{"id":6373,"date":"2026-06-19T13:54:43","date_gmt":"2026-06-19T13:54:43","guid":{"rendered":"https:\/\/cloudsave.app\/knowledge-base\/immutable-database-storage-ransomware\/"},"modified":"2026-06-19T14:08:01","modified_gmt":"2026-06-19T14:08:01","slug":"adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez","status":"publish","type":"post","link":"https:\/\/cloudsave.app\/hu\/knowledge-base\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\/","title":{"rendered":"Adatb\u00e1zis-arch\u00edvumok megv\u00e1ltoztathatatlan t\u00e1rol\u00e1s\u00e1nak tervez\u00e9se a zsarol\u00f3v\u00edrusok elleni v\u00e9dekez\u00e9shez"},"content":{"rendered":"<p>A modern fenyeget\u00e9si k\u00f6rnyezetben a zsarol\u00f3v\u00edrusok az opportunista titkos\u00edt\u00e1st\u00f3l a nagym\u00e9rt\u00e9kben c\u00e9lzott, t\u00f6bbsz\u00f6r\u00f6s zsarol\u00e1ssal j\u00e1r\u00f3 kamp\u00e1nyok fel\u00e9 fejl\u0151dtek. A fejlett, \u00e1lland\u00f3 fenyeget\u00e9sek (APT-k) \u00e9s a zsarol\u00f3v\u00edrus-szindik\u00e1tusok ma m\u00e1r akt\u00edvan vad\u00e1sznak a biztons\u00e1gi ment\u00e9si infrastrukt\u00far\u00e1ra \u00e9s az adatb\u00e1zis-arch\u00edvumokra a rendszerben t\u00f6lt\u00f6tt idej\u00fck alatt. Ha egy t\u00e1mad\u00f3 kompromitt\u00e1lja az els\u0151dleges adatb\u00e1zis\u00e1t, \u00e9s ezzel egyidej\u0171leg t\u00f6rli vagy titkos\u00edtja a biztons\u00e1gi ment\u00e9si t\u00e1rol\u00f3it, szervezete katasztrof\u00e1lis adatveszt\u00e9ssel n\u00e9z szembe.<\/p>\n<p>Az adatb\u00e1zis-adminisztr\u00e1torok (DBA-k) \u00e9s a DevOps m\u00e9rn\u00f6k\u00f6k sz\u00e1m\u00e1ra a hagyom\u00e1nyos 3-2-1 biztons\u00e1gi ment\u00e9si strat\u00e9gia m\u00e1r nem elegend\u0151. Az adatok t\u00fal\u00e9l\u00e9s\u00e9nek garant\u00e1l\u00e1sa \u00e9rdek\u00e9ben az infrastrukt\u00fara-csapatoknak el kell fogadniuk a 3-2-1-1 szab\u00e1lyt, ahol az utols\u00f3 \u201e1\u201d a <strong>v\u00e1ltoztathatatlan (immutable) t\u00e1rol\u00e1st<\/strong> jel\u00f6li.<\/p>\n<p>Ez a cikk \u00e1tfog\u00f3, technikai m\u00e9lyelemz\u00e9st ny\u00fajt az adatb\u00e1zis-arch\u00edvumokhoz tartoz\u00f3, v\u00e1ltoztathatatlan t\u00e1rol\u00e1s tervez\u00e9s\u00e9r\u0151l, megval\u00f3s\u00edt\u00e1s\u00e1r\u00f3l \u00e9s kezel\u00e9s\u00e9r\u0151l az abszol\u00fat zsarol\u00f3v\u00edrus-ellen\u00e1ll\u00f3s\u00e1g biztos\u00edt\u00e1sa \u00e9rdek\u00e9ben.<\/p>\n<h2>A v\u00e1ltoztathatatlan t\u00e1rol\u00e1s mechanik\u00e1ja<\/h2>\n<p>A v\u00e1ltoztathatatlan t\u00e1rol\u00e1s a Write-Once-Read-Many (WORM \u2013 egyszer \u00edrhat\u00f3, sokszor olvashat\u00f3) architekt\u00far\u00e1ra \u00e9p\u00fcl. Miut\u00e1n az adatokat egy v\u00e1ltoztathatatlan c\u00e9lhelyre \u00edrt\u00e1k, azokat egyetlen felhaszn\u00e1l\u00f3 sem m\u00f3dos\u00edthatja, titkos\u00edthatja vagy t\u00f6r\u00f6lheti \u2013 bele\u00e9rtve a root jogosults\u00e1gokkal rendelkez\u0151 rendszergazd\u00e1kat vagy a kompromitt\u00e1lt szolg\u00e1ltat\u00e1sfi\u00f3kokat is \u2013, am\u00edg egy matematikailag \u00e9rv\u00e9nyes\u00edtett id\u0151z\u00e1r le nem j\u00e1r.<\/p>\n<h3>Megfelel\u0151s\u00e9gi m\u00f3d (Compliance Mode) vs. Ir\u00e1ny\u00edt\u00e1si m\u00f3d (Governance Mode)<\/h3>\n<p>A v\u00e1ltoztathatatlans\u00e1g megval\u00f3s\u00edt\u00e1sakor, k\u00fcl\u00f6n\u00f6sen a felh\u0151alap\u00fa objektumt\u00e1rol\u00f3kban, mint p\u00e9ld\u00e1ul az AWS S3, az Azure Blob vagy az S3-kompatibilis helysz\u00edni SAN-ok eset\u00e9ben, meg kell \u00e9rtenie a meg\u0151rz\u00e9si m\u00f3dok k\u00f6z\u00f6tti k\u00fcl\u00f6nbs\u00e9get:<\/p>\n<ul>\n<li><strong>Ir\u00e1ny\u00edt\u00e1si m\u00f3d (Governance Mode):<\/strong> Megakad\u00e1lyozza, hogy a norm\u00e1l felhaszn\u00e1l\u00f3k t\u00f6r\u00f6lj\u00e9k vagy m\u00f3dos\u00edts\u00e1k az objektumokat. Azonban a meghat\u00e1rozott IAM-jogosults\u00e1gokkal rendelkez\u0151 felhaszn\u00e1l\u00f3k (pl. <code>s3:BypassGovernanceRetention<\/code>) fel\u00fclb\u00edr\u00e1lhatj\u00e1k a z\u00e1rol\u00e1st. Ez hasznos tesztel\u00e9shez, de <strong>el\u00e9gtelen a zsarol\u00f3v\u00edrusok elleni v\u00e9delemhez<\/strong>, mivel a t\u00e1mad\u00f3k gyakran emelik a jogosults\u00e1gaikat tartom\u00e1nyi rendszergazdai vagy root szintre.