Patent ID: 9588848
Date: 2017-03-07
CPC Classifications: G06F

Claim:
1. A method for restoring modified data, the method comprising: intercepting, by a processor of a computer, a request from a program to modify data stored in a data storage; determining, prior to the program modifying the data, parameters of the intercepted request that relate to the data to be modified; computing criteria based on the determined parameters and analyzing the computed criteria based on at least one rule indicating at least: an integrity of the data to be modified is important to an operating system of the computer or important to a user of the computer, and whether, based on the parameters of the intercepted request, a method of working with the data storage and a type of data operations on the data storage result in modifications of the data; generating, prior to the program modifying the data, a request to generate a backup copy of the data when the at least one rule is satisfied; generating and storing, prior to the program modifying the data, a backup copy in the data storage; analyzing, one or more parameters of a process of the program that relates to the data operations to modify the data; and blocking further operation by the program based on an analysis of the one or more parameters of the process.