ACCELERATING RANSOMWARE RECOVERY USING A COMBINATION OF LOCAL AND REMOTE BACKUPS

    公开(公告)号:US20250061199A1

    公开(公告)日:2025-02-20

    申请号:US18452231

    申请日:2023-08-18

    Applicant: VMware LLC

    Abstract: Aspects of the disclosure accelerate recovery using a combination of local and remote backups. A backup selector identifies a latest unencrypted remote backup (e.g., created prior to an encrypted backup), a latest unencrypted local backup created prior to the latest unencrypted remote backup, and a penultimate unencrypted remote backup created prior to the latest unencrypted local backup. A restoration manager restores a local computing asset to the state of the latest unencrypted local backup. In a disaster recovery (DR) environment, two differences are generated: one between the latest unencrypted remote backup and the penultimate unencrypted remote backup and another between a newly-generated failback backup and the latest unencrypted remote backup. The two differences are sent to the restoration manager to roll the state of the local computing asset forward in two stages. This approach is faster and reduces egress charges in cloud-based DR environments.

    SELECTIVE MALWARE SCANNING OF FILES ON VIRTUALIZED SNAPSHOTS

    公开(公告)号:US20250036762A1

    公开(公告)日:2025-01-30

    申请号:US18379699

    申请日:2023-10-13

    Applicant: VMware LLC

    Abstract: The disclosure herein describes scanning a snapshot of a virtualized computing instance (VCI) for malware. A VCI snapshot associated with a version of a malware infected VCI is scanned for malware. The malware scanning includes selecting a first file of the VCI snapshot and determining that a file, in a previously scanned VCI snapshot associated with another version of the malware infected VCI, which corresponds to the selected first file has a clean reputation indicator. Further, it is determined that the metadata of the selected first file matches metadata of the corresponding file. Based on these determinations, the malware scanning proceeds to scan the next file for malware without scanning the selected first file for malware.

Patent Agency Ranking