<\/li>\n<li><strong>Megfelel\u0151s\u00e9gi m\u00f3d (Compliance Mode):<\/strong> A zsarol\u00f3v\u00edrusok elleni v\u00e9delem aranyszabv\u00e1nya. Miut\u00e1n egy objektumot z\u00e1roltak Megfelel\u0151s\u00e9gi m\u00f3dban, a meg\u0151rz\u00e9si id\u0151tartama nem r\u00f6vid\u00edthet\u0151, \u00e9s az objektumot <em>senki<\/em> nem t\u00f6r\u00f6lheti, bele\u00e9rtve az AWS root fi\u00f3kot sem. A z\u00e1rol\u00e1s a t\u00e1rol\u00f3f\u00fcrt szintj\u00e9n \u00e9rv\u00e9nyes\u00fcl.<\/li>\n<\/ul>\n<h2>V\u00e1ltoztathatatlan biztons\u00e1gi ment\u00e9si folyamat tervez\u00e9se<\/h2>\n<p>A robusztus adatb\u00e1zis-archiv\u00e1l\u00e1si architekt\u00fara elv\u00e1lasztja az akt\u00edv adatb\u00e1zis-m\u0171veleteket a v\u00e1ltoztathatatlan arch\u00edv r\u00e9tegt\u0151l. A v\u00e1ltoztathatatlans\u00e1got nem alkalmazhatja akt\u00edv adatb\u00e1zisf\u00e1jlokra (p\u00e9ld\u00e1ul <code>.mdf<\/code>\/<code>.ldf<\/code> az SQL Serverben vagy a <code>pg_data<\/code> k\u00f6nyvt\u00e1r a PostgreSQL-ben), mivel az adatb\u00e1zisok folyamatos olvas\u00e1si\/\u00edr\u00e1si hozz\u00e1f\u00e9r\u00e9st ig\u00e9nyelnek.<\/p>\n<p>Ehelyett a v\u00e1ltoztathatatlans\u00e1got a k\u00f6vetkez\u0151kre alkalmazz\u00e1k:<br \/>\n1.  <strong>Teljes \u00e9s differenci\u00e1lis biztons\u00e1gi ment\u00e9si f\u00e1jlok:<\/strong> Az adatb\u00e1zis alapvonali pillanatk\u00e9pei.<br \/>\n2.  <strong>Tranzakci\u00f3napl\u00f3k \/ WAL-f\u00e1jlok:<\/strong> Az adatb\u00e1zis-v\u00e1ltoz\u00e1sok folyamatos adatfolyama, amely az id\u0151pontra t\u00f6rt\u00e9n\u0151 helyre\u00e1ll\u00edt\u00e1shoz (PITR) sz\u00fcks\u00e9ges.<\/p>\n<h3>T\u00e1rol\u00e1si c\u00e9lhelyek a v\u00e1ltoztathatatlans\u00e1ghoz<\/h3>\n<p>A v\u00e1ltoztathatatlan t\u00e1rol\u00e1st k\u00fcl\u00f6nb\u00f6z\u0151 infrastrukt\u00fara-r\u00e9tegeken val\u00f3s\u00edthatja meg:<br \/>\n*   <strong>Felh\u0151alap\u00fa objektumt\u00e1rol\u00e1s:<\/strong> AWS S3 Object Lock, Azure Blob Immutable Storage, Google Cloud Storage meg\u0151rz\u00e9si szab\u00e1lyzatok.<br \/>\n*   <strong>Helysz\u00edni objektumt\u00e1rol\u00e1s:<\/strong> MinIO, Cloudian vagy Pure Storage FlashBlade, amelyek t\u00e1mogatj\u00e1k az S3 Object Lock API-kat.<br \/>\n*   <strong>Blokk\/f\u00e1jl t\u00e1rol\u00e1s:<\/strong> ZFS csak olvashat\u00f3 pillanatk\u00e9pekkel \u00e9s deleg\u00e1lt adminisztr\u00e1ci\u00f3val, vagy Linux f\u00e1jlattrib\u00fatumok.<\/p>\n<h2>V\u00e1ltoztathatatlan t\u00e1rol\u00e1s megval\u00f3s\u00edt\u00e1sa: Technikai \u00fatmutat\u00f3k<\/h2>\n<h3>1. Felh\u0151alap\u00fa objektumt\u00e1rol\u00e1s: AWS S3 Object Lock<\/h3>\n<p>Az adatb\u00e1zis-dumpok \u00e9s tranzakci\u00f3napl\u00f3k AWS-ben t\u00f6rt\u00e9n\u0151 v\u00e9delme \u00e9rdek\u00e9ben a gy\u0171jt\u0151 (bucket) l\u00e9trehoz\u00e1sakor enged\u00e9lyeznie kell az Object Lock funkci\u00f3t.<\/p>\n<p>El\u0151sz\u00f6r hozza l\u00e9tre a gy\u0171jt\u0151t enged\u00e9lyezett Object Lock funkci\u00f3val:<\/p>\n<pre><code class=\"language-bash\">aws s3api create-bucket \n    --bucket prod-db-archive-immutable \n    --region us-east-1 \n    --object-lock-enabled-for-bucket\n<\/code><\/pre>\n<p>Ezut\u00e1n konfigur\u00e1lja az alap\u00e9rtelmezett meg\u0151rz\u00e9si szab\u00e1lyzatot. Adatb\u00e1zis-arch\u00edvumok eset\u00e9n a 30 napos megfelel\u0151s\u00e9gi z\u00e1rol\u00e1s az alap\u00e9rtelmezett kiindul\u00f3pont, amely biztos\u00edtja, hogy egy h\u00f3napnyi m\u00f3dos\u00edthatatlan biztons\u00e1gi ment\u00e9ssel rendelkezzen.