Research And Implementation Of Device Control Based On The Internal Network Security Management System

With its open standards, the Internet set the foundation for the global community. The benefits are also available to enterprises through intranets, private information networks that use Internet software and standards. However, within enterprises using intranets, security is usually the top concern.Most of traditional intranet security systems focused on external threats like remote attacks and viruses. In recent years, more and more enterprises paid great attention to information leakage because of the huge damage and lost it may cost. Among all the treats to intranet, insiders taking away some information on purpose or accidentally with peripheral equipment became the most common way of information leakage.This thesis is the review of theory and techniques used in an intranet security project which is based on Windows operating systems. It's made up of clients, servers and control panels, and provides cipher protection, files security, state monitoring and system resource management.In this project, the author proposed and implemented a solution for USB removable storage devices. In this module, the author not only did a deep study on WDM architecture, theory and programming technology but also created interfaces for communication between the drivers and the applications with Windows API. This module was implemented as a combination of drivers in the kernel mode and applications in the user mode and has but not limited with the following features:1. Flexible control over the devices. Not only provides completely forbidding mode, but also the read-only and written-only mode. Can fit all kinds of users' demands.2. Control the devices in the kernel mode, takes little time to run. Besides, drivers can communicate with applications through the.After the implement of the USB devices control module, the author also proposed some solution for other I/O devices control, and provided interfaces.