Research And Implementation Of Internal Network Security Technology

With the rapid development of the global information, computer networks have become part of people’s daily work and life. As a means to convey information within organizations, internal networks are facing severe security risks. At present, more and more cyber crime is associated with the practical interests. In addition, electronic files can be copied and disseminated more easily than tranditional paper documents. These lead to the frequent occurrence of the divulgence of confidential information within internal networks. Therefore, ensuring the security of internal networks is an important problem in the field of network security.This paper summarizes the specific issues of internal network security, and analyzes the shortcomings of the existing internal network security technologies. Taking into account these shortcomings and features of the internal network, this paper presents a host-based internal network security method from the perspective of operating system security and file security. It can ensure the security of files and prevent host from being intruded by malwares and backdoors. In this way it provides double protection for the internal network information. This paper describes the goals and desired properties of operating system security and file protection, analyzes the principles of system service dispatch table hook, inline hook and file system filter driver under Windows NT platform. Then the main idea and implementation of Windows NT security and file protection is introduced. Some of the key problems such as cache management, encryption flag management are described in detail. Finally, we test the functionalities of these two measures using our own test cases and present the results.