{"id":6376,"date":"2026-06-19T13:54:43","date_gmt":"2026-06-19T13:54:43","guid":{"rendered":"https:\/\/cloudsave.app\/knowledge-base\/immutable-database-storage-ransomware\/"},"modified":"2026-06-19T14:09:41","modified_gmt":"2026-06-19T14:09:41","slug":"ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad","status":"publish","type":"post","link":"https:\/\/cloudsave.app\/ga\/knowledge-base\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\/","title":{"rendered":"Ailtireacht St\u00f3r\u00e1la Dosh\u00e1raithe do Chartlanna Bunachar Sonra\u00ed chun Ruathar Ransaimear a Chlo\u00ed"},"content":{"rendered":"<p>Sa t\u00edrdhreach bagairt\u00ed nua-aimseartha, t\u00e1 an ransomware tar \u00e9is athr\u00fa \u00f3 chripti\u00fa \u00f3c\u00e1ideach go feachtais an-spriocdh\u00edrithe, il-\u00e9igeantais. T\u00e1 Bagairt\u00ed Lean\u00fanacha Ardleibh\u00e9il (APTs) agus sindic\u00e1it\u00ed ransomware anois ag fiach go gn\u00edomhach ar bhonneagar c\u00faltaca agus cartlanna bunachar sonra\u00ed le linn a gcuid ama c\u00f3naithe. M\u00e1 dh\u00e9anann ionsaitheoir do phr\u00edomhbhunachar sonra\u00ed a chur i mbaol agus ag an am c\u00e9anna do st\u00f3rtha c\u00faltaca a scriosadh n\u00f3 a chripti\u00fa, t\u00e1 caillteanas tubaisteach sonra\u00ed roimh d&#8217;eagra\u00edocht.<\/p>\n<p>Do Riarth\u00f3ir\u00ed Bunachar Sonra\u00ed (DBAs) agus innealt\u00f3ir\u00ed DevOps, n\u00ed leor an strait\u00e9is c\u00faltaca traidisi\u00fanta 3-2-1 a thuilleadh. Chun marthanacht sonra\u00ed a r\u00e1th\u00fa, n\u00ed m\u00f3r d&#8217;fhoirne bonneagair an riail 3-2-1-1 a ghlacadh, \u00e1it a seasann an &#8220;1&#8221; deiridh do <strong>st\u00f3r\u00e1il dho-athraithe (immutable storage)<\/strong>.<\/p>\n<p>Sol\u00e1thra\u00edonn an t-alt seo tumadh domhain teicni\u00fail cuimsitheach isteach i bplean\u00e1il, cur i bhfeidhm, agus bainisti\u00fa st\u00f3r\u00e1la do-athraithe do chartlanna bunachar sonra\u00ed chun athl\u00e9imneacht ioml\u00e1n i gcoinne ransomware a chinnti\u00fa.<\/p>\n<h2>Meicnic na St\u00f3r\u00e1la Do-athraithe<\/h2>\n<p>Braitheann st\u00f3r\u00e1il dho-athraithe ar ailtireacht Scr\u00edobh-Uair-L\u00e9igh-Go-Leor (WORM). Nuair a scr\u00edobhtar sonra\u00ed chuig sprioc dho-athraithe, n\u00ed f\u00e9idir iad a mhodhn\u00fa, a chripti\u00fa, n\u00f3 a scriosadh ag aon \u00fas\u00e1ideoir\u2014lena n-\u00e1ir\u00edtear riarth\u00f3ir\u00ed a bhfuil pribhl\u00e9id\u00ed fr\u00e9imhe acu n\u00f3 cuntais seirbh\u00edse at\u00e1 curtha i mbaol\u2014go dt\u00ed go rachaidh glas ama at\u00e1 forfheidhmithe go matamaitici\u00fail in \u00e9ag.<\/p>\n<h3>M\u00f3d Comhl\u00edonta vs. M\u00f3d Rialachais<\/h3>\n<p>Agus do-athraitheacht \u00e1 cur i bhfeidhm, go h\u00e1irithe i st\u00f3r\u00e1il r\u00e9ad scamall (cloud object storage) ar n\u00f3s AWS S3, Azure Blob, n\u00f3 SANanna ar an l\u00e1thair at\u00e1 comhoiri\u00fanach le S3, n\u00ed m\u00f3r duit an difr\u00edocht idir na modhanna coinne\u00e1la a thuiscint:<\/p>\n<ul>\n<li><strong>M\u00f3d Rialachais (Governance Mode):<\/strong> Coscann s\u00e9 \u00fas\u00e1ideoir\u00ed caighde\u00e1nacha \u00f3 r\u00e9ada a scriosadh n\u00f3 a athr\u00fa. Mar sin f\u00e9in, is f\u00e9idir le h\u00fas\u00e1ideoir\u00ed a bhfuil ceadanna IAM sonracha acu (m.sh., <code>s3:BypassGovernanceRetention<\/code>) an glas a sh\u00e1r\u00fa. T\u00e1 s\u00e9 seo \u00fas\u00e1ideach le haghaidh t\u00e1st\u00e1la ach <strong>n\u00ed leor \u00e9 le haghaidh cosaint ransomware<\/strong>, mar is minic a arda\u00edonn ionsaitheoir\u00ed pribhl\u00e9id\u00ed go riarth\u00f3ir fearainn n\u00f3 fr\u00e9amh.