it possible to regain the original state from a corrupted state after a malware attack so that the system is resilient to attack? By the time attack is detected we may lose some of the data. We should prevent further attack and should retrieve the lost data
One way of approaching this is to make use of duplication and voting systems - see enclosed paper.
Conference Paper Survival by Deception
I helped my counterpart at another institution recoup from a bad ransomware episode where 1.8M of 44M files between several network file stores were corrupt. My primary focus was on the automating the data validation and recovery efforts while others focused on cleaning desktops, preventing recidivism, and user facing efforts.
Some of that scales down to things which could be implemented for a SOHO or home computing situation.
Is that the sort of thing you are interested in?
-- Bob
- Badges
- Science topic
- Similar topics
- Correction