<\/p>\n<pre><code class=\"language-bash\">aws s3api put-object-lock-configuration \n    --bucket prod-db-archive-immutable \n    --object-lock-configuration '{\n        &quot;ObjectLockEnabled&quot;: &quot;Enabled&quot;,\n        &quot;Rule&quot;: {\n            &quot;DefaultRetention&quot;: {\n                &quot;Mode&quot;: &quot;COMPLIANCE&quot;,\n                &quot;Days&quot;: 30\n            }\n        }\n    }'\n<\/code><\/pre>\n<p>Amikor az adatb\u00e1zis biztons\u00e1gi ment\u00e9si szkriptje vagy \u00fcgyn\u00f6ke f\u00e1jlt k\u00fcld ebbe a gy\u0171jt\u0151be, az S3 automatikusan kisz\u00e1m\u00edtja a <code>Retain Until Date<\/code> (meg\u0151rz\u00e9s d\u00e1tuma) \u00e9rt\u00e9ket az objektum l\u00e9trehoz\u00e1si id\u0151b\u00e9lyege plusz 30 nap alapj\u00e1n.<\/p>\n<h3>2. Helysz\u00edni v\u00e1ltoztathatatlans\u00e1g: ZFS \u00e9s Linux attrib\u00fatumok<\/h3>\n<p>Ha az adatb\u00e1zisokat egy helysz\u00edni Linux biztons\u00e1gi ment\u00e9si szerverre archiv\u00e1lja, pszeudo-v\u00e1ltoztathatatlans\u00e1got \u00e9rhet el a <code>chattr<\/code> paranccsal, vagy val\u00f3di v\u00e1ltoztathatatlans\u00e1got a ZFS pillanatk\u00e9pek haszn\u00e1lat\u00e1val.<\/p>\n<p><strong>Linux <code>chattr<\/code> haszn\u00e1lata:<\/strong><br \/>\nA <code>+i<\/code> (immutable) jelz\u0151 megakad\u00e1lyozza a f\u00e1jl m\u00f3dos\u00edt\u00e1s\u00e1t, t\u00f6rl\u00e9s\u00e9t vagy \u00e1tnevez\u00e9s\u00e9t.<\/p>\n<pre><code class=\"language-bash\"># Adatb\u00e1zis dumpol\u00e1sa\npg_dump -U postgres -Fc mydb &gt; \/backups\/mydb_$(date +%F).dump\n\n# A biztons\u00e1gi ment\u00e9s v\u00e1ltoztathatatlann\u00e1 t\u00e9tele\nsudo chattr +i \/backups\/mydb_$(date +%F).dump\n\n# Az attrib\u00fatum ellen\u0151rz\u00e9se\nlsattr \/backups\/mydb_$(date +%F).dump\n# Kimenet: ----i---------e------- \/backups\/mydb_2023-10-27.dump\n<\/code><\/pre>\n<p><em>Megjegyz\u00e9s: B\u00e1r a <code>chattr<\/code> meg\u00e1ll\u00edtja az alapvet\u0151 zsarol\u00f3v\u00edrus-szkripteket, egy kifinomult, root hozz\u00e1f\u00e9r\u00e9ssel rendelkez\u0151 t\u00e1mad\u00f3 egyszer\u0171en futtathatja a <code>chattr -i<\/code> parancsot. Ez\u00e9rt ezt szigor\u00fa RBAC-vel \u00e9s elszigetelt biztons\u00e1gi ment\u00e9si h\u00e1l\u00f3zatokkal kell kombin\u00e1lni.<\/em><\/p>\n<p><strong>ZFS pillanatk\u00e9pek haszn\u00e1lata:<\/strong><br \/>\nA ZFS sokkal er\u0151sebb v\u00e9delmet ny\u00fajt. Ha pillanatk\u00e9pet k\u00e9sz\u00edt, \u00e9s \u201ez\u00e1rol\u00e1st\u201d (hold) helyez r\u00e1, megakad\u00e1lyozza a pillanatk\u00e9p megsemmis\u00edt\u00e9s\u00e9t.<\/p>\n<pre><code class=\"language-bash\"># Pillanatk\u00e9p k\u00e9sz\u00edt\u00e9se a biztons\u00e1gi ment\u00e9si adatk\u00e9szletr\u0151l\nzfs snapshot tank\/db_backups@archive_$(date +%F)\n\n# Z\u00e1rol\u00e1s elhelyez\u00e9se a pillanatk\u00e9pen a t\u00f6rl\u00e9s megakad\u00e1lyoz\u00e1sa \u00e9rdek\u00e9ben\nzfs hold keep_30_days tank\/db_backups@archive_$(date +%F)\n\n# M\u00e9g a root sem tudja megsemmis\u00edteni ezt a pillanatk\u00e9pet a z\u00e1rol\u00e1s felold\u00e1sa n\u00e9lk\u00fcl\nzfs destroy tank\/db_backups@archive_$(date +%F)\n# Kimenet: cannot destroy 'tank\/db_backups@archive_...': dataset is busy\n<\/code><\/pre>\n<h2>Adatb\u00e1zis-specifikus archiv\u00e1l\u00e1si strat\u00e9gi\u00e1k<\/h2>\n<p>Az id\u0151pontra t\u00f6rt\u00e9n\u0151 helyre\u00e1ll\u00edt\u00e1s (PITR) el\u00e9r\u00e9s\u00e9hez folyamatosan archiv\u00e1lnia kell a tranzakci\u00f3napl\u00f3kat a v\u00e1ltoztathatatlan t\u00e1rol\u00f3hely\u00e9re.<\/p>\n<h3>PostgreSQL WAL archiv\u00e1l\u00e1s pgBackRest-tel<\/h3>\n<p>A <code>pgBackRest<\/code> egy rendk\u00edv\u00fcl megb\u00edzhat\u00f3 biztons\u00e1gi ment\u00e9si eszk\u00f6z a PostgreSQL-hez, amely nat\u00edvan t\u00e1mogatja az S3-kompatibilis t\u00e1rol\u00e1st. A Write-Ahead Logs (WAL) v\u00e9delme \u00e9rdek\u00e9ben konfigur\u00e1lja a <code>pgBackRest<\/code>-et \u00fagy, hogy k\u00f6zvetlen\u00fcl a v\u00e1ltoztathatatlan S3-gy\u0171jt\u0151j\u00e9be k\u00fcldje az adatokat.