Package org.eclipse.steady.malice

Class ZipSlipAnalyzer

java.lang.Object

org.eclipse.steady.malice.ZipSlipAnalyzer

All Implemented Interfaces:

MaliciousnessAnalyzer

public class ZipSlipAnalyzer
extends Object
implements MaliciousnessAnalyzer

Checks whether archives are subject to the ZipSlip vulnerability. Supports the following archive types: - ZIP and derivates JAR, WAR, EAR, AAR - TAR and TAR.GZ See https://github.com/snyk/zip-slip-vulnerability

Constructor Summary

Constructors

Constructor	Description
ZipSlipAnalyzer()

Method Summary

Modifier and Type	Method	Description
MaliciousnessAnalysisResult	isMalicious(File _file)	Checks whether the given File is malicious or not.
MaliciousnessAnalysisResult	isMalicious(InputStream _is, boolean _log)	Checks whether the given File is malicious or not.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ZipSlipAnalyzer

public ZipSlipAnalyzer()

Method Detail

isMalicious

public MaliciousnessAnalysisResult isMalicious(File _file)

Checks whether the given File is malicious or not. A value of 0 means it is not malicious, a value of 1 means that it is malicious, and every value in between expresses the confidence (or probability) of the file being malicious.

Specified by:

isMalicious in interface MaliciousnessAnalyzer

Parameters:

_file - a File object.

Returns:

a MaliciousnessAnalysisResult object.

isMalicious

public MaliciousnessAnalysisResult isMalicious(InputStream _is,
                                               boolean _log)

Checks whether the given File is malicious or not. A value of 0 means it is not malicious, a value of 1 means that it is malicious, and every value in between expresses the confidence (or probability) of the file being malicious.

Specified by:

isMalicious in interface MaliciousnessAnalyzer

Parameters:

_is - a InputStream object.

_log - a boolean.

Returns:

a MaliciousnessAnalysisResult object.