Keywords
IT Continuity Defense Techniques
Cyberattack Recovery Safety
Data Recovery Techniques
System Redundancy
How to Cite
Abstract
Cyberattacks represent one of the key threats to the stability, integrity, and availability of modern information systems, making the rapid and effective restoration of operational continuity after cybersecurity incidents essential. This article provides a comprehensive review and comparative analysis of techniques used to recover systems following information security incidents, including such approaches as backups, redundancy, virtualization, and cloud-based technologies. The analysis draws on an in-depth examination of the academic literature and industry practices, enabling a comparison of the most widely used methods in both historical and contemporary contexts. Particular attention is given to evaluating the effectiveness of these solutions with respect to two critical continuity metrics: system recovery time (RTO) and acceptable data loss (RPO). The comparison also takes into account the economic aspects of implementing and maintaining various technologies, as well as organizational factors influencing the effectiveness of recovery strategies. Both the advantages and limitations of each approach are discussed, with consideration of system scale, resource availability, and the level of process automation.
The study identifies significant research gaps in continuity strategies, especially in light of the growing complexity of IT environments and the integration of cloud and hybrid solutions. Based on the analysis, recommendations are formulated for further development of system recovery practices, with particular emphasis on standardizing procedures, automating recovery testing, and adopting emerging security technologies. These findings may serve as a foundation for building more effective and resilient information security strategies, ultimately enhancing data protection and ensuring a higher degree of operational continuity in the face of the increasing volume and complexity of cyberthreats.
References
Abualkishik, A.Z., Alwan, A.A., & Gulzar, Y. (2020). Disaster Recovery in Cloud Computing Systems: An Overview. International Journal of Advanced Computer Science and Applications (IJACSA). http://dx.doi.org/10.14569/IJACSA.2020.0110984
Alhazmi, O.H., & Malaiya, Y.K. (2012). Assessing Disaster Recovery Alternatives: On-site, Colocation or Cloud. IEEE 23rd International Symposium on Software Reliability Engineering Workshops, 19–20. https://api.semanticscholar.org/CorpusID:33513857
Alhazmi, O.H., & Malaiya, Y.K. (2013). Evaluating Disaster Recovery Plans Using the Cloud. Proceedings-Annual of Reliability and Maintainability Symposium (RAMS) IEEE, 1–6. https://doi.org/10.1109/RAMS.2013.6517700
Alouffi, B., Hasnain, M., Alharbi, A., Alosaimi, W., Alyami, H., & Ayaz, M. (2021). A Systematic Literature Review on Cloud Computing Security: Threats and Mitigation Strategies. IEEE Access, 9, 57792–57807. https://doi.org/10.1109/ACCESS.2021.3073203
Andress, J. (2020). The Basics of Information Security: Understanding the Fundamentals of InfoSec in Theory and Practice. Elsevier.
Baig, R., Freitag, F., Navarro, L. (2018). Cloudy in guifi. net: Establishing and sustaining a community cloud as open commons. Future Generation Computer Systems, 87, 868–887. https://doi.org/10.1016/j.future.2017.12.017
Bigelow, S.J. (2019). Implementing Backup and Recovery: The Readiness Guide for the Enterprise. CRC Press.
Braun, V., & Clarke, V. (2006). Using thematic analysis in psychology. Qualitative Research in Psychology, 3(2), 77–101. https://doi.org/10.1191/1478088706qp063oa
Buyya, R., Vecchiola, C., & Selvi, S.T. (2013). Mastering Cloud Computing: Foundations and Applications Programming. Morgan Kaufmann.
