{"id":6353,"date":"2026-06-19T13:54:43","date_gmt":"2026-06-19T13:54:43","guid":{"rendered":"https:\/\/cloudsave.app\/knowledge-base\/immutable-database-storage-ransomware\/"},"modified":"2026-06-19T13:59:00","modified_gmt":"2026-06-19T13:59:00","slug":"arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea","status":"publish","type":"post","link":"https:\/\/cloudsave.app\/bs\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\/","title":{"rendered":"Arhitektura nepromjenjive pohrane za arhive baza podataka radi suzbijanja ransomwarea"},"content":{"rendered":"<p>U modernom okru\u017eenju prijetnji, ransomware je evoluirao od oportunisti\u010dke enkripcije do visoko ciljanih kampanja vi\u0161estruke iznude. Napredne trajne prijetnje (APT) i ransomware sindikati sada aktivno tra\u017ee infrastrukturu za sigurnosno kopiranje i arhive baza podataka tokom svog vremena boravka u sistemu. Ako napada\u010d kompromituje va\u0161u primarnu bazu podataka i istovremeno izbri\u0161e ili \u0161ifrira va\u0161e repozitorije sigurnosnih kopija, va\u0161a organizacija se suo\u010dava s katastrofalnim gubitkom podataka.<\/p>\n<p>Za administratore baza podataka (DBA) i DevOps in\u017eenjere, tradicionalna 3-2-1 strategija sigurnosnog kopiranja vi\u0161e nije dovoljna. Kako bi se garantovala pre\u017eivljavanje podataka, infrastrukturni timovi moraju usvojiti pravilo 3-2-1-1, gdje kona\u010dna \u201e1\u201c predstavlja <strong>nepromjenjivu (immutable) pohranu<\/strong>.<\/p>\n<p>Ovaj \u010dlanak pru\u017ea sveobuhvatan, tehni\u010dki dubinski pregled projektovanja, implementacije i upravljanja nepromjenjivom pohranom za arhive baza podataka kako bi se osigurala apsolutna otpornost na ransomware.<\/p>\n<h2>Mehanika nepromjenjive pohrane<\/h2>\n<p>Nepromjenjiva pohrana se oslanja na arhitekturu &#8220;pi\u0161i jednom, \u010ditaj mnogo&#8221; (WORM). Jednom kada se podaci zapi\u0161u na nepromjenjivu metu, nijedan korisnik ih ne mo\u017ee modificirati, \u0161ifrirati ili izbrisati\u2014uklju\u010duju\u0107i administratore s root privilegijama ili kompromitovane servisne ra\u010dune\u2014sve dok ne istekne matemati\u010dki nametnuto vremensko zaklju\u010davanje.<\/p>\n<h3>Na\u010din uskla\u0111enosti (Compliance Mode) naspram na\u010dina upravljanja (Governance Mode)<\/h3>\n<p>Prilikom implementacije nepromjenjivosti, posebno u objektnoj pohrani u oblaku kao \u0161to su AWS S3, Azure Blob ili S3-kompatibilni lokalni SAN-ovi, morate razumjeti razliku izme\u0111u na\u010dina zadr\u017eavanja:<\/p>\n<ul>\n<li><strong>Na\u010din upravljanja (Governance Mode):<\/strong> Sprje\u010dava standardne korisnike da bri\u0161u ili mijenjaju objekte. Me\u0111utim, korisnici s odre\u0111enim IAM dozvolama (npr. <code>s3:BypassGovernanceRetention<\/code>) mogu zaobi\u0107i zaklju\u010davanje. Ovo je korisno za testiranje, ali <strong>nedovoljno za za\u0161titu od ransomwarea<\/strong>, jer napada\u010di \u010desto eskaliraju privilegije na nivo domenskog administratora ili root korisnika.<\/li>\n<li><strong>Na\u010din uskla\u0111enosti (Compliance Mode):<\/strong> Zlatni standard za odbranu od ransomwarea. Jednom kada je objekt zaklju\u010dan u na\u010dinu uskla\u0111enosti, njegov period zadr\u017eavanja se ne mo\u017ee skratiti, a objekt ne mo\u017ee izbrisati <em>niko<\/em>, uklju\u010duju\u0107i AWS root ra\u010dun. Zaklju\u010davanje se provodi na nivou klastera za pohranu.