Filter Driver Research Articles

A fusion data security protection scheme for sensitive E-documents in the open network environment.

E-documents are carriers of sensitive data, and their security in the open network environment has always been a common problem with the field of data security. Based on the use of encryption schemes to construct secure access control, this paper proposes a fusion data security protection scheme. This scheme realizes the safe storage of data and keys by designing a hybrid symmetric encryption algorithm, a data security deletion algorithm, and a key separation storage method. The scheme also uses file filter driver technology to design a user operation state monitoring method to realize real-time monitoring of user access behavior. In addition, this paper designs and implements a prototype system. Through the verification and analysis of its usability and security, it is proved that the solution can meet the data security protection requirements of sensitive E-documents in the open network environment.

DNIC Architectural Developments for 0-Knowledge Detection of OPC Malware

We present an anti-malware solution that is able to reliably detect Object Linking and Embedding for Process Control (OPC) malware on machines in production. Detection is attained on the very first encounter with OPC malware, and hence without any prior knowledge of their code and data. We architected the integration of a decoy network interface controller (DNIC) with a layer of kernel code that emulates a target OPC machine. A DNIC displays a (nonexistent) network, which the compromised machine appears to be connected to. OPC emulation displays a valid (but nonexistent) target OPC machine, which appears to be reachable from the compromised machine over the (nonexistent) network. Our code intercepts OPC malware during their search for target machines over the network. Its overall architecture is crafted to validate the infection by leveraging OPC protocol mechanics. The same principles of operation are used to recognize goodware that access a DNIC by accident. Safe co-existence with production functions and real I/O devices is ensured by a monitor filter driver, which removes all decoy data bound for the monitor. We tested our DNIC architectural developments against numerous OPC malware samples involved in the Dragonfly cyber espionage campaign, and discuss the findings in the paper.

Research and Application of Transparent File Encryption Technology on Android Platform

Aiming at the data security problem of Android platform, a transparent encryption system based on file filter driver is designed and implemented, according to the technology of file transparent encryption and decryption system based on hook transparent encryption technology and file filtering driven transparent encryption technology used on windows platform. This system is different from the traditional APP development method of Android system. By intercepting the system call function and using the secret-key converted from the host MAC address, the encryption and decryption algorithm is written into the kernel, which fundamentally guarantees the security of user information. At the same time, the user's security experience is improved by putting authentication on the screen unlocking. The system design and implementation are described in this paper from system requirement analysis to overall design and detailed design of each module. Android application development technology and cross-compiling principle are used in the coding process. The system test results show that the system can effectively transparently encrypt files and protect the privacy of mobile files.

Coque de petróleo como controlador de filtrado en fluidos de perforación base aceite

La gran cantidad de coque de petróleo producido en Venezuela, conllevó a su uso como controlador de filtrado en fluidos base aceite. Inicialmente el coque se sometió a un proceso de extracción de aceite mediante el método Soxhlet y extracción de azufre mediante microondas. Seguidamente se le realizó una Espectroscopia de Infrarrojo (IR) y se comparó con otra espectroscopia del coque de petróleo natural, donde quedó evidenciado la efectividad del proceso aplicado. Se formularon cuatro (4) fluidos de perforación (12 lpg) con coque como controlador de filtrado, variando su concentración en 6, 8, 10 y 12 lb/bl y después de un envejecimiento dinámico (300°F, 100 lpcm) se estudiaron las propiedades físicas de viscosidad plástica, punto cedente, gel 10 s, gel 10 min y filtrado, obteniéndose rango de valores de 25,3-26,3; 5,7-6,3; 4-5; 7-10 y 10,3-10,9 respectivamente. Un estudio estadístico de parcelas divididas demostró que existieron diferencias estadísticas significativas entre las propiedades físicas de los fluidos formulados y las propiedades físicas de un fluido patrón con lignito como controlador de filtrado. Se concluyó que a pesar de las diferencias estadísticas presentadas es posible el uso de coque de petróleo como controlador de filtrado para las condiciones en estudio.

Design of Data Protection Model for Power Business Terminal Based on OTFE

A data security protection model based on OTFE is designed for security problems such as data leakage in power business terminal. This paper uses file system filter driver technology and CRT-AES encryption & decryption algorithm to achieve the transparent encryption and decryption of terminal sensitive data. Controlling the user’s permissions to access and transmit terminal sensitive data according to the terminal data policy, and recording data operation process by operation log. Proved by examples, this model can encrypt the storage and control transmission of the terminal data, and provide the effectively theoretical basis for the security of the terminal data.

Active filter driver for piezo-actuators for flapping-wing micro air vehicles

Piezoelectrically actuated flapping-wing micro air vehicle (MAV) is an emerging technology. This paper discusses limitations of presently used voltage drivers for the piezoelectric actuators used in such applications and suggests an active filter-based unipolar high-voltage driver. A Chebyshev polynomial has been used to extract a unipolar sinusoidal high voltage signal from a unipolar square wave signal for driving the piezoelectric actuators at low frequency in flapping-wing MAV applications. The filter is based on Sallen–Key topology and is suitable for connecting a piezo-bimorph in series or parallel electrical connection. We have considered an application-specific piezoelectric bimorph actuator of 40 Hz flapping frequency and 32 nF capacitance in each piezoelectric layer to design a driver. The driver circuit in verified by simulation results of OrCAD® software. The driver circuit can control the frequency of the sinusoidal driving voltage, which causes wing-flapping, by radio control communication.

