US 12,493,695 B2
Data detection method and electronic device
Weibing Zhang, Beijing (CN); Lei Gao, Beijing (CN); and Chen Gong, Beijing (CN)
Assigned to Dell Products L.P., Round Rock, TX (US)
Filed by Dell Products L.P., Round Rock, TX (US)
Filed on Jun. 28, 2023, as Appl. No. 18/215,422.
Claims priority of application No. 202211659610.3 (CN), filed on Dec. 22, 2022.
Prior Publication US 2024/0211598 A1, Jun. 27, 2024
Int. Cl. G06F 21/56 (2013.01); G06F 12/02 (2006.01); G06F 21/55 (2013.01)
CPC G06F 21/566 (2013.01) [G06F 12/023 (2013.01); G06F 21/554 (2013.01); G06F 2221/034 (2013.01)] 14 Claims
OG exemplary drawing
 
1. A data detection method, the method comprising:
determining count features respectively corresponding to a plurality of time points based on data blocks of a storage object, wherein the count features comprise a plurality of count values for the data blocks, and wherein the data blocks are deduplicated data blocks;
determining, for a first time point among the plurality of time points and according to the count features respectively corresponding to the plurality of time points, a plurality of corresponding correlation coefficients between a count feature for the first time point and count features for the other time points among the plurality of time points, wherein determining the count features respectively corresponding to the plurality of time points based on the data blocks of the storage object comprises:
counting the number of the deduplicated data blocks in the storage object that conform to statistical features determined for the deduplicated data blocks at the plurality of time points, wherein the statistical features comprise numbers of reads and writes performed of the deduplicated data blocks, and
generating the count features respectively corresponding to the plurality of time points according to the number counted; and
determining, if a score determined according to the plurality of correlation coefficients is less than a predetermined threshold, that the storage object corresponding to the first time point is under attack, wherein the score comprises an average of the plurality of correlation coefficients.