<\/li>\n<\/ul>\n<h2>Projektovanje cjevovoda za nepromjenjive sigurnosne kopije<\/h2>\n<p>Robusna arhitektura arhiviranja baza podataka odvaja aktivne operacije baze podataka od nepromjenjivog nivoa arhive. Ne mo\u017eete primijeniti nepromjenjivost na aktivne datoteke baze podataka (poput <code>.mdf<\/code>\/<code>.ldf<\/code> u SQL Serveru ili <code>pg_data<\/code> direktorija u PostgreSQL-u) jer baze podataka zahtijevaju stalan pristup \u010ditanja\/pisanja.<\/p>\n<p>Umjesto toga, nepromjenjivost se primjenjuje na:<br \/>\n1.  <strong>Datoteke punih i diferencijalnih sigurnosnih kopija:<\/strong> Osnovne snimke baze podataka.<br \/>\n2.  <strong>Transakcijske logove \/ WAL datoteke:<\/strong> Kontinuirani tok promjena baze podataka potreban za oporavak do odre\u0111ene ta\u010dke u vremenu (PITR).<\/p>\n<h3>Ciljevi pohrane za nepromjenjivost<\/h3>\n<p>Mo\u017eete implementirati nepromjenjivu pohranu na razli\u010ditim nivoima infrastrukture:<br \/>\n*   <strong>Objektna pohrana u oblaku:<\/strong> AWS S3 Object Lock, Azure Blob Immutable Storage, Google Cloud Storage Retention Policies.<br \/>\n*   <strong>Lokalna objektna pohrana:<\/strong> MinIO, Cloudian ili Pure Storage FlashBlade koji podr\u017eavaju S3 Object Lock API-je.<br \/>\n*   <strong>Blok\/datote\u010dna pohrana:<\/strong> ZFS sa snimcima samo za \u010ditanje i delegiranom administracijom, ili Linux atributi datoteka.<\/p>\n<h2>Implementacija nepromjenjive pohrane: Tehni\u010dki vodi\u010di<\/h2>\n<h3>1. Objektna pohrana u oblaku: AWS S3 Object Lock<\/h3>\n<p>Da biste za\u0161titili dumpove baza podataka i transakcijske logove u AWS-u, morate omogu\u0107iti Object Lock u trenutku kreiranja bucket-a.<\/p>\n<p>Prvo, kreirajte bucket s omogu\u0107enim Object Lock-om:<\/p>\n<pre><code class=\"language-bash\">aws s3api create-bucket \n    --bucket prod-db-archive-immutable \n    --region us-east-1 \n    --object-lock-enabled-for-bucket\n<\/code><\/pre>\n<p>Zatim, konfiguri\u0161ite zadanu politiku zadr\u017eavanja. Za arhive baza podataka, 30-dnevno zaklju\u010davanje uskla\u0111enosti je standardna osnova, osiguravaju\u0107i da imate mjesec dana nepromjenjivih sigurnosnih kopija.<\/p>\n<pre><code class=\"language-bash\">aws s3api put-object-lock-configuration \n    --bucket prod-db-archive-immutable \n    --object-lock-configuration '{\n        &quot;ObjectLockEnabled&quot;: &quot;Enabled&quot;,\n        &quot;Rule&quot;: {\n            &quot;DefaultRetention&quot;: {\n                &quot;Mode&quot;: &quot;COMPLIANCE&quot;,\n                &quot;Days&quot;: 30\n            }\n        }\n    }'\n<\/code><\/pre>\n<p>Kada va\u0161a skripta ili agent za sigurnosno kopiranje baze podataka po\u0161alje datoteku u ovaj bucket, S3 automatski izra\u010dunava <code>Retain Until Date<\/code> na osnovu vremenske oznake kreiranja objekta plus 30 dana.<\/p>\n<h3>2. Lokalna nepromjenjivost: ZFS i Linux atributi<\/h3>\n<p>Ako arhivirate baze podataka na lokalni Linux server za sigurnosne kopije, mo\u017eete posti\u0107i pseudo-nepromjenjivost koriste\u0107i <code>chattr<\/code> komandu, ili pravu nepromjenjivost koriste\u0107i ZFS snimke.<\/p>\n<p><strong>Kori\u0161tenje Linux <code>chattr<\/code>:<\/strong><br \/>\nOznaka <code>+i<\/code> (immutable) sprje\u010dava modifikaciju, brisanje ili preimenovanje datoteke.