Design of an Encryption-Based Automated Cloud Backup and Recovery Framework with Ransomware Resistance

Abstract

This paper introduces an automated and secure cloud backup and recovery framework designed to enhance ransomware resilience through the integration of encryption, scheduled synchronization, and anomaly detection. The system utilizes client-side AES encryption to preserve data confidentiality prior to transmission, while SHA-256 hashing ensures data integrity throughout the backup and recovery processes. Automated synchronization maintains up-to-date encrypted copies, minimizing potential data loss and enabling efficient recovery of unaffected versions after ransomware incidents. Additionally, an anomaly detection module continuously monitors irregular encryption behaviors and file modification patterns to identify potential ransomware activity. The framework was implemented and tested using cloud platforms such as AWS S3 under simulated ransomware attacks. Experimental results indicate that the proposed system achieves strong confidentiality, integrity, and recovery reliability with minimal performance overhead. Overall, this approach offers a practical and robust solution for securing sensitive cloud data against ransomware threats while ensuring business continuity in dynamic and untrusted environments.