File Backup Integrity Verification via Write Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional file backup systems risk overwriting valid files with corrupted or maliciously altered versions, as they often rely solely on file timestamp changes for backup, failing to detect and prevent the introduction of compromised files.
Innovation Solution
Implement a method that monitors file system write operations, verifies file integrity using mechanisms like checksums, and identifies suspicious patterns indicative of malware or system faults to inhibit automatic backup of potentially compromised files.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If file backup is performed based on timestamp changes, then backup automation is improved, but file integrity is compromised as corrupted files with new timestamps cannot be detected
Solution Approach 1:
The backup system performs preliminary integrity verification of files before backing them up by checking checksums and analyzing write patterns. This preliminary action detects corrupted or maliciously altered files before they are backed up, preventing integrity loss while maintaining automated backup operations.
Solution Approach 2:
The system implements feedback mechanisms by monitoring file write operations and integrity status, then using this information to control backup decisions. When integrity issues are detected through checksum verification or suspicious write patterns, the system feedback prevents backup of compromised files, resolving the contradiction between automation and reliability.
2Reliability
If all files are backed up repeatedly, then data security is improved, but system productivity deteriorates due to excessive backup operations
Solution Approach 1:
Instead of backing up all files repeatedly, the system applies partial action by selectively backing up only those files that pass integrity verification and show legitimate changes. This reduces unnecessary backup operations while maintaining data security for files that need protection.
Solution Approach 2:
The system changes the parameter for backup selection from simple timestamp-based changes to a composite parameter including integrity verification results and write pattern analysis. This allows the system to distinguish between legitimate file changes and corrupted file modifications, improving data security without excessive backups.
3Speed
If file changes are monitored without integrity verification, then backup speed is improved, but detection of malicious alterations deteriorates
Solution Approach 1:
The system performs preliminary integrity verification through checksum calculation and write pattern monitoring before files are backed up. This preliminary detection of malicious alterations occurs quickly without requiring full file analysis, maintaining backup speed while improving detection capability.
Solution Approach 2:
The system replaces manual or simple timestamp-based change detection with automated integrity verification mechanisms including checksum algorithms and behavioral pattern analysis. This substitution enables rapid automated detection of malicious alterations without significantly impacting backup speed.
Data Source
AI summary
A method of controlling a process on a computer system for backing-up files stored in a primary storage medium, to a secondary storage medium. The method comprises monitoring a file system implemented on the computer system in order to detect write operations made by the file system to said primary storage medium. Upon detection of a write operation, the integrity of a file being written is verified and/or changes in the file identified with respect to a version of the file currently stored in the primary storage medium and which is being replaced. In the event that the integrity of a file being written by the file system is compromised, and/or any identified changes in the file are suspicious, then the file is identified to the back-up process such that automatic back-up of the file is inhibited.