Methods for scanning for ransomware in file backups.
reddit / selfhosted

----------------------------------------------------------------------
crimsonBZD · 2023-11-02 16:51

Hello selfhosted community, I was hoping for some help.

I've been tasked with finding a backup solution for my company where
we can back up files to several off site servers we also own, and we
need ransomware protection.

I've found "Kopia," which seems to do everything except the ransomware
protection. Some coworkers who were, in the past, familiar with Linux
servers suggested that there may be a program separate from the file
backup setup to protect against it.

I'm wondering if anyone knows of any such thing, if it even exists,
and if not if there is a self hosted alternative to Kopia that might
offer the same thing.

I'm struggling to even search this properly as I keep finding what
amounts to ads for other companies to backup my data and offering
ransomware protection as a service.

Any information or solutions ya'll might have would be amazing, thank
you!

----------------------------------------------------------------------
L1nuxBear · 2023-11-02 17:02

Have you looked into Kopia Repository Server?
https://kopia.io/docs/repository-server/

I use UrBackup at my company for backups, all backups/restores are
done through the server and individual users do not have access to the
underlying storage.
https://www.urbackup.org/

----------------------------------------------------------------------
bendem · 2023-11-02 17:13

The term you're looking for is one of "immutable" or "worm
protection". They both mean that files written cannot (never or not
until a predefined period of time) be modified. This means that they
cannot be encrypted without a cve or physical access to the backup
server.