Software Engineering › Learn step by step › Y12 Secure Software Architecture
Item 222 of 426 · Year 12: Secure Software Architecture, 45 of 57
File attacks
Term
Jump to a topic
- Exam format, question types and command words (46)
- Year 11: Programming Fundamentals (69)
- Year 11: The Object-Oriented Paradigm (33)
- Year 11: Programming Mechatronics (29)
- Year 12: Secure Software Architecture (57)
- Year 12: Programming for the Web (59)
- Year 12: Software Automation (35)
- Year 12: The Software Engineering Project (47)
- Diagrams and modelling tools (18)
- Python, SQL, pseudocode and CSS patterns (33)
Definition
Attacks that abuse file handling, such as malicious uploads, path traversal (../) or tampering with stored files. Protect by validating file type and size, storing outside the web root and using permissions.
Example: Reject uploaded .exe files.
Found in: syllabus, school notes.
Where you'll use it in the test
Syllabus area: Y12 Secure Software Architecture.
Question types it can appear in
- Short answer: Define, outline or explain it and tie it to the scenario.
- Multiple choice: Pick the option that matches the definition or example.
How to use it
A model sentence
“Attacks that abuse file handling, such as malicious uploads, path traversal (../) or tampering with stored files.” Then apply it: Reject uploaded .exe files.
In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.
Command words used with it
No linked question shows the command word for this term. Across the past short answer questions in this bank the words used most are: Explain, Outline, Describe, Compare, Classify, Analyse. Check the actual word in your question.
Go deeper
- Flashcard: File attacks in Secure Software Architecture (Year 12) · study that set
- Memorise: User action controls: broken authentication, XSS, CSRF, forwarding, race conditions
- Notes: Design, develop and implement secure code to protect user file and hardware… (Secure Software Architecture (Year 12))
- Notes: File attacks and side-channel attacks (Secure Software Architecture (Year 12))
- Full term page: every question, note and marking comment for File attacks
Check yourself
Explain “File attacks” in one sentence, give an example, and name a question type that could test it.
Reveal the answer
Attacks that abuse file handling, such as malicious uploads, path traversal (../) or tampering with stored files. Protect by validating file type and size, storing outside the web root and using permissions.
Example: Reject uploaded .exe files.
Could be tested as: Short answer, Multiple choice.
Quick multiple choice
Which measure BEST protects user files on a server from file attacks such as malicious uploads?
- Give every user administrator rights to the upload folder
- Run uploaded files automatically to check they work
- Allow any file type so users are not inconvenienced
- Restrict file types and size, scan uploads and store them outside the web root with limited permissions
Show the answer
D
Limit what can be uploaded, scan it, and never let uploaded content execute or sit with excessive permissions.
Source: original (written for this study pack; not a NESA question). Open it in the multiple-choice bank.