公开(公告)号：US12026252B2

公开(公告)日：2024-07-02

申请号：US17243188

申请日：2021-04-28

Applicant: Commvault Systems, Inc.

Inventor： Sri Karthik Bhagi ,  Pratima Laxman Gadhave ,  Marcelo dos Reis Mansano ,  Mrityunjay Upadhyay ,  PurnaChandra Sekhar Bedhapudi ,  Shyam Sundar Ramkumar

IPC: G06F21/55 ,  G06F9/455 ,  G06F11/14 ,  G06F21/54 ,  G06F21/56 ,  G06F21/62 ,  G06F21/78 ,  G06N5/04 ,  G06N20/00

CPC classification number: G06F21/554 ,  G06F9/45533 ,  G06F11/1451 ,  G06F21/54 ,  G06F21/561 ,  G06F21/566 ,  G06F21/567 ,  G06F21/568 ,  G06F21/6218 ,  G06F21/78 ,  G06N5/04 ,  G06N20/00 ,  G06F2201/815 ,  G06F2221/034

Abstract: An information management system includes one or more client computing devices in communication with a storage manager and a secondary storage computing device. The storage manager manages the primary data of the one or more client computing devices and the secondary storage computing device manages secondary copies of the primary data of the one or more client computing devices. Each client computing device may be configured with a ransomware protection monitoring application that monitors for changes in their primary data. The ransomware protection monitoring application may input the changes detected in the primary data into a machine-learning classifier, where the classifier generates an output indicative of whether a client computing device has been affected by malware and/or ransomware. Using a virtual machine host, a virtual machine copy of an affected client computing device may be instantiated using a secondary copy of primary data of the affected client computing device.

公开(公告)号：US20220292196A1

公开(公告)日：2022-09-15

申请号：US17242656

申请日：2021-04-28

Applicant: Commvault Systems, Inc.

Inventor： Sri Karthik BHAGI ,  Pratima Laxman GADHAVE ,  Marcelo dos Reis Mansano ,  Mrityunjay UPADHYAY ,  PurnaChandra Sekhar BEDHAPUDI ,  Shyam Sundar Ramkumar

IPC: G06F21/56 ,  G06F9/455 ,  G06N20/00 ,  G06N5/04 ,  G06F11/14

Abstract: An information management system includes one or more client computing devices in communication with a storage manager and a secondary storage computing device. The storage manager manages the primary data of the one or more client computing devices and the secondary storage computing device manages secondary copies of the primary data of the one or more client computing devices. Each client computing device may be configured with a ransomware protection monitoring application that monitors for changes in their primary data. The ransomware protection monitoring application may input the changes detected in the primary data into a machine-learning classifier, where the classifier generates an output indicative of whether a client computing device has been affected by malware and/or ransomware. Using a virtual machine host, a virtual machine copy of an affected client computing device may be instantiated using a secondary copy of primary data of the affected client computing device.

公开(公告)号：US20220292188A1

公开(公告)日：2022-09-15

申请号：US17243188

申请日：2021-04-28

Applicant: Commvault Systems, Inc.

Inventor： Sri Karthik BHAGI ,  Pratima Laxman GADHAVE ,  Marcelo dos Reis Mansano ,  Mrityunjay UPADHYAY ,  PurnaChandra Sekhar BEDHAPUDI ,  Shyam Sundar Ramkumar

IPC: G06F21/55 ,  G06F21/62 ,  G06N20/00 ,  G06N5/04

Abstract: An information management system includes one or more client computing devices in communication with a storage manager and a secondary storage computing device. The storage manager manages the primary data of the one or more client computing devices and the secondary storage computing device manages secondary copies of the primary data of the one or more client computing devices. Each client computing device may be configured with a ransomware protection monitoring application that monitors for changes in their primary data. The ransomware protection monitoring application may input the changes detected in the primary data into a machine-learning classifier, where the classifier generates an output indicative of whether a client computing device has been affected by malware and/or ransomware. Using a virtual machine host, a virtual machine copy of an affected client computing device may be instantiated using a secondary copy of primary data of the affected client computing device.