Research On File Access Control Based On Intranet

With the development of computer science and communication technology ,people pay more attention to the enterprise's information security . The enterprisesoften resist the attacks not only from the outsides , but also from the enterprise inside .It's difficult to prevent information from leaking only depend on consummatingmanagement mechanism . Therefore , we must protect the important information insidetechnically .Internal network access control system is discussed in this paper at first, and thesolution to the design idea of the system is proposed. Secondly, the solution to the fileaccess control sub-system is presented from the view of application layer and kernellayer. Thirdly, the existence API Hook technique is analyzed in the application layer,especially the method of inserting DLL of file access control from remote process indetail, and the implementation of file access control is given with the method of Hookcombined with the modification of import address table in process module. Finally, thetechnology of file access control by means of file filter drivers which can reach ahigher security level is proposed.According to different demands, the corresponding solutions is presented inapplication layer and kernel layer from the view of security level, which have theability to solve the problem to file access control in internal security.