Method and system for preventing ransomware or phishing attack

Abstract

The present invention provides a system for a server for preventing ransomware attacks, comprising: a backup storage device which is an independent storage device physically independent of the server, is used for backing up storage data in the server, and comprises a communication interface which can be in communication connection with the server; and a service agent installed in the server for intermediating communication with the backup storage device. According to an embodiment of the present invention, in a state in which the backup storage device is stored and installed in the server, after data stored in the server is backed up in the backup storage device, when a lock command is applied to backup data that has been backed up in the backup storage device, the storage device for backup performs locking processing on the backup data according to the locking command, and processes the backup data subjected to the locking processing to be provided only in a read-only mode which cannot be modified.

Description

technical field [0001] The present invention relates to a method and system for preventing ransomware or phishing attacks. Background technique [0002] As hackers spread more and more varieties of phishing or ransomware, users' data is increasingly at risk. In general, phishing refers to an attack to obtain account information, electronic certificates, key data, etc. in a user terminal by leaking data stored in the user terminal. In addition, ransomware is an attack technique that encrypts the data stored in or connected to the network storage on the user terminal to prevent the user from accessing it and then demands money. Recently, methods and forms of PC terminals have become more and more diverse, ranging from data leaks that make users unable to use them to fake terminal hard disk partitions that make PC terminals unusable. [0003] Existing methods of countering such phishing use technology that encrypts the storage space in the PC and confirms whether the program ...

AI Technical Summary

Problems solved by technology

However, this method has the inconvenience of pre-registering the authorized program, and it is not possible to troublesomely register the program every time when the program needs to be installed at any time, so there is also a limitation.

[0005] Moreover, there have been some recent cases where the ransomware itself does not only encrypt the data stored in the PC, but encrypts the entire PC, or encrypts all the hardware installed on the PC, demanding a ransom, but preventing data encryption is not enough.

Images