Research And Development Of Preventing Initiative Information Leaking In Documents Security Protecting System

With the development of network technique, more and more secret information are saved on the intranet. Enterprises have spent much money on safeguarding the security of their intranet; however, the loss caused by information leaking is going up year after year. The report of CSI shows that, the bigger threaten comes not from virus and hacker but from information leaking and inner user's crimes. Fortunately, Enterprises become aware of that and attach more and more importance on inner security of information. There comes a lot of inner documents security protecting products.The documents security protecting system must ensure the security of documents during storage, transmission and using. The existed products have adopted the technique that encrypts these documents during the storage and transmission; however, the cyber must be decrypted when it is used by the legal terminal user. So, the legal user with the criminal idea can leak the decrypted information on his own initiative. Information can be leaked via clipboard, printers and some other tools. Now we can see how important does it mean to the documents security protecting system that preventing legal user of intranet from leaking or stealing information.This paper has discussed several possible leaking points during the documents are using on windows system, and has designed and developed the corresponding monitor modules to prevent inner user's leaking actions. First, following the guide of software architecture idea, an architecture view of development for the whole system is given. Then, after researching on the mechanism of windows clipboard and office clipboard, the module of preventing leaking via clipboard is designed, which can stop illegal operation of copy, cut and paste and illegal operation of drag and drop. After studying the principle of windows printing, a method to control all printing actions is propounded. An effort to prevent user capture the screen when using secret documents by press the key"PrintScreen"is made. Because user can save the secret documents as other documents in other type, a way to control"save as"menu in some software is given. Besides these kernel modules, a high performance communication server is designed, which supports SSL and ensures the security of exchange configuration information between our monitor system and the central control server. The way to protect the system itself is also designed, including registry hiding, files hiding and program anti-killing. Finally a summary to the effort of this paper is given.