Accelerating method of snapshot investigation for rollback from ransomware
AssigneeHitachi, Ltd.
InventorsYoshihiro YOSHII, Masanori TAKADA
Life of this patent
Estimating the term…
Abstract
Example implementations described herein are directed to systems and methods to accelerating the time to identify the latest snapshot that is not infected by malware and swap the snapshot for an underlying volume for a host computer without needing to communicate with the storage administrator of the storage system. In example implementations described herein, an iterative process is utilized to traverse snapshots through a storage plug-in application until such a snapshot is identified. Through the example implementations described herein, such snapshots can be identified quickly in comparison to manual selection.
Claims15
A method for a host computer communicatively coupled to a storage system, the method comprising:
- executing, on the host computer, a storage plug-in configured to request the storage system to provide a list of snapshots generated from a volume mounted to the host computer;
- the host computer receiving, from the storage system, the list of snapshots accessible by the host computer in response to the request;
- for an issuance of a restore request of the volume to the storage plug-in from the host computer:
- a) disabling data caching in the host computer for the volume;
- b) purging cache data in the host computer;
- and
- c) after completion of the purging of the cache data in the host computer, requesting the storage system to mount a selected snapshot from the list of snapshots to the host computer, wherein the storage system swaps a snapshot of the volume to the selected snapshot.
A non-transitory computer readable medium, storing instructions for a host computer communicatively coupled to a storage system, the instructions comprising:
- executing, on the host computer, a storage plug-in configured to request the storage system to provide a list of snapshots generated from a volume mounted to the host computer;
- the host computer receiving, from the storage system, the list of snapshots accessible by the host computer in response to the request;
- for an issuance of a restore request of the volume to the storage plug-in from the host computer:
- a) disabling data caching in the host computer for the volume;
- b) purging cache data in the host computer;
- and
- c) after completion of the purging of the cache data in the host computer, requesting the storage system to mount a selected snapshot from the list of snapshots to the host computer, wherein the storage system swaps a snapshot of the volume to the selected snapshot.
A host computer communicatively coupled to a storage system, the host computer comprising:
- a processor, configured to:
- execute a storage plug-in configured to request the storage system to provide a list of snapshots generated from a volume mounted to the host computer;
- receive, from the storage system, the list of snapshots accessible by the host computer in response to the request;
- for an issuance of a restore request of the volume to the storage plug-in from the host computer:
- a) disable data caching in the host computer for the volume;
- b) purge cache data in the host computer;
- and
- c) after completion of the purge of the cache data in the host computer, request the storage system to mount a selected snapshot from the list of snapshots to the host computer, wherein the storage system swaps a snapshot of the volume to the selected snapshot.
Dependencies are inferred from the claim text.