阅读:5532回复:21
发掘文件系统过滤驱动的应用
我们天天都在面对文件系统过滤驱动,那么文件系统过滤到底又有多少关键应用呢?
可能大家都已经非常熟悉“文件访问控制与审计”、“文件透明加解密”、“文件加密标识”、 “文件压缩”和系统杀毒等应用了,但是它远不止这些,请看下面一张大表,你也许会觉得吃惊,:-) --------------------------------------------------------------------------------------------------------------- "FSFilter Activity Monitor" "FSFilter Anti-Virus" "FSFilter Bottom" "FSFilter Cluster File System" "FSFilter Compression" "FSFilter Content Screener" "FSFilter Continuous Backup" "FSFilter Copy Protection" "FSFilter Encryption" "FSFilter HSM" "FSFilter Imaging" "FSFilter Infrastructure" "FSFilter Open File" "FSFilter Physical Quota Management" "FSFilter Quota Management" "FSFilter Replication" "FSFilter Security Enhancer" "FSFilter System Recovery" "FSFilter System" "FSFilter Top" "FSFilter Undelete" "FSFilter Virtualization" --------------------------------------------------------------------------------------------------------------- 这也许是到目前为止文件系统过滤驱动最全的应用集合,以上这张表来自于系统注册表: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\GroupOrderList, 这个注册表项下面保存了驱动组的加载顺序关系,这对于那些需要在驱动的加载 时机和加载顺序做些文章的朋友来说是十分重要的,比如:系统级的文档加、解密系统 就十分需要它,:-) 讲了这么多,那么各位你又是在哪个领域探索呢?可以把你的心得共享出来和大家分享! |
|
最新喜欢:wingma...
|
沙发#
发布于:2007-05-16 17:54
呵呵,我也很想知道文件过滤除了加密和杀毒之外都有什么用
上面的表很多条从字面上很难理解到底是什么东西,哪位能具体解释一下 |
|
|
板凳#
发布于:2007-05-16 21:19
监控,杀毒,虚拟文件系统,系统还原,加密~
当然还有网络方面的一些小应用~ |
|
|
地板#
发布于:2007-05-16 22:06
------------------------------------------------------------------
"FSFilter Activity Monitor" 活动监控 "FSFilter Anti-Virus" 杀毒 "FSFilter Bottom" ?? "FSFilter Cluster File System" ?? "FSFilter Compression" 压缩 "FSFilter Content Screener" 内容过滤 "FSFilter Continuous Backup" ?? "FSFilter Copy Protection" 拷贝保护 "FSFilter Encryption" 加密 "FSFilter HSM" 高速存储 "FSFilter Imaging" ?? "FSFilter Infrastructure" ?? "FSFilter Open File" ?? "FSFilter Physical Quota Management" 物理配额管理 "FSFilter Quota Management" 配额管理 "FSFilter Replication" 复制 "FSFilter Security Enhancer" 安全 "FSFilter System Recovery" 系统恢复 "FSFilter System" ?? "FSFilter Top" ?? "FSFilter Undelete" 删除恢复 "FSFilter Virtualization" 虚拟什么东西? ------------------------------------------------------------------- |
|
|
地下室#
发布于:2007-05-16 23:01
------------------------------------------------------------------
"FSFilter Activity Monitor" 活动监控 "FSFilter Anti-Virus" 杀毒 "FSFilter Bottom" ?? "FSFilter Cluster File System" 集群文件系统 "FSFilter Compression" 压缩 "FSFilter Content Screener" 内容过滤 "FSFilter Continuous Backup" 持续备份 "FSFilter Copy Protection" 拷贝保护 "FSFilter Encryption" 加密 "FSFilter HSM" 高速存储 "FSFilter Imaging" ?? "FSFilter Infrastructure" ?? "FSFilter Open File" ?? "FSFilter Physical Quota Management" 物理配额管理 "FSFilter Quota Management" 配额管理 "FSFilter Replication" 复制 "FSFilter Security Enhancer" 安全 "FSFilter System Recovery" 系统恢复 "FSFilter System" ?? "FSFilter Top" ?? "FSFilter Undelete" 删除恢复 "FSFilter Virtualization" 虚拟什么东西? ------------------------------------------------------------------- |
|
|
5楼#
发布于:2007-05-17 08:31
znsoft功力可见一斑,:-)
|
|
|
6楼#
发布于:2007-05-17 09:22
就是miniFilter的启动组嘛,IFS里有详细描述:
