Pre-storage File Classification for Secure Data Placement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional data management systems are inefficient as they evaluate and protect data only after it has been written to a storage system, potentially compromising sensitive data and wasting resources, as they do not classify files before storage.
Innovation Solution
A method that classifies files before writing them to a storage device by identifying characteristics, determining a classification, and selecting a suitable storage location based on data-loss-prevention and virtualization policies, ensuring secure and efficient storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional data management systems evaluate and protect data only after it has been written to storage, then data security is compromised, but system complexity and resource overhead are reduced
Solution Approach 1:
The system performs file classification and security policy application before data is written to storage. The classification module analyzes file characteristics and determines security classifications in advance, allowing security policies to be applied proactively rather than reactively after storage occurs.
Solution Approach 2:
A classification module acts as an intermediary between the storage system and security policies. This module analyzes file characteristics, determines classifications, and interfaces with security policies to enforce appropriate protection measures, thereby managing complexity through a dedicated intermediary component.
2Reliability
If data is written to storage and then moved by data management systems, then data security is improved, but system resources such as network bandwidth and memory are wasted
Solution Approach 1:
The system determines the final storage location of files before writing occurs by classifying files and applying security policies in advance. This eliminates the need to move data after storage, as files are written directly to their destination locations, thereby conserving network bandwidth and memory resources.
3Reliability
If files are classified before storage, then data security and resource efficiency are improved, but processing time and computational overhead increase
Solution Approach 1:
The system uses automated classification modules with algorithms that analyze file characteristics and determine classifications programmatically. This replaces manual or post-storage classification processes with automated pre-storage classification, improving security while managing processing time through efficient automated systems.
Data Source
AI summary
A computer-implemented method for classifying files may include identifying data to be written to a file on a storage system. The method may also include, before the data is written to the storage system, 1) identifying a characteristic of the data, 2) determining, based on the characteristic of the data, a classification for the file, and 3) using the classification of the file to select a location within the storage system where the file should be stored. The method may further include writing the data to the file at the selected location within the storage system. Various other methods, systems, and computer-readable media are also disclosed herein.