Preventing ransomware from encrypting files on a target machine
AssigneePalo Alto Networks, Inc.
InventorsEldar Aharoni, Vadim Goldstein, Mashav Sapir, Jenny Kitaichik
Life of this patent
Estimating the term…
Abstract
Techniques for preventing ransomware from encrypting files on a target machine are disclosed. In some embodiments, a system/process/computer program product for preventing ransomware from encrypting files on a target machine includes monitoring file system activities on a computing device; detecting an unauthorized activity associated with a honeypot file or honeypot folder; and performing an action based on a policy in response to the unauthorized activity associated with the honeypot file or honeypot folder.
Claims20
A system, comprising:
- a processor configured to:
- monitor file system activities on a computing device;
- detect an unauthorized activity associated with a honeypot file or honeypot folder;
- and
- perform an action based on a policy in response to the unauthorized activity associated with the honeypot file or honeypot folder;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A method, comprising:
- monitoring file system activities on a computing device;
- detecting an unauthorized activity associated with a honeypot file or honeypot folder;
- and
- performing an action based on a policy in response to the unauthorized activity associated with the honeypot file or honeypot folder.
A computer program product, the computer program product being embodied in a tangible computer readable storage medium and comprising computer instructions for:
- monitoring file system activities on a computing device;
- detecting an unauthorized activity associated with a honeypot file or honeypot folder;
- and
- performing an action based on a policy in response to the unauthorized activity associated with the honeypot file or honeypot folder.
Dependencies are inferred from the claim text.