<\/li>\n<li><strong>M\u00f3d Comhl\u00edonta (Compliance Mode):<\/strong> An caighde\u00e1n \u00f3ir do chosaint ransomware. Nuair a ghlas\u00e1iltear r\u00e9ad i M\u00f3d Comhl\u00edonta, n\u00ed f\u00e9idir a thr\u00e9imhse coinne\u00e1la a ghiorr\u00fa, agus n\u00ed f\u00e9idir an r\u00e9ad a scriosadh ag <em>aon duine<\/em>, lena n-\u00e1ir\u00edtear cuntas fr\u00e9imhe AWS. Forfheidhm\u00edtear an glas ag leibh\u00e9al an chnuasaigh st\u00f3r\u00e1la.<\/li>\n<\/ul>\n<h2>Ailtireacht P\u00edbl\u00edne C\u00faltaca Do-athraithe<\/h2>\n<p>Scarann ailtireacht l\u00e1idir cartlannaithe bunachar sonra\u00ed oibr\u00edochta\u00ed gn\u00edomhacha bunachar sonra\u00ed \u00f3n tsraith chartlainne dho-athraithe. N\u00ed f\u00e9idir leat do-athraitheacht a chur i bhfeidhm ar chomhaid bunachar sonra\u00ed gn\u00edomhacha (cos\u00fail le <code>.mdf<\/code>\/<code>.ldf<\/code> in SQL Server n\u00f3 an eolaire <code>pg_data<\/code> i PostgreSQL) toisc go dteasta\u00edonn rochtain lean\u00fanach l\u00e9itheoireachta\/scr\u00edbhneoireachta \u00f3 bhunachair sonra\u00ed.<\/p>\n<p>Ina \u00e1it sin, cuirtear do-athraitheacht i bhfeidhm ar:<br \/>\n1.  <strong>Comhaid C\u00faltaca Ioml\u00e1na agus Difre\u00e1lacha:<\/strong> Na snapshots bunl\u00edne den bhunachar sonra\u00ed.<br \/>\n2.  <strong>Loga\u00ed Idirbhirt \/ Comhaid WAL:<\/strong> An sruth lean\u00fanach d&#8217;athruithe bunachar sonra\u00ed at\u00e1 riachtanach le haghaidh Aisghabh\u00e1il go Pointe Ama (PITR).<\/p>\n<h3>Spriocanna St\u00f3r\u00e1la le haghaidh Do-athraitheachta<\/h3>\n<p>Is f\u00e9idir leat st\u00f3r\u00e1il dho-athraithe a chur i bhfeidhm thar shraitheanna bonneagair \u00e9ags\u00fala:<br \/>\n*   <strong>St\u00f3r\u00e1il R\u00e9ad Scamall:<\/strong> AWS S3 Object Lock, Azure Blob Immutable Storage, Polasaithe Coinne\u00e1la Google Cloud Storage.<br \/>\n*   <strong>St\u00f3r\u00e1il R\u00e9ad ar an L\u00e1thair:<\/strong> MinIO, Cloudian, n\u00f3 Pure Storage FlashBlade a thaca\u00edonn le APIanna S3 Object Lock.<br \/>\n*   <strong>St\u00f3r\u00e1il Bloc\/Comhad:<\/strong> ZFS le snapshots inl\u00e9ite amh\u00e1in agus riarach\u00e1n tarmligthe, n\u00f3 tr\u00e9ithe comhaid Linux.<\/p>\n<h2>Cur i bhFeidhm St\u00f3r\u00e1la Do-athraithe: Treoracha Teicni\u00fala<\/h2>\n<h3>1. St\u00f3r\u00e1il R\u00e9ad Scamall: AWS S3 Object Lock<\/h3>\n<p>Chun dumpanna bunachar sonra\u00ed agus loga\u00ed idirbhirt a chosaint in AWS, n\u00ed m\u00f3r duit Object Lock a chumas\u00fa tr\u00e1th cruth\u00fa an bhuic\u00e9id.<\/p>\n<p>Ar dt\u00fas, cruthaigh an buic\u00e9ad le Object Lock cumasaithe:<\/p>\n<pre><code class=\"language-bash\">aws s3api create-bucket \n    --bucket prod-db-archive-immutable \n    --region us-east-1 \n    --object-lock-enabled-for-bucket\n<\/code><\/pre>\n<p>Ansin, cumraigh an polasa\u00ed coinne\u00e1la r\u00e9amhshocraithe. Le haghaidh cartlanna bunachar sonra\u00ed, is bunl\u00edne chaighde\u00e1nach \u00e9 glas comhl\u00edonta 30 l\u00e1, ag cinnti\u00fa go bhfuil m\u00ed de ch\u00faltaca\u00ed do-athraithe agat.