Secure delivery of software updates to an isolated recovery environment
Described is a system that provides a mechanism to securely deliver software updates to components of an isolated recovery environment. More specifically, the system provides the ability to include (or inject) a software update as part of a secure data transmission from a production environment to an isolated recovery environment. The data transmission may use existing infrastructure for synchronizing recovery data between the production backup system and isolated recovery system thereby preventing a potential new access point (or vulnerability) to the isolated recovery environment that a cyber security threat may attempt to exploit.
1. A system comprising:
one or more processors; and
a non-transitory computer readable medium storing a plurality of instructions, which when executed, cause the one or more processors to:
receive, from a production backup system and at an isolated recovery system, a data transmission including a software update for a component of the isolated recovery system, the production backup system performing a first validation of the software update before the data transmission;
store the software update as part of a target data protection storage of the isolated recovery system;
apply a retention lock to the software update stored by the target data protection storage of the isolated recovery system, comprising creating an immutable software update copy of the stored software update;
restore the software update stored by the target data protection storage to a sandboxed environment within the isolated recovery system using the immutable software update copy; and
apply the software update to the component of the isolated recovery system in response to performing a second validation of the software update within the sandboxed environment.
2. The system of claim 1 , wherein the data transmission is performed as part of a process to synchronize recovery data between the production backup system and the isolated recovery system, and the software update is included with the recovery data as a payload of the data transmission, the software update being distinct from the recovery data that is synchronized.
3. The system of claim 1 , wherein the target data protection storage stores a copy of recovery data that is synchronized with recovery data stored by a source data protection storage of the production backup system, and the data transmission is performed via a data connection that is used to synchronize recovery data between the production backup system and the isolated recovery system.
4. The system of claim 1 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
identify the target data protection storage includes the software update; and
automatically initiate, in response to identifying the target data protection storage includes the software update, the restoring of the software update to the sandboxed environment and the applying of the software update to the component of the isolated recovery system.
5. The system of claim 1 , wherein performing the first validation of the software update includes validating a signature associated with the software update, and performing the second validation of the software update includes validating the signature and a hash value associated with the software update.
6. The system of claim 1 , wherein access to the isolated recovery system from the production backup system is limited to an operation that synchronizes recovery data between the production backup system and the isolated recovery system.
7. The system of claim 1 , wherein transferring data to the target data protection storage from a system external to the isolated recovery system is limited to the production backup system.
8. The system of claim 1 , wherein the component of the isolated recovery system is associated with a third-party entity that provides the software update to the production backup system.
9. A method comprising:
receiving, from a production backup system and at an isolated recovery system, a data transmission including a software update for a component of the isolated recovery system, the production backup system performing a first validation of the software update before the data transmission;
storing the software update as part of a target data protection storage of the isolated recovery system;
applying a retention lock to the software update stored by the target data protection storage of the isolated recovery system, comprising creating an immutable software update copy of the stored software update;
restoring the software update stored by the target data protection storage to a sandboxed environment within the isolated recovery system using the immutable software update copy; and
applying the software update to the component of the isolated recovery system in response to performing a second validation of the software update within the sandboxed environment.
10. The method of claim 9 , wherein the data transmission is performed as part of a process to synchronize recovery data between the production backup system and the isolated recovery system, and the software update is included with the recovery data as a payload of the data transmission, the software update being distinct from the recovery data that is synchronized.
11. The method of claim 9 , wherein the target data protection storage stores a copy of recovery data that is synchronized with recovery data stored by a source data protection storage of the production backup system, and the data transmission is performed via a data connection that is used to synchronize recovery data between the production backup system and the isolated recovery system.
12. The method of claim 9 , further comprising:
identifying the target data protection storage includes the software update; and
automatically initiating, in response to identifying the target data protection storage includes the software update, the restoring of the software update to the sandboxed environment and the applying of the software update to the component of the isolated recovery system.
13. The method of claim 9 , wherein performing the first validation of the software update includes validating a signature associated with the software update, and performing the second validation of the software update includes validating the signature and a hash value associated with the software update.
14. The method of claim 9 , wherein access to the isolated recovery system from the production backup system is limited to an operation that synchronizes recovery data between the production backup system and the isolated recovery system.
15. A computer program product comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein to be executed by one or more processors, the program code including instructions to:
receive, from a production backup system and at an isolated recovery system, a data transmission including a software update for a component of the isolated recovery system, the production backup system performing a first validation of the software update before the data transmission;
store the software update as part of a target data protection storage of the isolated recovery system;
apply a retention lock to the software update stored by the target data protection storage of the isolated recovery system, comprising creating an immutable software update copy of the stored software update;
restore the software update stored by the target data protection storage to a sandboxed environment within the isolated recovery system using the immutable software update copy; and
apply the software update to the component of the isolated recovery system in response to performing a second validation of the software update within the sandboxed environment.
16. The computer program product of claim 15 , wherein the data transmission is performed as part of a process to synchronize recovery data between the production backup system and the isolated recovery system, and the software update is included with the recovery data as a payload of the data transmission, the software update being distinct from the recovery data that is synchronized.
17. The computer program product of claim 15 , wherein the target data protection storage stores a copy of recovery data that is synchronized with recovery data stored by a source data protection storage of the production backup system, and the data transmission is performed via a data connection that is used to synchronize recovery data between the production backup system and the isolated recovery system.
18. The computer program product of claim 15 , wherein the program code includes further instructions to:
identify the target data protection storage includes the software update; and
automatically initiate, in response to identifying the target data protection storage includes the software update, the restoring of the software update to the sandboxed environment and the applying of the software update to the component of the isolated recovery system.
19. The computer program product of claim 15 , wherein performing the first validation of the software update includes validating a signature associated with the software update, and performing the second validation of the software update includes validating the signature and a hash value associated with the software update.
20. The computer program product of claim 15 , wherein access to the isolated recovery system from the production backup system is limited to an operation that synchronizes recovery data between the production backup system and the isolated recovery system.