<\/p>\n<pre><code class=\"language-bash\"># Dump baze podataka\npg_dump -U postgres -Fc mydb &gt; \/backups\/mydb_$(date +%F).dump\n\n# U\u010dinite sigurnosnu kopiju nepromjenjivom\nsudo chattr +i \/backups\/mydb_$(date +%F).dump\n\n# Provjerite atribut\nlsattr \/backups\/mydb_$(date +%F).dump\n# Izlaz: ----i---------e------- \/backups\/mydb_2023-10-27.dump\n<\/code><\/pre>\n<p><em>Napomena: Iako <code>chattr<\/code> zaustavlja osnovne ransomware skripte, sofisticirani napada\u010d s root pristupom mo\u017ee jednostavno pokrenuti <code>chattr -i<\/code>. Stoga se ovo mora kombinovati sa strogim RBAC-om i izolovanim mre\u017eama za sigurnosne kopije.<\/em><\/p>\n<p><strong>Kori\u0161tenje ZFS snimaka:<\/strong><br \/>\nZFS pru\u017ea mnogo ja\u010du odbranu. Pravljenjem snimka i postavljanjem \u201ezadr\u017eavanja\u201c (hold) na njega, sprje\u010davate uni\u0161tavanje snimka.<\/p>\n<pre><code class=\"language-bash\"># Napravite snimak dataseta sigurnosnih kopija\nzfs snapshot tank\/db_backups@archive_$(date +%F)\n\n# Postavite zadr\u017eavanje na snimak kako biste sprije\u010dili brisanje\nzfs hold keep_30_days tank\/db_backups@archive_$(date +%F)\n\n# \u010cak ni root ne mo\u017ee uni\u0161titi ovaj snimak bez osloba\u0111anja zadr\u017eavanja\nzfs destroy tank\/db_backups@archive_$(date +%F)\n# Izlaz: cannot destroy 'tank\/db_backups@archive_...': dataset is busy\n<\/code><\/pre>\n<h2>Strategije arhiviranja specifi\u010dne za baze podataka<\/h2>\n<p>Da biste postigli oporavak do odre\u0111ene ta\u010dke u vremenu (PITR), morate kontinuirano arhivirati transakcijske logove u svoju nepromjenjivu pohranu.<\/p>\n<h3>PostgreSQL WAL arhiviranje sa pgBackRest<\/h3>\n<p><code>pgBackRest<\/code> je vrlo pouzdan alat za sigurnosno kopiranje za PostgreSQL koji izvorno podr\u017eava S3-kompatibilnu pohranu. Da biste za\u0161titili svoje Write-Ahead logove (WAL), konfiguri\u0161ite <code>pgBackRest<\/code> da \u0161alje podatke direktno u va\u0161 nepromjenjivi S3 bucket.<\/p>\n<p>U va\u0161em <code>pgbackrest.conf<\/code>:<\/p>\n<pre><code class=\"language-ini\">[global]\nrepo1-type=s3\nrepo1-s3-bucket=prod-db-archive-immutable\nrepo1-s3-region=us-east-1\nrepo1-s3-endpoint=s3.amazonaws.com\nrepo1-s3-key=AKIAIOSFODNN7EXAMPLE\nrepo1-s3-key-secret=wJalrXUtnFEMI\/K7MDENG\/bPxRfiCYEXAMPLEKEY\n\n# Osigurajte da se zadr\u017eavanje uskladi s va\u0161om konfiguracijom S3 Object Lock\nrepo1-retention-full=2\nrepo1-retention-archive=2\n\n[prod_cluster]\npg1-path=\/var\/lib\/postgresql\/14\/main\n<\/code><\/pre>\n<p><em>Klju\u010dno razmatranje:<\/em> Ako va\u0161 S3 bucket name\u0107e 30-dnevno zaklju\u010davanje uskla\u0111enosti, a <code>pgBackRest<\/code> poku\u0161a iste\u0107i i izbrisati WAL datoteke nakon 14 dana na osnovu <code>repo1-retention-archive<\/code>, pozivi API-ja za brisanje \u0107e propasti. Morate osigurati da je politika zadr\u017eavanja va\u0161eg softvera za sigurnosno kopiranje ve\u0107a ili jednaka nepromjenjivom zaklju\u010davanju na nivou pohrane.<\/p>\n<h3>Microsoft SQL Server: Sigurnosna kopija na URL<\/h3>\n<p>SQL Server podr\u017eava izvorne sigurnosne kopije direktno na S3-kompatibilnu objektnu pohranu. Mo\u017eete konfigurisati SQL Server Agent zadatak da pi\u0161e <code>.bak<\/code> i <code>.trn<\/code> datoteke direktno u nepromjenjivi bucket.