基于WFP的终端信息泄漏监控系统的研究与实现

RESEARCH AND REALISATION OF WFP-BASED MONITORING SYSTEM FOR TERMINAL INFORMATION LEAKAGE

终端信息泄漏是一个严重问题。提出一种基于Windows过滤平台WFP(windows filtering platform)的网络敏感信息监控方法。利用WFP在终端内核协议栈中的加载过滤器,在内网中对连接建立和传输的敏感信息进行监控拦截,实现敏感信息泄漏控制。实验结果表明,该方法能对内网敏感信息的泄漏有较好的监控和过滤。

Terminal information leakage is a serious problem.In this paper we propose a monitoring method for sensitive network information which is based on Windows filtering platform（WFP）.The loading filter in terminal kernel protocol stack of Windows filtering platform is used to monitor and intercept in intranet the sensitive information to be connected,established and transmitted,so as to realise the control of sensitive information leakage.Experimental results show that this method can well monitor and filter the leakage of intranet sensitive information.