A Study on the Development of the Emergent System Recovery in an Effective Way from Hacking Attacks or Security Incidents

The purpose of this paper is to study on the development of efficient system recovery from various hacking attacks or computer virus incidents. When computer system was damaged by hacking attacks or cyber incidents, and needed to be recovered efficiently, the best way is to roll back to the original system status. If the situation were unable to return to its original status, one of the best ways in system recovery would be going back to prior day status using security technology effectively. By applying filter driver, one of the key points of this development, which resides between MBR (Master Boot Records) driver and BIOS (Basic Input Output System), can enable to go back to the prior day system status for the efficient recovery. The main objective of this paper is to study about the development of emergent system recovery solution concerned with security incidents to react rapidly and correctly from the viewpoints of system reliability and stability.

Silo

Many cloud applications can benefit from guaranteed latency for their network messages, however providing such predictability is hard, especially in multi-tenant datacenters. We identify three key requirements for such predictability: guaranteed network bandwidth, guaranteed packet delay and guaranteed burst allowance. We present Silo, a system that offers these guarantees in multi-tenant datacenters. Silo leverages the tight coupling between bandwidth and delay: controlling tenant bandwidth leads to deterministic bounds on network queuing delay. Silo builds upon network calculus to place tenant VMs with competing requirements such that they can coexist. A novel hypervisor-based policing mechanism achieves packet pacing at sub-microsecond granularity, ensuring tenants do not exceed their allowances. We have implemented a Silo prototype comprising a VM placement manager and a Windows filter driver. Silo does not require any changes to applications, guest OSes or network switches. We show that Silo can ensure predictable message latency for cloud applications while imposing low overhead.

무선 중계기용 저전력, 고선형 Up-down Converter

Abstract – We have designed and fabricated a low power and high linearity up down convertor for wireless repeaters using 0.35 ㎛ SiGe Bipolar CMOS technology. Repeater is composed of a wideband up/down converting mixer, programmable gain amplifiers (PGA), input buffer, LO buffer, filter driver amplifier and integer-N phase locked loop (PLL). As of the measurement results, OIP3 of the down conversion mixer and up conversion mixer are 32 dBm and 17.8 dBm, respectively. The total dynamic gain range is 31 dB with 1 dB gain step resolution. The adjacent channel leakage ratio (ACLR) is 59.9 dBc. The total power consumption is 240 mA at 3.3 VKey Words : Repeater, PLL, High linearity, ACLR†Corresponding Author : School of Electrical and Electronics Engineering, Chung-Ang University, Korea.E-mail: ychoi@cau.ac.kr* School of Electrical and Electronics Engineering, Chung-AngUniversity, Korea.** EPIC Solution Co., LTd., Korea. Received : December 09, 2014; Accepted : February 26, 2015

HVF: An optimized data backup and recovery system for hard disk based consumer electronics

Hard disks are employed as the primary storage device for consumer electronic products. But the data on hard disks may be lost due to error operations, malicious code attacks and software conflictions. As data backup and recovery on hard disks move to ever more challenging areas, improving the security level of backup data, lowering overhead to the storage system and reducing the fragments created by the backup operation become increasingly important. Therefore, a novel Host Protected Area Virtual File System prototype, which is called as HVF, is presented in this paper. In order to boost security of data store locations, backup data or protected data are saved in Host Protected Area by the storage filter driver. The method of creating bitmap indexes for hard disks and the mechanism of the mapping relationship are proposed in order to reduce the effects to the operating system and cut down the fragments produced by a large number of I/O operations. The simulation results indicate that the proposed HVF has higher security, less overhead and fragments to dominating operating systems.

Design of Tunable F-P Filter Driver Based on FPGA

The special driver for tunable F-P filter is expensive, so it has an important application value to design a driver with stable performance and low cost. In this paper, the field programmable gate array (FPGA) was chosen as the core chip to constitute triangular signal generator based on direct digital frequency synthesizer (DDS). The output frequency of waveform ROM look-up table will be altered by changing frequency control word. Then, the products of amplitude word and signals of ROM table output were transmitted to DAC to be converted into analog signal. The variable frequency and amplitude modulation signals were got after smoothed by low pass filter. The frequency range of driving signal is 1 Hz~10 KHz, and the resolution of frequency is 0.1 Hz. The amplitude range is 1 V~10 V, and the resolution of amplitude is 0.1 V. The simulation and experimental results show that the driver has the characteristics of simple structure, stable signal, adjustable frequency and amplitude and lower cost. It can satisfy the requirements of tunable F-P filter driven in practical engineering.