<\/p>\n<pre><code class=\"language-bash\">aws s3api put-object-lock-configuration \n    --bucket prod-db-archive-immutable \n    --object-lock-configuration '{\n        &quot;ObjectLockEnabled&quot;: &quot;Enabled&quot;,\n        &quot;Rule&quot;: {\n            &quot;DefaultRetention&quot;: {\n                &quot;Mode&quot;: &quot;COMPLIANCE&quot;,\n                &quot;Days&quot;: 30\n            }\n        }\n    }'\n<\/code><\/pre>\n<p>Nuair a bhr\u00fann do script n\u00f3 gn\u00edomhaire c\u00faltaca bunachar sonra\u00ed comhad chuig an mbuic\u00e9ad seo, r\u00edomhann S3 go huathoibr\u00edoch an <code>Retain Until Date<\/code> bunaithe ar stampa ama cruth\u00fa an r\u00e9ada m\u00f3ide 30 l\u00e1.<\/p>\n<h3>2. Do-athraitheacht ar an L\u00e1thair: ZFS agus Tr\u00e9ithe Linux<\/h3>\n<p>M\u00e1 t\u00e1 t\u00fa ag cartlann\u00fa bunachar sonra\u00ed chuig freastala\u00ed c\u00faltaca Linux ar an l\u00e1thair, is f\u00e9idir leat pseudo-do-athraitheacht a bhaint amach ag baint \u00fas\u00e1ide as an ord\u00fa <code>chattr<\/code>, n\u00f3 f\u00edor-dho-athraitheacht ag baint \u00fas\u00e1ide as snapshots ZFS.<\/p>\n<p><strong>Ag baint \u00fas\u00e1ide as Linux <code>chattr<\/code>:<\/strong><br \/>\nCoscann an bratach <code>+i<\/code> (do-athraithe) comhad a mhodhn\u00fa, a scriosadh, n\u00f3 a athainmni\u00fa.<\/p>\n<pre><code class=\"language-bash\"># Dump\u00e1il an bunachar sonra\u00ed\npg_dump -U postgres -Fc mydb &gt; \/backups\/mydb_$(date +%F).dump\n\n# D\u00e9an an c\u00faltaca do-athraithe\nsudo chattr +i \/backups\/mydb_$(date +%F).dump\n\n# F\u00edoraigh an tr\u00e9ith\nlsattr \/backups\/mydb_$(date +%F).dump\n# Aschur: ----i---------e------- \/backups\/mydb_2023-10-27.dump\n<\/code><\/pre>\n<p><em>N\u00f3ta: C\u00e9 go stopann <code>chattr<\/code> scripteanna bun\u00fasacha ransomware, is f\u00e9idir le hionsaitheoir sofaistici\u00fail a bhfuil rochtain fr\u00e9imhe aige <code>chattr -i<\/code> a rith go simpl\u00ed. D\u00e1 bhr\u00ed sin, n\u00ed m\u00f3r \u00e9 seo a chomhcheangal le RBAC dian agus l\u00edonra\u00ed c\u00faltaca scoite.<\/em><\/p>\n<p><strong>Ag baint \u00fas\u00e1ide as ZFS Snapshots:<\/strong><br \/>\nSol\u00e1thra\u00edonn ZFS cosaint i bhfad n\u00edos l\u00e1idre. Tr\u00ed snapshot a th\u00f3g\u00e1il agus &#8220;sealbh\u00fa&#8221; (hold) a chur air, cuireann t\u00fa cosc ar an snapshot a scriosadh.<\/p>\n<pre><code class=\"language-bash\"># T\u00f3g snapshot den tacar sonra\u00ed c\u00faltaca\nzfs snapshot tank\/db_backups@archive_$(date +%F)\n\n# Cuir sealbh\u00fa ar an snapshot chun cosc a chur ar scriosadh\nzfs hold keep_30_days tank\/db_backups@archive_$(date +%F)\n\n# N\u00ed f\u00e9idir fi\u00fa leis an bhfr\u00e9amh an snapshot seo a scriosadh gan an sealbh\u00fa a scaoileadh\nzfs destroy tank\/db_backups@archive_$(date +%F)\n# Aschur: cannot destroy 'tank\/db_backups@archive_...': dataset is busy\n<\/code><\/pre>\n<h2>Strait\u00e9is\u00ed Cartlannaithe Bunachar Sonra\u00ed-Sonracha<\/h2>\n<p>Chun Aisghabh\u00e1il go Pointe Ama (PITR) a bhaint amach, n\u00ed m\u00f3r duit loga\u00ed idirbhirt a chartlann\u00fa go lean\u00fanach chuig do st\u00f3r\u00e1il dho-athraithe.<\/p>\n<h3>Cartlann\u00fa WAL PostgreSQL le pgBackRest<\/h3>\n<p>Is uirlis ch\u00faltaca an-iontaofa \u00e9 <code>pgBackRest<\/code> do PostgreSQL a thaca\u00edonn go d\u00fachais le st\u00f3r\u00e1il at\u00e1 comhoiri\u00fanach le S3. Chun do Loga\u00ed Write-Ahead (WAL) a chosaint, cumraigh <code>pgBackRest<\/code> chun br\u00fa go d\u00edreach chuig do bhuic\u00e9ad S3 do-athraithe.