Back to results
US 11,386,219 B2Granted
Detection of an unauthorized modification to storage and restoration of the storage
AssigneeRaytheon Company
InventorsPaul Gryting, Cody L. Tankersley, Christopher Browning
Life of this patent
Estimating the term…
Abstract
An aspect includes monitoring storage of a computer system. Upon detecting an unauthorized modification to an original storage component in response to the monitoring, an aspect includes retrieving a backup component corresponding to the original storage component and repairing the original storage component using the backup component. In embodiments, the repair occurs in real-time without interruption to computer operation.
Claims12
A method comprising:
- monitoring a memory unit of a computer system, the monitoring includes monitoring a thread corresponding to the memory unit;
- recalculating hash values for memory pages of the memory unit and validating the hash values;
- and
- upon detecting a modification to a hash value for the memory unit:
- retrieving a secure backup copy corresponding to the memory unit;
- issuing a lock on the memory unit;
- restoring the memory unit using the secure backup copy;
- and
- removing the lock on the memory unit.
6 more elements
A system comprising:
- a memory comprising computer-executable instructions;
- and
- a processor executing the computer-executable instructions, the computer-executable instructions when executed by the processor cause the processor to perform operations comprising:
- intercepting, by a kernel driver of a system, a request for an original file of the system;
- retrieving the original file and issuing a lock on the original file;
- performing authentication on the original file;
- upon detecting an unauthorized modification to the original file in response to the authentication:
- retrieving a secure backup copy corresponding to the original file, the secure backup copy being an encrypted backup copy of the original file;
- repairing the original file using the secure backup copy;
- and
- returning the repaired original file to a requester of the original file;
- and
- removing the lock on the original file.
10 more elements
A method comprising:
- intercepting, by a kernel driver of a computer system, a request for an original file of the computer system;
- retrieving the original file and issuing a lock on the original file;
- performing authentication on the original file;
- upon detecting an unauthorized modification to the original file in response to the authentication:
- retrieving a secure backup copy corresponding to the original file, the secure backup copy being an encrypted backup copy of the original file;
- repairing the original file using the secure backup copy;
- and
- returning the repaired original file to a requester of the original file;
- and
- removing the lock on the original file.
7 more elements
Dependencies are inferred from the claim text.