Phishing Attack Prevention Storage Device with List-Only Mode
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for preventing ransomware and phishing attacks are inadequate, as they either fail to protect against data encryption or require cumbersome process registration, and are insufficient when ransomware encrypts entire systems or servers, leading to data loss and security vulnerabilities.
Innovation Solution
A system comprising a backup storage device and a service agent that locks backed-up data in a read-only mode, preventing unauthorized access and data corruption, and a phishing attack prevention storage device that operates in a list-only mode, providing fake files to users until authorized access is granted.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is backed up to a separate storage device, then data protection against ransomware is improved, but the system complexity increases
Solution Approach 1:
The system separates backup storage from the main server by using a physically independent backup storage device. This segmentation ensures that even if the server is compromised by ransomware, the backup data remains protected and accessible for recovery.
Solution Approach 2:
A service agent is introduced as an intermediary component that runs on the server and manages communication with the backup storage device. The service agent handles backup operations, lock commands, and data protection logic, simplifying the overall system architecture while maintaining robust protection.
2Reliability
If backup data is locked in read-only mode, then protection against unauthorized access is improved, but data accessibility deteriorates
Solution Approach 1:
The backup storage device dynamically changes its access mode based on operational requirements. During normal operations, data is locked in read-only mode to prevent unauthorized access. When legitimate backup or recovery operations are needed, the service agent temporarily unlocks the data, performs the required operations, and then re-locks it, thus balancing security and accessibility.
Solution Approach 2:
The system performs preliminary locking of backup data in read-only mode before any potential unauthorized access can occur. This preliminary protective action ensures that even if ransomware infects the server, it cannot modify or encrypt the backup data, while legitimate operations can still access the data when needed.
3Reliability
If process registration is required for authorized access, then data security is improved, but operational convenience deteriorates
Solution Approach 1:
The service agent implements a self-service mechanism where it automatically manages the locking and unlocking of backup data based on pre-configured authorization rules. Instead of requiring manual registration for each process, the system autonomously determines whether to grant access based on the service agent's internal logic and pre-set policies, reducing administrative overhead while maintaining security.
Data Source
AI summary
Provided is a system for blocking a phishing attack including: a phishing attack prevention storage device; wherein a user terminal or a service server is connected with the phishing attack prevention storage device via a network, wherein a storage area in the phishing attack prevention storage device is mounted in a network drive at the user terminal or the service server, wherein when there is an open request for a real file stored in the storage area in the phishing attack prevention storage device from the user terminal or the service server, the phishing attack prevention storage device checks a storage operation mode and creates a fake file other than the open-requested original file when the storage operation mode corresponds to a list-only mode to return the fake file to the user terminal or the service server via the network.