by a computer, cause the computer:

• to deploy, to the memory, a hot-patched method for an original method in a method library that is dynamically loaded by a software application running on the computer, wherein the hot-patched method is configured to intercept requests from the software application to the original method;
• to specify an upload policy related to permissible characteristics of a given file or an Internet site destination;
• to intercept, by the hot-patched method, a request from the software application to the original method to upload the given file from the computer to the Internet site;
• to make a comparison of the intercepted request to the upload policy, wherein making the comparison comprises analyzing metadata of the given file to detect if the given file comprises a specific attribute indicating a violation of the upload policy;
• and
• to control the upload in response to the comparison.