How to protect backups from ransomware and encryptors?

Ransomware has become one of the main threats to digital data, purposefully attacking not only main files, but also connected network backup storages. If the infected computer has permanent access to the backup disk with write permissions, the encryptor will destroy both the original and the safety copy. Therefore, the first principle of protection is the physical or logical isolation of archives from the working environment.

To create reliable protection, immutable data storages are used, which block any possibility of changing or deleting files for a specified period. Even if an attacker gains full access to the administrator account, they will not be able to erase the protected backups. Additionally, it is recommended to use isolated local tape drives or detachable external disks that connect to the network only during the writing process.