The Design And Implement Of File Nonproliferation System In Windows Environment

With the development of computer science and communication technology, people pay more attention to the enterprise's information security. The enterprises often resist the attacks not only from the outsides, but also from the enterprise inside. It's difficult to prevent information from leaking only depend on consummating management mechanism. Therefore, we must protect the important information inside technically.File nonproliferation system emerges as the times require. It can ensure the security of electronic file inside the enterprise effectively. After elaborate requirement analysis and a discussion about the way in which information diffuses, this paper puts forward the design and implement of the file nonproliferation system (short for FNS) under Windows. This system includes a controller and under-control terminals. Using the controller platform, managers could keep all the under-control computers inside the company at the wheel. In the environment equipped with FNS system, users could transfer files freely without any interference. When it comes to transferring files from the inside to the outside, the system would intercept and capture the file which is in the process of transferring and then send it after encryption. Using this way, the file exists in a pattern of cryptograph so that anyone who will steal this file can not get the plaintext outside the company.Making good use of the knowledge and skills of API Hook, network communication, DDA and multithreading program, the system realize the corresponding functional modules. By using file system filter driver to capture the data through USB interface, we could protect the files transferred. In addition, FNS accomplishes the dynamic update of DDA to ensure the system's expansibility. With the technology of Socket broadcasting communication based-on UDP, it could reduce the network load and make the transfer more stable, reliable. This paper also expatiates on the realization of some functions such as automatic-start when boot, the hidden of under-control terminals and guard against from being killed.At last, we set up an environment in the lab and have a functional test of the FNS. The experimental result shows that FNS has good performance and it could provide the security of data inside the company.