<\/p>\n<pre><code class=\"language-sql\">CREATE CREDENTIAL [s3:\/\/prod-db-archive-immutable.s3.us-east-1.amazonaws.com]\nWITH IDENTITY = 'S3 Access Key',\nSECRET = 'AccessKeyID:SecretAccessKey';\nGO\n\nBACKUP DATABASE [ProductionDB]\nTO URL = 's3:\/\/prod-db-archive-immutable.s3.us-east-1.amazonaws.com\/ProductionDB_Full.bak'\nWITH FORMAT, COMPRESSION, STATS = 10;\nGO\n<\/code><\/pre>\n<h2>Automatizacija i orkestracija sa CloudSave<\/h2>\n<p>Upravljanje oznakama nepromjenjivog zadr\u017eavanja, rotiranje pristupnih klju\u010deva i osiguravanje sinhronizacije izme\u0111u politika zadr\u017eavanja baze podataka i zaklju\u010davanja pohrane putem prilago\u0111enih skripti je vrlo podlo\u017eno gre\u0161kama. Jedna pogre\u0161na konfiguracija u cron zadatku ili API pozivu mo\u017ee ostaviti va\u0161e arhive izlo\u017eenim ili rezultirati vrtoglavim tro\u0161kovima pohrane u oblaku zbog napu\u0161tenih, zaklju\u010danih objekata.<\/p>\n<p>Enterprise platforme za sigurnosno kopiranje kao \u0161to je CloudSave pojednostavljuju ovu arhitekturu. CloudSave se izvorno integri\u0161e sa AWS S3 Object Lock, Azure Blob Immutable Storage i lokalnim S3-kompatibilnim API-jima.<\/p>\n<p>Prilikom konfigurisanja plana sigurnosnog kopiranja baze podataka u CloudSave:<br \/>\n1.  Platforma automatski upravlja VSS (Volume Shadow Copy Service) mirovanjem za SQL Server ili <code>pg_start_backup()<\/code> API-jem za PostgreSQL.<br \/>\n2.  Prenosi deduplikovane, \u0161ifrovane podatke sigurnosne kopije direktno na cilj pohrane.<br \/>\n3.  CloudSave dinami\u010dki primjenjuje WORM API pozive (npr. <code>PutObjectRetention<\/code>) na bazi po objektu, savr\u0161eno uskla\u0111uju\u0107i trajanje zaklju\u010davanja pohrane s rasporedom zadr\u017eavanja definisanim politikom.<br \/>\n4.  Ako napada\u010d kompromituje CloudSave konzolu za upravljanje, i dalje ne mo\u017ee izbrisati sigurnosne kopije, jer zaklju\u010davanje uskla\u0111enosti provodi osnovna infrastrukturna pohrana, a ne softver za sigurnosno kopiranje.<\/p>\n<h2>Najbolje prakse za nepromjenjive arhive baza podataka<\/h2>\n<p>Da biste osigurali da je va\u0161a nepromjenjiva arhitektura zaista otporna, pridr\u017eavajte se sljede\u0107ih najboljih praksi sistemskog in\u017eenjeringa:<\/p>\n<h3>1. Stroga NTP sinhronizacija<\/h3>\n<p>Nepromjenjiva zaklju\u010davanja su matemati\u010dki vezana za vremenske oznake. Ako je NTP (Network Time Protocol) servis na va\u0161em nizu za pohranu ili serveru za sigurnosne kopije kompromitovan ili odstupa, to mo\u017ee uzrokovati prerano isticanje zaklju\u010davanja ili da ona nikada ne isteknu. Osigurajte da va\u0161a infrastrukturna pohrana koristi autentifikovane, redundantne NTP izvore.<\/p>\n<h3>2. Izolacija IAM uloga i vjerodajnica<\/h3>\n<p>Vjerodajnice koje se koriste za pisanje u nepromjenjivi bucket moraju imati samo <code>s3:PutObject<\/code> i <code>s3:PutObjectRetention<\/code> dozvole. One <strong>nikada<\/strong> ne bi trebale imati <code>s3:DeleteObject<\/code> ili <code>s3:PutBucketObjectLockConfiguration<\/code> dozvole.<\/p>\n<p>Primjer IAM politike s najmanjim privilegijama za agenta sigurnosnog kopiranja baze podataka:<\/p>\n<pre><code class=\"language-json\">{\n    &quot;Version&quot;: &quot;2012-10-17&quot;,\n    &quot;Statement&quot;: [\n        {\n            &quot;Effect&quot;: &quot;Allow&quot;,\n            &quot;Action&quot;: [\n                &quot;s3:PutObject&quot;,\n                &quot;s3:GetBucketObjectLockConfiguration&quot;\n            ],\n            &quot;Resource&quot;: [\n                &quot;arn:aws:s3:::prod-db-archive-immutable&quot;,\n                &quot;arn:aws:s3:::prod-db-archive-immutable\/*&quot;\n            ]\n        }\n    ]\n}\n<\/code><\/pre>\n<h3>3. Odre\u0111ivanje perioda zadr\u017eavanja<\/h3>\n<p>Nemojte postavljati zaklju\u010davanja uskla\u0111enosti na pretjerano duge periode (npr. 7 godina za uskla\u0111enost) na va\u0161em primarnom nivou za brzi oporavak. Baze podataka generi\u0161u ogromne koli\u010dine WAL\/transakcijskih log podataka. Zaklju\u010davanje ovih podataka godinama \u0107e rezultirati eksponencijalnim rastom tro\u0161kova pohrane.