<\/p>\n<p>I do <code>pgbackrest.conf<\/code>:<\/p>\n<pre><code class=\"language-ini\">[global]\nrepo1-type=s3\nrepo1-s3-bucket=prod-db-archive-immutable\nrepo1-s3-region=us-east-1\nrepo1-s3-endpoint=s3.amazonaws.com\nrepo1-s3-key=AKIAIOSFODNN7EXAMPLE\nrepo1-s3-key-secret=wJalrXUtnFEMI\/K7MDENG\/bPxRfiCYEXAMPLEKEY\n\n# Cinntigh go bhfuil an choinne\u00e1il ail\u00ednithe le do chumra\u00edocht S3 Object Lock\nrepo1-retention-full=2\nrepo1-retention-archive=2\n\n[prod_cluster]\npg1-path=\/var\/lib\/postgresql\/14\/main\n<\/code><\/pre>\n<p><em>Breithni\u00fa r\u00edth\u00e1bhachtach:<\/em> M\u00e1 fhorfheidhm\u00edonn do bhuic\u00e9ad S3 glas Comhl\u00edonta 30 l\u00e1, ach m\u00e1 dh\u00e9anann <code>pgBackRest<\/code> iarracht loga\u00ed WAL a dhul in \u00e9ag agus a scriosadh tar \u00e9is 14 l\u00e1 bunaithe ar <code>repo1-retention-archive<\/code>, teipfidh ar na glaonna API scriosadh. N\u00ed m\u00f3r duit a chinnti\u00fa go bhfuil polasa\u00ed coinne\u00e1la do bhogearra\u00ed c\u00faltaca n\u00edos m\u00f3 n\u00e1 n\u00f3 cothrom leis an nglas do-athraithe ag leibh\u00e9al na st\u00f3r\u00e1la.<\/p>\n<h3>Microsoft SQL Server: C\u00faltaca chuig URL<\/h3>\n<p>Taca\u00edonn SQL Server le c\u00faltaca\u00ed d\u00fachasacha go d\u00edreach chuig st\u00f3r\u00e1il r\u00e9ad at\u00e1 comhoiri\u00fanach le S3. Is f\u00e9idir leat post Gn\u00edomhaire SQL Server a chumr\u00fa chun comhaid <code>.bak<\/code> agus <code>.trn<\/code> a scr\u00edobh go d\u00edreach chuig buic\u00e9ad do-athraithe.<\/p>\n<pre><code class=\"language-sql\">CREATE CREDENTIAL [s3:\/\/prod-db-archive-immutable.s3.us-east-1.amazonaws.com]\nWITH IDENTITY = 'S3 Access Key',\nSECRET = 'AccessKeyID:SecretAccessKey';\nGO\n\nBACKUP DATABASE [ProductionDB]\nTO URL = 's3:\/\/prod-db-archive-immutable.s3.us-east-1.amazonaws.com\/ProductionDB_Full.bak'\nWITH FORMAT, COMPRESSION, STATS = 10;\nGO\n<\/code><\/pre>\n<h2>Uathoibri\u00fa agus Ceolfhoireann le CloudSave<\/h2>\n<p>T\u00e1 bainisti\u00fa bratacha coinne\u00e1la do-athraithe, eochracha rochtana a rothl\u00fa, agus sioncr\u00f3n\u00fa a chinnti\u00fa idir polasaithe coinne\u00e1la bunachar sonra\u00ed agus glais st\u00f3r\u00e1la tr\u00ed scripteanna saincheaptha an-seans maith go hearr\u00e1id\u00ed. Is f\u00e9idir le m\u00ed-chumra\u00edocht amh\u00e1in i bpost cron n\u00f3 glao API do chartlanna a fh\u00e1g\u00e1il nochta n\u00f3 a bheith ina ch\u00fais le costais st\u00f3r\u00e1la scamall ag ard\u00fa go tapa mar gheall ar r\u00e9ada glas\u00e1ilte, f\u00e1gtha ina ndiaidh.<\/p>\n<p>Simpl\u00edonn ard\u00e1in ch\u00faltaca fiontair cos\u00fail le CloudSave an ailtireacht seo. Comhth\u00e1tha\u00edonn CloudSave go d\u00fachais le AWS S3 Object Lock, Azure Blob Immutable Storage, agus APIanna at\u00e1 comhoiri\u00fanach le S3 ar an l\u00e1thair.<\/p>\n<p>Agus plean c\u00faltaca bunachar sonra\u00ed \u00e1 chumr\u00fa i CloudSave:<br \/>\n1.  L\u00e1imhse\u00e1lann an t-ard\u00e1n go huathoibr\u00edoch an ci\u00fanas VSS (Volume Shadow Copy Service) do SQL Server n\u00f3 an API <code>pg_start_backup()<\/code> do PostgreSQL.<br \/>\n2.  Sruthna\u00edonn s\u00e9 na sonra\u00ed c\u00faltaca d\u00eddh\u00fabl\u00e1ilte, criptithe go d\u00edreach chuig an sprioc st\u00f3r\u00e1la.<br \/>\n3.  Cuireann CloudSave na glaonna API WORM (m.sh., <code>PutObjectRetention<\/code>) i bhfeidhm go dinimici\u00fail ar bhonn in aghaidh an r\u00e9ada, ag ail\u00edni\u00fa fad an ghlais st\u00f3r\u00e1la go foirfe leis an sceideal coinne\u00e1la at\u00e1 sainithe ag an bpolasa\u00ed.<br \/>\n4.  