Loading patent…
AssigneeCommvault Systems, Inc.
InventorsPurnaChandra Sekhar Bedhapudi, Sri Karthik Bhagi, Deepak Raghunath Attarde, Arun Prasad Amarendran, Amit Bhaskar Ausarkar, Mrityunjay Upadhyay
Estimating the term…
This application relates to ransomware detection and data pruning management. Ransomware typically involves an I/O heavy process of encrypting data files and/or deleting or renaming the original files. Thus, ransomware attacks may be detected by analyzing the I/O activity in a given file system. In some embodiments, a software module running on a client machine manages copying, archiving, migrating, and/or replicating of primary data and restoring and/or pruning secondary data (e.g., backup copies of the primary data). When a potential ransomware attack is detected, the software module is immediately stopped so that the software module does not prune any data that may need to be restored. Upon receiving user input that indicates that the client machine is not under a ransomware attack, the software module is allowed to resume its operations, including pruning of the secondary data.
A computer-implemented method for detecting file activity anomalies, the computer-implemented method comprising, with one or more computing devices:
A system comprising:
Dependencies are inferred from the claim text.