<\/p>\n<p>A <code>pgbackrest.conf<\/code> f\u00e1jlj\u00e1ban:<\/p>\n<pre><code class=\"language-ini\">[global]\nrepo1-type=s3\nrepo1-s3-bucket=prod-db-archive-immutable\nrepo1-s3-region=us-east-1\nrepo1-s3-endpoint=s3.amazonaws.com\nrepo1-s3-key=AKIAIOSFODNN7EXAMPLE\nrepo1-s3-key-secret=wJalrXUtnFEMI\/K7MDENG\/bPxRfiCYEXAMPLEKEY\n\n# Gy\u0151z\u0151dj\u00f6n meg arr\u00f3l, hogy a meg\u0151rz\u00e9s \u00f6sszhangban van az S3 Object Lock konfigur\u00e1ci\u00f3j\u00e1val\nrepo1-retention-full=2\nrepo1-retention-archive=2\n\n[prod_cluster]\npg1-path=\/var\/lib\/postgresql\/14\/main\n<\/code><\/pre>\n<p><em>Fontos szempont:<\/em> Ha az S3-gy\u0171jt\u0151je 30 napos megfelel\u0151s\u00e9gi z\u00e1rol\u00e1st \u00edr el\u0151, de a <code>pgBackRest<\/code> a <code>repo1-retention-archive<\/code> alapj\u00e1n 14 nap ut\u00e1n megk\u00eds\u00e9rli lej\u00e1rtt\u00e1 tenni \u00e9s t\u00f6r\u00f6lni a WAL-f\u00e1jlokat, a t\u00f6rl\u00e9si API-h\u00edv\u00e1sok sikertelenek lesznek. Gy\u0151z\u0151dj\u00f6n meg arr\u00f3l, hogy a biztons\u00e1gi ment\u00e9si szoftver meg\u0151rz\u00e9si szab\u00e1lyzata nagyobb vagy egyenl\u0151, mint a t\u00e1rol\u00e1si szint\u0171 v\u00e1ltoztathatatlan z\u00e1rol\u00e1s.<\/p>\n<h3>Microsoft SQL Server: Biztons\u00e1gi ment\u00e9s URL-re<\/h3>\n<p>Az SQL Server t\u00e1mogatja a nat\u00edv biztons\u00e1gi ment\u00e9st k\u00f6zvetlen\u00fcl S3-kompatibilis objektumt\u00e1rol\u00f3ra. Konfigur\u00e1lhat egy SQL Server Agent feladatot, amely k\u00f6zvetlen\u00fcl a v\u00e1ltoztathatatlan gy\u0171jt\u0151be \u00edrja a <code>.bak<\/code> \u00e9s <code>.trn<\/code> f\u00e1jlokat.<\/p>\n<pre><code class=\"language-sql\">CREATE CREDENTIAL [s3:\/\/prod-db-archive-immutable.s3.us-east-1.amazonaws.com]\nWITH IDENTITY = 'S3 Access Key',\nSECRET = 'AccessKeyID:SecretAccessKey';\nGO\n\nBACKUP DATABASE [ProductionDB]\nTO URL = 's3:\/\/prod-db-archive-immutable.s3.us-east-1.amazonaws.com\/ProductionDB_Full.bak'\nWITH FORMAT, COMPRESSION, STATS = 10;\nGO\n<\/code><\/pre>\n<h2>Automatiz\u00e1l\u00e1s \u00e9s vez\u00e9nyl\u00e9s a CloudSave-vel<\/h2>\n<p>A v\u00e1ltoztathatatlan meg\u0151rz\u00e9si jelz\u0151k kezel\u00e9se, a hozz\u00e1f\u00e9r\u00e9si kulcsok rot\u00e1l\u00e1sa, valamint az adatb\u00e1zis-meg\u0151rz\u00e9si szab\u00e1lyzatok \u00e9s a t\u00e1rol\u00e1si z\u00e1rol\u00e1sok k\u00f6z\u00f6tti szinkroniz\u00e1l\u00e1s egyedi szkriptekkel rendk\u00edv\u00fcl hib\u00e1ra hajlamos. Egyetlen konfigur\u00e1ci\u00f3s hiba egy cron feladatban vagy API-h\u00edv\u00e1sban az arch\u00edvumokat kiszolg\u00e1ltatott\u00e1 teheti, vagy az el\u00e1rvult, z\u00e1rolt objektumok miatt az egekbe sz\u00f6k\u0151 felh\u0151alap\u00fa t\u00e1rol\u00e1si k\u00f6lts\u00e9geket eredm\u00e9nyezhet.<\/p>\n<p>Az olyan v\u00e1llalati biztons\u00e1gi ment\u00e9si platformok, mint a CloudSave, leegyszer\u0171s\u00edtik ezt az architekt\u00far\u00e1t. A CloudSave nat\u00edvan integr\u00e1l\u00f3dik az AWS S3 Object Lock, az Azure Blob Immutable Storage \u00e9s a helysz\u00edni S3-kompatibilis API-kkal.<\/p>\n<p>Amikor adatb\u00e1zis-ment\u00e9si tervet konfigur\u00e1l a CloudSave-ben:<br \/>\n1.  A platform automatikusan kezeli a VSS (Volume Shadow Copy Service) nyugalmi \u00e1llapotot az SQL Server eset\u00e9ben, vagy a <code>pg_start_backup()<\/code> API-t a PostgreSQL eset\u00e9ben.<br \/>\n2.  A deduplik\u00e1lt, titkos\u00edtott biztons\u00e1gi ment\u00e9si adatokat k\u00f6zvetlen\u00fcl a t\u00e1rol\u00e1si c\u00e9lhelyre tov\u00e1bb\u00edtja.<br \/>\n3.  