CPC G06F 16/215 (2019.01) | 14 Claims |
1. A computer-implemented method of identifying an abnormality in data streams in a deduplication storage system, comprising:
retrieving, by a compression ratio abnormality detector, global compression ratios of historical backups of a source system of a client and local compression ratios of the source system of the client over a predetermined period of time;
plotting, by a compression ratio abnormality detector, a first curve using the global compression ratios and a second curve using the local compression ratios;
smoothening, by a compression ratio abnormality detector, each of the first curve and the second curve using a predetermined smoothening algorithm to generate a first smoothened curve and a second smoothened curve;
finding, by a compression ratio abnormality detector, a second derivative of each data point on each of the first smoothened curve and the second smoothened curve;
identifying, by a compression ratio abnormality detector, one or more data points whose slopes exceed a predetermined threshold on at least one smoothened curve from a group consisting of the first smoothened curve and the second smoothened curve; and
generating an alert message for at least one administrator selected from a group consisting of an administrator of the client and an administrator of the deduplication storage system, wherein the alert message is to inform the at least one administrator that a compression function or that an encryption function has been enabled on the client.
|