M\u00e1 chuireann ionsaitheoir an cons\u00f3l bainist\u00edochta CloudSave i mbaol, n\u00ed f\u00e9idir leo na c\u00faltaca\u00ed a scriosadh f\u00f3s, toisc go bhfuil an glas comhl\u00edonta forfheidhmithe ag an mbonneagar st\u00f3r\u00e1la bun\u00fasach, n\u00ed ag na bogearra\u00ed c\u00faltaca.<\/p>\n<h2>Cleachtais is Fearr le haghaidh Cartlanna Bunachar Sonra\u00ed Do-athraithe<\/h2>\n<p>Chun a chinnti\u00fa go bhfuil d&#8217;ailtireacht dho-athraithe f\u00edor-athl\u00e9imneach, clo\u00edgh leis na cleachtais is fearr innealt\u00f3ireachta c\u00f3rais seo a leanas:<\/p>\n<h3>1. Sioncr\u00f3n\u00fa NTP Dian<\/h3>\n<p>T\u00e1 glais dho-athraithe ceangailte go matamaitici\u00fail le stampa\u00ed ama. M\u00e1 chuirtear an tseirbh\u00eds NTP (Network Time Protocol) ar do chnuasach st\u00f3r\u00e1la n\u00f3 ar do fhreastala\u00ed c\u00faltaca i mbaol n\u00f3 m\u00e1 shleamhna\u00edonn s\u00e9, f\u00e9adann s\u00e9 a chur faoi deara go rachaidh glais in \u00e9ag roimh am n\u00f3 nach rachaidh siad in \u00e9ag riamh. Cinntigh go n-\u00fas\u00e1ideann do bhonneagar st\u00f3r\u00e1la foins\u00ed NTP f\u00edordheimhnithe, iomarcacha.<\/p>\n<h3>2. R\u00f3lanna agus Dinti\u00fair IAM a Scoitheadh<\/h3>\n<p>N\u00ed m\u00f3r ceadanna <code>s3:PutObject<\/code> agus <code>s3:PutObjectRetention<\/code> amh\u00e1in a bheith ag na dinti\u00fair a \u00fas\u00e1idtear chun scr\u00edobh chuig an mbuic\u00e9ad do-athraithe. N\u00edor cheart go mbeadh ceadanna <code>s3:DeleteObject<\/code> n\u00f3 <code>s3:PutBucketObjectLockConfiguration<\/code> acu <strong>riamh<\/strong>.<\/p>\n<p>Sampla de pholasa\u00ed IAM \u00edos-phribhl\u00e9ide do ghn\u00edomhaire c\u00faltaca bunachar sonra\u00ed:<\/p>\n<pre><code class=\"language-json\">{\n    &quot;Version&quot;: &quot;2012-10-17&quot;,\n    &quot;Statement&quot;: [\n        {\n            &quot;Effect&quot;: &quot;Allow&quot;,\n            &quot;Action&quot;: [\n                &quot;s3:PutObject&quot;,\n                &quot;s3:GetBucketObjectLockConfiguration&quot;\n            ],\n            &quot;Resource&quot;: [\n                &quot;arn:aws:s3:::prod-db-archive-immutable&quot;,\n                &quot;arn:aws:s3:::prod-db-archive-immutable\/*&quot;\n            ]\n        }\n    ]\n}\n<\/code><\/pre>\n<h3>3. M\u00e9id na Tr\u00e9imhse Coinne\u00e1la<\/h3>\n<p>N\u00e1 socraigh glais chomhl\u00edonta ar feadh tr\u00e9imhs\u00ed r\u00f3-fhada (m.sh., 7 mbliana le haghaidh comhl\u00edonta) ar do phr\u00edomhshraith aisghabh\u00e1la tapa. Gineann bunachair sonra\u00ed m\u00e9ideanna ollmh\u00f3ra de shonra\u00ed loga WAL\/idirbhirt. M\u00e1 ghlas\u00e1iltear na sonra\u00ed seo ar feadh na mblianta beidh f\u00e1s easp\u00f3nant\u00fail ar chostais st\u00f3r\u00e1la.<br \/>\nIna \u00e1it sin, bain \u00fas\u00e1id as cur chuige sraitheach:<br \/>\n*   <strong>Sraith Aisghabh\u00e1la Oibr\u00edocht\u00fail:<\/strong> 14 go 30 l\u00e1 de choinne\u00e1il dho-athraithe le haghaidh Ioml\u00e1in agus Loga\u00ed.<br \/>\n*   <strong>Sraith Cartlannaithe Fadt\u00e9armach:<\/strong> C\u00faltaca\u00ed ioml\u00e1na m\u00edos\u00fala a aistr\u00edodh go Glacier\/Deep Archive le Vault Lock ar feadh 1-7 mbliana.<\/p>\n<h3>4. T\u00e1st\u00e1il Aisghabh\u00e1la Rialta i VPCanna Air-Gapped<\/h3>\n<p>R\u00e1tha\u00edonn do-athraitheacht nach f\u00e9idir na sonra\u00ed a scriosadh, ach n\u00ed r\u00e1tha\u00edonn s\u00e9 go bhfuil na sonra\u00ed saor \u00f3 \u00e9illi\u00fa loighci\u00fail. N\u00ed m\u00f3r duit aisghabh\u00e1il do chartlanna bunachar sonra\u00ed do-athraithe a uathoibri\u00fa isteach i VPC n\u00f3 VLAN scoite, air-gapped. Rith <code>DBCC CHECKDB<\/code> (SQL Server) n\u00f3 <code>pg_amcheck<\/code> (PostgreSQL) ar na sonra\u00ed aisghafa chun sl\u00e1ine strucht\u00farach a fh\u00edor\u00fa.