| CPC G06F 3/0622 (2013.01) [G06F 3/0635 (2013.01); G06F 3/064 (2013.01); G06F 3/0679 (2013.01); G06F 21/554 (2013.01); G06F 21/79 (2013.01); H04L 63/10 (2013.01)] | 20 Claims |
|
1. A method for securing a data storage device (DSD) against rogue behaviour by a host, the method executed by a controller of the DSD and comprising:
determining a host type of the host;
detecting one or more access activities performed by the host on the DSD;
processing the one or more access activities to determine an observed activity criteria matrix comprised of activity values for the one or more access activities;
retrieving an expected activity criteria matrix comprised of expected values for host behaviour;
determining a set of access activity parameters indicating deviations of the observed activity criteria matrix from the expected activity criteria matrix;
determining a security threat level of the host by weighting one or more corresponding access activity parameters from the set of access activity parameters by one or more impact weights; and
in response to determining that the security threat level of the host is greater than or equal to a rogue host threat level, controlling the access activities performable by the host on the DSD to safeguard the DSD against the host, wherein the one or more impact weights are dynamically determined based on the host type.
|