Skip to content Skip to main navigation Skip to footer

Scanning Files Uploaded to the Media Library for Viruses

Although unlikely, there is a small risk that entrants could upload files, either mistakenly or maliciously, to Nucleus that contain viruses. These files could then go on to infect the devices of any user who downloads the files, including other entrants, judges or admin users. Therefore a key security update for Nucleus in 2022 is to introduce anti-virus software which will scan the files once uploaded and will report this to admin users.

This is not functionality that is automatically available to all instances due to the use of a third-party antivirus scanning software. If you would like to add this functionality to your instance please create a support ticket and request to activate the antivirus asset scanning. This will involve some bespoke development, an additional server in AWS and a contract with the antivirus software. A full quote can be provided before the service is activated.

How does the Anti-Virus Scanning Work?

The antivirus software is hosted on a separate server in the AWS account. Once a file is successfully uploaded to Electron Via Nucleus, the file is downloaded by the server containing the antivirus software and placed in a queue to be scanned. If the software finds a virus then this is surfaced to both admin users and entrants in the following locations:

  • Entrants:
    • On the media item on the library page
    • On the media item page under metadata
  • Admins:
    • On the media item list in the Status column
    • On the entry in the media item question

Currently other than highlighting the potential Virus in an uploaded file no further action is taken by Nucleus. We will be working with admin users in the coming months to determine if any automated actions should be taken by Nucleus.

Please note that if a file is marked as Virus by Nucleus then it should not be downloaded or published to the Viewing Interface. The entrant should be contacted in a sensitive manner and instructed to work with their IT team to resolve the issue. BAFTA Tech is unable to provide any information regarding viruses and how to resolve any issues caused by them.

This function is alerting users to a potential virus only. The virus scanning is conducted by a third-party provider and BAFTA Tech is unable to confirm that all viruses will be detected by the solution.

Also, note there is a risk of a false positive so please be aware of this when dealing with entrants.