基于WDM过滤驱动的USB访问控制系统的研究与实现

发布时间：2018-01-31 10:46

本文关键词： USB移动存储设备 WDM Windows文件系统过滤驱动访问控制　出处：《重庆大学》2012年硕士论文　论文类型：学位论文

【摘要】：随着计算机技术的迅猛发展，具有易于携带、容量大和使用方便等优点的USB移动存储设备已替代软盘也已经成为了数据转存的主要媒介。但是USB的大量使用也带来了新的安全问题，并成为人们关注的焦点，如利用USB设备，窃密者可以在合法用户不在场的情况下，迅速且不留下痕迹地将个人隐私、国家机密或商业敏感信息取走。另一方面，合法用户的违规操作和逾权动作也可能把USB存贮设备作为中转媒体，从而对主机安全构成不小的威胁。本论文是作者在参与一个有关于计算机安全管理横向项目的开发后，在技术上方面的思考和总结，并据此利用WDM（Windows Driver Model）过滤驱动技术，针对个人电脑主机，提出了一种基于WDM过滤驱动技术的USB访问控制系统。该系统能实现控制USB移动存储设备在个人电脑上的读、写操作、以及数据监控功能，从而有效地保证了本机数据的安全。当设备接入计算机，系统会自动记录设备的信息，并且控制其读写操作。对于允许读写的存储设备，系统还会记录计算机对其的操作信息，比如读、写的文件名，删除、修改的文件名等。在论文写作期间，作者所做的主要工作是： 1、详细分析Windows的内核机制，讨论了驱动技术，及如何运用WDM过滤驱动技术实现USB访问控制的实现方案； 2、运用角色访问控制技术实现了权限子系统、运用WDM过滤驱动技术的实现了USB访问控制子系统、运用FileSystemWatcher技术实现USB文件监控子系统，并讨论了其中的关键技术； 3、对系统运行测试情况进行说明与总结。在文章的组织方面，论文前半部分主要介绍了包括Windows的内核机制、执行体组件以及驱动程序开发的相关基础理论知识，分析了它们之间的相互关系以及使用方法，同时对WDM内核驱动模型的概念和相关基础知识进行充分的阐述，，并提出系统的开发思路和解决方案。论文后半部分着重分析了项目研究开发中所要解决的准备工作和技术问题，包括系统的需求分析、架构设计、数据库设计、以及系统的实现方案等。其中包括，详细分析基于角色访问控制权限子系统、基于WDM过滤驱动技术的USB访问控制子系统、运用FileSystemWatcher类的USB文件监控子系统的实现构架，并指出实现各子系统的关键技术，如过滤驱动文件技术、动态捕获技术等。最后论文对“基于WDM过滤驱动技术的USB访问控制系统”进行了测试，提出存在的问题和不足，以及进一步改进的思路。
[Abstract]:With the rapid development of computer technology, it is easy to carry, USB mobile storage equipment has the advantages of large capacity and convenient use etc. has replace the disk has become the main medium for storing the data. But the extensive use of USB also brings new security problems, and become the focus of attention, such as the use of USB equipment, QieMi who can not present in the case of a legitimate user, quickly and without a trace of personal privacy, national security or business information removed. On the other hand, the violation of the legitimate users and more than the right of action may also be a USB storage device as a transit media, which is not a small threat to host security.
In this paper the author participated in a development project about computer security management, in the technical aspects of thinking and summary, and then use WDM (Windows Driver Model) filter driver technology, the host personal computer, we propose a WDM based filter drive technology of USB access control system of the system. To achieve control of USB mobile storage devices on a personal computer to read and write operations, and data monitoring functions, thereby effectively ensuring the machine data security. When the device is connected to a computer, the system will automatically record the equipment information, and control the read and write operation. To allow the storage device to read and write system records on the computer operation information, such as read, write the file name, delete, modify the file name.
During the writing of the paper, the main work of the author is:
1, the kernel mechanism of Windows is analyzed in detail, the driving technology is discussed, and how to realize the implementation of USB access control by using WDM filter driver technology is discussed.
2, using the role access control technology to achieve the permission subsystem, using the WDM filter driver technology to achieve the USB access control subsystem, using the FileSystemWatcher technology to implement the USB file monitoring subsystem, and discuss the key technologies.
3, the system operation test situation is explained and summarized.
In the organization of the article, the first part mainly introduces the kernel mechanism including Windows, executive body components and driver development related theory knowledge, analysis of the relationship between them and the use of methods, and the driver model of WDM kernel concepts and related basic knowledge are fully elaborated, and put forward the development ideas and Solutions of the system.
The second part of this thesis focuses on the analysis of the project preparatory work to solve the problems in research and development and technology, including system requirements analysis, architecture design, database design, and system realization scheme. Including the detailed analysis of the role access control subsystem based on WDM filter driver technology of USB access control system based on the use of USB architecture file monitoring subsystem of the FileSystemWatcher class, and points out the key technology in the implementation of the various subsystems, such as file filter driver technology, dynamic capture technology.
Finally, the paper tests the "USB access control system based on WDM filter driver technology", and puts forward the existing problems and shortcomings, and further improvement ideas.

【学位授予单位】：重庆大学
【学位级别】：硕士
【学位授予年份】：2012
【分类号】：TP333;TP309

【参考文献】