Protecting Database Backups From Ransomware and Malicious Intent
summary
Claims that attackers now hunt backups first and that median dwell time fell to under a day, backed by a concrete example of a 700 TB database whose full restore can take weeks. Demonstrated defenses include ASM filter driver to block block‑level writes, Data Guard for standby protection, automated storage snapshots invoked from PLSQL/Python via REST, and a practical 3‑2‑1+ backups approach with immutable snapshots and snapshot locking. Code samples live in the uploader's linked GitHub.
AI-written summary · about
chapters (10)
- 0:00Ransomware threats overview
- 4:26Defense in depth
- 8:21Ransomware attack evolution
- 12:10Database security layers
- 15:44Storage snapshots for recovery
- 18:343-2-1 backup strategy
- 23:37Protecting backups
- 25:47Ransomware response prep
- 30:50Team collaboration for data
- 32:14Q&A
related talks
24mDefending the Oracle Database: responding to the threat of ransomware
11mProtect and Recover with Autonomous Recovery
27mRansomware: A database survival guide
38mRansomware and Backups: A Multi-Layered Defense Strategy
51mHow to secure your data and applications against ransomware
18mSecuring S3 Backups Against Ransomware
41mMore Than Backups and Hope
06mA Battle Plan for Disaster Recovery in the Wake of Ransomare