<br \/>\nUmjesto toga, koristite nivoe:<br \/>\n*   <strong>Nivo operativnog oporavka:<\/strong> 14 do 30 dana nepromjenjivog zadr\u017eavanja za pune sigurnosne kopije i logove.<br \/>\n*   <strong>Nivo dugoro\u010dnog arhiviranja:<\/strong> Mjese\u010dne pune sigurnosne kopije premje\u0161tene u Glacier\/Deep Archive sa Vault Lock-om na 1-7 godina.<\/p>\n<h3>4. Redovno testiranje oporavka u izolovanim (air-gapped) VPC-ovima<\/h3>\n<p>Nepromjenjivost garantuje da se podaci ne mogu izbrisati, ali ne garantuje da su podaci bez logi\u010dke korupcije. Morate automatizovati vra\u0107anje va\u0161ih nepromjenjivih arhiva baza podataka u izolovani, air-gapped VPC ili VLAN. Pokrenite <code>DBCC CHECKDB<\/code> (SQL Server) ili <code>pg_amcheck<\/code> (PostgreSQL) na vra\u0107enim podacima kako biste provjerili strukturni integritet.<\/p>\n<h2>Zaklju\u010dak<\/h2>\n<p>Odbrana od ransomwarea je vje\u017eba u pretpostavci proboja. Do trenutka kada se aktivira upozorenje u va\u0161em SIEM-u, napada\u010di su vjerovatno ve\u0107 poku\u0161ali kompromitovati va\u0161u infrastrukturu za sigurnosno kopiranje. Projektovanjem va\u0161ih arhiva baza podataka koriste\u0107i nepromjenjivu pohranu u na\u010dinu uskla\u0111enosti, oduzimate napada\u010dima njihovu glavnu polugu. Bez obzira koristite li izvorne API-je u oblaku, ZFS zadr\u017eavanja ili enterprise platformu za orkestraciju kao \u0161to je CloudSave, implementacija WORM pohrane vi\u0161e nije opcionalna\u2014to je obavezan stub moderne administracije baza podataka i oporavka od katastrofa.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_title":"Immutable Database Storage to Defeat Ransomware","rank_math_description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","rank_math_focus_keyword":"immutable database storage","footnotes":""},"categories":[335],"tags":[4540,4541,4542,1269,4543,4544],"class_list":["post-6353","post","type-post","status-publish","format-standard","hentry","category-database-backup","tag-3-2-1-1-backup","tag-data-survivability","tag-database-archives","tag-enterprise-backup","tag-immutable-storage","tag-ransomware-protection"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.7 (Yoast SEO v27.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Immutable Database Storage to Defeat Ransomware<\/title>\n<meta name=\"description\" content=\"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cloudsave.app\/bs\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\/\" \/>\n<meta property=\"og:locale\" content=\"bs_BA\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Arhitektura nepromjenjive pohrane za arhive baza podataka radi suzbijanja ransomwarea\" \/>\n<meta property=\"og:description\" content=\"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cloudsave.app\/bs\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\/\" \/>\n<meta property=\"og:site_name\" content=\"CloudSave\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-19T13:54:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-19T13:59:00+00:00\" \/>\n<meta