基于NTFS的文件访问控制研究  

Research of File Access Control Based on NTFS

作　　者：吴伟民[1] 李景超[1] 陈东新 江达强[1] 蔡钦童 

机构地区：[1]广东工业大学计算机学院,广州510006

出　　处：《科学技术与工程》2014年第5期250-254,共5页Science Technology and Engineering

基　　金：广州市科技计划项目(2012Y2-00046)资助

摘　　要：为开发基于NTFS的程序,解决因NTFS对文件访问进行控制而导致系统文件被限制访问的问题,对NTFS的文件访问控制机制进行研究。研究了以安全ID作为主关键字查找$SDS数据块,以及从$SDS数据块中解析出50H属性的主要过程。通过实验总结出了50H属性中32位访问掩码的具体格式及每位掩码代表的访问权限。以上研究结果可应用于基于NTFS的文件访问的自主控制,提高相关程序开发的自由度。实验结果表明,通过修改文件的50H属性可解除设置在Windows系统文件上的访问限制。For developing the program based on NTFS,and solving the problem that due to NTFS control the file access leading to system file is limited accessible,the system of file access control in NTFS filesystem is researched.The process of security ID as the primary keywords to search $ SDS data block,the process of resolving50H attribute from $ SDS data block,the specific format of 32 bits access mask in 50H attribute,and the meaning of every bit access mask is main studied.The above findings can be applied to control NTFS file access according developer＇s requirement,and to improve the developability of program based on NTFS.The experimental results shows that can break the access restrictions of Windows system file by modify its 50H attribute.

关 键 词：NTFS 文件访问控制 安全ID 50H属性 访问掩码 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]