Scanning a backup for vulnerabilities

1 . A method, comprising:

receiving a request, from a requesting system, for identifying a backup snapshot to restore among a plurality of backup snapshots, wherein at least a scanned backup snapshot of the plurality of backup snapshots was scanned for one or more vulnerabilities;

in response to the request for identifying the backup snapshot to restore among the plurality of backup snapshots, providing, via a display interface, a predetermined identification of one or more vulnerabilities of the scanned backup snapshot, wherein the predetermined identification indicates (1) corresponding criticalities of the one or more vulnerabilities of the scanned backup snapshot and (2) a plurality of recovery times corresponding to restoring respective scanned portions of the scanned backup snapshot;

receiving, via the display interface, a request to restore a scanned portion of the scanned backup snapshot;

locating data of the scanned portion of the scanned backup snapshot by traversing a portion of a tree data structure corresponding to the scanned portion; and

providing the data of the scanned portion of the scanned backup snapshot to the requesting system, in order to apply one or more remedies corresponding to the one or more vulnerabilities of the scanned backup snapshot.

2 . The method of claim 1 , wherein the scanned portion is an entire portion of the scanned backup snapshot.

3 . The method of claim 1 , wherein the scanned portion is part of the scanned backup snapshot.

4 . The method of claim 1 , wherein the corresponding criticalities of the one or more vulnerabilities of the scanned backup snapshot include one or more of: very critical, critical, or non-critical.

5 . The method of claim 1 , wherein in response to the request associated with identifying the backup snapshot to restore among the plurality of backup snapshots further includes providing a recovery time of the plurality of recovery times, the recovery time associated with restoring the requested scanned portion of the scanned backup snapshot.

6 . The method of claim 5 , wherein the recovery time associated with restoring the requested scanned portion of the scanned backup snapshot is based on a security posture of a restore environment in which the scanned portion of the scanned backup snapshot is to be restored.

7 . The method of claim 6 , wherein the security posture is a high security posture, and wherein an amount of time to remedy the one or more vulnerabilities of the scanned backup snapshot in the restore environment having the high security posture is included in the provided recovery time associated with restoring the requested scanned portion of the scanned backup snapshot.

8 . The method of claim 6 , wherein the security posture is a medium security posture, and wherein an amount of time to remedy critical and very critical vulnerabilities of the one or more vulnerabilities of the scanned backup snapshot in the restore environment having the medium security posture is included in the provided recovery time associated with restoring the requested scanned portion of the scanned backup snapshot.

9 . The method of claim 6 , wherein the security posture is a low security posture, and wherein the recovery time associated with restoring the requested scanned portion of the scanned backup snapshot in the restore environment having the low security posture excludes an amount of time to remedy any of the one or more vulnerabilities of the scanned backup snapshot.

10 . The method of claim 6 , wherein the recovery time associated with restoring the requested scanned portion of the scanned backup snapshot is further based on an amount of time for providing to the restore environment the data associated with the requested scanned portion of the scanned backup snapshot.

11 . The method of claim 1 , further comprising: filtering one or more versions of the scanned portion based on a security posture selected by a user via the display interface.

12 . The method of claim 1 , further comprising: determining a sequence of the one or more remedies to be applied to the data associated with the scanned portion.

13 . The method of claim 1 , further comprising:

filtering the one or more vulnerabilities of the scanned backup snapshot based on a restore environment in which the scanned portion of the scanned backup snapshot is to be restored; and

determining the plurality of recovery times based on the filtering of the one or more vulnerabilities.

14 . A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

receiving a request, from a requesting system, for identifying a backup snapshot to restore among a plurality of backup snapshots, wherein at least a scanned backup snapshot of the plurality of backup snapshots was scanned for one or more vulnerabilities;

in response to the request for identifying the backup snapshot to restore among the plurality of backup snapshots, providing, via a display interface, a predetermined identification of one or more vulnerabilities of the scanned backup snapshot, wherein the predetermined identification indicates (1) corresponding criticalities of the one or more vulnerabilities of the scanned backup snapshot and (2) a plurality of recovery times corresponding to restoring respective scanned portions of the scanned backup snapshot;

receiving, via the display interface, a request to restore a scanned portion of the scanned backup snapshot;

locating data of the scanned portion of the scanned backup snapshot by traversing a portion of a tree data structure corresponding to the scanned portion; and

providing the data of the scanned portion of the scanned backup snapshot to the requesting system, in order to apply one or more remedies corresponding to the one or more vulnerabilities of the scanned backup snapshot.

15 . The computer program product of claim 14 , wherein the corresponding criticalities of the one or more vulnerabilities of the scanned backup snapshot include one or more of: very critical, critical, or non-critical.

16 . The computer program product of claim 14 , wherein in response to the request associated with identifying the backup snapshot to restore among the plurality of backup snapshots further includes providing a recovery time of the plurality of recovery times, the recovery time associated with restoring the requested scanned portion of the scanned backup snapshot.

17 . The computer program product of claim 16 , wherein the recovery time associated with restoring the requested scanned portion of the scanned backup snapshot is based on a security posture of a restore environment in which the scanned portion of the scanned backup snapshot is to be restored.

18 . The computer program product of claim 17 , wherein the security posture of the restore environment is a high security posture, a medium security posture, or a low security posture.

19 . The computer program product of claim 17 , wherein the recovery time associated with restoring the requested scanned portion of the scanned backup snapshot is further based on an amount of time for providing to the restore environment the data associated with the requested scanned portion of the scanned backup snapshot.

20 . A system, comprising:

a processor; and

a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to:

receive a request, from a requesting system, for identifying a backup snapshot to restore among a plurality of backup snapshots, wherein at least a scanned backup snapshot of the plurality of backup snapshots was scanned for one or more vulnerabilities;

in response to the request for identifying the backup snapshot to restore among the plurality of backup snapshots, providing, via a display interface, a predetermined identification of one or more vulnerabilities of the scanned backup snapshot, wherein the predetermined identification indicates (1) corresponding criticalities of the one or more vulnerabilities of the scanned backup snapshot and (2) a plurality of recovery times corresponding to restoring respective scanned portions of the scanned backup snapshot;

receive, via the display interface, a request to restore a scanned portion of the scanned backup snapshot;

locate data of the scanned portion of the scanned backup snapshot by traversing a portion of a tree data structure corresponding to the scanned portion; and

provide the data of the request to restore the scanned portion of the scanned backup snapshot to the requesting system, in order to apply one or more remedies corresponding to the one or more vulnerabilities of the scanned backup snapshot.