Wdm Filter Driver-based Device Permissions Control

Along with the high-speed development of Internet, the security of network became more important ,but the leak in the network exists at any time. At the same time, The technical application of business are widely used by biz corporations , The people put a great deal of energy to the network safety and ignore the safety of local network,especially the security of hardware in local network, Traditional methods that using hook API have it's restriction.So using serial and parallel ports as an example, research device filter dirver based on WDM.WDM (Windows Driver Model) is the driver model that Microsoft provide, the goal of the WDM is providing simple and the unique interface to programmer. reducing the quantity and complexity of driver development to support the new hardware.The WDM's framework is the modularization and the level structure. WDM's structure, the unique interface causes operating system may be dynamic to layout difference equipment driver program module to back special device.In this dissertation, the characteristic and the execution environment of kernel model programe were first introduced, and the order of I/O handled was followed. Secondly, the dissertation introduce the the conception and framework of windows driver model , and analyzing the important data structures, and for the sake of the understanding to be convenient for reader, this dissertaion analyse dispatch routine and the plug-and-play routine in the driver development .Then depicing device filter driver controlling module and internal structure along with every section,analyse the principle and basic development flow of device filter driver controlling module.At last, describe the device filter driver initialization in detailedly , and how to attach filter device object to specify device stack , how to handle the read and write requests.In this project, author of this dissertation took part in the research of the subject, and participate in the design and implement of the device filter driver controlling. And test this module for a long time.Finally, device filter driver controlling module run as a part of LAN monitoring and controlling system.