Samsung patents SSDs that use AI to spot ransomware attacks
Samsung has patented a system where the storage drive itself watches for suspicious activity. It uses a machine-learning algorithm to analyze the commands sent to the drive and alerts the computer if it detects ransomware behavior.
In the filing’s own words
A storage system, including a host device; and a storage device including a memory and at least one processor configured to implement a storage internal protection (SIP) module, wherein the SIP module is configured to: obtain, from the host device, a plurality of storage commands corresponding to the memory, filter the plurality of storage commands to obtain a filtered plurality of storage commands, apply information about the filtered plurality of storage commands to a machine-learning ransomware detection algorithm, and based on the machine-learning ransomware detection algorithm indicating that a ransomware operation is detected, provide a notification to the host device.
What exactly they claim (claim 1)
1. A storage system, comprising: a host device; and a storage device comprising a memory and at least one processor configured to: obtain, from the host device, a plurality of storage commands corresponding to the memory, filter the plurality of storage commands to obtain a filtered plurality of storage commands, apply information about the filtered plurality of storage commands to a machine-learning ransomware detection algorithm implemented using malware protection firmware code, based on the machine-learning ransomware detection algorithm indicating that a ransomware operation is detected, provide a notification to the host device, update the malware protection firmware code, apply new information about a new filtered plurality of storage commands to an updated machine-learning ransomware detection algorithm corresponding to the updated malware protection firmware code, and based on the updated machine-learning ransomware detection algorithm indicating that a new ransomware operation is detected, provide the notification to the host device.
Facts
- Company
- Samsung (SAMSUNG ELECTRONICS CO., LTD.)
- Official title
- Ransomware and malicious software protection in SSD/UFS by NVME instructions log analysis based on machine-learning
- Patent number
- US12769833B2
- Application number
- 17877435
- Filed
- Jul 29, 2022
- Granted
- Oct 20, 2026
- Inventors
- 3
- Claims
- 20
Classified under
G06F 21/566 Physics & computingG06F 11/1415 Physics & computingG06N 20/00 Physics & computingMore from Samsung in Security & privacy
- Samsung patents AI system to find and fix device security flaws Sep 17, 2026
- Samsung patents method to find lost devices via nearby phones Sep 8, 2026
- Samsung patents video camera that tracks authorized faces for security Sep 1, 2026
- Samsung patents system that ranks home camera clips by unusual events Sep 8, 2026
- Samsung patents biometric check that adjusts for hidden data shifts Sep 15, 2026
Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.