Carroll, M., van der Merwe, A., & Kotzé, P. (2011). Secure cloud computing: Benefits, risks and controls. Information Security for South Africa, 1–9. https://doi.org/10.1109/ISSA.2011.6027519
Dhanujati, N., & Girsang, A. S. (2018). Data Center-Disaster Recovery Center (DC-DRC) for High Availability IT Service. International Conference on Information Management and Technology (ICIMTech), 55–60. https://doi.org/10.1109/ICIMTech.2018.8528170
Gomes, T., Tapolcai, J., Esposito, Ch., Hutchison, D., Kuipers, F., Rak, J., De Sousa, A., Iossifides, A., Travanca, R., Andre, J., Jorge, L., Martins, L., Ortiz Ugalde, P., Pasic, A., Pezaros, D., Jouet, S., Secci, S., & Tornatore, M. (2016). A survey of strategies for communication networks to protect against large-scale natural disasters. 8th International Workshop on Resilient Networks Design and Modeling (RNDM), 11–22. https://doi.org/10.1109/RNDM.2016.7608263
Khoshkholghi, M. A. (2014). Cluster as a Service for Disaster Recovery in Intercloud Systems: Design and Modeling. International Journal of Cloud Computing and Services Science (IJ-CLOSER), 3(3), 163–171. https://doi.org/10.11591/closer.v3i3.6375
Kitchenham, B., & Charters, S. (2007). Guidelines for performing systematic literature reviews in software engineering. Keele University and Durham University, 1–57.
Li, L., Tong, L., & Sali, A. (2024). Evaluation of Cloud Recovery System for Financial Applications Based on Hadoop. IEEE 7th International Symposium on Telecommunication Technologies (ISTT), 65–71. https://doi.org/10.1109/ISTT63363.2024.10750704
Linthicum, D. S. (2009). Cloud Computing and SOA Convergence in Your Enterprise: A Step-by-Step Guide. Addison-Wesley Professional.
Litte, D.B., & Chapa, D.A. (2003). Implementing Backup and Recovery. Wiley. 10. Preimesberger, C., & Rouse, M. (2025). Cloud-Based Backup and Disaster Recovery Paradigms: Implementing Immutable Architectures and Cyber Resilience. Security Press. https://doi.org/10.1016/j.sysarc.2024.103950
Liu B., Xin, Y., & Zhang, C. (2022). A Solution for A Disaster Recovery Service System in Multi-cloud Environment. 2022 International Applied Computational Electromagnetics Society Symposium (ACES-China), 1–4. https://doi.org/10.1109/ACES-China56081.2022.10064903
Liu, B., Xin, Y., & Zhang, C. (2022). A Solution for A Disaster Recovery Service System in Multi-cloud Environment. International Applied Computational Electromagnetics Society Symposium (ACES-China), 1–4. https://doi.org/10.1109/ACESChina56081.2022.10064903
Madhura, K., & Mahalakshmi, R. (2021). Survey on Technologies, Benefits, Challenges and Future Suggestions to Improvise the Data Security of Confidential Academic Records in India. 9th International Conference on Cyber and IT Service Management (CITSM), 1-9. https://doi.org/10.1109/CITSM52892.2021.9588938
Mell P., & Grance, T. (2011). The NIST Definition of Cloud Computing. National Institute of Standards and Technology.
Mendonça, J., Lima, R., Queiroz, E., Andrade, E., & Kim D.D. (2019). Evaluation of a Backup-as-a-Service Environment for Disaster
Recovery. IEEE Symposium on Computers and Communications (ISCC), 1–6. https://doi.org/10.1109/ISCC47284.2019.8969658
Mukherjee, B. (2014). Network and service availability models for evaluating disaster recovery scenarios. IEEE Communications Magazine, 52(10), 84–91.
Nikolovski, S., & Mitrevski, P. (2023). Data Protection and Recovery Performance Analysis of Cloud-Based Recovery Service. 58th International Scientific Conference on Information, Communication and Energy Systems and Technologies (ICEST), 139–142.https://doi.org/10.1109/ICEST58410.2023.10187249
Nikolovski, S., Milenkovski, B., & Petreska, A. (2025). Reliability Analysis Through System Dynamics Modeling for Intellectual Capital Protection with a Cloud Services. 60th International Scientific Conference on Information, Communication and Energy Systems and Technologies (ICEST), 1–4.
