Research And Implementation Of PC File Protection System Based On File System Filter Driver

With the advent of the Internet age, the issue of network security becomes more important. Files security protection technology of the PC host becomes the hot research. There are many loopholes in security technology based on application layer, which is easy to be broken through by underlying technology, then personal information security is seriously threatened. Therefore, the design and realization of the personal hosts file protection system based on Windows file system filter driver is desperately needed.After analysis of the existing file system protection technology, the paper introduces the rational and basic process of the Windows file system filter driver. To overcome the shortcomings of transparent encryption and decryption technology and research status of other underlying protection technology, combined with the actual needs, a PC file protection system based on Windows file system filter driver is designed and implemented. A system design, key technologies solution, the main code and detailed implementation process, strict functional testing system is introduced in the paper. The tests show that the implemented file protection system can effectively prohibit all unauthorized operation and provide users with flexible security settings. To sum up, the main work is as follows:1. Starting from the ground up, to maximize the improvement of the reliability of file protection system, A file protection system based on Windows file system filter driver is proposed. The paper also details the implementation process and some of the key code.2. The communication problem between the application layer program and file filter driver is proposed and implemented. Application layer program transfers the user configuration information to the underlying file system filter driver through the10control code; kernel program initiates communication with the application by way of the event, to achieve information interaction with the application. The solution of communication problems, greatly improves user security policy controllability and maneuverability, and a detailed process is given.3. A test environment is built, and file protection system performance is tested. The test results show that the file protection system can work stably in Windows2000/2003/XP three systems, effectively intercept unauthorized operation with flexible and exact user configuration. It verifies the validity and correctness of the theoretical research and program implementation.