Druva Assigned Patent
Multi-step approach for ransomware detection
By Francis Pelletier | May 20, 2024 at 2:00 pmDruva Inc., Santa Clara, CA, has been assigned a patent (11960603) developed by Bhave, Adwait, Asolia, Hemanshu, and Thakur, Neeraj, Pune, India, for a “multi-step approach for ransomware detection.“
The abstract of the patent published by the U.S. Patent and Trademark Office states: “A server manager for detecting ransomware includes a server interface to retrieve, from a storage device, a backup of a plurality of files stored by a client device. A ransomware detection module includes a statistical filter to generate a standard pattern of file activities of the client device for a time period. A statistical behavior analysis is performed on the backup of the plurality of files based on the standard pattern to identify a portion of the backup corresponding to a statistical anomaly different from the standard pattern. The statistical anomaly corresponds to an abnormal file activity. An entropy detector generates an entropy score for the portion of the backup. The entropy score represents a randomness of a distribution of bits in a block of a file in the portion of the backup. It is determined whether the backup includes the ransomware based on the generated entropy score.”
The patent application was filed on 2018-04-24 (15/961230).