A Reliable File Protection System Based on Transparent Encryption

As data leakage moves to ever more challenging areas, improving the security level of anti-data leakage and lowering overhead to the operating system becomes increasingly important. Therefore, the paper presents a novel double cache file filter driver based on transparent encryption, called as DBFD. In order to boost security of data, that is controlled by the file filter driver. The DBFD overcomes the limitation of double cache in the file system kernel in windows operating system and used the transparent encryption method to protect the data security. To evaluate DBFD, we used Iometer as the measurement tools to measure performance. The simulation results indicate that proposed DBFD has higher security, less overhead to the windows operating system.

Identity-based on-the-fly encryption and decryption scheme for controlled documents

To deal with the increasingly serious situation of document's security and better protect the controlled documents, in this paper, an identity-based On-The-Fly Encryption( OTFE) and decryption scheme was proposed for the controlled documents, which combined an Identity-Based Encryption( IBE) algorithm with an on-the-fly encryption technique.In the scheme, file system filter driver technology was used to monitor program's behaviors on the controlled documents;meanwhile, the IBE algorithm was used to encrypt and decrypt the controlled documents. Specifically, a new algorithm that associated the original ciphertext and divided the associated ciphertext into two parts stored in different locations was proposed.Therefore, it is impossible for an adversary to obtain the whole ciphertext and further recover the original plaintext. Finally, an elaborate description was made on the scheme from system level and algorithm level. The security analysis indicates that the proposed scheme is able to effectively protect the controlled documents.

File Transparent Encryption System Design Based on Security Directory

Using the Minifilter framework and AES group encryption algorithm, the paper develops a filter driver for encrypting the file of particular types under the security directory. The principle of the file system filter driver is discussed here, and makes a special research about the file operation process especially for word format. This paper also makes a deep analysis of transformation mechanism between the plaintext and ciphertext, and the implementation algorithms of encryption and decryption. Finally, the paper describes the method of path filtering in detail.

Webpage Tamper-Resistant Strategy Based on File System Filter Driver and Event-Triggered

In order to develop a more practical, higher security and less time-consuming webpage tamper-resistant system, we proposed a webpage tamper-resistant strategy on the basis of original tamper-resistant strategies and technologies in the paper. This strategy adopted the file system filter driver and event-triggered technology. It also controlled users writing operations through the file filter driver of the bottom of the system, which can efficiently and actively prevent attackers illegal tampering. At the same time, it had also set up a monitoring module. The monitoring module and the tamper-resistant module formed a self-protection mechanism of the ring. Therefore, the strategy can greatly improve the security of system.

Research and Design of the Keyboard Filter Driver

Driver is a communicated program between the operating system and hardware. It is the responsibility of handling I/O request packet. Keyboard filter driver which used Windows NT driver model is completed in DDK developed environment. This driver realized filtering and recording key information. Its convenient for users to view information of keyboard history. The design of this driver can also be studied for other Windows drivers.

Transparent Encryption Technique for Word Documents Based on USB Key in Manufacturing System

This paper reports the work of designing a filter driver in the System kernel layer using the Minifilter technique to implement transparent encryption for MS Word documents in manufacturing system whilst keeping the corresponding keys in the USB Key. The study will be useful and meaningful for the development of manufacturing course.

FRPWPS: A Filter Driver and Reverse Proxy Based Web Protection System

Website attack has seriously affected the owner’s profit and the security of the Internet. In this paper, a Filter Driver and Reverse Proxy based Web Protection System (FRPWPS) with a version control-based safe recovery mechanism is proposed. FRPWPS consists of five sub systems including web file monitor, content publish, web reverse proxy, backup and recovery, and monitor center. The file filter driver is used to protect web program files from illegally tampered. The protected websites are run behind a web proxy with intrusion detection function. The backup and recovery subsystem is realized by a FTP protocol. Experiments analyze the functions and costs of FRPWPS, and results show that it can work well and achieve good performance for web protection.

Solution of removable storage control based on file system filter driver

Concerning the access control security for removable storage,an access control method for removable storage based on File System(FS) filter driver was proposed.This method identified more than one removable storage device volumes and unique identifier for each volume,and controlled the volume according to its access.Additionally,through monitoring the process execution,this method prevented and killed Trojan.Using this method,the current popular removable storage devices were controlled to achieve a better result,enhancing the safety of using removable storage devices.

WriteShield: A Pseudo Thin Client for Prevention of Information Leakage

While thin-client systems are diffusing as an effective security method in enterprises and organizations, there is a new approach called pseudo thin-client system. In this system, local disks of clients are write-protected and user data is forced to save on the central file server to realize the same security effect of conventional thin-client systems. Since it takes purely the software-based simple approach, it does not require the hardware enhancement of network and servers to reduce the installation cost. However there are several problems such as no write control to external media, memory depletion possibility, and lower security because of the exceptional write permission to the system processes. In this paper, we propose WriteShield, a pseudo thin-client system which solves these issues. In this system, the local disks are write-protected with volume filter driver and it has a virtual cache mechanism to extend the memory cache size for the write protection. This paper presents design and implementation details of WriteShield. Besides we describe the security analysis and simulation evaluation of paging algorithms for virtual cache mechanism and measure the disk I/O performance to verify its feasibility in the actual environment.