| CPC G06F 21/554 (2013.01) [G06F 3/0619 (2013.01); G06F 3/0647 (2013.01); G06F 3/0673 (2013.01); G06F 2221/034 (2013.01)] | 20 Claims |
|
1. A method comprising:
determining, by a data protection system based on a first security threat detection process, that a storage system is possibly being targeted by a security threat;
performing, by the data protection system based on the determining that the storage system is possibly being targeted by the security threat, a first remedial action with respect to the storage system, the first remedial action comprising generating a snapshot of data stored by the storage system to restore the data to an uncorrupted state when confirmed that the data is corrupted;
confirming, by the data protection system based on a second security threat detection process, whether the storage system is possibly being targeted by the security threat;
continuing, by the data protection system when the confirming comprises determining that the storage system is not being targeted by the security threat, to perform the first security threat detection process; and
performing, by the data protection system when the confirming comprises determining that the storage system is being targeted by the security threat, a second remedial action with respect to the storage system, the second remedial action comprising locking down the snapshot that will be used to restore the data to the uncorrupted state.
|