公开(公告)号：US12061695B2

公开(公告)日：2024-08-13

申请号：US17661069

申请日：2022-04-28

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Joseph E. Algieri ,  Alex Veprinsky

IPC: G06F21/55 ,  G06F21/56

CPC classification number: G06F21/554 ,  G06F21/561 ,  G06F2221/034

Abstract: In some examples, a storage system creates a first copy of a data volume, and receives write requests having a specified characteristic from a host system, the write requests to write data of the data volume, where the storage system is to reject the write requests having the specified characteristic and to accept write requests without the specified characteristic. The storage system maintains metadata for the first copy of the data volume, the metadata indicating blocks of the data volume that have changed since the first copy of the data volume was created. The storage system determines, using the metadata, whether an unauthorized data encryption of the data of the data volume has occurred.

公开(公告)号：US20230367876A1

公开(公告)日：2023-11-16

申请号：US17662764

申请日：2022-05-10

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Joseph E. Algieri ,  Alex Veprinsky

IPC: G06F21/56

CPC classification number: G06F21/561 ,  G06F2221/034

Abstract: In some examples, a storage system intercepts a write request communicated over a network from a requester in a host system, the write request to write data of a data volume. The storage system determines whether the data of the write request matches a specified pattern. In response to determining that the data of the write request does not match the specified pattern, the storage system indicates that the write request from the requester in the host system has been corrupted by malware that has performed an unauthorized encryption on the data.

公开(公告)号：US20230351015A1

公开(公告)日：2023-11-02

申请号：US17661069

申请日：2022-04-28

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Joseph E. Algieri ,  Alex Veprinsky

IPC: G06F21/56

CPC classification number: G06F21/561 ,  G06F2221/034

Abstract: In some examples, a storage system creates a first copy of a data volume, and receives write requests having a specified characteristic from a host system, the write requests to write data of the data volume, where the storage system is to reject the write requests having the specified characteristic and to accept write requests without the specified characteristic. The storage system maintains metadata for the first copy of the data volume, the metadata indicating blocks of the data volume that have changed since the first copy of the data volume was created. The storage system determines, using the metadata, whether an unauthorized data encryption of the data of the data volume has occurred.

公开(公告)号：US20180276142A1

公开(公告)日：2018-09-27

申请号：US15467039

申请日：2017-03-23

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Joseph E. Algieri ,  John J. Sengenberger ,  Siamak Nazari

IPC: G06F12/128 ,  G06F3/06 ,  G06F12/0808

CPC classification number: G06F12/128 ,  G06F3/0619 ,  G06F3/0656 ,  G06F3/0689 ,  G06F12/0808 ,  G06F2212/1041 ,  G06F2212/621

Abstract: Examples discussed herein include receiving a notification about an event occurring in a storage array. In response to receiving the notification a cache of the storage array may be frozen and the data in the cache may be flushed to a persistent storage. The data in the cache is stored in the cache prior to the event. Examples also include receiving first data in a first host write request that is received after the event from a host device, sending a write request complete signal to the host device, and flushing the first data to the persistent storage. The first data is flushed after the data in cache is flushed.