Abstract: The present disclosure is directed at systems and methods for detecting ransomware infection in filesystems. These systems and methods may enable a computer user to detect a ransomware infection within a filesystem utilizing a snapshot image-based backup. According to some embodiments, the disclosed systems and methods analyze metadata describing the contents of an examined filesystem embodied in a Master File Table (MFT). Also according to some embodiments, the disclosed systems and methods compute an entropy associated with an extracted sample of files to distinguish between infected and uninfected file systems. Relative to other techniques, the disclosed systems/methods can decrease the time and/or computational resources required to detect ransomware, while also decreasing false positives and false negatives.

Abstract: Web-enabled routers are remotely and securely administered in a centralized fashion. A server for configuring a remotely configurable router on a computer network includes a memory to store a plurality of router configuration profiles that include a first router configuration profile associated with the remotely configurable router at a first instant in time. A server may also include a network interface to receive a request to reconfigure the remotely configurable router via the computer network. A server may also include a processor, operably coupled to the network interface and to the memory, that receives instructions to provide a second router configuration profile to the remotely configurable router for installation on the remotely configured router. The processor may also provide the first router configuration profile to the remotely configurable router in response to an indication that the second router configuration profile was not successfully installed on the remotely configurable router.

Abstract: A “Local Ingestion” (LI) Server resides and operates in the LAN of a business organization, and provides backup storage for data generated using various software applications locally installed on client terminals (“non-SaaS data”) and data generated using various SaaS applications accessed by client terminals via the Internet (“SaaS data”). The LI Server can receive data generated in a native format by either a local non-SaaS application or one or more SaaS applications and convert from different native data formats to an application platform-independent or “canonical” format for backed-up SaaS data and non-SaaS data. The LI Server may then analyze data generated using different source applications, and backed-up in a canonical format, so as to identify particular content, patterns, relationships, and/or trends and thereby extract valuable business-related or other information from multiple cross-platform files.

Abstract: Web-enabled routers are remotely and securely administered in a centralized fashion. A server for configuring a remotely configurable router on a computer network includes a memory to store a plurality of router configuration profiles that include a first router configuration profile associated with the remotely configurable router at a first instant in time. A server may also include a network interface to receive a request to reconfigure the remotely configurable router via the computer network. A server may also include a processor, operably coupled to the network interface and to the memory, that receives instructions to provide a second router configuration profile to the remotely configurable router for installation on the remotely configured router. The processor may also provide the first router configuration profile to the remotely configurable router in response to an indication that the second router configuration profile was not successfully installed on the remotely configurable router.

Abstract: Web-enabled routers are remotely and securely administered in a centralized fashion. A router receives a configuration profile from a dedicated web domain that maintains a repository of configuration profiles for multiple routers. The web domain also provides a web portal for customized generation of new configuration profiles based on stored profiles. When a new profile is deployed to and instantiated on a router, the router transmits a “heartbeat” to ensure that it can maintain connectivity with the web domain; if not, the router reverts to a previous “failover” configuration profile that ensures connectivity to the web domain. A router also may be equipped with both a wired and a wireless (e.g., a 3G, 4G, or 4G LTE) WAN communication interface. In the event of a wired connectivity issue, the router controls the wireless WAN interface to prioritize traffic for the router heartbeat and data backup/restore operations between a computer network for which the router serves as a gateway and the web domain.

Abstract: A “Local Ingestion” (LI) Server resides and operates in the LAN of a business organization, and provides backup storage for data generated using various software applications locally installed on client terminals (“non-SaaS data”) and data generated using various SaaS applications accessed by client terminals via the Internet (“SaaS data”). The LI Server can receive data generated in a native format by either a local non-SaaS application or one or more SaaS applications and convert from different native data formats to an application platform-independent or “canonical” format for backed-up SaaS data and non-SaaS data. The LI Server may then analyze data generated using different source applications, and backed-up in a canonical format, so as to identify particular content, patterns, relationships, and/or trends and thereby extract valuable business-related or other information from multiple cross-platform files.

Abstract: The present disclosure is directed at systems and methods for detecting ransomware infection in filesystems. These systems and methods may enable a computer user to detect a ransomware infection within a filesystem utilizing a snapshot image-based backup. According to some embodiments, the disclosed systems and methods analyze metadata describing the contents of an examined filesystem embodied in a Master File Table (MFT). Also according to some embodiments, the disclosed systems and methods compute an entropy associated with an extracted sample of files to distinguish between infected and uninfected file systems. Relative to other techniques, the disclosed systems/methods can decrease the time and/or computational resources required to detect ransomware, while also decreasing false positives and false negatives.

Abstract: Web-enabled routers are remotely and securely administered in a centralized fashion. A router receives a configuration profile from a dedicated web domain that maintains a repository of configuration profiles for multiple routers. The web domain also provides a web portal for customized generation of new configuration profiles based on stored profiles. When a new profile is deployed to and instantiated on a router, the router transmits a “heartbeat” to ensure that it can maintain connectivity with the web domain; if not, the router reverts to a previous “failover” configuration profile that ensures connectivity to the web domain. A router also may be equipped with both a wired and a wireless (e.g., a 3G, 4G, or 4G LTE) WAN communication interface. In the event of a wired connectivity issue, the router controls the wireless WAN interface to prioritize traffic for the router heartbeat and data backup/restore operations between a computer network for which the router serves as a gateway and the web domain.