<\/p>\n<h2>Concl\u00faid<\/h2>\n<p>Is cleachtadh \u00e9 cosaint ransomware ar bhriseadh a ghlacadh leis. Faoin am a lasann fol\u00e1ireamh i do SIEM, is d\u00f3cha go bhfuil iarracht d\u00e9anta ag gn\u00edomhaithe bagartha cheana f\u00e9in do bhonneagar c\u00faltaca a chur i mbaol. Tr\u00ed do chartlanna bunachar sonra\u00ed a ailtireacht ag baint \u00fas\u00e1ide as st\u00f3r\u00e1il dho-athraithe i M\u00f3d Comhl\u00edonta, baineann t\u00fa an pr\u00edomh-ghiar\u00e1il d&#8217;ionsaitheoir\u00ed. Cib\u00e9 an n-\u00fas\u00e1ideann t\u00fa APIanna scamall d\u00fachasacha, sealbhuithe ZFS, n\u00f3 ard\u00e1n ceolfhoirne fiontair cos\u00fail le CloudSave, n\u00ed rogha \u00e9 st\u00f3r\u00e1il WORM a chur i bhfeidhm a thuilleadh\u2014is col\u00fan \u00e9igeantach \u00e9 de riarach\u00e1n bunachar sonra\u00ed nua-aimseartha agus aisghabh\u00e1il tubaiste.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_title":"Immutable Database Storage to Defeat Ransomware","rank_math_description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","rank_math_focus_keyword":"immutable database storage","footnotes":""},"categories":[495],"tags":[4640,4641,4642,1309,4643,4644],"class_list":["post-6376","post","type-post","status-publish","format-standard","hentry","category-database-backup","tag-3-2-1-1-backup","tag-data-survivability","tag-database-archives","tag-enterprise-backup","tag-immutable-storage","tag-ransomware-protection"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.7 (Yoast SEO v27.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Immutable Database Storage to Defeat Ransomware<\/title>\n<meta name=\"description\" content=\"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cloudsave.app\/ga\/knowledge-base\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ailtireacht St\u00f3r\u00e1la Dosh\u00e1raithe do Chartlanna Bunachar Sonra\u00ed chun Ruathar Ransaimear a Chlo\u00ed\" \/>\n<meta property=\"og:description\" content=\"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cloudsave.app\/ga\/knowledge-base\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\/\" \/>\n<meta property=\"og:site_name\" content=\"CloudSave\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-19T13:54:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-19T14:09:41+00:00\" \/>\n<meta name=\"author\" content=\"shervinrv\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"shervinrv\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/knowledge-base\\\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/knowledge-base\\\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\\\/\"},\"author\":{\"name\":\"shervinrv\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\"},\"headline\":\"Ailtireacht St\u00f3r\u00e1la Dosh\u00e1raithe do Chartlanna Bunachar Sonra\u00ed chun Ruathar Ransaimear a Chlo\u00ed\",\"datePublished\":\"2026-06-19T13:54:43+00:00\",\"dateModified\":\"2026-06-19T14:09:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/knowledge-base\\\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\\\/\"},\"wordCount\":1885,\"publisher\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\"},\"keywords\":[\"3-2-1-1 backup\",\"data survivability\",\"database archives\",\"Enterprise Backup\",\"immutable storage\",\"ransomware