Data health monitoring system and methods
A data health monitoring system and method are provided which may be configured to monitor different indicators of a computing device which may affect the health of data, looking for early warning signs that could indicate future data loss or corruption. The system may periodically query certain data health indicators, such as S.M.A.R.T. status, disk temperature, read and write errors, etc. The system may also monitor data as it is being accessed keeping track of other indicators such as: files that are modified, when the last backed up was, protection status of the file, type of changes made to the file, which application is making changes, etc. Preferably, the combined status of each data health indicator may be rolled up into a simple message and shown to the user via notifications, reports, logs or a user interface.
1. A computer implemented data health monitoring system, the system comprising:
a computing device having a processor, a memory in communication with the processor, and a data store having a plurality of files;
an indexing logic executable by the processor and configured to read and measure a parameter of the computing device, the parameter used as an input by the indexing logic to calculate a suspicious index value; and
wherein the indexing logic measures and determines all of the following parameters which are used as inputs to calculate the suspicious index value:
a time of a last back up of the plurality of files;
a number of read and write errors on the data store; and
a disk temperature of the data store.
2. The system of claim 1 , further comprising a process parameter and wherein the process parameter comprises a process parameter constant value and a behavior parameter comprises a behavior parameter constant value, and wherein the suspicious index value calculation comprises both the process parameter constant value and the behavior parameter constant value.
3. The system of claim 1 , wherein the indexing logic is configured to read a process parameter that comprises reading if an executable of a target program is signed by a legitimate authority.
4. The system of claim 1 , wherein the indexing logic is configured to read a process parameter that comprises reading if a target program was installed by an authorized user.
5. The system of claim 1 , wherein the indexing logic is configured to read a process parameter that comprises reading if a target program was obtained from an email.
6. The system of claim 1 , wherein the indexing logic is configured to read a behavior parameter that comprises determining if there was a change of a magic number of a file in the data store.
7. The system of claim 1 , wherein an increase in the read and write errors on the data store changes the suspicious index value.
8. The system of claim 1 , wherein a change in the disk temperature of the data store changes the suspicious index value.
9. The system of claim 1 , wherein a location of a target program on the computing device impacts the suspicious index value.
10. The system of claim 1 , wherein an increase in entropy of a file of the plurality of files changes the suspicious index value.
11. The system of claim 1 , wherein the suspicious index value is modified when more than a threshold percentage of the plurality of files on the data store are read.
12. A computer implemented data health monitoring method, the method comprising the following steps:
calculating a suspicious index value through indexing logic configured to be run on a computing device, the computing device comprising a processor, a memory in communication with the processor, and a data store having a plurality of files;
determining a time of a last back up of the plurality of files;
determining a number of read and write errors on the data store; and
determining a disk temperature of the data store;
wherein the suspicious index value is determined based on the time of last back up, the number of read and write errors, and the disk temperature.