文件过滤驱动在内网安全中的应用模型研究  

Research on Application Model of File System Filter Driver in Intranet Security

作　　者：刘飞[1] 张小松[1] 连碧应[1] 

机构地区：[1]电子科技大学计算机科学与工程学院,四川成都611731

出　　处：《信息安全与通信保密》2009年第8期214-216,220,共4页Information Security and Communications Privacy

基　　金：四川省科技支撑计划资助项目（2008GZ0119）.

摘　　要：针对当前企业内网中普遍存在着难控制，易泄密的现状，文中提出了一种基于Windows文件过滤驱动技术的内网安全应用模型。该模型以用户访问控制，数据透明加密和文件操作审计三方面功能为主，将内网终端从二个不可信的实体转变为可信实体。同时，它能比较有效的协调用户使用方便性和数据安全性之间的矛盾，在内网安全中具有一定的实用价值。Currently, most of enterprise internal network is hard to control and easy to leak secrets. In view of this reality, this paper proposes an intranet security application model based on Windows file system filter driver. It is mainly composed of three parts, that is, user access control, data transparent encryption and operation audit, with the function to convert client machine from unreliable entity to trustworthy one. Meanwhile, this model could effectively solve the contradiction between user flexibility and data security, and is of practical value in intranet.

关 键 词：内网安全 文件系统过滤驱动 访问控制 透明加密 操作审计 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]