A CloudSave dinamikusan alkalmazza a WORM API-h\u00edv\u00e1sokat (pl. <code>PutObjectRetention<\/code>) objektumonk\u00e9nt, t\u00f6k\u00e9letesen \u00f6sszehangolva a t\u00e1rol\u00e1si z\u00e1rol\u00e1s id\u0151tartam\u00e1t a szab\u00e1lyzat \u00e1ltal meghat\u00e1rozott meg\u0151rz\u00e9si \u00fctemtervvel.<br \/>\n4.  Ha egy t\u00e1mad\u00f3 kompromitt\u00e1lja a CloudSave fel\u00fcgyeleti konzolt, akkor sem tudja t\u00f6r\u00f6lni a biztons\u00e1gi ment\u00e9seket, mivel a megfelel\u0151s\u00e9gi z\u00e1rol\u00e1st a m\u00f6g\u00f6ttes t\u00e1rol\u00e1si infrastrukt\u00fara \u00e9rv\u00e9nyes\u00edti, nem a biztons\u00e1gi ment\u00e9si szoftver.<\/p>\n<h2>A v\u00e1ltoztathatatlan adatb\u00e1zis-arch\u00edvumok legjobb gyakorlatai<\/h2>\n<p>Annak \u00e9rdek\u00e9ben, hogy v\u00e1ltoztathatatlan architekt\u00far\u00e1ja val\u00f3ban rugalmas legyen, tartsa be a k\u00f6vetkez\u0151 rendszertervez\u00e9si legjobb gyakorlatokat:<\/p>\n<h3>1. Szigor\u00fa NTP-szinkroniz\u00e1l\u00e1s<\/h3>\n<p>A v\u00e1ltoztathatatlan z\u00e1rol\u00e1sok matematikailag az id\u0151b\u00e9lyegekhez k\u00f6t\u0151dnek. Ha a t\u00e1rol\u00f3t\u00f6mb\u00f6n vagy a biztons\u00e1gi ment\u00e9si szerveren l\u00e9v\u0151 NTP (Network Time Protocol) szolg\u00e1ltat\u00e1s kompromitt\u00e1l\u00f3dik vagy elcs\u00faszik, az a z\u00e1rol\u00e1sok id\u0151 el\u0151tti lej\u00e1rat\u00e1t vagy soha be nem k\u00f6vetkez\u0151 lej\u00e1rat\u00e1t okozhatja. Gy\u0151z\u0151dj\u00f6n meg arr\u00f3l, hogy a t\u00e1rol\u00e1si infrastrukt\u00fara hiteles\u00edtett, redund\u00e1ns NTP-forr\u00e1sokat haszn\u00e1l.<\/p>\n<h3>2. IAM-szerepk\u00f6r\u00f6k \u00e9s hiteles\u00edt\u0151 adatok elszigetel\u00e9se<\/h3>\n<p>A v\u00e1ltoztathatatlan gy\u0171jt\u0151be t\u00f6rt\u00e9n\u0151 \u00edr\u00e1shoz haszn\u00e1lt hiteles\u00edt\u0151 adatok csak <code>s3:PutObject<\/code> \u00e9s <code>s3:PutObjectRetention<\/code> jogosults\u00e1gokkal rendelkezhetnek. Soha nem rendelkezhetnek <code>s3:DeleteObject<\/code> vagy <code>s3:PutBucketObjectLockConfiguration<\/code> jogosults\u00e1gokkal.<\/p>\n<p>P\u00e9lda egy minim\u00e1lis jogosults\u00e1g\u00fa IAM-szab\u00e1lyzatra egy adatb\u00e1zis-ment\u00e9si \u00fcgyn\u00f6k sz\u00e1m\u00e1ra:<\/p>\n<pre><code class=\"language-json\">{\n    &quot;Version&quot;: &quot;2012-10-17&quot;,\n    &quot;Statement&quot;: [\n        {\n            &quot;Effect&quot;: &quot;Allow&quot;,\n            &quot;Action&quot;: [\n                &quot;s3:PutObject&quot;,\n                &quot;s3:GetBucketObjectLockConfiguration&quot;\n            ],\n            &quot;Resource&quot;: [\n                &quot;arn:aws:s3:::prod-db-archive-immutable&quot;,\n                &quot;arn:aws:s3:::prod-db-archive-immutable\/*&quot;\n            ]\n        }\n    ]\n}\n<\/code><\/pre>\n<h3>3. A meg\u0151rz\u00e9si id\u0151tartam m\u00e9retez\u00e9se<\/h3>\n<p>Ne \u00e1ll\u00edtson be t\u00falzottan hossz\u00fa ideig tart\u00f3 megfelel\u0151s\u00e9gi z\u00e1rol\u00e1st (pl. 7 \u00e9v megfelel\u0151s\u00e9gi okokb\u00f3l) az els\u0151dleges, gyors helyre\u00e1ll\u00edt\u00e1si r\u00e9tegen. Az adatb\u00e1zisok hatalmas mennyis\u00e9g\u0171 WAL\/tranzakci\u00f3napl\u00f3-adatot gener\u00e1lnak. Ezen adatok \u00e9vekig tart\u00f3 z\u00e1rol\u00e1sa exponenci\u00e1lis t\u00e1rol\u00e1si k\u00f6lts\u00e9gn\u00f6veked\u00e9st eredm\u00e9nyez.<br \/>\nEhelyett haszn\u00e1ljon r\u00e9tegzett megk\u00f6zel\u00edt\u00e9st:<br \/>\n*   <strong>Operat\u00edv helyre\u00e1ll\u00edt\u00e1si r\u00e9teg:<\/strong> 14\u201330 napos v\u00e1ltoztathatatlan meg\u0151rz\u00e9s a teljes ment\u00e9sekhez \u00e9s napl\u00f3khoz.<br \/>\n*   <strong>Hossz\u00fa t\u00e1v\u00fa archiv\u00e1l\u00e1si r\u00e9teg:<\/strong> Havi teljes biztons\u00e1gi ment\u00e9sek, amelyeket Glacier\/Deep Archive-ba helyeznek \u00e1t Vault Lock-kal 1\u20137 \u00e9vre.