protection\"],\"articleSection\":[\"Database Backup\"],\"inLanguage\":\"ga\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/knowledge-base\\\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\\\/\",\"url\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/knowledge-base\\\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\\\/\",\"name\":\"Immutable Database Storage to Defeat Ransomware\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/#website\"},\"datePublished\":\"2026-06-19T13:54:43+00:00\",\"dateModified\":\"2026-06-19T14:09:41+00:00\",\"description\":\"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/knowledge-base\\\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\\\/#breadcrumb\"},\"inLanguage\":\"ga\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cloudsave.app\\\/ga\\\/knowledge-base\\\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/knowledge-base\\\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ailtireacht St\u00f3r\u00e1la Dosh\u00e1raithe do Chartlanna Bunachar Sonra\u00ed chun Ruathar Ransaimear a Chlo\u00ed\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/#website\",\"url\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/\",\"name\":\"CloudSave\",\"description\":\"CloudSave\",\"publisher\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ga\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\",\"name\":\"shervinrv\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ga\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\",\"url\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\",\"contentUrl\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\",\"width\":859,\"height\":150,\"caption\":\"shervinrv\"},\"logo\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\"},\"sameAs\":[\"http:\\\/\\\/cloudsave.app\"],\"url\":\"https:\\\/\\\/cloudsave.app\\\/ga\\\/knowledge-base\\\/author\\\/shervinrv\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Immutable Database Storage to Defeat Ransomware","description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cloudsave.app\/ga\/knowledge-base\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\/","og_locale":"en_US","og_type":"article","og_title":"Ailtireacht St\u00f3r\u00e1la Dosh\u00e1raithe do Chartlanna Bunachar Sonra\u00ed chun Ruathar Ransaimear a Chlo\u00ed","og_description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","og_url":"https:\/\/cloudsave.app\/ga\/knowledge-base\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\/","og_site_name":"CloudSave","article_published_time":"2026-06-19T13:54:43+00:00","article_modified_time":"2026-06-19T14:09:41+00:00","author":"shervinrv","twitter_card":"summary_large_image","twitter_misc":{"Written by":"shervinrv","Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cloudsave.app\/ga\/knowledge-base\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\/#article","isPartOf":{"@id":"https:\/\/cloudsave.app\/ga\/knowledge-base\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\/"},"author":{"name":"shervinrv","@id":"https:\/\/cloudsave.app\/ga\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d"},"headline":"Ailtireacht St\u00f3r\u00e1la Dosh\u00e1raithe do Chartlanna Bunachar Sonra\u00ed chun Ruathar Ransaimear a Chlo\u00ed","datePublished":"2026-06-19T13:54:43+00:00","dateModified":"2026-06-19T14:09:41+00:00","mainEntityOfPage":{"@id":"https:\/\/cloudsave.app\/ga\/knowledge-base\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\/"},"wordCount":1885,"publisher":{"@id":"https:\/\/cloudsave.app\/ga\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d"},"keywords":["3-2-1-1 