System and method for securing instant access of data in file based backups in a backup storage system using metadata files

1. A method for managing file based backups (FBBs), the method comprising:

obtaining, by a FBB metadata file manager, a FBB mount request for a FBB mount of a FBB from an application, wherein the application is executing in a production host environment and the FBB is stored on backup storage;

in response to the FBB mount request:

enabling, by the FBB metadata file manager, access to a portion of the FBB by the application;

notifying, by the FBB metadata file manager, a cyber sense device that the access is enabled;

providing, by the FBB metadata file manager and to the cyber sense device, a storage location of the portion of the FBB for which access was enabled;

receiving, by the FBB metadata file manager and from the cyber sense device, a security event notification; and

performing, by the FBB metadata file manager and in response to the security event notification, a security action set.

2. The method of claim 1 , wherein the FBB comprises file system data and the FBB metadata file.

3. The method of claim 1 , wherein the security action set comprises disabling the access to the portion of the FBB.

4. The method of claim 1 , wherein the security action set comprises discarding writes made by the application to the portion of the FBB.

5. The method of claim 1 , wherein the cyber sense device sends the security event notification after detecting a security event.

6. The method of claim 5 , wherein the detecting of the security event by the cyber sense device is based on an analysis of a write being passed through the cyber sense device.

7. The method of claim 5 , wherein the detecting of the security event by the cyber sense device is based on an analysis of a behavior pattern during the enabled access.

8. The method of claim 1 , wherein enabling the access to the portion of the FBB comprises storing a FBB virtual file system in the production host environment.

9. The method of claim 1 , wherein enabling the access to the portion of the FBB comprises:

initiating, by the FBB metadata file manager, generation of a temporary storage device; and

storing a copy of the portion of the FBB in the temporary storage device.

10. A non-transitory computer readable medium comprising computer readable program code, which when executed by a computer processor enables the computer processor to perform a method for managing file based backups (FBBs), the method comprising:

obtaining, by a FBB metadata file manager, a FBB mount request for a FBB mount of a FBB from an application, wherein the application is executing in a production host environment and the FBB is stored on backup storage;

in response to the FBB mount request:

enabling, by the FBB metadata file manager, access to a portion of the FBB by the application;

notifying, by the FBB metadata file manager, a cyber sense device that the access is enabled;

providing, by the FBB metadata file manager and to the cyber sense device, a storage location of the portion of the FBB for which access was enabled;

receiving, by the FBB metadata file manager and from the cyber sense device, a security event notification; and

performing, by the FBB metadata file manager and in response to the security event notification, a security action set.

11. The non-transitory computer readable medium of claim 10 , wherein the FBB comprises file system data and the FBB metadata file.

12. The non-transitory computer readable medium of claim 10 , wherein the security action set comprises disabling the access to the portion of the FBB.

13. The non-transitory computer readable medium of claim 10 , wherein the security action set comprises discarding writes made by the application to the portion of the FBB.

14. The non-transitory computer readable medium of claim 10 , wherein the cyber sense device sends the security event notification after detecting a security event.

15. The non-transitory computer readable medium of claim 14 , wherein the detecting of the security event by the cyber sense device is based on an analysis of a write being passed through the cyber sense device.

16. The non-transitory computer readable medium of claim 14 , wherein the detecting of the security event by the cyber sense device is based on an analysis of a behavior pattern during the enabled access.

17. The non-transitory computer readable medium of claim 10 , wherein enabling the access to the portion of the FBB comprises storing a FBB virtual file system in the production host environment.

18. The non-transitory computer readable medium of claim 10 , wherein enabling the access to the portion of the FBB comprises:

initiating, by the FBB metadata file manager, generation of a temporary storage device; and

storing a copy of the portion of the FBB in the temporary storage device.

19. A system for managing file based backups (FBBs), the system comprising:

a processor comprising circuitry;

memory; and

a FBB metadata file manager executing using the processor and the memory, operatively connected to a cyber sense device, and configured to:

obtain a FBB mount request for a FBB mount of a FBB from an application, wherein the application is executing in a production host environment and the FBB is stored on backup storage;

in response to the FBB mount request:

enable access to a portion of the FBB by the application;

notify the cyber sense device that the access is enabled;

provide, to the cyber sense device, a storage location of the portion of the FBB for which access was enabled;

receive, from the cyber sense device, a security event notification; and

perform, in response to the security event notification, a security action set.

20. The system of claim 19 , wherein the security action set comprises disabling the access to the portion of the FBB and discarding writes made by the application to the portion of the FBB.