Design And Implementation Of Role-Based File Protection System On Windows Platform

With the rapid development and extensive application of information technology, prevention of illegal theft, interception and destruction of information and more effectively protection of vital information has become an important issue that all the information system must focus on. As the last barrier of information, security of file system has gradually become one of the hot spots in research of information security.File System is a core component of the operating system for document storage and management. And file protection system plays a role as a protection umbrella to prevent illegal access to files. At present, each file protection system has more or less defects, so this thesis aimed to design and implement a role-based file protection system on WINDOWS platform.This thesis introduces the development status of file protection system and analyzies the third-party software and WINDOWS EFS at first. In theory, this thesis gives out the theory of access control model, analyzies the difficulty in applying RBAC model in file protection, and then presents a new model based on RBAC which is more suitable for file protection. In order to implement file protection system on WINDOWS platform, this thesis introduces technology about WINDOWS I/O, especially API Hook and file filter driver. Finally, A file protection system is designed and implemented based on the model and technology presented above and the test plan and assessment of the system is gave out as well.