Research on Information Monitoring Methods Based on Windows Operating System
Zeng Dong-mei · Computer Knowledge and Technology · 2009
With the development of computer network technology, people are increasingly concerned about the security problems. Computer information security can be divided into two major categories: network security and host security. For a long time people attach great importance to network security and neglect that of host security. With the development of information security technology, host security problems are considered more and mo re important. Mainly from the engineering point of view, studies are made about several local methods of monitoring information based on windows operating system based. According to the stratified Windows software system, sequential analysis are made about the hook method based on the application layer windows message, the detour methods based on the application layer win32 function ,and the filter driver methods based on the core layer.