System for securely recovering backup and data protection infrastructure
Described is a system that securely recovers critical backup and data protection infrastructure such as a backup application that manages data for a backup and recovery system. Such a capability may be provided by securely storing a copy of metadata associated with a production backup application into an isolated recovery environment. By storing the metadata on the isolated recovery environment, the metadata may be secure from potential security threats such as ransomware that may attack the production infrastructure itself. Accordingly, the secure copy of metadata may then be restored to a sandboxed environment with the isolated recovery environment and used to create a recovery instance of the backup application. The system may also perform various tests on the recovered instance of the backup application in response to particular security threats before being exposed to a production system for recovery purposes.
1. A system comprising:
one or more processors; and
a non-transitory computer readable medium storing a plurality of instructions, which when executed, cause the one or more processors to:
receive, from a source data protection storage of a production backup system and at a target data protection storage of an isolated recovery system, application metadata associated with a backup application, the backup application performing backup operations associated with the production backup system, the isolated recovery system being isolated from the production backup system;
apply a retention lock to the application metadata stored by the target data protection storage of the isolated recovery system, the application of retention lock causing a set of immutable application metadata copies to be created and persistent for a predefined time period;
restore the application metadata stored by the target data protection storage to a sandboxed environment within the isolated recovery system;
create an instance of the backup application within the sandboxed environment within the isolated recovery system using the restored application metadata; and
expose the instance of the backup application in the isolated recovery system to the production backup system.
2. The system of claim 1 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
receive, from the production backup system, an indication of a security threat; and
perform, within the sandboxed environment and on the instance of the backup application, one or more tests associated with the security threat.
3. The system of claim 1 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
provide, from the isolated recovery system and to the production backup system, the recovery instance of the backup application to recover the backup application that has been rendered unusable by a security threat on the production backup system.
4. The system of claim 1 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
provide, from the isolated recovery system and to the production backup system, the restored application metadata to recover the application metadata that has been rendered unusable by a security threat on the production backup system.
5. The system of claim 1 , wherein creating the instance of the backup application includes installing the backup application within the sandboxed environment using the restored application metadata.
6. The system of claim 1 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
activate a data connection between the production backup system and the isolated recovery system;
initiate a transfer of data, via the activated data connection and from the production backup system to the isolated recovery system, that synchronizes the application metadata stored by the target data protection storage with a version of the application metadata stored by the source data protection storage; and
deactivate, in response to determining the synchronization is complete, the data connection between the production backup system and the isolated recovery system to prevent access to the isolated recovery system from the production environment.
7. The system of claim 1 , wherein the application metadata includes a backup catalog that is relied upon by the backup application to recover components of the production backup system.
8. The system of claim 1 , wherein the application metadata stored by the target data source is stored as part of a set of application metadata copies that correspond to a set of backup application restore time points.
9. A method comprising:
receiving, from a source data protection storage of a production backup system and at a target data protection storage of an isolated recovery system, application metadata associated with a backup application, the backup application performing backup operations associated with the production backup system, the isolated recovery system being isolated from the production backup system;
applying a retention lock to the application metadata stored by the target data protection storage of the isolated recovery system, the application of retention lock causing a set of immutable application metadata copies to be created and persistent for a predefined time period;
restoring the application metadata stored by the target data protection storage to a sandboxed environment within the isolated recovery system;
creating an instance of the backup application within the sandboxed environment within the isolated recovery system using the restored application metadata; and
exposing the instance of the backup application in the isolated recovery system to the production backup system.
10. The method of claim 9 , further comprising:
receiving, from the production backup system, an indication of a security threat; and
performing, within the sandboxed environment and on the instance of the backup application, one or more tests associated with the security threat.
11. The method of claim 9 , further comprising:
providing, from the isolated recovery system and to the production backup system, the recovery instance of the backup application to recover the backup application that has been rendered unusable by a security threat on the production backup system.
12. The method of claim 9 , further comprising:
providing, from the isolated recovery system and to the production backup system, the restored application metadata to recover the application metadata that has been rendered unusable by a security threat on the production backup system.
13. The method of claim 9 , wherein creating the instance of the backup application includes installing the backup application within the sandboxed environment using the restored application metadata.
14. The method of claim 9 , further comprising:
activating a data connection between the production backup system and the isolated recovery system;
initiating a transfer of data, via the activated data connection and from the production backup system to the isolated recovery system, that synchronizes the application metadata stored by the target data protection storage with a version of the application metadata stored by the source data protection storage; and
deactivating, in response to determining the synchronization is complete, the data connection between the production backup system and the isolated recovery system to prevent access to the isolated recovery system from the production environment.
15. A computer program product comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein to be executed by one or more processors, the program code including instructions to:
receive, from a source data protection storage of a production backup system and at a target data protection storage of an isolated recovery system, application metadata associated with a backup application, the backup application performing backup operations associated with the production backup system, the isolated recovery system being isolated from the production backup system;
apply a retention lock to the application metadata stored by the target data protection storage of the isolated recovery system, the application of retention lock causing a set of immutable application metadata copies to be created and persistent for a predefined time period;
restore the application metadata stored by the target data protection storage to a sandboxed environment within the isolated recovery system;
create an instance of the backup application within the sandboxed environment within the isolated recovery system using the restored application metadata; and
expose the instance of the backup application in the isolated recovery system to the production backup system.
16. The computer program product of claim 15 , wherein the program code includes further instructions to:
receive, from the production backup system, an indication of a security threat; and
perform, within the sandboxed environment and on the instance of the backup application, one or more tests associated with the security threat.
17. The computer program product of claim 15 , wherein the program code includes further instructions to:
provide, from the isolated recovery system and to the production backup system, the recovery instance of the backup application to recover the backup application that has been rendered unusable by a security threat on the production backup system.
18. The computer program product of claim 15 , wherein the program code includes further instructions to:
provide, from the isolated recovery system and to the production backup system, the restored application metadata to recover the application metadata that has been rendered unusable by a security threat on the production backup system.
19. The computer program product of claim 15 , wherein creating the instance of the backup application includes installing the backup application within the sandboxed environment using the restored application metadata.
20. The computer program product of claim 15 , wherein the program code includes further instructions to:
activate a data connection between the production backup system and the isolated recovery system;
initiate a transfer of data, via the activated data connection and from the production backup system to the isolated recovery system, that synchronizes the application metadata stored by the target data protection storage with a version of the application metadata stored by the source data protection storage; and
deactivate, in response to determining the synchronization is complete, the data connection between the production backup system and the isolated recovery system to prevent access to the isolated recovery system from the production environment.