Nikolovski, S., Mitrevski, P., & Petreska, A. (2024). Performance Analysis of Cloud Service-Based Data Protection Systems. 59th International Scientific Conference on Information, Communication and Energy Systems and Technologies (ICEST), 1–4. https://doi.org/10.1109/ICEST62335.2024.10639783
Ponemon, L. (2022). Cost of a Data Breach Report. IBM Security.
Reichman, A., & Wayer, S. (2019). Ad-hoc network recovery after severe disaster. IEEE International Conference on Microwaves, Antennas, Communications and Electronic Systems (COMCAS), 1–3. https://doi.org/10.1109/COMCAS44984.2019.8958195
Salim, L., Harjono, S., Gunawan, F., & Moniaga, J. (2023). A Literature Review of Challenges and Solutions in Cloud Security. 10th International Conference on Information Technology, Computer, and Electrical Engineering (ICITACEE), 26–32. https://doi.org/10.1109/ICITACEE58587.2023.10276732
Shameli-Sendi, A., Cheriet, M., & Hamou-Lhadj, A. (2014). Taxonomy of Intrusion Risk Assessment and Response System. Computers & Security, 45, 1–16. https://doi.org/10.1016/j.cose.2014.04.009
Silberschatz, A., Galvin, P.B., & Gagne, G. (2018). Operating System Concepts. Wiley.
Snedaker, S. (2020). Business Continuity and Disaster Recovery Planning for IT Professionals. Elsevier. https://doi.org/10.1016/C2012-0-06206-0
Suraj, A.R., Janani Shekar, S., & Mamatha, G.S. (2018). A Robust Security Model for Cloud Computing Applications. International Conference on Computation of Power, Energy, Information and Communication (ICCPEIC), 018–022. https://doi.org/10.1109/ICCPEIC.2018.8525141
Tabrizchi, H., & Kuchaki Rafsanjani, M. (2020). A survey on security challenges in cloud computing: issues, threats, andsolutions. The Journal of Supercomputing, 76(1). https://doi.org/10.1007/s11227-020-03213-1
Tamimi, A.A., Dawood, R., & Sadaqa, L. (2019). Disaster Recovery Techniques in Cloud Computing. 2019 IEEE Jordan
International Joint Conference on Electrical Engineering and Information Technology (JEEIT), 845–850. https://doi.org/10.1109/JEEIT.2019.8717450
Tao, P., Li, Y., Fu, S., Zhang, C., Yang, C., & Ma, J. (2024). Research on the high-availability strategy of massive power measurement data of new power systems. 6th International Conference on Energy, Power and Grid (ICEPG), 979–983. https://doi.org/10.1109/ICEPG63230.2024.10775832.
Tian, J., Ma, P., Wang, C., & Wang, Z. (2023). Research on Development of Data Disaster Recovery System. IEEE 22nd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), 2210–2215. https://doi.org/10.1109/TrustCom60117.2023.00310
Vinisha, J., Sanjay, R., & Sundar, D. (2025). Automated Disaster Recovery Architecture for Educational Institutions Web Infrastructure Using Hybrid Cloud. 2nd International Conference on Artificial Intelligence and Knowledge Discovery in Concurrent Engineering (ICECONF), 1–8.
Wang, Y., Chen, Q., Hong, T., & Kang, C. (2019). Review of Smart Meter Data Analytics: Applications, Methodologies, and Challenges. IEEE Transactions on Smart Grid, 10(3), 3125–3148. https://doi.org/10.1109/TSG.2018.2818167
Xie, Z., Yang, Y., & Ma, Y. (2022). Development of Data Center based on Cloud Computing Technology. International Conference on Edge Computing and Applications (ICECAA), 27–30. https://doi.org/10.1109/ICECAA55415.2022.9936354
This work is licensed under a Creative Commons Attribution 4.0 International License.