公开(公告)号：US20200034537A1

公开(公告)日：2020-01-30

申请号：US16049574

申请日：2018-07-30

Applicant: Rubrik, Inc.

Inventor： Oscar Chen ,  Di Wu ,  Benjamin Reisner ,  Matthew E. Noe

IPC: G06F21/56 ,  G06F17/30 ,  G06F11/14

Abstract: Described herein is a system that detects ransomware infection in filesystems. The system detects ransomware infection by using backup data of machines. The system detects ransomware infection in two stages. In the first stage, the system analyzes a filesystem's behavior. The filesystem's behavior can be obtained by loading the backup data and crawling the filesystem to create a filesystem metadata including information about file operations during a time interval. The filesystem determines a pattern of the file operations and compares the pattern to a normal patter to analyze the filesystem's behavior. If the filesystem's behavior is abnormal, the system proceeds to the second stage to analyze the content of the files to look for signs of encryption in the filesystem. The system combines the analysis of both stages to determine whether the filesystem is infected by ransomware.

公开(公告)号：US11120131B2

公开(公告)日：2021-09-14

申请号：US16049574

申请日：2018-07-30

Applicant: Rubrik, Inc.

Inventor： Oscar Chen ,  Di Wu ,  Benjamin Reisner ,  Matthew E. Noe

IPC: G06F21/56 ,  G06F11/14 ,  G06F16/11 ,  G06F16/951

Abstract: Described herein is a system that detects ransomware infection in filesystems. The system detects ransomware infection by using backup data of machines. The system detects ransomware infection in two stages. In the first stage, the system analyzes a filesystem's behavior. The filesystem's behavior can be obtained by loading the backup data and crawling the filesystem to create a filesystem metadata including information about file operations during a time interval. The filesystem determines a pattern of the file operations and compares the pattern to a normal patter to analyze the filesystem's behavior. If the filesystem's behavior is abnormal, the system proceeds to the second stage to analyze the content of the files to look for signs of encryption in the filesystem. The system combines the analysis of both stages to determine whether the filesystem is infected by ransomware.

公开(公告)号：US11762833B2

公开(公告)日：2023-09-19

申请号：US17705836

申请日：2022-03-28

Applicant: Rubrik, Inc.

Inventor： Di Wu ,  Matthew E. Noe ,  Biswaroop Palit

IPC: G06F16/22 ,  G06F16/2457

CPC classification number: G06F16/2282 ,  G06F16/2457

Abstract: Described herein is a system that processes personal data in databases. The system samples data stored in columns of data tables and analyzes the sampled data to determine whether the sampled data includes personal data. Based on the analysis, the system marks which data tables and which columns of the data tables store personal data. The system receives a request to process personal data for a subject. From data tables that are marked as storing personal data, the system identifies records storing personal data for the subject. The system additionally identifies other data tables marked as storing personal data that reference or are referenced by the data tables including the records referencing the subject. The system processes the data stored in the columns that are marked as storing personal data.

公开(公告)号：US11314713B2

公开(公告)日：2022-04-26

申请号：US16015963

申请日：2018-06-22

Applicant: Rubrik, Inc.

Inventor： Di Wu ,  Matthew E. Noe ,  Biswaroop Palit

IPC: G06F16/22 ,  G06F16/2457

Abstract: Described herein is a system that processes personal data in databases. The system samples data stored in columns of data tables and analyzes the sampled data to determine whether the sampled data includes personal data. Based on the analysis, the system marks which data tables and which columns of the data tables store personal data. The system receives a request to process personal data for a subject. From data tables that are marked as storing personal data, the system identifies records storing personal data for the subject. The system additionally identifies other data tables marked as storing personal data that reference or are referenced by the data tables including the records referencing the subject. The system processes the data stored in the columns that are marked as storing personal data.

公开(公告)号：US20220222236A1

公开(公告)日：2022-07-14

申请号：US17705836

申请日：2022-03-28

Applicant: Rubrik, Inc.

Inventor： Di Wu ,  Matthew E. Noe ,  Biswaroop Palit

IPC: G06F16/22 ,  G06F16/2457

Abstract: Described herein is a system that processes personal data in databases. The system samples data stored in columns of data tables and analyzes the sampled data to determine whether the sampled data includes personal data. Based on the analysis, the system marks which data tables and which columns of the data tables store personal data. The system receives a request to process personal data for a subject. From data tables that are marked as storing personal data, the system identifies records storing personal data for the subject. The system additionally identifies other data tables marked as storing personal data that reference or are referenced by the data tables including the records referencing the subject. The system processes the data stored in the columns that are marked as storing personal data.

公开(公告)号：US20190392059A1

公开(公告)日：2019-12-26

申请号：US16015963

申请日：2018-06-22

Applicant: Rubrik Inc.

Inventor： Di Wu ,  Matthew E. Noe ,  Biswaroop Palit

IPC: G06F17/30

Abstract: Described herein is a system that processes personal data in databases. The system samples data stored in columns of data tables and analyzes the sampled data to determine whether the sampled data includes personal data. Based on the analysis, the system marks which data tables and which columns of the data tables store personal data. The system receives a request to process personal data for a subject. From data tables that are marked as storing personal data, the system identifies records storing personal data for the subject. The system additionally identifies other data tables marked as storing personal data that reference or are referenced by the data tables including the records referencing the subject. The system processes the data stored in the columns that are marked as storing personal data.