Patent ID: 11954337
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. An encryption monitoring system comprising:
a memory;
a processor;
an encryption monitor register including control bits to establish encryption monitoring of filesystem objects for ransomware attacks;
a hardware page table including encryption monitor bits and encryption status bits for page table entries of the filesystem objects, wherein the encryption monitor bits indicate which filesystem objects require encryption monitoring and the encryption status bits indicate when encryption operations occur to the filesystem objects;
a backup memory area including a data region for storing pre-encrypted versions of the filesystem objects marked for encryption monitoring; and
an initializer configured to set the control bits in the encryption monitor register, enable encryption monitoring of the filesystem objects by setting the encryption monitor bits in the hardware page table, and further configured to allocate the backup memory area.