Cloud Object Locking and Quarantine for Ransomware Screening
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security systems in cloud storage environments are ineffective in detecting vulnerabilities and threats as they are designed to check for vulnerabilities in local formats, allowing malicious objects to move between systems without detection, posing risks of ransomware attacks and data breaches.
Innovation Solution
A cloud storage security system that scans and analyzes incoming and stored objects for vulnerabilities, locks them during analysis, and takes proactive measures such as quarantining or encrypting objects to prevent propagation and provides ransomware protection by replicating valuable objects across secure locations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security systems check for vulnerabilities in local file formats, then the security system can detect threats on the local system, but malicious objects can move between different systems without detection because each system's security checks are format-specific
Solution Approach 1:
The patent implements a universal security scanning system that can analyze files across multiple operating systems and cloud storage platforms. The security scanner is designed to handle different file formats and system architectures, providing consistent vulnerability detection regardless of the source or destination system. This multi-functional approach allows the same security infrastructure to protect diverse cloud environments without requiring system-specific security checks.
2Ease of operation
If files are freely moved within cloud storage between different systems, then users can access and share data easily, but this creates opportunities for malicious objects to propagate undetected across networks
Solution Approach 1:
The patent implements preliminary security scanning of files before they are allowed to move between cloud storage systems. The security scanner analyzes incoming files, executables, and other objects before they can be accessed or executed on target systems. This proactive approach prevents malicious objects from entering the cloud environment or spreading between systems, while still allowing legitimate file sharing and access operations to proceed smoothly.
Solution Approach 2:
The patent introduces a cloud-based security scanning service as an intermediary between file upload and file access. When files are uploaded to cloud storage, they are automatically scanned by the security system before being made accessible to users. The scanner acts as a gatekeeper, blocking malicious objects while allowing legitimate files to pass through. This intermediary layer maintains ease of data access for authorized users while preventing malware propagation.
3Reliability
If security scanning is performed on all incoming and stored objects, then vulnerabilities can be detected, but the scanning process may delay object accessibility and increase system processing time
Solution Approach 1:
The patent implements periodic or event-driven security scanning rather than continuous scanning of all files. The system scans files based on specific events such as upload, modification, or execution attempts, rather than continuously monitoring all files. This approach reduces unnecessary scanning overhead while maintaining security coverage for critical operations. Files that have already been scanned and verified can be accessed without repeated scanning delays.
Data Source
AI summary
A newly created or modified object is sent to a networked local or remote server for analysis. While the object is being analyzed for vulnerabilities, the object is locked and made inaccessible to users, devices, and networks. If the object is identified as malicious, it may be marked for review, deleted, placed in quarantine, or have its permissions changed so that it cannot cause harm by propagating through the environment. Conversely, if the object is identified as safe, the risk of ransomware attacks may also be mitigated by replicating the object across multiple cloud storage platforms.