Software Engineering › Key terms › Y12 Secure Software Architecture › File attacks
File attacks
Term Y12 Secure Software Architecture
Definition
Attacks that abuse file handling, such as malicious uploads, path traversal (../) or tampering with stored files. Protect by validating file type and size, storing outside the web root and using permissions.
Example: Reject uploaded .exe files.
Found in: syllabus, school notes.
Where it is used in the test
Syllabus area: Y12 Secure Software Architecture.
Question types it can appear in
- Short answer: Define, outline or explain it and tie it to the scenario.
- Multiple choice: Pick the option that matches the definition or example.
No past question in this bank is linked to this term yet. It can still be tested through the question types above.
Study links
- Flashcard: File attacks in Secure Software Architecture (Year 12) · study that set
- Memorise: User action controls: broken authentication, XSS, CSRF, forwarding, race conditions
- Notes: Design, develop and implement secure code to protect user file and hardware… (Secure Software Architecture (Year 12))
- Notes: File attacks and side-channel attacks (Secure Software Architecture (Year 12))
How to use it in an answer
A model sentence
“Attacks that abuse file handling, such as malicious uploads, path traversal (../) or tampering with stored files.” Then apply it: Reject uploaded .exe files.
In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.
Command words used with it
No linked question shows the command word for this term. Across the past short answer questions in this bank the words used most are: Explain, Outline, Describe, Compare, Classify, Analyse. Check the actual word in your question.
Technique for the question types
- Short answer: One clear point per mark, use the stimulus and course terms, and answer the command word.
- Multiple choice: Read all four options, rule out wrong ones, pick one; no penalty for guessing so never leave blank.
Common mistakes
- Use the term exactly as the syllabus words it, then link it to the scenario in the question; the 2025 feedback repeatedly rewards using the stimulus.
- Answer the command word: outline gives main points only, explain gives a reason or cause, discuss gives both sides.
Related terms
Same group in the syllabus: Broken authentication and session management · Cross-site scripting (XSS) · Cross-site request forgery (CSRF) · Invalid forwarding and redirecting · Race condition · Side channel attack