摘要： 为使敏感文件免遭窃泄密攻击的威胁，设计并实现一个基于Ring0层的主机型敏感文件窃泄密监测系统，通过敏感文件查找、文件异常行为监测等功能，对敏感文件进行实时监测和保护。该系统已应用于实际工作中，取得了良好效果。

关键词: 窃泄密, 文件监测, Ring0层, 信息安全, 敏感文件

Abstract: To keep the sensitive file away from the thread of stealing and leakage, this paper designs and implements a stealing and leakage monitor system based on Ring0 privileged code. The system can monitor and protect confidential files promptly by using the components of file searching and unordinary action monitoring. The system’s performance is satisfying in practice.

Key words: stealing and leakage, file monitoring, ring0 layer, information security, sensitive file

中图分类号: 

• TP309