高技术通讯2016，Vol.26Issue(7)：677-683,7.DOI:10.3772/j.issn.1002-0470.2016.07.008
具有hook机制的过滤驱动加解密模型
A filter driver encryption and decryption model with hook mechanism
摘要
Abstract
The encryption and decryption for file protection were studied. To solve the problems of un-unified file identifi-cation and increasement of memory’s file leakage risk in information security caused by the file’ s use of a filter driver model to perform encryption and decryption, a new encryption and decryption model combining the hook mechanism and the filtering driver model was designed. The model uses the filter driver model to encrypt the file, and at the same time, the hook mechanism is introduced to capture the file operation behavior in memory to make the file has the same identity around the encryption and decryption. Thus under the circum stances of keeping the original operating habits of the file, a reduction on the risk of the file’ s recovery is achieved. The theoretical analy-sis and experiments demonstrate that the model proposed in the study can be used to fast encrypt and decrypt differ-ent files under three encryption modes, and its disintegration rate can be decreased over 3 per cent compared with the filter driver model.关键词
文件系统/信息安全/透明加密/过滤驱动/hook/加解密Key words
file system/information security/transparent encryption/filter driver/hook/encryption and de-cryption引用本文复制引用
蔡强,薛子育,毛典辉,李海生,曹健..具有hook机制的过滤驱动加解密模型[J].高技术通讯,2016,26(7):677-683,7.基金项目
国家自然科学基金(QNJJ2014-23),北京市自然科学基金(4162019)和北京市教委科研计划(SQKM201610011010)资助项目。 （QNJJ2014-23）