Filter This group is the same as the "filter" load order group that was available on Windows 2000 and earlier. This group loads last and thus attaches furthest from the file system. FSFilter Top This group is provided for filter drivers that must attach above all other FSFilter types. FSFilter Activity Monitor This group includes filter drivers that observe and report on file I/O, such as the FileSpy and SFilter sample drivers. FSFilter Undelete This group includes filter drivers that recover deleted files. FSFilter Anti-Virus This group includes filters that detect and disinfect viruses during file I/O. FSFilter Replication This group includes filter drivers that replicate file data to remote servers. FSFilter Continuous Backup This group includes filter drivers that replicate file data to backup media. FSFilter Content Screener This group includes filter drivers that prevent the creation of specific files or file content. FSFilter Quota Management This group includes filter drivers that provide enhanced file system quotas. FSFilter System Recovery This group includes filter drivers that perform operations to maintain operating system integrity, such as the System Restore (SR) filter. FSFilter Cluster File System This group includes filter drivers that are used in products that provide file server metadata across a network. FSFilter HSM This group includes filter drivers that perform hierarchical storage management. FSFilter Imaging This group includes ZIP-like filter drivers that provide a virtual namespace. This load group is available on Windows Vista and later versions of the operating system. FSFilter Compression This group includes filter drivers that perform file data compression. FSFilter Encryption This group includes filter drivers that encrypt and decrypt data during file I/O. FSFilter Virtualization This group includes filter drivers that virtualize the file path, such as the Least Authorized User (LUA) filter driver added in Windows Vista. This load group is available on Windows Vista and later versions of the operating system. FSFilter Physical Quota Management This group includes filter drivers that manage quotas by using physical block counts. FSFilter Open File This group includes filter drivers that provide snapshots of already open files. FSFilter Security Enhancer This group includes filter drivers that apply lockdown and enhanced access control lists (ACLs). FSFilter Copy Protection This group includes filter drivers that check for out-of-band data on media. FSFilter Bottom This group is provided for filter drivers that must attach below all other FSFilter types. FSFilter System Reserved for internal use. This group includes the HSM and SIS filter drivers. FSFilter Infrastructure Reserved for internal use. This group loads first and thus attaches closest to the file system. |
|
|
7楼#
发布于:2007-05-17 09:32
微软分配给第三方的过滤驱动Altitude。里面有各个类型过滤驱动的产品。
|
|
|
8楼#
发布于:2007-05-17 09:53
收藏!
|
|
|
9楼#
发布于:2007-05-28 10:21
看一下,谢谢!!
|
|
10楼#
发布于:2007-05-28 10:22
怎么看不到啊?
|
|
11楼#
发布于:2007-05-28 19:14
Altitude 什么意思?
|
|
|
12楼#
发布于:2007-10-22 22:35
引用第6楼zzzevazzz于2007-05-17 09:22发表的 : eva 厉害 大牛就是大牛 一眼就看出了实质 顶一个 |
|
|
13楼#
发布于:2007-10-23 13:28
引用第11楼newkey于2007-05-28 19:14发表的 : 相当于传统模式下的设备栈顺序。本来是只能往顶层插,有了它可以往任意中间层插。 |
|
|
14楼#
发布于:2007-10-24 18:33
学习支持。。。。
wdk的文档,,,, about: File System Minifilter Drivers |
|
15楼#
发布于:2007-11-12 23:45
看看,学习中
|
|
16楼#
发布于:2008-01-18 20:02
下载
|
|
|
17楼#
发布于:2008-01-18 23:21
从来都是根据需求寻找解决方案,何必反其道而行之。
|
|
18楼#
发布于:2008-04-28 00:13
看一下,谢谢!!
|
|
19楼#
发布于:2008-04-29 09:25
看着这么多,到底怎么实现啊,我有个程序,现在想实现读操作的过滤,该怎么加东西啊?
|
|
|
上一页
下一页