Monitoring Of Host Resources In Lan Design And Implementation

With the great development of informationization, the potential danger in network security is becoming more and more obvious.It is revealed that the inner threat from LAN (Local Area Network) is more forceful than exterior through the authoritative organization's investigation. Therefore, the theory research and application in LAN security have been developing a new breakpoint.As we know, host resources are mainly stored in files and take the storage device as a carrier in the Local Area Network. So,the access control to the storage device and the file system has been playing a key role in LAN security. The research goal of this project is to monitor host resources in Windows.In this dissertation, structure and work mechanism of Window Driver Model (WDM) are described. And the superiority of filter driver is analyzed. Also how to apply the filter driver to the access control is discussed. Then, the design and realization process in the access control module of floppy and CD driver are elaborated. Next, the basic work flow carried on the real-time monitor to the file system is generated. At the same time, the realization of the essential data structure and the essential function involved are provided. At last, the test to performance of each module is carried on.Four characteristics are included in this dissertation.①.The filter driver from compatibility, security and efficiency are realized.②.The solution of access control to read cache file and to write by temporary file is suggested.③.HASH table to filter driver to increase the efficiency is adopted.④.Filter driver is applied to protect the security system.In this project, the fundamental research and the analysis of the subject were participated in. And, the design and implement of the floppy monitoring module as well as CD driver monitoring module was taken charge of. Also, the real-time monitoring module to file system was cooperated to realize. Then, each module was integrated to the LAN security control platform. Finally, unit test and integration test were carried on. Now, each module runs on the security platform steadily.