Protection and recovery of backup storage systems from ransomware attacks

A system comprising:

• at least one programmable processor;
• and
• a non-transitory machine-readable medium storing instructions that, when executed by the at least one programmable processor, cause the at least one programmable processor to perform operations comprising:
• receiving a request to modify data stored in a storage system, the storage system including a repository configured to store a deduplicated data and at least one cache storage component communicatively coupled to the repository and configured to store data received by the storage system for backup, the deduplicated data being generated by deduplicating the data received by the storage system for backup;
• modifying, in response to the received request, the data stored in the at least one cache storage component and identified in the received request;
• and
• generating, in response to the received request, an indication that the deduplicated data stored in the repository corresponding to the data stored in the at least one cache storage component and identified in the received request was likewise modified in accordance with the received request,
• while preventing modification of the deduplicated data stored in the repository for a predetermined period of time.

A computer program product comprising a non-transitory machine-readable medium storing instructions that, when executed by at least one programmable processor, cause the at least one programmable processor to perform operations comprising:

• receiving a request to modify data stored in a storage system, the storage system including a repository configured to store a deduplicated data and at least one cache storage component communicatively coupled to the repository and configured to store data received by the storage system for backup, the deduplicated data being generated by deduplicating the data received by the storage system for backup;
• modifying, in response to the received request, the data stored in the at least one cache storage component and identified in the received request;
• and
• generating, in response to the received request, an indication that the deduplicated data stored in the repository corresponding to the data stored in the at least one cache storage component and identified in the received request was likewise modified in accordance with the received request,
• while preventing modification of the deduplicated data stored in the repository for a predetermined period of time.