Method and device for protecting mobile storage equipment, equipment and storage medium

Abstract

The embodiment of the invention discloses a method and device for protecting mobile storage equipment, equipment and a storage medium, and the method comprises the steps: carrying out the Hook of a reading and writing function of the mobile storage equipment when a terminal edits a file in the mobile storage equipment, and obtaining a Hook result; determining a protection state of the mobile storage device according to the Hook result; and outputting the protection state of the mobile storage device.

Description

technical field [0001] The embodiments of the present application relate to, but are not limited to, data protection technologies, and in particular, relate to a method, device, device, and storage medium for protecting a mobile storage device. Background technique [0002] As the most commonly used terminal outgoing channel, mobile storage devices are one of the most commonly used leaking channels for enterprise employees. Employees usually copy and duplicate the core data in the corporate computer to mobile storage devices, which causes core data leakage. [0003] In the prior art, the protection of mobile storage devices includes the following: 1) The method of adding a read-only switch to the hardware, first of all, it is necessary to purchase hardware with a read-only switch, and the switch can be freely controlled by the user, but it cannot be used in In the anti-leakage scenario. 2) The group policy method used in the operating system can only be used in systems abo...

AI Technical Summary

Problems solved by technology

Employees usually copy and copy the core data in the enterprise computer to the mobile storage device, which causes the core data to leak

[0003] In the prior art, the protection of mobile storage devices includes the following: 1) The method of adding a read-only switch to the hardware, first of all, it is necessary to purchase hardware with a read-only switch, and the switch can be freely controlled by the user, but it cannot be used in In the anti-leakage scenario

2) The group policy method used in the operating system can only be used in systems above vista, and is invalid for Active Directory (Active Directory, AD) domain users, and cannot be used according to the identification of the U (Universal Serial Bus, Universal Serial Bus) disk ( IDentity, ID) differentiated control, this method is more general, users can turn off read-only, but it is easy to cause file leakage in the anti-leakage scenario

3) The method of modifying the write protection (WriteProtect) of the registry is also a relatively common method. The user can turn off the read-only by himself, and it needs to be restarted to take effect, but if it is not restarted, the file will be leaked

4) Intercept file operations at the driver layer. This method will cause compatibility issues with the kernel and cause the computer to blue screen easily.

Images