name=\"author\" content=\"shervinrv\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"shervinrv\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minuta\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\\\/\"},\"author\":{\"name\":\"shervinrv\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\"},\"headline\":\"Arhitektura nepromjenjive pohrane za arhive baza podataka radi suzbijanja ransomwarea\",\"datePublished\":\"2026-06-19T13:54:43+00:00\",\"dateModified\":\"2026-06-19T13:59:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\\\/\"},\"wordCount\":1426,\"publisher\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\"},\"keywords\":[\"3-2-1-1 backup\",\"data survivability\",\"database archives\",\"Enterprise Backup\",\"immutable storage\",\"ransomware protection\"],\"articleSection\":[\"Database Backup\"],\"inLanguage\":\"bs-BA\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\\\/\",\"url\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\\\/\",\"name\":\"Immutable Database Storage to Defeat Ransomware\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/#website\"},\"datePublished\":\"2026-06-19T13:54:43+00:00\",\"dateModified\":\"2026-06-19T13:59:00+00:00\",\"description\":\"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\\\/#breadcrumb\"},\"inLanguage\":\"bs-BA\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cloudsave.app\\\/bs\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Arhitektura nepromjenjive pohrane za arhive baza podataka radi suzbijanja ransomwarea\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/#website\",\"url\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/\",\"name\":\"CloudSave\",\"description\":\"CloudSave\",\"publisher\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"bs-BA\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\",\"name\":\"shervinrv\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"bs-BA\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\",\"url\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\",\"contentUrl\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\",\"width\":859,\"height\":150,\"caption\":\"shervinrv\"},\"logo\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\"},\"sameAs\":[\"http:\\\/\\\/cloudsave.app\"],\"url\":\"https:\\\/\\\/cloudsave.app\\\/bs\\\/knowledge-base\\\/author\\\/shervinrv\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Immutable Database Storage to Defeat Ransomware","description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cloudsave.app\/bs\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\/","og_locale":"bs_BA","og_type":"article","og_title":"Arhitektura nepromjenjive pohrane za arhive baza podataka radi suzbijanja ransomwarea","og_description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","og_url":"https:\/\/cloudsave.app\/bs\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\/","og_site_name":"CloudSave","article_published_time":"2026-06-19T13:54:43+00:00","article_modified_time":"2026-06-19T13:59:00+00:00","author":"shervinrv","twitter_card":"summary_large_image","twitter_misc":{"Written by":"shervinrv","Est. reading time":"9 minuta"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cloudsave.app\/bs\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\/#article","isPartOf":{"@id":"https:\/\/cloudsave.app\/bs\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\/"},"author":{"name":"shervinrv","@id":"https:\/\/cloudsave.app\/bs\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d"},"headline":"Arhitektura nepromjenjive pohrane za arhive baza podataka radi suzbijanja