Research And Implementation Of File Protection System Based On Minifilter And NDIS Intermediate Driver

The prevalence of computers and the rapid development of network technology bring convenience to people’s lives, study and work, but also bring increasingly serious problem of information security. Events such as malicious file access, illegal copies of documents and illegal network communication always threaten the security of confidential information within organizational units. Although the organizational units have adopted the most secure physical isolation, but they still can not prevent the occurrence of information leaks.This paper designs and implements a file protection system based on Minifilter and NDIS intermediate driver to solve information security issues within organizational units. The system uses file system minifilter driver to intercept and filter file access operations. The system realizes file access security by rejecting the illegal operation of files. At the same time, the system monitor all usb devices inserted into the terminal. If an usb device has not been registered in this system, it will be disabled by this system. By controlling the usb device access, the system achieves the goal of preventing information leakage caused by the arbitrary use of usb device. Finally, the system uses the NDIS intermediate driver to filter network packets sent and received by the terminal. By blocking illegal network communication, the system reduces the risk of information leakage via Internet. In order to protect the information security of files within organizational units, the system has realized the function of file access control, usb device access control and network communication control.After a series of functional verification tests in the real network environment, the system achieves the desired goals and has a certain practicality.