Minifilter Driver for Backup Folder Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing backup systems face security vulnerabilities due to remote access, allowing malware to encrypt or corrupt backup images, while restricting access prevents legitimate processes from functioning properly.
Innovation Solution
Implementing a system that intercepts modify requests for protected folders, authenticates remote devices as trusted hosts using a lockdown server and marker files, allowing authorized modifications while blocking unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If remote access to backup images is allowed, then flexibility and legitimate process functionality are improved, but security vulnerabilities increase allowing malware to encrypt or corrupt backup images
Solution Approach 1:
A minifilter driver is introduced as an intermediary component between remote devices and backup images. This driver intercepts modify requests, validates them against trusted host criteria, and selectively allows or blocks access. The intermediary enables remote access functionality while filtering out malicious requests, thus resolving the contradiction between accessibility and security.
Solution Approach 2:
The system performs preliminary validation of remote devices before allowing access to backup images. The minifilter driver checks whether incoming modify requests originate from trusted hosts using predefined criteria (such as authentication credentials or device identifiers). This preliminary action prevents malware from executing harmful operations while allowing legitimate remote access, thereby maintaining both security and operational flexibility.
2Object-affected harmful factors
If access to the shared folder is restricted, then security vulnerabilities are prevented, but legitimate processes are prevented from properly functioning
Solution Approach 1:
The minifilter driver acts as an intelligent intermediary that distinguishes between legitimate and malicious requests. Instead of implementing blanket restrictions, the driver intercepts each modify request, evaluates it against trusted host criteria, and selectively permits or denies access. This approach maintains security by blocking unauthorized access while preserving productivity by allowing legitimate processes to function normally.
Solution Approach 2:
The system applies different access control policies to different remote devices based on their trust status. Trusted hosts receive permitted access to perform legitimate maintenance operations, while untrusted devices are blocked. This localized quality approach ensures that security restrictions are applied only where necessary, maintaining productivity for authorized users while preventing malware attacks.
3Reliability
If authentication mechanisms are implemented to verify trusted hosts, then security is improved, but system complexity increases
Solution Approach 1:
The minifilter driver serves as a lightweight intermediary that handles authentication logic locally on the host system. Rather than implementing complex centralized authentication infrastructure, the driver evaluates trusted host criteria directly at the point of access. This approach improves reliability by ensuring only authenticated devices can modify backup images, while minimizing system complexity by using simple, efficient validation mechanisms within the driver itself.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The disclosed computer-implemented method for protecting a folder from unauthorized file modification may include receiving, from a remote device, a modify request for a target file in a folder and determining whether the folder is a protected folder. The method may also include determining, in response to determining the folder is the protected folder, whether the remote device is a trusted host. The method may further include allowing, in response to determining that the remote device is the trusted host, the modify request for the target file. Various other methods, systems, and computer-readable media are also disclosed.