ransomwarea","datePublished":"2026-06-19T13:54:43+00:00","dateModified":"2026-06-19T13:59:00+00:00","mainEntityOfPage":{"@id":"https:\/\/cloudsave.app\/bs\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\/"},"wordCount":1426,"publisher":{"@id":"https:\/\/cloudsave.app\/bs\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d"},"keywords":["3-2-1-1 backup","data survivability","database archives","Enterprise Backup","immutable storage","ransomware protection"],"articleSection":["Database Backup"],"inLanguage":"bs-BA"},{"@type":"WebPage","@id":"https:\/\/cloudsave.app\/bs\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\/","url":"https:\/\/cloudsave.app\/bs\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\/","name":"Immutable Database Storage to Defeat Ransomware","isPartOf":{"@id":"https:\/\/cloudsave.app\/bs\/#website"},"datePublished":"2026-06-19T13:54:43+00:00","dateModified":"2026-06-19T13:59:00+00:00","description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","breadcrumb":{"@id":"https:\/\/cloudsave.app\/bs\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\/#breadcrumb"},"inLanguage":"bs-BA","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cloudsave.app\/bs\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cloudsave.app\/bs\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-suzbijanja-ransomwarea\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cloudsave.app\/bs\/"},{"@type":"ListItem","position":2,"name":"Arhitektura nepromjenjive pohrane za arhive baza podataka radi suzbijanja ransomwarea"}]},{"@type":"WebSite","@id":"https:\/\/cloudsave.app\/bs\/#website","url":"https:\/\/cloudsave.app\/bs\/","name":"CloudSave","description":"CloudSave","publisher":{"@id":"https:\/\/cloudsave.app\/bs\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cloudsave.app\/bs\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"bs-BA"},{"@type":["Person","Organization"],"@id":"https:\/\/cloudsave.app\/bs\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d","name":"shervinrv","image":{"@type":"ImageObject","inLanguage":"bs-BA","@id":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png","url":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png","contentUrl":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png","width":859,"height":150,"caption":"shervinrv"},"logo":{"@id":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png"},"sameAs":["http:\/\/cloudsave.app"],"url":"https:\/\/cloudsave.app\/bs\/knowledge-base\/author\/shervinrv\/"}]}},"_links":{"self":[{"href":"https:\/\/cloudsave.app\/bs\/wp-json\/wp\/v2\/posts\/6353","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cloudsave.app\/bs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cloudsave.app\/bs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cloudsave.app\/bs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cloudsave.app\/bs\/wp-json\/wp\/v2\/comments?post=6353"}],"version-history":[{"count":1,"href":"https:\/\/cloudsave.app\/bs\/wp-json\/wp\/v2\/posts\/6353\/revisions"}],"predecessor-version":[{"id":6418,"href":"https:\/\/cloudsave.app\/bs\/wp-json\/wp\/v2\/posts\/6353\/revisions\/6418"}],"wp:attachment":[{"href":"https:\/\/cloudsave.app\/bs\/wp-json\/wp\/v2\/media?parent=6353"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cloudsave.app\/bs\/wp-json\/wp\/v2\/categories?post=6353"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cloudsave.app\/bs\/wp-json\/wp\/v2\/tags?post=6353"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}