3 ms·
Offline backups work ~now~ but it won’t be long until rootkits start corrupting data being pushed/pulled by backup servers.
by hsbauauvhabzb 5y ago
Offline backups work ~now~ but it won’t be long until rootkits start corrupting data being pushed/pulled by backup servers.
- rectang 5y agoContinuously restoring from a copy of the data you sent to cold storage provides an additional layer of protection. If an attacker get root they can theoretically disable the continuous restoration, but the more moving parts they have to tweak the more likely that they'll be noticed while the org still has access to decent backups.
- hsbauauvhabzb 5y agoUnless the validation system has been compromised too. But I agree, it should increase the cost to attackers substantially.