<\/p>\n<h3>4. Rendszeres helyre\u00e1ll\u00edt\u00e1si tesztel\u00e9s elszigetelt VPC-kben<\/h3>\n<p>A v\u00e1ltoztathatatlans\u00e1g garant\u00e1lja, hogy az adatok nem t\u00f6r\u00f6lhet\u0151k, de nem garant\u00e1lja, hogy az adatok mentesek a logikai s\u00e9r\u00fcl\u00e9sekt\u0151l. Automatiz\u00e1lnia kell a v\u00e1ltoztathatatlan adatb\u00e1zis-arch\u00edvumok vissza\u00e1ll\u00edt\u00e1s\u00e1t egy elszigetelt, l\u00e9gmentesen z\u00e1rt (air-gapped) VPC-be vagy VLAN-ba. Futtassa a <code>DBCC CHECKDB<\/code> (SQL Server) vagy <code>pg_amcheck<\/code> (PostgreSQL) parancsot a vissza\u00e1ll\u00edtott adatokon a struktur\u00e1lis integrit\u00e1s ellen\u0151rz\u00e9s\u00e9hez.<\/p>\n<h2>K\u00f6vetkeztet\u00e9s<\/h2>\n<p>A zsarol\u00f3v\u00edrusok elleni v\u00e9delem a felt\u00e9telezett jogs\u00e9rt\u00e9s gyakorlata. Mire a SIEM-rendszer\u00e9ben riaszt\u00e1s \u00e9rkezik, a fenyeget\u0151k val\u00f3sz\u00edn\u0171leg m\u00e1r megk\u00eds\u00e9relt\u00e9k kompromitt\u00e1lni a biztons\u00e1gi ment\u00e9si infrastrukt\u00far\u00e1j\u00e1t. Az adatb\u00e1zis-arch\u00edvumok megfelel\u0151s\u00e9gi m\u00f3dban t\u00f6rt\u00e9n\u0151, v\u00e1ltoztathatatlan t\u00e1rol\u00e1ssal t\u00f6rt\u00e9n\u0151 megtervez\u00e9s\u00e9vel megfosztja a t\u00e1mad\u00f3kat az els\u0151dleges befoly\u00e1sukt\u00f3l. Ak\u00e1r nat\u00edv felh\u0151alap\u00fa API-kat, ZFS-z\u00e1rol\u00e1sokat vagy egy v\u00e1llalati vez\u00e9nyl\u00e9si platformot, p\u00e9ld\u00e1ul a CloudSave-et haszn\u00e1lja, a WORM-t\u00e1rol\u00e1s megval\u00f3s\u00edt\u00e1sa m\u00e1r nem v\u00e1laszthat\u00f3 \u2013 a modern adatb\u00e1zis-adminisztr\u00e1ci\u00f3 \u00e9s katasztr\u00f3fa-helyre\u00e1ll\u00edt\u00e1s k\u00f6telez\u0151 pill\u00e9re.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_title":"Immutable Database Storage to Defeat Ransomware","rank_math_description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","rank_math_focus_keyword":"immutable database storage","footnotes":""},"categories":[471],"tags":[4625,4626,4627,1303,4628,4629],"class_list":["post-6373","post","type-post","status-publish","format-standard","hentry","category-database-backup","tag-3-2-1-1-backup","tag-data-survivability","tag-database-archives","tag-enterprise-backup","tag-immutable-storage","tag-ransomware-protection"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.7 (Yoast SEO v27.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Immutable Database Storage to Defeat Ransomware<\/title>\n<meta name=\"description\" content=\"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cloudsave.app\/hu\/knowledge-base\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\/\" \/>\n<meta property=\"og:locale\" content=\"hu_HU\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Adatb\u00e1zis-arch\u00edvumok megv\u00e1ltoztathatatlan t\u00e1rol\u00e1s\u00e1nak tervez\u00e9se a zsarol\u00f3v\u00edrusok elleni v\u00e9dekez\u00e9shez\" \/>\n<meta property=\"og:description\" content=\"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cloudsave.app\/hu\/knowledge-base\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\/\" \/>\n<meta property=\"og:site_name\" content=\"CloudSave\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-19T13:54:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-19T14:08:01+00:00\" \/>\n<meta name=\"author\" content=\"shervinrv\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Szerz\u0151:\" \/>\n\t<meta name=\"twitter:data1\" content=\"shervinrv\" \/>\n\t<meta name=\"twitter:label2\" content=\"Becs\u00fclt olvas\u00e1si id\u0151\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 perc\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/knowledge-base\\\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/knowledge-base\\\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\\\/\"},\"author\":{\"name\":\"shervinrv\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\"},\"headline\":\"Adatb\u00e1zis-arch\u00edvumok megv\u00e1ltoztathatatlan