| CPC G06F 21/554 (2013.01) [G06F 21/566 (2013.01); G06F 2221/034 (2013.01)] | 8 Claims |

|
1. A computer-implemented method, implemented using at least one hardware processor, of preventing malware attacks in a data protection system, comprising:
providing an air gap between a data center and a vault, the data center having a production site generating and storing datasets to be backed up, and the vault having protection storage for isolated storage of a backup dataset; analyzing, in an analyzer component of the vault, the backup dataset to detect bad data; closing, upon detection of bad data, the air gap by the vault;
issuing an alert signal from the vault to the data center to implement heightened security measures; implementing, in the data center, heightened security measures to protect data in the production site from further damage or destruction; and wherein the heightened security measures are organized into a series of hierarchical security levels (HSL) as classified into a classification ranging from a highest level of security imposing most stringent I/O restrictions to a lowest level of security imposing least stringent I/O restrictions.
|