Granted Patent B2

US 11,841,940 · App. 17/377,845 · Granted Dec 12, 2023

Inventors: Susan E. Young (North Scituate, RI); Elie Jreij (Pflugerville, TX); Arieh Don (Newton, MA)

Assignee: Dell Products L.P.

G06F21/55G06F2221/034

Abstract

Claims (39)

1. An information handling system comprising:

at least one processor;

a plurality of physical storage resources; and

a network interface configured to communicatively couple the information handling system to a plurality of host systems;

wherein the information handling system is configured to:

determine a likelihood of compromise for each of the plurality of host systems;

in response to the likelihood of compromise for a particular host system exceeding a threshold likelihood, carry out a remedial action with respect to the particular host system, wherein the remedial action includes restricting access from the particular host system to the plurality of physical storage resources;

receive a random key associated with the likelihood of compromise; and

in response to the random key, restore access from the particular host system to the plurality of physical storage resources.

2. The information handling system of claim 1 , wherein the information handling system is accessible via Multipath Input/Output (MPIO).

3. The information handling system of claim 1 , further configured to notify a user prior to carrying out the remedial action.

4. The information handling system of claim 1 , wherein the likelihood of compromise is based on at least one factor selected from the group consisting of a presence of unauthorized code executing on the particular host system, a presence of a known security issue with code executing on the particular host system, a presence of unexpected traffic behavior from the particular host system, a difference in hardware or software between the particular host system and other host systems of the plurality of host systems.

5. The information handling system of claim 1 , wherein:

in response to the likelihood of compromise being in a first range, the access from the host to the plurality of physical storage resources is restricted to read-only access; and

in response to the likelihood of compromise being in a second range, the access from the host to the plurality of physical storage resources is disabled.

6. A method comprising:

an information handling system that includes a plurality of physical storage resources communicatively coupling to a plurality of host systems;

the information handling system determining a likelihood of compromise for each of the plurality of host systems;

in response to the likelihood of compromise for a particular host system exceeding a threshold likelihood, the information handling system carrying out a remedial action with respect to the particular host system, wherein the remedial action includes restricting access from the particular host system to the plurality of physical storage resources;

the information handling system receiving a random key associated with the likelihood of compromise; and

in response to the random key, the information handling system restoring access from the particular host system to the plurality of physical storage resources.

7. The method of claim 6 , wherein the information handling system is accessible via Multipath Input/Output (MPIO).

8. The method of claim 6 , further comprising the information handling system notifying a user prior to carrying out the remedial action.

9. The method of claim 6 , wherein the likelihood of compromise is based on at least one factor selected from the group consisting of a presence of unauthorized code executing on the particular host system, a presence of a known security issue with code executing on the particular host system, a presence of unexpected traffic behavior from the particular host system, a difference in hardware or software between the particular host system and other host systems of the plurality of host systems.

10. The method of claim 6 , wherein:

in response to the likelihood of compromise being in a first range, the access from the host to the plurality of physical storage resources is restricted to read-only access; and

in response to the likelihood of compromise being in a second range, the access from the host to the plurality of physical storage resources is disabled.

11. An article of manufacture comprising a non-transitory, computer-readable medium having computer-executable code thereon that is executable by a processor of an information handling system that includes a plurality of physical storage resources, the code being executable for:

communicatively coupling to a plurality of host systems;

determining a likelihood of compromise for each of the plurality of host systems;

in response to the likelihood of compromise for a particular host system exceeding a threshold likelihood, carrying out a remedial action with respect to the particular host system, wherein the remedial action includes restricting access from the particular host system to the plurality of physical storage resources;

receiving a random key associated with the likelihood of compromise; and

in response to the random key, restoring access from the particular host system to the plurality of physical storage resources.

12. The article of claim 11 , wherein the information handling system is accessible via Multipath Input/Output (MPIO).

13. The article of claim 11 , wherein the code is further executable for notifying a user prior to carrying out the remedial action.

14. The article of claim 11 , wherein the likelihood of compromise is based on at least one factor selected from the group consisting of a presence of unauthorized code executing on the particular host system, a presence of a known security issue with code executing on the particular host system, a presence of unexpected traffic behavior from the particular host system, a difference in hardware or software between the particular host system and other host systems of the plurality of host systems.

15. The article of claim 11 , wherein:

in response to the likelihood of compromise being in a first range, the access from the host to the plurality of physical storage resources is restricted to read-only access; and

in response to the likelihood of compromise being in a second range, the access from the host to the plurality of physical storage resources is disabled.

Assignments (8)

Continuity (1)