摘要： 应用Linux内核中的系统调用劫持技术和模块动态装载机制，研究与开发Linux下的文件过滤驱动。通过对文件标识的注入与识别，采用blowfish加密算法，设计和实现内核级的文件加/解密服务，并对软件的性能进行分析。结果表明，在内核级增添软件功能，可以提高软件的运行效率，而计算机主机系统的安全性在内核机制的安全保障下得以增强。

关键词: 过滤驱动, 系统调用, 内核

Abstract: With Linux system call interception and loadable kernel module technique, the file filtering drive is studied and developed. And a file encryption/decryption server is implemented using blowfish algorithm on kernel-level about file filtering drive and its analysis of performance is presented. The result shows that, if the software functions are added to kernel-level, the kernel mechanism greatly improves the operation efficiency of the software and enhances the safeness on Main Machine System(MMS).

Key words: filtering drive, system call, kernel

中图分类号: 

• TP393.08