backup","data survivability","database archives","Enterprise Backup","immutable storage","ransomware protection"],"articleSection":["Database Backup"],"inLanguage":"ga"},{"@type":"WebPage","@id":"https:\/\/cloudsave.app\/ga\/knowledge-base\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\/","url":"https:\/\/cloudsave.app\/ga\/knowledge-base\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\/","name":"Immutable Database Storage to Defeat Ransomware","isPartOf":{"@id":"https:\/\/cloudsave.app\/ga\/#website"},"datePublished":"2026-06-19T13:54:43+00:00","dateModified":"2026-06-19T14:09:41+00:00","description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","breadcrumb":{"@id":"https:\/\/cloudsave.app\/ga\/knowledge-base\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\/#breadcrumb"},"inLanguage":"ga","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cloudsave.app\/ga\/knowledge-base\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cloudsave.app\/ga\/knowledge-base\/ailtireacht-st%c3%b3r%c3%a1la-dosh%c3%a1raithe-do-chartlanna-bunachar-sonra%c3%ad-chun-ruathar-ransaimear-a-chlo%c3%ad\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cloudsave.app\/ga\/"},{"@type":"ListItem","position":2,"name":"Ailtireacht St\u00f3r\u00e1la Dosh\u00e1raithe do Chartlanna Bunachar Sonra\u00ed chun Ruathar Ransaimear a Chlo\u00ed"}]},{"@type":"WebSite","@id":"https:\/\/cloudsave.app\/ga\/#website","url":"https:\/\/cloudsave.app\/ga\/","name":"CloudSave","description":"CloudSave","publisher":{"@id":"https:\/\/cloudsave.app\/ga\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cloudsave.app\/ga\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ga"},{"@type":["Person","Organization"],"@id":"https:\/\/cloudsave.app\/ga\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d","name":"shervinrv","image":{"@type":"ImageObject","inLanguage":"ga","@id":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png","url":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png","contentUrl":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png","width":859,"height":150,"caption":"shervinrv"},"logo":{"@id":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png"},"sameAs":["http:\/\/cloudsave.app"],"url":"https:\/\/cloudsave.app\/ga\/knowledge-base\/author\/shervinrv\/"}]}},"_links":{"self":[{"href":"https:\/\/cloudsave.app\/ga\/wp-json\/wp\/v2\/posts\/6376","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cloudsave.app\/ga\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cloudsave.app\/ga\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cloudsave.app\/ga\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cloudsave.app\/ga\/wp-json\/wp\/v2\/comments?post=6376"}],"version-history":[{"count":1,"href":"https:\/\/cloudsave.app\/ga\/wp-json\/wp\/v2\/posts\/6376\/revisions"}],"predecessor-version":[{"id":6438,"href":"https:\/\/cloudsave.app\/ga\/wp-json\/wp\/v2\/posts\/6376\/revisions\/6438"}],"wp:attachment":[{"href":"https:\/\/cloudsave.app\/ga\/wp-json\/wp\/v2\/media?parent=6376"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cloudsave.app\/ga\/wp-json\/wp\/v2\/categories?post=6376"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cloudsave.app\/ga\/wp-json\/wp\/v2\/tags?post=6376"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}