t\u00e1rol\u00e1s\u00e1nak tervez\u00e9se a zsarol\u00f3v\u00edrusok elleni v\u00e9dekez\u00e9shez\",\"datePublished\":\"2026-06-19T13:54:43+00:00\",\"dateModified\":\"2026-06-19T14:08:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/knowledge-base\\\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\\\/\"},\"wordCount\":2099,\"publisher\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\"},\"keywords\":[\"3-2-1-1 backup\",\"data survivability\",\"database archives\",\"Enterprise Backup\",\"immutable storage\",\"ransomware protection\"],\"articleSection\":[\"Database Backup\"],\"inLanguage\":\"hu\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/knowledge-base\\\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\\\/\",\"url\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/knowledge-base\\\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\\\/\",\"name\":\"Immutable Database Storage to Defeat Ransomware\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/#website\"},\"datePublished\":\"2026-06-19T13:54:43+00:00\",\"dateModified\":\"2026-06-19T14:08:01+00:00\",\"description\":\"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/knowledge-base\\\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\\\/#breadcrumb\"},\"inLanguage\":\"hu\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cloudsave.app\\\/hu\\\/knowledge-base\\\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/knowledge-base\\\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Adatb\u00e1zis-arch\u00edvumok megv\u00e1ltoztathatatlan t\u00e1rol\u00e1s\u00e1nak tervez\u00e9se a zsarol\u00f3v\u00edrusok elleni v\u00e9dekez\u00e9shez\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/#website\",\"url\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/\",\"name\":\"CloudSave\",\"description\":\"CloudSave\",\"publisher\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"hu\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\",\"name\":\"shervinrv\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"hu\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\",\"url\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\",\"contentUrl\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\",\"width\":859,\"height\":150,\"caption\":\"shervinrv\"},\"logo\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\"},\"sameAs\":[\"http:\\\/\\\/cloudsave.app\"],\"url\":\"https:\\\/\\\/cloudsave.app\\\/hu\\\/knowledge-base\\\/author\\\/shervinrv\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Immutable Database Storage to Defeat Ransomware","description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cloudsave.app\/hu\/knowledge-base\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\/","og_locale":"hu_HU","og_type":"article","og_title":"Adatb\u00e1zis-arch\u00edvumok megv\u00e1ltoztathatatlan t\u00e1rol\u00e1s\u00e1nak tervez\u00e9se a zsarol\u00f3v\u00edrusok elleni v\u00e9dekez\u00e9shez","og_description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","og_url":"https:\/\/cloudsave.app\/hu\/knowledge-base\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\/","og_site_name":"CloudSave","article_published_time":"2026-06-19T13:54:43+00:00","article_modified_time":"2026-06-19T14:08:01+00:00","author":"shervinrv","twitter_card":"summary_large_image","twitter_misc":{"Szerz\u0151:":"shervinrv","Becs\u00fclt olvas\u00e1si id\u0151":"12 perc"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cloudsave.app\/hu\/knowledge-base\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\/#article","isPartOf":{"@id":"https:\/\/cloudsave.app\/hu\/knowledge-base\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\/"},"author":{"name":"shervinrv","@id":"https:\/\/cloudsave.app\/hu\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d"},"headline":"Adatb\u00e1zis-arch\u00edvumok