Systems and methods for protection of storage systems using decoy data

A system for protection of storage systems using decoy data, the system comprising:

• at least one physical processor;
• physical memory comprising computer-executable instructions that, when executed by the physical processor, cause the physical processor to:
• identify an original file comprising sensitive content to be protected against malicious access;
• and
• protect the sensitive content, wherein the computer-executable instructions cause the physical processor to:
• process the original file to identify a structure of the original file and the sensitive content of the original file;
• generate a decoy file using the structure of the original file and using substitute content in a location corresponding to the sensitive content of the original file;
• and
• store the decoy file with the original file in a current location in a storage system;
• determine that the decoy file has been accessed;
• and
• in response to determining that the decoy file has been accessed, move the original file from the current location in the storage system.

A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

• identify an original file comprising sensitive content to be protected against malicious access;
• and
• protect the sensitive content, wherein the one or more computer-executable instructions cause the computing device to:
• process the original file to identify a structure of the original file and the sensitive content of the original file;
• generate a decoy file using the structure of the original file and using substitute content in a location corresponding to the sensitive content of the original file;
• and
• store the decoy file with the original file in a current location in a storage system;
• determine that the decoy file has been accessed;
• and
• in response to determining that the decoy file has been accessed, move the original file from the current location in the storage system.

A computer-implemented method for protection of storage systems using decoy data, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:

• identifying, by a computing device, an original file comprising sensitive content to be protected against malicious access;
• and
• protecting the sensitive content by:
• processing the original file to identify a structure of the original file and the sensitive content of the original file;
• generating a decoy file using the structure of the original file and using substitute content in a location corresponding to the sensitive content of the original file;
• and
• storing the decoy file with the original file in a current location in a storage system;
• determining that the decoy file has been accessed;
• and
• in response to determining that the decoy file has been accessed, encrypting the original file and the decoy file in the storage system.