Patent ID: 11954337
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 18:
19. A computer program product including a computer readable storage medium having computer executable instructions that when executed by at least one computer cause the at least one computer to execute the instructions to:
configure an encryption monitor register to establish monitoring preferences of filesystem objects for monitoring for ransomware attacks;
allocate a predetermined size of persistent memory as a backup memory area for storing pre-encrypted versions of the filesystem objects;
insert a starting address of the backup memory area in data bits of the encryption monitor register; and
set page table entry (PTE) encryption monitor bits of page table entries in a hardware page table that correspond to at least one filesystem object, thereby establishing encryption monitoring of the filesystem object, wherein the encryption monitor bits indicate which filesystem objects require encryption monitoring.