Secure software defined storage

1. A method for providing data security for software defined storage, comprising:

intercepting data to be written to a software defined storage location;

performing a malware scan on a first block of the intercepted data to determine whether the data represents malware, the first block of the intercepted data including personally identifiable information;

performing a malware scan on a second block of the intercepted data to determine whether the data represents malware, the second block of the intercepted data not including personally identifiable information;

performing a classification operation on the first and second blocks of intercepted data to obtain classification data corresponding to the first and second blocks of intercepted data, the classification data to represent whether at least one of the first block or the second block contains personally identifiable information;

in response to determining at least one of the first block or the second block includes personally identifiable information, applying data loss prevention to the at least one of the first block or the second block of intercepted data; and

responsive to a determination that the data does not represent malware, transmitting the intercepted data to the software defined storage location.

2. The method of claim 1 , further including generating metadata including the classification data, wherein the transmitting of the intercepted data includes providing the metadata with the intercepted data, the metadata to be stored in the software defined storage.

3. The method of claim 2 , further including, in response to a request to access the intercepted data:

accessing the intercepted data and the metadata from the software defined storage;

analyzing the classification data included in the metadata;

in response to determining that the classification data indicates that data loss prevention is to be applied, determining whether the intercepted data satisfies one or more data loss prevention rules; and

providing the intercepted data based on the whether the intercepted data satisfies the one or more data loss prevention rules.

4. The method of claim 3 , wherein the request is received from a client device, and wherein the providing of the intercepted data based on the classification includes determining that the client device is authorized to access the intercepted data based on the classification.

5. The method of claim 1 , wherein the performing of the classification operation includes generating the classification data based on content of the intercepted data.

6. The method of claim 5 , wherein the performing of the classification operation includes determining whether the intercepted data is encrypted.

7. The method of claim 1 , further including, in response to determining that the intercepted data includes malware, at least one of:

(i) outputting an alarm;

(ii) quarantining the intercepted data; or

(iii) deleting the intercepted data.

8. A tangible computer-readable storage disk or storage device comprising instructions that, when executed by one or more processors, cause the one or more processors to at least:

intercept data to be written to a software defined storage location;

perform a malware scan on a first block of the intercepted data to determine whether the data represents malware, the first block of the intercepted data including personally identifiable information;

perform a malware scan on a second block of the intercepted data to determine whether the data represents malware, the second block of the intercepted data not including personally identifiable information;

perform a classification operation on the first and second blocks of intercepted data to obtain classification data corresponding to the first and second blocks of intercepted data, the classification data to represent whether at least one of the first block or the second block contains personally identifiable information;

in response to determining the at least one of the first block or the second block includes personally identifiable information, apply data loss prevention to the at least one of the first block or the second block of intercepted data; and

in response to a determination that the data does not represent malware, transmit the intercepted data to the software defined storage location.

9. The tangible computer-readable storage disk or storage device of claim 8 , wherein the instructions, when executed, cause the one or more processors to-generate metadata including the classification data, wherein the transmitting of the intercepted data includes providing the metadata with the intercepted data, the metadata to be stored in the software defined storage.

10. The tangible computer-readable storage disk or storage device of claim 9 , wherein the instructions, when executed, cause the one or more processors to, in response to a request to access the data:

access the intercepted data and the metadata from the software defined storage;

analyze the classification data included in the metadata;

in response the classification data indicating that data loss prevention is to be applied, determine whether the intercepted data satisfies one or more data loss prevention rules; and

provide the intercepted data based on the whether the intercepted data satisfies the one or more data loss prevention rules.

11. The tangible computer-readable storage disk or storage device of claim 10 , wherein the request is received from a client device, and the instructions, when executed, cause the at least one processor to determine that the client device is authorized to access the intercepted data based on the classification.

12. The tangible computer-readable storage disk or storage device of claim 9 , wherein the instructions, when executed, cause the one or more processors to generate the classification data based on content of the intercepted data.

13. The tangible computer-readable storage disk or storage device of claim 12 , wherein the instructions, when executed, cause the one or more processors to-determine whether the intercepted data is encrypted.

14. The tangible computer-readable storage disk or storage device of claim 8 , wherein the instructions, when executed and in response to determining that the intercepted data includes malware, cause the one or more processors to at least one of:

(i) output an alarm;

(ii) quarantine the intercepted data; or

(iii) delete the intercepted data.

15. An apparatus comprising:

one or more processors; and

a memory device storing instructions executable by the one or more processors to at least:

intercept data to be written to a software defined storage location;

perform a malware scan on a first block of the intercepted data to determine whether the data represents malware, the first block of the intercepted data including personally identifiable information;

perform a malware scan on a second block of the intercepted data to determine whether the data represents malware, the second block of the intercepted data not including personally identifiable information;

perform a classification operation on the first and second blocks of intercepted data to obtain classification data corresponding to the first and second blocks of intercepted data, the classification data to represent whether at least one of the first block or the second block contains personally identifiable information;

in response to determining the at least one of the first block or the second block includes personally identifiable information, apply data loss prevention to the block of intercepted data; and

in response to a determination that the data does not represent malware, provide the intercepted data to the software defined storage location.

16. The apparatus of claim 15 , wherein the one or more processors is to:

generate metadata including the classification data; and

transmit the metadata with the intercepted data.

17. The apparatus of claim 16 , wherein the one or more processors is to, in response to a request to access the data:

access the intercepted data and the metadata from the software defined storage;

analyze the classification data included in the metadata;

in response to a determination that the classification data indicates that data loss prevention is to be applied, determine whether the intercepted data satisfies one or more data loss prevention rules; and

provide the intercepted data based on the whether the intercepted data satisfies the one or more data loss prevention rules.

18. The apparatus of claim 17 , wherein the request is received from a client device, and the one or more processors is to determine that the client device is authorized to access the intercepted data based on the classification.