公开(公告)号：GB2601938A

公开(公告)日：2022-06-15

申请号：GB202202607

申请日：2020-07-10

Applicant: IBM

Inventor： DOMINIC MUELLER-WICKE ,  STEFAN BENDER ,  THOMAS SCHREIBER ,  KAI BOERNER

IPC: G06F21/56

Abstract: A method and system for detecting ransomware and repairing data following an attack. The method includes, collecting file statistics for files in a file system, identifying an affected file based on collected file statistics, locking down of access to the file system in response to identifying the affected file, undoing of reconcile processing, repairing the affected files, and unlocking access to the file system. The system includes a computer node, a file system, a plurality of disc storage components, a backup client, a backup client, and a hierarchical storage client. The hierarchical storage client is configured to collect file statistics for files in file system, identify affected files based on collected file statistics for the file, lock down of access to the file system in response to an identified affected file, undo reconcile processing, repair the affected file; and unlock access to the file system.

公开(公告)号：GB2601938B

公开(公告)日：2022-12-21

申请号：GB202202607

申请日：2020-07-10

Applicant: IBM

Inventor： DOMINIC MUELLER-WICKE ,  STEFAN BENDER ,  THOMAS SCHREIBER ,  KAI BOERNER

IPC: G06F21/56

Abstract: A method and system for detecting ransomware and repairing data following an attack. The method includes, collecting file statistics for files in a file system, identifying an affected file based on collected file statistics, locking down of access to the file system in response to identifying the affected file, undoing of reconcile processing, repairing the affected files, and unlocking access to the file system. The system includes a computer node, a file system, a plurality of disc storage components, a backup client, a backup client, and a hierarchical storage client. The hierarchical storage client is configured to collect file statistics for files in file system, identify affected files based on collected file statistics for the file, lock down of access to the file system in response to an identified affected file, undo reconcile processing, repair the affected file; and unlock access to the file system.