网络传输层访问请求控制的实现方法

Research on the Control Method of the Requests to Visit of Network Transport Layer

防范计算机敏感信息泄漏已成为当前信息安全保障工作中急需解决的问题,但现有的信息安全产品大多数是防范黑客和病毒攻击的,不能有效防止敏感数据泄漏。针对上述情况,本文提出了一种计算机数据安全管理系统,系统从USB移动存储介质安全认证与使用控制、基于传输层访问请求的磁盘文件保护以及网络安全监控等方面入手,对传输层访问请求的网络行为进行安全监管,堵住容易引起敏感信息泄漏的安全漏洞,有效保证了计算机数据的安全。

At present, people usually use combination of hardware and software to solve this problem, but this kind of method is too expensive to spread. Another kind of way that uses software to solve the problem protects data only in specific domain so that the way is not as safe as we think. Based on these situations, security of data in computer system is put forward. Using technology of file system filter driver, virtual device driver and three level interfaces provided by windows, the system protects data in computer very well.