megv\u00e1ltoztathatatlan t\u00e1rol\u00e1s\u00e1nak tervez\u00e9se a zsarol\u00f3v\u00edrusok elleni v\u00e9dekez\u00e9shez","datePublished":"2026-06-19T13:54:43+00:00","dateModified":"2026-06-19T14:08:01+00:00","mainEntityOfPage":{"@id":"https:\/\/cloudsave.app\/hu\/knowledge-base\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\/"},"wordCount":2099,"publisher":{"@id":"https:\/\/cloudsave.app\/hu\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d"},"keywords":["3-2-1-1 backup","data survivability","database archives","Enterprise Backup","immutable storage","ransomware protection"],"articleSection":["Database Backup"],"inLanguage":"hu"},{"@type":"WebPage","@id":"https:\/\/cloudsave.app\/hu\/knowledge-base\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\/","url":"https:\/\/cloudsave.app\/hu\/knowledge-base\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\/","name":"Immutable Database Storage to Defeat Ransomware","isPartOf":{"@id":"https:\/\/cloudsave.app\/hu\/#website"},"datePublished":"2026-06-19T13:54:43+00:00","dateModified":"2026-06-19T14:08:01+00:00","description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","breadcrumb":{"@id":"https:\/\/cloudsave.app\/hu\/knowledge-base\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\/#breadcrumb"},"inLanguage":"hu","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cloudsave.app\/hu\/knowledge-base\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cloudsave.app\/hu\/knowledge-base\/adatb%c3%a1zis-arch%c3%advumok-megv%c3%a1ltoztathatatlan-t%c3%a1rol%c3%a1s%c3%a1nak-tervez%c3%a9se-a-zsarol%c3%b3v%c3%adrusok-elleni-v%c3%a9dekez%c3%a9shez\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cloudsave.app\/hu\/"},{"@type":"ListItem","position":2,"name":"Adatb\u00e1zis-arch\u00edvumok megv\u00e1ltoztathatatlan t\u00e1rol\u00e1s\u00e1nak tervez\u00e9se a zsarol\u00f3v\u00edrusok elleni v\u00e9dekez\u00e9shez"}]},{"@type":"WebSite","@id":"https:\/\/cloudsave.app\/hu\/#website","url":"https:\/\/cloudsave.app\/hu\/","name":"CloudSave","description":"CloudSave","publisher":{"@id":"https:\/\/cloudsave.app\/hu\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cloudsave.app\/hu\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"hu"},{"@type":["Person","Organization"],"@id":"https:\/\/cloudsave.app\/hu\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d","name":"shervinrv","image":{"@type":"ImageObject","inLanguage":"hu","@id":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png","url":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png","contentUrl":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png","width":859,"height":150,"caption":"shervinrv"},"logo":{"@id":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png"},"sameAs":["http:\/\/cloudsave.app"],"url":"https:\/\/cloudsave.app\/hu\/knowledge-base\/author\/shervinrv\/"}]}},"_links":{"self":[{"href":"https:\/\/cloudsave.app\/hu\/wp-json\/wp\/v2\/posts\/6373","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cloudsave.app\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cloudsave.app\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cloudsave.app\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cloudsave.app\/hu\/wp-json\/wp\/v2\/comments?post=6373"}],"version-history":[{"count":1,"href":"https:\/\/cloudsave.app\/hu\/wp-json\/wp\/v2\/posts\/6373\/revisions"}],"predecessor-version":[{"id":6435,"href":"https:\/\/cloudsave.app\/hu\/wp-json\/wp\/v2\/posts\/6373\/revisions\/6435"}],"wp:attachment":[{"href":"https:\/\/cloudsave.app\/hu\/wp-json\/wp\/v2\/media?parent=6373"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cloudsave.app\/hu\/wp-json\/wp\/v2\/categories?post=6373"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cloudsave.app\/hu\/wp-json\/wp\/v2\/tags?post=6373"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}