Security label-based USB anti-ferry method

Abstract

The invention discloses a security label-based USB anti-ferry method. The method comprises the following steps of: automatically operating a trusted process when a system is started, and loading a file filtering drive program, an application layer filtering hook and a kernel protection program; when a user uses an external USB storage medium, sensing insertion and pulling out of the USB storage medium by the file filtering drive program, recording the current state of the system, controlling the read-only authority, for the USB storage medium of an un-trusted process, and forbidding the loading operation of an executable file in the USB storage medium; generating a secret-involved file by the user and adding a security label for a to-be-transmitted file; copying the file with the security label to the USB storage medium by the user through the trusted process; and protecting the trusted process by adoption of the kernel protection program. The method disclosed by the invention is higher in security, lower in cost and better in user experience.

Description

technical field [0001] The invention relates to a safety label-based USB anti-flight method. Background technique [0002] As a medium for information storage and exchange, USB storage device has been widely used rapidly due to its large capacity and easy portability, which provides great convenience for information storage, exchange and forwarding. But the sword has two edges, and the popularity of USB storage media has also brought great hidden dangers to the information security of the country and individuals. The reasons are mainly as follows: First, USB storage devices are readable and writable at any time. Once they are used as a data ferry medium to carry confidential files, it is very likely to provide opportunities for Trojan horses and viruses to steal secrets. Second, due to cross-use, USB storage devices can easily become a medium for transmitting viruses and Trojan horses, exposing the internal network to attacks; third, malicious programs are more likely to be...

AI Technical Summary

Problems solved by technology

The present invention effectively solves the situation in the existing anti-ferry technology that does not consider human-intentional or intentional operation to cause loss of secrets, and the realization of the present invention does not need to rely on a special USB storage medium, and solves the anti-ferry problem of ordinary USB media

The present invention effectively solves the problem that users or malicious programs use common USB storage media to ferry sensitive data to the outside and cause leaks, improves the security of USB storage media in cross-use, and reduces the cost of USB anti-ferry technology. reduce hardware costs and improve user experience

Images