Method and apparatus for backing up and restoring data in a computer storage system are disclosed. Data segments are backed up before they are updated. The segments may correspond to physical segments of storage in the computer system. Restoration may proceed by determining which segments have changed since a target time, and retrieving the data backed up from that time. The backups may be stored as differential backups--saving only segments of data that are about to be changed.