Design And Implementation Of Process Access Control In Intranet Security Access Control System

With rapid popularization of network application in enterprises and corporations, issues related to security of internal network are drawing more and more attention. Access control is one of key technologies to assure the security of internal network. By analyzing the current products for security access control on the market and taking into consideration of the development trend of relevant technologies, this dissertation introduces the theory of dividing subsystems to access control system and explains the reason for dividing different subsystem to control process of accessing. It further presents the design and implementation of process control for accessing based on Windows kernel.The dissertation has brought forward a process control for accessing design project based on kernel, as a solution against the problem that the existing network security access control systems can be bypassed by anti-monitoring program. The main two technologies that replacing system service function in system service description table (SSDT) with customized function and intercepting not documented functions via HOOK at kernel level are used to implement process control for accessing system.Test result proves that system functions have been implemented in the kernel, it's able to avoid disadvantages of carrying out control to system by users themselves. The performance of security access control is enhanced excellently. It's able to improve agility and veracity of the system.