The Host Security Manage System Based On Disk Encryption Tecnology

As the information technology develops, the computer and network have great contribution to the social productivity. But at the same time, the network security has become a great issue to companies, governments and sensitive departments. According to some investigation, the intranet security becomes the most easily ignored but most critical problem because most sensitive information was leaked by internal employees.Based on the circumstance, the article proposed an intranet security management system, which introduced the design of the system.1. The design and implementation of the host security management system, including the structure of the client, file monitor module, logon authentication module, network access, and illegal access and CD-ROM read-only technology.2. The design and implementation of the disk encryption module, including file system filter driver, disk filter driver, the structure of the module and the user identification.3. The design and implementation of the self-protection, including register protection, process protection and file protection.The technology mentioned above can collect the hosts' information and monitor users' activities. By the use of management server, the system can distribute strategies to the clients so as to manage and respond to the events.On the other hand, the article introduced the critical technologies:1. Using File System driver to implement file protection, removable storage device recognition and CD-ROM read only functions. 2. Using Windows kernel driver and SSDT Hook technologies to implement register protection and process protection functions.