Dell Products Inc.

Melissa Flynn

Evan Jones

David Goncalves

Brett A Quinn

Kevin Heasley

A secure physical vault is used in connection with cyber protection automation to ensure that initial configuration and all configuration changes to the cyber protection environment are only implemented by a host that is locally physically connected to the cyber vault. By requiring the host to be locally physically connected to the cyber vault, it is possible to prevent remote modifications to the cyber protection environment configuration, thus preventing a remote attack on the cyber protection afforded by the cyber protection environment. The Operating System of a storage system implementing the cyber vault may be flagged to prevent any syscall from being processed that is not received from a host that is locally physically connected to the cyber vault. Host controller software can also be used to ensure that the initial configuration and all configuration changes to the cyber protection environment configuration are only processed if locally received.

Cyber protection automation with secure physical vault

Recovery of a primary image is facilitated by using non-consistent snapshots on a primary storage array and consistent snapshots on a secondary storage array to avoid the need to transmit entire secondary replicas from the secondary storage array to the primary storage array. Non-consistent snaps of the primary replicas are generated by the primary storage array. Consistent snaps of the secondary replicas are generated by the secondary storage array. The primary replicas are recovered by linking non-consistent snaps to primary staging volumes, linking consistent snaps to secondary staging volumes, synchronizing the primary and secondary staging volumes, and using the synchronized primary staging volumes to recover the primary replicas.

Optimizing data resynchronization in cyber recovery solutions

Recovery of a primary image is facilitated by using consistent snapshots on a primary storage array and consistent snapshots on a secondary storage array to avoid the need to transmit entire secondary replicas of storage objects from the secondary storage array to the primary storage array. Consistent snaps of the primary replicas are generated by the primary storage array. Consistent snaps of the secondary replicas are generated by the secondary storage array. The primary image is recovered by linking consistent snaps on the primary storage array to primary staging volumes, linking consistent snaps on the secondary storage array to secondary staging volumes, synchronizing the primary and secondary staging volumes, and migrating host IO traffic to the synchronized staging volumes.

Eliminating data resynchronization in cyber recovery solutions

Attributes of snapshots are provided that ensure snapshot preservation and enable utilization of snapshots to be restricted. If a cyber intrusion event is detected, fence attributes are set on snapshots that were created after the time of the possible cyber intrusion event to restrict those snapshots from being used for cyber recovery until after the data contained in the snapshots has been validated. If a snapshot is selected for use, the fence attribute is checked and, if set, prevents the snapshot from being used until the data of the snapshot is validated. Additionally, keep attributes are set on snapshots that were created before the possible cyber intrusion event, to preserve those snapshots to prevent the snapshots from termination. If a snapshot is selected for termination, the keep attribute is checked, and if set, prevents the snapshot from being terminated until the keep attribute is reset.

Growing community of inventors

North Attleboro, MA, United States of America

Melissa Flynn