摘要
在详细分析Windows操作系统文件共享机制的基础上,对用户文件共享行为进行处理,防止用户通过文件共享方式造成信息的泄露。在功能实现过程中分别对内联Hook技术、NDIS-Hook技术和内核驱动技术进行了深入分析和研究,综合利用以上几种技术实现对文件共享的监控,达到敏感信息在内网内的安全流通,实现文件的安全共享。
After analyzing the share of sensitive information in LAN of Windows system in detail and making lots of research on the share' s mechanism, we deal with the share behavior of user's file and prevent users from causing the leak of information through file-sharing means. In the process of realizing it, inline hook technique, NDIS Hook technique and kernel driver technique were deeply researched and tested. Based on the above techniques, the monitoring of file share is realized to make sensitive information circulate safely and ensure the security of shared file in LAN.
出处
《信息工程大学学报》
2008年第4期465-469,共5页
Journal of Information Engineering University
基金
河南省高新领域重点攻关计划项目(072102210016)