Cyber Protection — High-Performance Security

The KDDI France Anti-Ransomware Vault, developed in partnership with Dell Technologies, provides advanced protection against ransomware and other cyber threats.
This solution is built on several key pillars:

• Isolation of critical backups:
  The Vault is based on an Air-Gap architecture, which completely disconnects the critical backup environment from the production network. This isolation is fully automated, with opening and closing windows controlled by defined security policies.
• Data immutability:
  Backups are stored in a Dell PowerProtect DD repository configured with the Retention Lock feature, ensuring that files cannot be deleted, modified, or encrypted — even by internal administrators or in the event of a breach.
• Anomaly detection:
  An integrated behavioral analysis engine continuously monitors backup flows and detects suspicious variations (such as unusual data volumes, file types, or transfer speeds). In the event of abnormal activity, alerts are triggered, and write operations can be automatically suspended.
• Rapid data recovery:
  The Vault retains the metadata of each backup set to enable validated and integrity-checked restores, independent of the compromised environment. Regular cold restoration tests are performed from the isolated environment to ensure ongoing operational readiness.

The solution is fully integrated into the Veeam Backup & Replication ecosystem through a multi-step automated process:

• Production data is protected using Veeam.
• A backup copy is automatically transferred to the Vault via a PowerProtect DD target using the DDBoost interface, ensuring both high performance and security.
• The environment is then automatically disconnected (via logical or physical Air Gap), ensuring that no active ransomware can reach the repository.
• In the event of an attack, restoration is carried out from validated and locked recovery points, completely isolated from any contamination.

This transfer and isolation chain relies on automatic orchestration integrated within the backup architecture and managed by KDDI France’s control tools.