Anomaly detection and remediation utilizing analysis of storage area network access patterns

A computer program product comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code, when executed by at least one processing device comprising a processor coupled to a memory, causes the at least one processing device:

• to receive storage access protocol commands directed by one or more host devices to storage devices of a storage system over a storage area network;
• to generate statistics relating to the received storage access protocol commands;
• to process the generated statistics in a machine learning system trained to recognize anomalous access patterns to the storage devices over the storage area network;
• and
• to generate an alert indicative of an access anomaly based at least in part on the processing of the generated statistics in the machine learning system.

A method comprising:

• receiving storage access protocol commands directed by one or more host devices to storage devices of a storage system over a storage area network;
• generating statistics relating to the received storage access protocol commands;
• processing the generated statistics in a machine learning system trained to recognize anomalous access patterns to the storage devices over the storage area network;
• and
• generating an alert indicative of an access anomaly based at least in part on the processing of the generated statistics in the machine learning system;
• wherein the method is performed by at least one processing device comprising a processor coupled to a memory.